last executing test programs: 2.737294974s ago: executing program 1 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfff4, 0x5}, {0x40, 0x0, 0x0, 0xfffff00c}, {0x6, 0x8, 0x2, 0x3}]}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) 2.507169391s ago: executing program 1 (id=2597): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.458608521s ago: executing program 4 (id=2598): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000010000ffe80000000000000000850000042700000085000000a400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0x8, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) unshare(0x68040200) mmap(&(0x7f000050a000/0x3000)=nil, 0x3000, 0x1000001, 0x8031, r2, 0x3d77c000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fsi_master_gpio_break\x00', r3, 0x0, 0xf}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0xfe, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 2.049926418s ago: executing program 3 (id=2603): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) shutdown(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x0, 0x5, 0xef, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) writev(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x8001) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) sendto$inet(r5, &(0x7f0000000200)="7aa71143ad033783f44fc6733faf371e65511200fd0b58855e9c504fd2b94f5ebd2014630abab52d469d640b3ba3fc5f0e36cc1c5e1e05eb2888a25aef1fb3b76b2a3059c90e96d5690e8685be66dfd181210090136d74baacdfd7333496b07497bcc91c22215fb4f4d110760c60448ee268b10bb5b049338bd2a9", 0x7b, 0x40c0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xa9ac}, &(0x7f0000000300)=0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) shutdown(r0, 0x1) socket$inet6(0xa, 0x80002, 0x0) unshare(0x6020400) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 1.930592842s ago: executing program 4 (id=2604): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r2, 0x1) shutdown(r0, 0x2000000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="c20c00", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000dcaac43e5823686453ce3a5e19112f40539de47c2d9ba0eabde110632ed9e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000300), &(0x7f00000005c0)=""/255}, 0x20) sendto$inet6(r3, &(0x7f0000000000)="99", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e000a0000000600"], 0x50}}, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, &(0x7f0000000180)="f6", 0x1, 0x20000050, &(0x7f0000000200)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffd}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x7c}}, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r10, 0x29, 0x12, &(0x7f0000000000)=0xb4, 0x4) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}}, 0x14}}, 0x800) 1.814429121s ago: executing program 4 (id=2606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x4004c}}], 0x1, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000010000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000dcb26a93e8ab9df90000000000000000030c782a19b25891443c79d6de258f3d46e35d809fa8445b9834a31dcc42840fca11acdb900f35ce0546a76b24e832580602200549cd92101fbba8419ca7f9db32da532c8af90e12af8019560196331f3480a9d890ebcb228c4ed3b22f033e2169f89928273cb65ab672d673a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r5}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) close(0x3) 1.661713404s ago: executing program 4 (id=2609): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x4, 0x1b}]}, 0x18}, 0x1, 0x0, 0x0, 0x8830}, 0xc0d0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 1.529986214s ago: executing program 0 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aab3aaaaaaaa00000000000089024500001c000000000011907800000000e000000000000000185cdfa79424ce7454228a089078"], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@rand_addr=0x64010102, @in6=@loopback, 0x0, 0x0, 0x4e24, 0xe8, 0x2, 0x0, 0x0, 0x73}, {0x0, 0xfffffffffffffffe, 0x6, 0x8, 0x3ffffffffffffffe, 0x0, 0x0, 0x3}, {0xfffffffffffffff9, 0x8001, 0x80000001, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x33}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x4007, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x1000) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400004d", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250300000008000400e000000214000c00fc02000000000000000000000000000005000d00250000000800080002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) r5 = socket(0x29, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) write$tun(r4, &(0x7f0000001800)={@void, @val={0x1, 0x1, 0x800, 0x7, 0x7}, @eth={@broadcast, @multicast, @void, {@x25={0x805, {0x2, 0x9, 0xff, "9f4430e90c18e5ea6fe0859390a59336bfb060c4bc42b7727e1893188e1b3f7495b6b35c3a3a99c678eecad5808ab3f598891b44d5aa372013e791610e62e89145b293154b7eb10e82e013e24a74d41e6b18f36a6706b12245b96a427df496ca23d5c6090fe3c8ffef5edc4be9756f532753493d14167a22c28b139f08c77d05048d454df23e20d3470a5e87a21e66f839ff0fdcde98ae986e4a0e2bb0c217392f35353966ee10fe"}}}}}, 0xc3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) 1.528826272s ago: executing program 1 (id=2611): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32=r2], 0x4c}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000181401000000000000000000080005", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.411399578s ago: executing program 0 (id=2613): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x9, 0x11, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b96, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000aa01f7ff0000000000000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b00"], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x12d, 0x0, &(0x7f0000000c00)="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", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r3}, 0x38) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x5}, &(0x7f0000000080)=0x6, &(0x7f0000000100)=0xae, 0x3, 0x710b, 0xffffffffffff0001, 0x23b, 0x60, 0xffffffffffffebf7}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb5a7d6ef593f61ef}}], 0xb0}, 0x0) r5 = socket(0x23, 0x80805, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)='n', 0x1}, {&(0x7f0000000640)="5a906d0a991cc3353189c17f1152492ea0ef375f8324bdd9029cdb2dbb0757982769f604509cb8d3cbd10a5b7ae3cefa0caf1b43d10c4c48e7f9e77732f0b9015684e8bd62d8bad0552f8bd79c039671f3333f8112b24b4b63f4a38cd56e257e5d758ec87056bf9469736f3dee2f6f3517f43e3eb5e0f317899e294ddcf21a1449e1bd3ccee8b9d552702ae3b3668a8857cb95e19c739b1a8c1a64bfb97c877ee2f6e9c860e5e3eaf1b7e09ae29f1a1f38b15745c264009512b922fe0c9da5", 0xbf}, {&(0x7f0000000300)="4c1d48dccb22939e518e4462e8409a142de90ef7c2f6c3bebb00d8f9d7e74fae8409a64d973d1b15106cd72d5a3b2c28b9204b315247e0939708994472321aa5bd9947fef6556087ea53356d141bdd52648d58e66cd58a71e6f45033ff861a0ac0ae0514a43901201412fb08f6c532c0187536c21023f4ac1aa9", 0x7a}], 0x3) connect$inet(r5, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x9, 0x11, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b96, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000aa01f7ff0000000000000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b00"], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x12d, 0x0, &(0x7f0000000c00)="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", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r3}, 0x38) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00'}, 0x1c) (async) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x5}, &(0x7f0000000080)=0x6, &(0x7f0000000100)=0xae, 0x3, 0x710b, 0xffffffffffff0001, 0x23b, 0x60, 0xffffffffffffebf7}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb5a7d6ef593f61ef}}], 0xb0}, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)='n', 0x1}, {&(0x7f0000000640)="5a906d0a991cc3353189c17f1152492ea0ef375f8324bdd9029cdb2dbb0757982769f604509cb8d3cbd10a5b7ae3cefa0caf1b43d10c4c48e7f9e77732f0b9015684e8bd62d8bad0552f8bd79c039671f3333f8112b24b4b63f4a38cd56e257e5d758ec87056bf9469736f3dee2f6f3517f43e3eb5e0f317899e294ddcf21a1449e1bd3ccee8b9d552702ae3b3668a8857cb95e19c739b1a8c1a64bfb97c877ee2f6e9c860e5e3eaf1b7e09ae29f1a1f38b15745c264009512b922fe0c9da5", 0xbf}, {&(0x7f0000000300)="4c1d48dccb22939e518e4462e8409a142de90ef7c2f6c3bebb00d8f9d7e74fae8409a64d973d1b15106cd72d5a3b2c28b9204b315247e0939708994472321aa5bd9947fef6556087ea53356d141bdd52648d58e66cd58a71e6f45033ff861a0ac0ae0514a43901201412fb08f6c532c0187536c21023f4ac1aa9", 0x7a}], 0x3) (async) connect$inet(r5, 0x0, 0x0) (async) connect$bt_l2cap(r5, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) 1.241079636s ago: executing program 0 (id=2614): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6ac1c3e100101100fc01000000000000000000000000000100000000000000000000ff2f67cc000495b92c00010807004e244e2400089078"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x4, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x0, 0x0, 0xf}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x4, 0x0, 0x0, 0x0, @private=0xa010102}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000240)={@multicast2, @dev}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xc9, 0x401, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x10, 0x0, 0x10001}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x7ff, 0x10, 0x9, 0x84}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000780)={r6, 0x3c, &(0x7f0000000740)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x6f0f1f56, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f00000007c0)=0x10) 1.158661776s ago: executing program 2 (id=2615): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', r0, 0x8, 0x700, 0x90e, 0x6, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000012c0)=0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x9c, r2, 0x701, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x4}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x240048c5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.04863119s ago: executing program 3 (id=2616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x8902, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@rand_addr=0x64010102, @in6=@loopback, 0x0, 0x0, 0x4e24, 0xe8, 0x2, 0x0, 0x0, 0x73}, {0x0, 0xfffffffffffffffe, 0x6, 0x8, 0x3ffffffffffffffe, 0x0, 0x0, 0x3}, {0xfffffffffffffff9, 0x8001, 0x80000001, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x33}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x4007, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x1000) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400004d", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250300000008000400e000000214000c00fc02000000000000000000000000000005000d00250000000800080002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) r5 = socket(0x29, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) write$tun(r4, &(0x7f0000001800)={@void, @val={0x1, 0x1, 0x800, 0x7, 0x7}, @eth={@broadcast, @multicast, @void, {@x25={0x805, {0x2, 0x9, 0xff, "9f4430e90c18e5ea6fe0859390a59336bfb060c4bc42b7727e1893188e1b3f7495b6b35c3a3a99c678eecad5808ab3f598891b44d5aa372013e791610e62e89145b293154b7eb10e82e013e24a74d41e6b18f36a6706b12245b96a427df496ca23d5c6090fe3c8ffef5edc4be9756f532753493d14167a22c28b139f08c77d05048d454df23e20d3470a5e87a21e66f839ff0fdcde98ae986e4a0e2bb0c217392f35353966ee10fe"}}}}}, 0xc3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) 1.018299219s ago: executing program 2 (id=2617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x7, 0x200}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x51, "4511455de914d6049cf249708c64bef564cd02467452e4935bf8e24baa331f84d56e66696c93292ba0a3c65136ee651267d66273aef98b361ce150df9a28812697f23c915777b33e2dddf14cff880bd40d"}, &(0x7f0000000180)=0x59) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@void, {0x8100, 0x6}}, {@can={0xc, {{0x2, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "3ac0b4a4abe19ac5"}}}}, &(0x7f0000000200)={0x1, 0x1, [0xb9b, 0xb05, 0x9b8, 0x5fc]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r1, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x2, 0x1ff, 0x3, 0x6, 0xc2, 0xcf, 0x94}, &(0x7f0000000380)=0x9c) r4 = socket$kcm(0x29, 0xd, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x21, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@alu={0x4, 0x1, 0xb, 0x6, 0x8, 0x40, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x71c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5d}, @ldst={0x3, 0x1, 0x2, 0xa, 0xb, 0xfffffffffffffffa, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x6, 0x8, 0x3}, 0x10, 0xa975, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x5, 0x6, 0x2}, {0x0, 0x4, 0x9, 0x5}], 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000700)={r0, r5}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000740)={0x0, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, 0xdf}}, {{0xa, 0x4e22, 0x57f, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}}}, 0x108) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880), 0x4) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000, r6}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000940)={r7, r5, 0x0, r8}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000980)={r1, 0xbf, "5747a89572326d668f10ca5ee17dc98e62753c35b9e79bf3b2b173892b1fc1f46dd6ccb197c09f469ad3dd91eba84bdab0cccd9567f198926ef5087d2b9f72fd3c7f74ef36ccb37e6b4ca6fd74046c8fcfe1d8d2e624be1362d1e87bd695246d9af37caa402361dc4ebb2089fffc25551dbd7073204cdb7d3d474550420d80a57ca0554bc1afd3ec4b43cb6ebb30e6825634bac4d824820b4ddd8e3c14b02dcfb31cff33278b2f59338b410a6633930540d80c401a4986d67ff682ec515f58"}, &(0x7f0000000a80)=0xc7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000008, 0x20010, r7, 0x56e8a000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000ac0)={0x8, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x7}]}, 0x18) r9 = accept4$inet6(r0, 0x0, &(0x7f0000000b00), 0x800) bind$inet6(r9, &(0x7f0000000b40)={0xa, 0x4e24, 0xf15c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r5, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@bridge_setlink={0x2c, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r10, 0x4892, 0x5404}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x2010) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000fc0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001000)={0x1, 0x9, 0x7, 0x1000, 0x4, 0x4, 0x4, 0x7}, &(0x7f0000001040)={0x4b12c714, 0x3, 0xffffffffffffff01, 0x5, 0x3ff, 0x0, 0x3, 0x8}, &(0x7f0000001080)={0x1, 0x3, 0x9f9, 0x6, 0x802, 0x1, 0x16, 0x6}, &(0x7f0000001100)={r12, r13+10000000}, &(0x7f0000001180)={&(0x7f0000001140)={[0x1000]}, 0x8}) 850.654947ms ago: executing program 2 (id=2618): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xc, 0x0, 0x0, 0xb00}, 0x40d60b70}], 0x4000000000002e6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19a, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x3028}, {r11, 0x1000}, {r3, 0x11c}, {r1}, {r8, 0x200}, {r2, 0x42}, {0xffffffffffffffff, 0x80}, {r5, 0x3400}, {r1, 0x401}, {r1, 0x501a}], 0xa, 0x6) write$cgroup_subtree(r9, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 834.812314ms ago: executing program 3 (id=2619): unshare(0x2c060000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc840}, 0xc5) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) 698.164823ms ago: executing program 3 (id=2620): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000480)) r1 = socket(0x23, 0x80805, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x113, 0x76, 0x0, 0x300) 646.686878ms ago: executing program 1 (id=2621): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 611.336924ms ago: executing program 2 (id=2622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x200000000003, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@delqdisc={0x48, 0x25, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xfff2, 0xffff}, {0xf, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x4, 0x5, 0x1, 0x321, 0xffff}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x11) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c0099fd0700000000000000040042"], 0x2c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, &(0x7f0000000040)=0x4, r6, &(0x7f0000000180)=0x5, 0xe6, 0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0], 0x23c}}, 0x4004000) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x98, 0xff, 0x100, 0x6, 0x20000}) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) 553.687164ms ago: executing program 4 (id=2623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) unshare(0x20000400) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e23, 0xbd3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f3d680e}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sec_ctx={0x0, 0x18, 0xe, 0x2, 0x0, "1206e592b9f4295145b4981ac8ab5711dc6dbb7a2af7880b2808a643a8ab4fb22e4e78dc0ee92f84f78f2f861a67d541cc456dbc3c4a7fbac4743b401248a5ca94c394"}, @sadb_x_nat_t_type={0x0, 0x14, 0x3}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) r6 = socket(0x15, 0x5, 0x0) connect$netrom(r6, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) getsockname$tipc(r6, 0x0, &(0x7f0000000080)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}}, 0x0) (async) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) 458.587206ms ago: executing program 3 (id=2624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000008000000000000000000000000200100000000000ffffffff00000000030006000000000002000000e00000010000000000000000"], 0x50}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x8902, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@rand_addr=0x64010102, @in6=@loopback, 0x0, 0x0, 0x4e24, 0xe8, 0x2, 0x0, 0x0, 0x73}, {0x0, 0xfffffffffffffffe, 0x6, 0x8, 0x3ffffffffffffffe, 0x0, 0x0, 0x3}, {0xfffffffffffffff9, 0x8001, 0x80000001, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x33}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x4007, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x1000) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="040000cd", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250300000008000400e000000214000c00fc02000000000000000000000000000005000d00250000000800080002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) socket(0x29, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) write$tun(r4, &(0x7f0000001800)={@void, @val={0x1, 0x1, 0x800, 0x7, 0x7}, @eth={@broadcast, @multicast, @void, {@x25={0x805, {0x2, 0x9, 0xff, "9f4430e90c18e5ea6fe0859390a59336bfb060c4bc42b7727e1893188e1b3f7495b6b35c3a3a99c678eecad5808ab3f598891b44d5aa372013e791610e62e89145b293154b7eb10e82e013e24a74d41e6b18f36a6706b12245b96a427df496ca23d5c6090fe3c8ffef5edc4be9756f532753493d14167a22c28b139f08c77d05048d454df23e20d3470a5e87a21e66f839ff0fdcde98ae986e4a0e2bb0c217392f35353966ee10fe"}}}}}, 0xc3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 456.924595ms ago: executing program 4 (id=2625): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r7 = getuid() sendmsg$nl_xfrm(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001a80)=@flushpolicy={0x1240, 0x1d, 0x400, 0x70bd2a, 0x25dfdbff, "", [@offload={0xc, 0x1c, {r1, 0x1}}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@multicast1, 0x4e22, 0xcf46, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x6, r1, r7}, {@in=@rand_addr=0x64010100, 0x4, 0x32}, @in=@multicast2, {0x1, 0x5, 0x10, 0x100, 0x3, 0xfffffffffffffffd, 0x9, 0x7}, {0x2, 0x1000, 0x2, 0x8}, {0x8, 0x8, 0x1}, 0x70bd25, 0x3502, 0xa, 0x1, 0x3, 0x4}}, @algo_auth={0xf3, 0x1, {{'hmac(sha1-ce)\x00'}, 0x558, "81e4b545d48f6040f63d21473aa51448fdf6b1e4c1d3d25ce1510e217c34148d13c6f6469f95b1b2c7e871130a6e5d138ded6fda4481b7087ccabffd4016b674aa87c0b7a30c8753925fb4dba3f2d72bee0be45b5fe02bfd80fb7737b2b9f745395a2f5149b2fc2e31fe6be5f5c3ea718e63f1ccdcc015b9f72bc243934513a1d9d422659387b1e425c28139b57681a2c1f98addc2dd83dc857ba65b398f4e6705625a194c6fc44773f4cb"}}, @algo_aead={0x104c, 0x12, {{'rfc4543(morus640-sse2)\x00'}, 0x8000, 0x60, "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"}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x40001}, 0x40811) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) listen(r2, 0xc) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000380)=""/238) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002380), r9) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048855}, 0x4049090) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 358.547904ms ago: executing program 1 (id=2626): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xfffe], [], 0x0, 0x0, 0xc2, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)='%pS \x00'}, 0x20) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000210425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1ee00100000000001c0012800b00010065727370616e00000c00028008000700ba0000000cd827362bd0d2794fff39837c52c20042b23c4d5329c39f8b95a89e0c0d49d8d0d48b1b159b23b21431e0f321103aa0e8e43d1968934a80799daeb7bc18803d704abba07d20edf7ba7359b6465dfc44683f23bc5e1784a59afd2cfd2eb10ab1a069e6dd3a8b5561679d04c595147d4162da8be34e5f19eb7ce162b2009422e64b78fbf8224f920c83bd135d1fcc42a21988ca2b55dd14b0645fed2960ab89b0844b5de719f31502275fdce659912a06bad80cd8430ed71400000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60008890}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x9, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0xb}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0xe11}, 0xa2, 0x5, 0x1b04}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000640)=[{&(0x7f0000000000)="e12aa154f1969e6ed10d792328b6fd69da0a7e26b4f08c4100a59cccff322f387bcace6f4393b7ee025f732e2c0761da2915b479eed6066a380cdd0561dacc2a49a141ef57974c204f247f7c77922f562ec02f2b2f0866c57faa", 0x5a}, {&(0x7f0000000080)="d417925a02389ccce73abf6e54a1e2817d3f61190a40a4ba0cf957db608814b8d3a70d6f5d388ffa148b15d34b75ec1289e02f19b43ef2df764de2cc5f871cf94cc28fa0e22754961721e9818336bb4f8ac8cf40079d8655306e8fc1600ab9fadf3deb54a372a94415f590c5d747e1e7e9a07fb3dc7af835ae346f109d68948b1002c8e7a0a22abecd9d184ebb8823ed2da08d2132726adf589fdba9dec2241eef596ba5d50486ebec860e63da62a3", 0xaf}, {&(0x7f00000002c0)="8716d40f354c93fddefdcddfb6a09bd1e43303608e334fb84d19d9adc4b7fc3814225fa1cd145287822dedd878c8426d3a3fa8d1bd35c63224111809b1638c", 0x3f}, {&(0x7f0000000300)="5082b6ab2d61366c977ac0b731fea6b34d939c570af5ae610f36a648b69fcdc80ddeea84d93c8013fd25e5e33dd4f03a5544949c6818d27e118b59e63223a646f2d98a52fa563e52209f9eb0b11476d8b7c14c3bb847216ee8752240ac60f4709304388e36ff06279aecc94e42e1b81ac0813a350ced870fffd155749b5d5dd84b5de503fb5b538c093f8605a447b8035877782532dce67ac23ed17a694b8e1d49073f2f8463b2958f", 0xa9}, {&(0x7f00000003c0)="d07bffa70cae53cc925834fd902a3b201711a9fdb259c199480b535005f3ea6eff031d9bc6386f2275f4a867ae522b1387b5c5f9352bc06a19a84977209485d0903f47ec366f68a0e3c048f0bbd37cdb007817d023494afb2c77ae24417d50354ce744094aa5734dfd1a3343e6bba276b49bd9b03174488de44cf654fddb36d878ef1a97967d217d3bc83fdf862c51ed4517fe06eecf326aa2d251de5c16ed33b25c6c4787e230019e1ba663d19c", 0xae}, {&(0x7f0000000480)="08433707e3f055a27dc7cbe85024f6573fbbf7a830d11fc9f66e5bc87d6d478ea4fbc25a653b462e63c9e8971489281ba8ccba10db57fa8e102f9e02f65110e6d3606c424a57ef7215a94501df371e3df9eb70459d9d56516ee435cb4a6ced77a0bc07449304843b211a95084a241b5d02654c705b9ed68fd8d02b98e7dbd30e7fb6fa16be6e1e57e50546cf43de3b16509c659b60e98e0831f605ff4381b3711d61795ea04fc140be6a27b2e0f16c356b1decd4aa3536813bdb8886e451fe75d3fe181880f1074adc1801239c5b3e4899cedc11bfa797453166cf01c29332", 0xdf}, {&(0x7f0000000580)="7a3964927404bef62db8fff4945a7f57a7", 0x11}, {&(0x7f00000005c0)="f89dc6e3", 0x4}, {&(0x7f0000000700)="7a7a965e0100005f08d664033c06ef01a35f00e2da73f0fabc4cc2efbf949b2d5250cd634f3da1a603255cac182d8e860f37938392bb241fe47f316a7f757d2cd45557957f229599afce2fba7c887ec91171", 0x52}], 0x9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r12) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)={0x40, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}]}, 0x40}}, 0x20048004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) (async, rerun: 64) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r16) (async) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r16, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010025bd7000fbdbdf251e00000008000300d3d7036ec5f192bd7f9a098cd9f77ad304d999ee3fc6a97dfeed9f1e0f7624a10b413057f7d352965da3973916412fe62649fa0b82fddb209edf83cd5409794634b927b37392185726908cd3c94401c9ec510ea4baaad248ccd0d1d32f46305d2e64152dd9319bf9acc65b755ef54a28d086e62ded24174024f895541cdc3d71f3ba908cf1660ace5a690a6b931f86a5ff08f3dd7259c1303e7e06438ab8833ae7f1d46e1345bcaf8f182da9dd6a62ae45288b3fa4c821ea6e0d0a7ec7c032f45fd0ce2864ea5bc4609100aa8a834a08475af64a0a429f0dff12d1280f19a9dac7", @ANYRES32=r18, @ANYBLOB="3c002f800c0002000203aaaaaaaaaaaa2c0003800800010000000000200003800c000400000000000000000008000200030000000600010001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="84000000", @ANYRES16=r13, @ANYBLOB="00032bbd7000fcdbdf25200000000c00060003000000000000000c00060003000000000000000c000600020000000200000008000300", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300004000000000001c001f8008000300008edbd4c14a4eab1943bd2e04e6f008000200030002e6222600000100"/66, @ANYRES32=r18, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x8000800) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) 318.293998ms ago: executing program 2 (id=2627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00002a4114ed75e72d0b35576d006e21c765cdb2c9c7b728765e2d4e6d112efc392cca3f0e4ccf22d4e7b1d31643d5cd74143d57573f1fc0c9b4f9df346a572c", @ANYRES16=r1, @ANYBLOB="21082cbd7000ffdbdf252e0000000c0005000201aaaaaaaaaaaa05002b000200000005002e00810000000a0001007770616e30000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000000000ef106e0262b7468e9a76fae47bf2330b41d3096701866a36ad6e1d2b2ea30555fca208e65a1b0797c4cb8036b011d7e5207e99fbc168cf4f01f3", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000006000000606e272d42d77c4bf6f5d00def12d467a91034e7ddb0270380ff3038f518645deeeb448c8562a5839b179ed0922be280bc45eaaa024734be14e436154d02cbbbee7fee4ac526221b149379f157ecba794f7fcf0df469cb2750b0b5bec4e6a39f432994", @ANYRES16=r1, @ANYBLOB="040025bd7000fcdbdf250100000006000800a3aa000005001d001400000006000800a3aa000006000800feff000005001100000000000500070009000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x200480c0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) close(r3) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="54a9e154974079a87e3cbac52728156c000000", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf251c0000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c00060003000000000000000c00060000000000000000000c00060002000000000000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x9ec4c703e83f09f4) (async, rerun: 64) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) (rerun: 64) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r5, @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 292.539281ms ago: executing program 0 (id=2628): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000010000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff17000580ffffffff8000000000000100000000000000000200080008"], 0x80}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x800, 0x4) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="010000000000006bbde100c38bd8d47327773dd12a281c4280b04e3cdaffe3c3260be7e5fb8a6b2abf8b", 0x2a}, {&(0x7f00000000c0)="4fb9dd", 0x3}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a21b", 0x2}], 0x1}}], 0x1, 0x2604002c) 191.639461ms ago: executing program 0 (id=2629): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000814) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 83.500832ms ago: executing program 3 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001000)=0x4) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x600000a0) (async) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast2}, {@private=0xa010100, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000001240)='btrfs_space_reservation\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) writev(r5, &(0x7f0000001200), 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) r10 = socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 10.729154ms ago: executing program 0 (id=2631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x700, 0x10, 0x3, 0x2ac6}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x80, 0x440e, 0x2, 0x400, 0xa, 0x3220000, r2}) 9.896015ms ago: executing program 1 (id=2632): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8603362e200a323cdd606410a6001c000000000000000000000000ffff00000000fe8000000000000000000000000000aa04000000000000001ce302d74f6ae54b8ea6c7eb230956cdf9a157b64679a9760238a514247c062ac64963e859eca626c6a4a67b430d6a899e1ee9d0729189f0b3ee9f4a8de555887eee28c51bf792461b35d75d18d46ca85271e58c"], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8603362e200a323cdd606410a6001c000000000000000000000000ffff00000000fe8000000000000000000000000000aa04000000000000001ce302d74f6ae54b8ea6c7eb230956cdf9a157b64679a9760238a514247c062ac64963e859eca626c6a4a67b430d6a899e1ee9d0729189f0b3ee9f4a8de555887eee28c51bf792461b35d75d18d46ca85271e58c"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0x8}, {0x5, 0xd}, {0xfff1, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x55}}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0x913e0000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000eeff00000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x63, 0xffffffffffff0001, 0x0, [@default, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 0s ago: executing program 2 (id=2633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x700, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000004000045000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c002100690e0000000000000c002100"], 0x70}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): es 0 [ 212.522634][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.0.1340 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 212.522660][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.522671][T10152] Call Trace: [ 212.522677][T10152] [ 212.522685][T10152] dump_stack_lvl+0x189/0x250 [ 212.522717][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.522742][T10152] ? __pfx__printk+0x10/0x10 [ 212.522771][T10152] should_fail_ex+0x414/0x560 [ 212.522803][T10152] _copy_to_user+0x31/0xb0 [ 212.522827][T10152] simple_read_from_buffer+0xe1/0x170 [ 212.522853][T10152] proc_fail_nth_read+0x1df/0x250 [ 212.522880][T10152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.522915][T10152] ? rw_verify_area+0x258/0x650 [ 212.522932][T10152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.522957][T10152] vfs_read+0x1fd/0x980 [ 212.522980][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 212.523006][T10152] ? __pfx_vfs_read+0x10/0x10 [ 212.523026][T10152] ? __fget_files+0x2a/0x420 [ 212.523053][T10152] ? __fget_files+0x3a0/0x420 [ 212.523073][T10152] ? __fget_files+0x2a/0x420 [ 212.523103][T10152] ksys_read+0x145/0x250 [ 212.523124][T10152] ? __pfx_ksys_read+0x10/0x10 [ 212.523146][T10152] ? do_syscall_64+0xba/0x210 [ 212.523175][T10152] do_syscall_64+0xf6/0x210 [ 212.523200][T10152] ? clear_bhb_loop+0x45/0xa0 [ 212.523221][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.523237][T10152] RIP: 0033:0x7fbf3198d37c [ 212.523252][T10152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.523267][T10152] RSP: 002b:00007fbf2f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.523285][T10152] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198d37c [ 212.523297][T10152] RDX: 000000000000000f RSI: 00007fbf2f7f60a0 RDI: 0000000000000005 [ 212.523307][T10152] RBP: 00007fbf2f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.523318][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.523327][T10152] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 212.523354][T10152] [ 213.553179][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 213.562796][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 213.816667][T10185] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 213.859580][T10185] lave_0: entered promiscuous mode [ 214.068047][T10195] netlink: 'syz.0.1356': attribute type 23 has an invalid length. [ 214.496252][T10204] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1360'. [ 215.051064][T10223] netlink: 'syz.0.1364': attribute type 16 has an invalid length. [ 215.057777][T10222] set match dimension is over the limit! [ 215.061961][T10223] netlink: 'syz.0.1364': attribute type 17 has an invalid length. [ 215.234964][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.257337][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.289581][T10223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.791103][T10231] FAULT_INJECTION: forcing a failure. [ 215.791103][T10231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.838209][T10231] CPU: 1 UID: 0 PID: 10231 Comm: syz.0.1368 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 215.838233][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.838243][T10231] Call Trace: [ 215.838250][T10231] [ 215.838257][T10231] dump_stack_lvl+0x189/0x250 [ 215.838285][T10231] ? __lock_acquire+0xaac/0xd20 [ 215.838311][T10231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.838336][T10231] ? __pfx__printk+0x10/0x10 [ 215.838353][T10231] ? __might_fault+0xb0/0x130 [ 215.838385][T10231] should_fail_ex+0x414/0x560 [ 215.838416][T10231] _copy_from_user+0x2d/0xb0 [ 215.838438][T10231] ___sys_recvmsg+0x12e/0x510 [ 215.838465][T10231] ? __pfx____sys_recvmsg+0x10/0x10 [ 215.838515][T10231] ? __might_fault+0xb0/0x130 [ 215.838540][T10231] do_recvmmsg+0x307/0x760 [ 215.838569][T10231] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.838602][T10231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.838643][T10231] __x64_sys_recvmmsg+0x190/0x240 [ 215.838671][T10231] ? rcu_is_watching+0x15/0xb0 [ 215.838699][T10231] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.838724][T10231] ? do_syscall_64+0xba/0x210 [ 215.838752][T10231] do_syscall_64+0xf6/0x210 [ 215.838776][T10231] ? clear_bhb_loop+0x45/0xa0 [ 215.838797][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.838814][T10231] RIP: 0033:0x7fbf3198e969 [ 215.838828][T10231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.838842][T10231] RSP: 002b:00007fbf2f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.838860][T10231] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198e969 [ 215.838872][T10231] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000003 [ 215.838883][T10231] RBP: 00007fbf2f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.838893][T10231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 215.838903][T10231] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 215.838929][T10231] [ 216.115160][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 216.856137][T10247] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1373'. [ 216.871714][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 216.890123][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 217.576356][T10276] sctp: [Deprecated]: syz.1.1383 (pid 10276) Use of int in max_burst socket option deprecated. [ 217.576356][T10276] Use struct sctp_assoc_value instead [ 217.843844][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 217.978086][ T30] audit: type=1800 audit(1746118679.696:2): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1383" name="cgroup.controllers" dev="tmpfs" ino=1391 res=0 errno=0 [ 218.246988][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 218.256119][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 218.901967][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 218.911016][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 219.128629][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 219.195164][T10314] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1399'. [ 219.225670][T10314] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1399'. [ 219.517222][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 219.539506][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 220.663248][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 220.745919][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 221.368994][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 222.261141][T10421] batadv_slave_0: entered promiscuous mode [ 222.276554][T10421] batadv_slave_0: entered allmulticast mode [ 222.541608][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.203499][T10457] block nbd3: NBD_DISCONNECT [ 223.209354][T10457] block nbd3: Disconnected due to user request. [ 223.227228][T10457] block nbd3: shutting down sockets [ 223.973844][T10492] __nla_validate_parse: 3 callbacks suppressed [ 223.973860][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1460'. [ 224.136060][T10495] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1461'. [ 224.161972][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 224.316873][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1463'. [ 224.576735][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 224.973010][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 225.003751][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 225.255739][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1485'. [ 225.723396][T10573] syzkaller1: entered promiscuous mode [ 225.731884][T10573] syzkaller1: entered allmulticast mode [ 225.741650][T10573] netlink: 'syz.4.1493': attribute type 21 has an invalid length. [ 225.757095][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1493'. [ 226.480376][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 226.500702][T10607] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 226.521265][T10605] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 226.903307][T10623] bridge_slave_0: entered promiscuous mode [ 227.324026][T10633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.342727][T10633] batadv_slave_0: entered promiscuous mode [ 228.844411][T10689] can: request_module (can-proto-0) failed. [ 229.116931][T10708] __nla_validate_parse: 7 callbacks suppressed [ 229.116951][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1547'. [ 229.242379][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 229.282387][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 229.295453][T10717] netlink: 'syz.3.1550': attribute type 3 has an invalid length. [ 229.318165][T10717] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 229.558164][T10732] ip6tnl1: entered promiscuous mode [ 229.583582][T10732] ip6tnl1: entered allmulticast mode [ 229.887714][T10750] FAULT_INJECTION: forcing a failure. [ 229.887714][T10750] name failslab, interval 1, probability 0, space 0, times 0 [ 229.901151][T10750] CPU: 0 UID: 0 PID: 10750 Comm: syz.1.1563 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 229.901175][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 229.901185][T10750] Call Trace: [ 229.901192][T10750] [ 229.901199][T10750] dump_stack_lvl+0x189/0x250 [ 229.901232][T10750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.901258][T10750] ? __pfx__printk+0x10/0x10 [ 229.901280][T10750] ? __pfx___might_resched+0x10/0x10 [ 229.901301][T10750] should_fail_ex+0x414/0x560 [ 229.901332][T10750] should_failslab+0xa8/0x100 [ 229.901357][T10750] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 229.901397][T10750] ? __alloc_skb+0x112/0x2d0 [ 229.901420][T10750] __alloc_skb+0x112/0x2d0 [ 229.901444][T10750] netlink_sendmsg+0x5c6/0xb30 [ 229.901473][T10750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.901496][T10750] ? aa_sock_msg_perm+0x94/0x160 [ 229.901516][T10750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.901536][T10750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.901557][T10750] __sock_sendmsg+0x219/0x270 [ 229.901587][T10750] ____sys_sendmsg+0x505/0x830 [ 229.901613][T10750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.901644][T10750] ? import_iovec+0x74/0xa0 [ 229.901671][T10750] ___sys_sendmsg+0x21f/0x2a0 [ 229.901695][T10750] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.901752][T10750] ? __fget_files+0x2a/0x420 [ 229.901775][T10750] ? __fget_files+0x3a0/0x420 [ 229.901808][T10750] __x64_sys_sendmsg+0x19b/0x260 [ 229.901836][T10750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.901881][T10750] ? do_syscall_64+0xba/0x210 [ 229.901912][T10750] do_syscall_64+0xf6/0x210 [ 229.901938][T10750] ? clear_bhb_loop+0x45/0xa0 [ 229.901960][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.901978][T10750] RIP: 0033:0x7f60af58e969 [ 229.901994][T10750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.902008][T10750] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.902027][T10750] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 229.902040][T10750] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 229.902051][T10750] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.902062][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.902073][T10750] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 229.902102][T10750] [ 230.494473][T10774] xt_hashlimit: max too large, truncated to 1048576 [ 230.507819][T10774] xt_hashlimit: overflow, try lower: 0/0 [ 230.525733][T10767] syzkaller0: entered promiscuous mode [ 230.532341][T10767] syzkaller0: entered allmulticast mode [ 231.056592][T10805] netlink: zone id is out of range [ 231.075862][T10805] netlink: zone id is out of range [ 231.094007][T10808] batman_adv: batadv0: Removing interface: macvtap0 [ 231.095695][T10805] netlink: zone id is out of range [ 231.145962][T10805] netlink: zone id is out of range [ 231.176690][T10805] netlink: zone id is out of range [ 231.183323][T10818] FAULT_INJECTION: forcing a failure. [ 231.183323][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.206036][T10805] netlink: zone id is out of range [ 231.207022][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.2.1590 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 231.207047][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.207059][T10818] Call Trace: [ 231.207066][T10818] [ 231.207074][T10818] dump_stack_lvl+0x189/0x250 [ 231.207102][T10818] ? __lock_acquire+0xaac/0xd20 [ 231.207130][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.207156][T10818] ? __pfx__printk+0x10/0x10 [ 231.207175][T10818] ? __might_fault+0xb0/0x130 [ 231.207212][T10818] should_fail_ex+0x414/0x560 [ 231.207245][T10818] _copy_from_iter+0x1db/0x15a0 [ 231.207273][T10818] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 231.207293][T10818] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 231.207316][T10818] ? __pfx__copy_from_iter+0x10/0x10 [ 231.207338][T10818] ? __build_skb_around+0x257/0x3e0 [ 231.207362][T10818] ? netlink_sendmsg+0x642/0xb30 [ 231.207379][T10818] ? skb_put+0x11b/0x210 [ 231.207403][T10818] netlink_sendmsg+0x6b2/0xb30 [ 231.207430][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.207453][T10818] ? aa_sock_msg_perm+0x94/0x160 [ 231.207473][T10818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.207492][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.207513][T10818] __sock_sendmsg+0x219/0x270 [ 231.207543][T10818] ____sys_sendmsg+0x505/0x830 [ 231.207571][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.207602][T10818] ? import_iovec+0x74/0xa0 [ 231.207628][T10818] ___sys_sendmsg+0x21f/0x2a0 [ 231.207652][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.207707][T10818] ? __fget_files+0x2a/0x420 [ 231.207731][T10818] ? __fget_files+0x3a0/0x420 [ 231.207768][T10818] __x64_sys_sendmsg+0x19b/0x260 [ 231.207792][T10818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.207830][T10818] ? do_syscall_64+0xba/0x210 [ 231.207860][T10818] do_syscall_64+0xf6/0x210 [ 231.207885][T10818] ? clear_bhb_loop+0x45/0xa0 [ 231.207907][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.207924][T10818] RIP: 0033:0x7fcc99d8e969 [ 231.207941][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.207956][T10818] RSP: 002b:00007fcc9ab2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.207975][T10818] RAX: ffffffffffffffda RBX: 00007fcc99fb5fa0 RCX: 00007fcc99d8e969 [ 231.207988][T10818] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 231.207999][T10818] RBP: 00007fcc9ab2f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.208010][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.208020][T10818] R13: 0000000000000000 R14: 00007fcc99fb5fa0 R15: 00007ffe554e0fb8 [ 231.208048][T10818] [ 231.389034][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.408948][T10805] netlink: zone id is out of range [ 231.468077][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 231.500066][T10805] netlink: zone id is out of range [ 231.514705][T10805] netlink: zone id is out of range [ 231.519843][T10805] netlink: zone id is out of range [ 232.784476][T10822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.794429][T10822] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 232.801014][T10830] tipc: Enabled bearer , priority 27 [ 232.811169][T10829] netlink: 'syz.2.1591': attribute type 1 has an invalid length. [ 232.827874][T10829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1591'. [ 233.884460][T10893] FAULT_INJECTION: forcing a failure. [ 233.884460][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 233.940353][T10893] CPU: 1 UID: 0 PID: 10893 Comm: syz.1.1614 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 233.940378][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.940388][T10893] Call Trace: [ 233.940395][T10893] [ 233.940402][T10893] dump_stack_lvl+0x189/0x250 [ 233.940437][T10893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.940462][T10893] ? __pfx__printk+0x10/0x10 [ 233.940485][T10893] ? __pfx___might_resched+0x10/0x10 [ 233.940500][T10893] ? fs_reclaim_acquire+0x7d/0x100 [ 233.940530][T10893] should_fail_ex+0x414/0x560 [ 233.940568][T10893] should_failslab+0xa8/0x100 [ 233.940593][T10893] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 233.940615][T10893] ? __alloc_skb+0x112/0x2d0 [ 233.940637][T10893] __alloc_skb+0x112/0x2d0 [ 233.940659][T10893] netlink_ack+0x146/0xa50 [ 233.940674][T10893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.940695][T10893] ? ref_tracker_free+0x63a/0x7d0 [ 233.940711][T10893] ? __copy_skb_header+0xa7/0x550 [ 233.940741][T10893] netlink_rcv_skb+0x2a0/0x490 [ 233.940759][T10893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.940776][T10893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.940811][T10893] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.940828][T10893] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.940850][T10893] netlink_unicast+0x758/0x8d0 [ 233.940886][T10893] netlink_sendmsg+0x805/0xb30 [ 233.940913][T10893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.940934][T10893] ? aa_sock_msg_perm+0x94/0x160 [ 233.940953][T10893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.940972][T10893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.940992][T10893] __sock_sendmsg+0x219/0x270 [ 233.941020][T10893] ____sys_sendmsg+0x505/0x830 [ 233.941045][T10893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.941075][T10893] ? import_iovec+0x74/0xa0 [ 233.941100][T10893] ___sys_sendmsg+0x21f/0x2a0 [ 233.941123][T10893] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.941176][T10893] ? __fget_files+0x2a/0x420 [ 233.941198][T10893] ? __fget_files+0x3a0/0x420 [ 233.941228][T10893] __x64_sys_sendmsg+0x19b/0x260 [ 233.941252][T10893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.941289][T10893] ? do_syscall_64+0xba/0x210 [ 233.941318][T10893] do_syscall_64+0xf6/0x210 [ 233.941342][T10893] ? clear_bhb_loop+0x45/0xa0 [ 233.941363][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.941379][T10893] RIP: 0033:0x7f60af58e969 [ 233.941395][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.941411][T10893] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.941429][T10893] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 233.941441][T10893] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 233.941452][T10893] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.941463][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.941473][T10893] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 233.941499][T10893] [ 234.497444][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 234.506392][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 234.675394][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 234.978953][T10934] sctp: [Deprecated]: syz.1.1629 (pid 10934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.978953][T10934] Use struct sctp_sack_info instead [ 235.108008][T10940] netlink: 'syz.0.1633': attribute type 11 has an invalid length. [ 235.146125][T10940] netlink: 'syz.0.1633': attribute type 4 has an invalid length. [ 235.173349][T10940] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1633'. [ 235.405239][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 235.414491][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 235.435813][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 235.781270][T10973] FAULT_INJECTION: forcing a failure. [ 235.781270][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 235.798732][T10973] CPU: 0 UID: 0 PID: 10973 Comm: syz.0.1646 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 235.798757][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 235.798767][T10973] Call Trace: [ 235.798774][T10973] [ 235.798781][T10973] dump_stack_lvl+0x189/0x250 [ 235.798814][T10973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.798839][T10973] ? __pfx__printk+0x10/0x10 [ 235.798853][T10973] ? __lock_acquire+0xaac/0xd20 [ 235.798891][T10973] should_fail_ex+0x414/0x560 [ 235.798923][T10973] should_failslab+0xa8/0x100 [ 235.798947][T10973] kmem_cache_alloc_noprof+0x73/0x3c0 [ 235.798973][T10973] ? skb_clone+0x212/0x3a0 [ 235.799000][T10973] skb_clone+0x212/0x3a0 [ 235.799041][T10973] __netlink_deliver_tap+0x404/0x850 [ 235.799076][T10973] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.799099][T10973] netlink_deliver_tap+0x19c/0x1b0 [ 235.799121][T10973] netlink_sendskb+0x68/0x140 [ 235.799154][T10973] netlink_rcv_skb+0x2a0/0x490 [ 235.799183][T10973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.799205][T10973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.799248][T10973] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.799267][T10973] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.799294][T10973] netlink_unicast+0x758/0x8d0 [ 235.799337][T10973] netlink_sendmsg+0x805/0xb30 [ 235.799368][T10973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.799393][T10973] ? aa_sock_msg_perm+0x94/0x160 [ 235.799415][T10973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.799438][T10973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.799460][T10973] __sock_sendmsg+0x219/0x270 [ 235.799495][T10973] ____sys_sendmsg+0x505/0x830 [ 235.799525][T10973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.799560][T10973] ? import_iovec+0x74/0xa0 [ 235.799591][T10973] ___sys_sendmsg+0x21f/0x2a0 [ 235.799618][T10973] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.799681][T10973] ? __fget_files+0x2a/0x420 [ 235.799710][T10973] ? __fget_files+0x3a0/0x420 [ 235.799747][T10973] __x64_sys_sendmsg+0x19b/0x260 [ 235.799774][T10973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.799818][T10973] ? do_syscall_64+0xba/0x210 [ 235.799852][T10973] do_syscall_64+0xf6/0x210 [ 235.799882][T10973] ? clear_bhb_loop+0x45/0xa0 [ 235.799906][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.799926][T10973] RIP: 0033:0x7fbf3198e969 [ 235.799944][T10973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.799962][T10973] RSP: 002b:00007fbf2f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.799983][T10973] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198e969 [ 235.799998][T10973] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 235.800011][T10973] RBP: 00007fbf2f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.800024][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.800035][T10973] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 235.800068][T10973] [ 236.220216][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1651'. [ 236.288516][T10987] FAULT_INJECTION: forcing a failure. [ 236.288516][T10987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.314999][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.1.1652 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 236.315025][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 236.315035][T10987] Call Trace: [ 236.315042][T10987] [ 236.315049][T10987] dump_stack_lvl+0x189/0x250 [ 236.315077][T10987] ? __lock_acquire+0xaac/0xd20 [ 236.315103][T10987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.315137][T10987] ? __pfx__printk+0x10/0x10 [ 236.315155][T10987] ? __might_fault+0xb0/0x130 [ 236.315186][T10987] should_fail_ex+0x414/0x560 [ 236.315218][T10987] _copy_from_user+0x2d/0xb0 [ 236.315241][T10987] ___sys_sendmsg+0x158/0x2a0 [ 236.315263][T10987] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.315317][T10987] ? __fget_files+0x2a/0x420 [ 236.315338][T10987] ? __fget_files+0x3a0/0x420 [ 236.315368][T10987] __sys_sendmmsg+0x227/0x430 [ 236.315393][T10987] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.315423][T10987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.315464][T10987] ? ksys_write+0x1f0/0x250 [ 236.315482][T10987] ? rcu_is_watching+0x15/0xb0 [ 236.315514][T10987] __x64_sys_sendmmsg+0xa0/0xc0 [ 236.315536][T10987] do_syscall_64+0xf6/0x210 [ 236.315562][T10987] ? clear_bhb_loop+0x45/0xa0 [ 236.315583][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.315599][T10987] RIP: 0033:0x7f60af58e969 [ 236.315615][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.315629][T10987] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.315647][T10987] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 236.315660][T10987] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 236.315671][T10987] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 236.315682][T10987] R10: 000000004400c800 R11: 0000000000000246 R12: 0000000000000001 [ 236.315692][T10987] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 236.315718][T10987] [ 236.633107][T10996] x_tables: duplicate underflow at hook 3 [ 236.766608][T11005] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1661'. [ 236.784008][T11005] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1661'. [ 237.087878][T11026] FAULT_INJECTION: forcing a failure. [ 237.087878][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.103909][T11026] CPU: 0 UID: 0 PID: 11026 Comm: syz.4.1667 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 237.103934][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.103944][T11026] Call Trace: [ 237.103951][T11026] [ 237.103958][T11026] dump_stack_lvl+0x189/0x250 [ 237.103990][T11026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.104015][T11026] ? __pfx__printk+0x10/0x10 [ 237.104044][T11026] should_fail_ex+0x414/0x560 [ 237.104075][T11026] _copy_to_user+0x31/0xb0 [ 237.104106][T11026] simple_read_from_buffer+0xe1/0x170 [ 237.104131][T11026] proc_fail_nth_read+0x1df/0x250 [ 237.104159][T11026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.104185][T11026] ? rw_verify_area+0x258/0x650 [ 237.104203][T11026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.104228][T11026] vfs_read+0x1fd/0x980 [ 237.104251][T11026] ? __pfx___mutex_lock+0x10/0x10 [ 237.104276][T11026] ? __pfx_vfs_read+0x10/0x10 [ 237.104296][T11026] ? __fget_files+0x2a/0x420 [ 237.104322][T11026] ? __fget_files+0x3a0/0x420 [ 237.104342][T11026] ? __fget_files+0x2a/0x420 [ 237.104373][T11026] ksys_read+0x145/0x250 [ 237.104390][T11026] ? rcu_is_watching+0x15/0xb0 [ 237.104417][T11026] ? __pfx_ksys_read+0x10/0x10 [ 237.104439][T11026] ? do_syscall_64+0xba/0x210 [ 237.104467][T11026] do_syscall_64+0xf6/0x210 [ 237.104491][T11026] ? clear_bhb_loop+0x45/0xa0 [ 237.104513][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.104529][T11026] RIP: 0033:0x7f825978d37c [ 237.104543][T11026] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.104558][T11026] RSP: 002b:00007f82575f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.104576][T11026] RAX: ffffffffffffffda RBX: 00007f82599b5fa0 RCX: 00007f825978d37c [ 237.104589][T11026] RDX: 000000000000000f RSI: 00007f82575f60a0 RDI: 0000000000000004 [ 237.104600][T11026] RBP: 00007f82575f6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.104610][T11026] R10: 000000004400c800 R11: 0000000000000246 R12: 0000000000000001 [ 237.104621][T11026] R13: 0000000000000000 R14: 00007f82599b5fa0 R15: 00007fff2f3ca4d8 [ 237.104648][T11026] [ 237.146496][T11029] net_ratelimit: 3 callbacks suppressed [ 237.146513][T11029] openvswitch: netlink: Message has 20 unknown bytes. [ 237.371896][T11029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.749060][T11052] netlink: 'syz.0.1678': attribute type 178 has an invalid length. [ 237.772537][T11052] x_tables: duplicate underflow at hook 1 [ 238.518651][T11091] netlink: 'syz.4.1691': attribute type 12 has an invalid length. [ 239.173845][T11120] netlink: 'syz.2.1703': attribute type 21 has an invalid length. [ 239.571546][T11144] __nla_validate_parse: 11 callbacks suppressed [ 239.571562][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 240.163416][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 240.182757][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 240.332958][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1725'. [ 240.535029][ T7312] IPVS: starting estimator thread 0... [ 240.652084][T11192] IPVS: using max 33 ests per chain, 79200 per kthread [ 242.019778][T11239] netlink: 'syz.3.1743': attribute type 32 has an invalid length. [ 242.176047][T11252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1747'. [ 242.223041][T11254] raw_sendmsg: syz.2.1748 forgot to set AF_INET. Fix it! [ 242.354189][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 242.366616][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 242.651662][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1756'. [ 242.898561][T11279] can: request_module (can-proto-4) failed. [ 243.043812][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 243.061051][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 243.076746][T11293] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 243.092129][T11293] CPU: 0 UID: 0 PID: 11293 Comm: syz.1.1761 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 243.092153][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 243.092173][T11293] Call Trace: [ 243.092181][T11293] [ 243.092188][T11293] dump_stack_lvl+0x189/0x250 [ 243.092218][T11293] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.092243][T11293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.092270][T11293] ? __pfx__printk+0x10/0x10 [ 243.092291][T11293] ? kernfs_path_from_node+0x2b/0x260 [ 243.092316][T11293] ? kernfs_path_from_node+0x216/0x260 [ 243.092344][T11293] sysfs_warn_dup+0x8e/0xa0 [ 243.092369][T11293] sysfs_do_create_link_sd+0xc0/0x110 [ 243.092395][T11293] device_add_class_symlinks+0x1cf/0x240 [ 243.092420][T11293] device_add+0x475/0xb50 [ 243.092444][T11293] wiphy_register+0x199a/0x26b0 [ 243.092477][T11293] ? __pfx_wiphy_register+0x10/0x10 [ 243.092506][T11293] ? minstrel_ht_alloc+0x893/0x990 [ 243.092552][T11293] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 243.092578][T11293] ieee80211_register_hw+0x334b/0x4060 [ 243.092616][T11293] ? ieee80211_register_hw+0x13f1/0x4060 [ 243.092649][T11293] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 243.092675][T11293] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.092708][T11293] ? __hrtimer_setup+0x187/0x210 [ 243.092734][T11293] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 243.092769][T11293] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 243.092828][T11293] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 243.092854][T11293] ? trace_kmalloc+0x1f/0xd0 [ 243.092873][T11293] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 243.092907][T11293] ? kstrndup+0xbf/0x160 [ 243.092932][T11293] hwsim_new_radio_nl+0xea4/0x1b10 [ 243.092958][T11293] ? __pfx___nla_validate_parse+0x10/0x10 [ 243.092989][T11293] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.093019][T11293] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 243.093052][T11293] ? __nla_parse+0x40/0x60 [ 243.093077][T11293] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 243.093111][T11293] genl_family_rcv_msg_doit+0x212/0x300 [ 243.093144][T11293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.093182][T11293] ? bpf_lsm_capable+0x9/0x20 [ 243.093207][T11293] ? security_capable+0x7e/0x2e0 [ 243.093233][T11293] genl_rcv_msg+0x60e/0x790 [ 243.093264][T11293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.093289][T11293] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.093331][T11293] netlink_rcv_skb+0x219/0x490 [ 243.093352][T11293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.093379][T11293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.093421][T11293] ? down_read+0x1ad/0x2e0 [ 243.093451][T11293] genl_rcv+0x28/0x40 [ 243.093472][T11293] netlink_unicast+0x758/0x8d0 [ 243.093511][T11293] netlink_sendmsg+0x805/0xb30 [ 243.093542][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.093566][T11293] ? aa_sock_msg_perm+0x94/0x160 [ 243.093587][T11293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.093608][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.093630][T11293] __sock_sendmsg+0x219/0x270 [ 243.093661][T11293] ____sys_sendmsg+0x505/0x830 [ 243.093689][T11293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.093731][T11293] ? import_iovec+0x74/0xa0 [ 243.093758][T11293] ___sys_sendmsg+0x21f/0x2a0 [ 243.093783][T11293] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.093843][T11293] ? __fget_files+0x2a/0x420 [ 243.093865][T11293] ? __fget_files+0x3a0/0x420 [ 243.093908][T11293] __x64_sys_sendmsg+0x19b/0x260 [ 243.093932][T11293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.093972][T11293] ? do_syscall_64+0xba/0x210 [ 243.094002][T11293] do_syscall_64+0xf6/0x210 [ 243.094028][T11293] ? clear_bhb_loop+0x45/0xa0 [ 243.094050][T11293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.094066][T11293] RIP: 0033:0x7f60af58e969 [ 243.094083][T11293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.094099][T11293] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.094118][T11293] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 243.094131][T11293] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 243.094143][T11293] RBP: 00007f60af610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 243.094154][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.094164][T11293] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 243.094195][T11293] [ 244.116919][T11320] bridge0: port 1(hsr0) entered blocking state [ 244.125917][T11320] bridge0: port 1(hsr0) entered disabled state [ 244.134376][T11320] hsr0: entered allmulticast mode [ 244.139499][T11320] hsr_slave_0: entered allmulticast mode [ 244.151177][T11320] hsr_slave_1: entered allmulticast mode [ 244.159844][T11320] hsr0: entered promiscuous mode [ 244.214870][T11324] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 244.673431][T11334] nbd: must specify an index to disconnect [ 244.966183][T11354] FAULT_INJECTION: forcing a failure. [ 244.966183][T11354] name failslab, interval 1, probability 0, space 0, times 0 [ 244.995089][T11354] CPU: 0 UID: 0 PID: 11354 Comm: syz.2.1782 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 244.995113][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 244.995124][T11354] Call Trace: [ 244.995131][T11354] [ 244.995139][T11354] dump_stack_lvl+0x189/0x250 [ 244.995171][T11354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.995196][T11354] ? __pfx__printk+0x10/0x10 [ 244.995216][T11354] ? __pfx___might_resched+0x10/0x10 [ 244.995232][T11354] ? fs_reclaim_acquire+0x7d/0x100 [ 244.995261][T11354] should_fail_ex+0x414/0x560 [ 244.995292][T11354] should_failslab+0xa8/0x100 [ 244.995317][T11354] __kmalloc_noprof+0xcb/0x4f0 [ 244.995337][T11354] ? iovec_from_user+0x87/0x250 [ 244.995363][T11354] iovec_from_user+0x87/0x250 [ 244.995389][T11354] __import_iovec+0x163/0x7f0 [ 244.995421][T11354] import_iovec+0x74/0xa0 [ 244.995447][T11354] ___sys_recvmsg+0x43a/0x510 [ 244.995482][T11354] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.995526][T11354] ? __fget_files+0x3a0/0x420 [ 244.995559][T11354] do_recvmmsg+0x307/0x760 [ 244.995589][T11354] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.995624][T11354] ? _copy_from_user+0x94/0xb0 [ 244.995661][T11354] __x64_sys_recvmmsg+0x1af/0x240 [ 244.995682][T11354] ? rcu_is_watching+0x15/0xb0 [ 244.995710][T11354] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 244.995736][T11354] ? do_syscall_64+0xba/0x210 [ 244.995764][T11354] do_syscall_64+0xf6/0x210 [ 244.995789][T11354] ? clear_bhb_loop+0x45/0xa0 [ 244.995811][T11354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.995828][T11354] RIP: 0033:0x7fcc99d8e969 [ 244.995843][T11354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.995858][T11354] RSP: 002b:00007fcc9ab2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 244.995877][T11354] RAX: ffffffffffffffda RBX: 00007fcc99fb5fa0 RCX: 00007fcc99d8e969 [ 244.995889][T11354] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 244.995901][T11354] RBP: 00007fcc9ab2f090 R08: 0000200000003700 R09: 0000000000000000 [ 244.995918][T11354] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 244.995929][T11354] R13: 0000000000000000 R14: 00007fcc99fb5fa0 R15: 00007ffe554e0fb8 [ 244.995956][T11354] [ 245.249410][ T56] block nbd3: Receive control failed (result -32) [ 245.476981][T11364] __nla_validate_parse: 3 callbacks suppressed [ 245.476998][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 245.514133][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 245.659404][T11374] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 246.339059][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 246.900219][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 246.943769][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 247.312157][T11427] xt_hashlimit: size too large, truncated to 1048576 [ 247.318270][T11429] sctp: [Deprecated]: syz.1.1809 (pid 11429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.318270][T11429] Use struct sctp_sack_info instead [ 247.345392][T11429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1809'. [ 247.375035][T11431] xt_hashlimit: size too large, truncated to 1048576 [ 247.416183][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 247.480809][T11433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1809'. [ 247.581433][T11429] bridge0: port 3(batadv0) entered disabled state [ 247.588350][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.595689][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.725625][T11429] veth1_to_team: left promiscuous mode [ 247.738964][T11429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.760737][T11429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.926341][T11429] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.936054][T11429] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.948397][T11429] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.959092][T11429] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.975034][T11442] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1812'. [ 248.245225][T11454] FAULT_INJECTION: forcing a failure. [ 248.245225][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.264380][T11454] CPU: 1 UID: 0 PID: 11454 Comm: syz.1.1815 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 248.264406][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.264417][T11454] Call Trace: [ 248.264424][T11454] [ 248.264432][T11454] dump_stack_lvl+0x189/0x250 [ 248.264460][T11454] ? __lock_acquire+0xaac/0xd20 [ 248.264486][T11454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.264511][T11454] ? __pfx__printk+0x10/0x10 [ 248.264529][T11454] ? __might_fault+0xb0/0x130 [ 248.264561][T11454] should_fail_ex+0x414/0x560 [ 248.264592][T11454] _copy_to_iter+0x575/0x15a0 [ 248.264623][T11454] ? __pfx__copy_to_iter+0x10/0x10 [ 248.264640][T11454] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 248.264669][T11454] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 248.264699][T11454] __skb_datagram_iter+0x100/0x960 [ 248.264724][T11454] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 248.264754][T11454] skb_copy_datagram_iter+0xc5/0x230 [ 248.264781][T11454] netlink_recvmsg+0x2c9/0xe00 [ 248.264809][T11454] ? __pfx_netlink_recvmsg+0x10/0x10 [ 248.264830][T11454] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.264860][T11454] ? aa_sock_msg_perm+0x94/0x160 [ 248.264879][T11454] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 248.264898][T11454] ? security_socket_recvmsg+0x7e/0x2e0 [ 248.264920][T11454] ? __pfx_netlink_recvmsg+0x10/0x10 [ 248.264939][T11454] sock_recvmsg+0x229/0x270 [ 248.264967][T11454] ____sys_recvmsg+0x1c9/0x460 [ 248.264997][T11454] ? __pfx_____sys_recvmsg+0x10/0x10 [ 248.265033][T11454] ? import_iovec+0x74/0xa0 [ 248.265059][T11454] ___sys_recvmsg+0x1b5/0x510 [ 248.265085][T11454] ? __pfx____sys_recvmsg+0x10/0x10 [ 248.265129][T11454] ? __fget_files+0x3a0/0x420 [ 248.265161][T11454] do_recvmmsg+0x307/0x760 [ 248.265191][T11454] ? __pfx_do_recvmmsg+0x10/0x10 [ 248.265225][T11454] ? _copy_from_user+0x94/0xb0 [ 248.265267][T11454] __x64_sys_recvmmsg+0x1af/0x240 [ 248.265288][T11454] ? rcu_is_watching+0x15/0xb0 [ 248.265316][T11454] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 248.265341][T11454] ? do_syscall_64+0xba/0x210 [ 248.265371][T11454] do_syscall_64+0xf6/0x210 [ 248.265395][T11454] ? clear_bhb_loop+0x45/0xa0 [ 248.265417][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.265434][T11454] RIP: 0033:0x7f60af58e969 [ 248.265449][T11454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.265464][T11454] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 248.265483][T11454] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 248.265496][T11454] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 248.265508][T11454] RBP: 00007f60b049e090 R08: 0000200000003700 R09: 0000000000000000 [ 248.265519][T11454] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 248.265530][T11454] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 248.265557][T11454] [ 248.576198][T11456] netlink: 'syz.4.1816': attribute type 26 has an invalid length. [ 248.998590][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 249.577431][T11500] FAULT_INJECTION: forcing a failure. [ 249.577431][T11500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.623071][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.4.1832 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 249.623098][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 249.623109][T11500] Call Trace: [ 249.623117][T11500] [ 249.623125][T11500] dump_stack_lvl+0x189/0x250 [ 249.623168][T11500] ? __lock_acquire+0xaac/0xd20 [ 249.623195][T11500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.623220][T11500] ? __pfx__printk+0x10/0x10 [ 249.623238][T11500] ? __might_fault+0xb0/0x130 [ 249.623270][T11500] should_fail_ex+0x414/0x560 [ 249.623302][T11500] _copy_to_iter+0x575/0x15a0 [ 249.623333][T11500] ? __pfx__copy_to_iter+0x10/0x10 [ 249.623351][T11500] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 249.623381][T11500] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 249.623411][T11500] __skb_datagram_iter+0x100/0x960 [ 249.623436][T11500] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 249.623467][T11500] skb_copy_datagram_iter+0xc5/0x230 [ 249.623494][T11500] netlink_recvmsg+0x2c9/0xe00 [ 249.623521][T11500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 249.623543][T11500] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.623573][T11500] ? aa_sock_msg_perm+0x94/0x160 [ 249.623592][T11500] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 249.623611][T11500] ? security_socket_recvmsg+0x7e/0x2e0 [ 249.623632][T11500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 249.623650][T11500] sock_recvmsg+0x229/0x270 [ 249.623679][T11500] ____sys_recvmsg+0x1c9/0x460 [ 249.623709][T11500] ? __pfx_____sys_recvmsg+0x10/0x10 [ 249.623745][T11500] ? import_iovec+0x74/0xa0 [ 249.623771][T11500] ___sys_recvmsg+0x1b5/0x510 [ 249.623798][T11500] ? __pfx____sys_recvmsg+0x10/0x10 [ 249.623842][T11500] ? __fget_files+0x3a0/0x420 [ 249.623875][T11500] do_recvmmsg+0x307/0x760 [ 249.623905][T11500] ? __pfx_do_recvmmsg+0x10/0x10 [ 249.623939][T11500] ? _copy_from_user+0x94/0xb0 [ 249.623975][T11500] __x64_sys_recvmmsg+0x1af/0x240 [ 249.623997][T11500] ? rcu_is_watching+0x15/0xb0 [ 249.624024][T11500] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 249.624050][T11500] ? do_syscall_64+0xba/0x210 [ 249.624081][T11500] do_syscall_64+0xf6/0x210 [ 249.624106][T11500] ? clear_bhb_loop+0x45/0xa0 [ 249.624128][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.624151][T11500] RIP: 0033:0x7f825978e969 [ 249.624166][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.624181][T11500] RSP: 002b:00007f82575f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 249.624200][T11500] RAX: ffffffffffffffda RBX: 00007f82599b5fa0 RCX: 00007f825978e969 [ 249.624213][T11500] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 249.624225][T11500] RBP: 00007f82575f6090 R08: 0000200000003700 R09: 0000000000000000 [ 249.624236][T11500] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 249.624247][T11500] R13: 0000000000000000 R14: 00007f82599b5fa0 R15: 00007fff2f3ca4d8 [ 249.624273][T11500] [ 251.433194][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 251.467351][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 253.195160][T11585] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1852'. [ 254.699100][T11635] FAULT_INJECTION: forcing a failure. [ 254.699100][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.744552][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.0.1866 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 254.744578][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.744589][T11635] Call Trace: [ 254.744596][T11635] [ 254.744603][T11635] dump_stack_lvl+0x189/0x250 [ 254.744635][T11635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.744660][T11635] ? __pfx__printk+0x10/0x10 [ 254.744691][T11635] should_fail_ex+0x414/0x560 [ 254.744722][T11635] _copy_to_iter+0x575/0x15a0 [ 254.744752][T11635] ? __pfx__copy_to_iter+0x10/0x10 [ 254.744768][T11635] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 254.744798][T11635] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 254.744827][T11635] __skb_datagram_iter+0x100/0x960 [ 254.744851][T11635] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 254.744881][T11635] skb_copy_datagram_iter+0xc5/0x230 [ 254.744908][T11635] netlink_recvmsg+0x2c9/0xe00 [ 254.744935][T11635] ? __pfx_netlink_recvmsg+0x10/0x10 [ 254.744956][T11635] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.744986][T11635] ? aa_sock_msg_perm+0x94/0x160 [ 254.745013][T11635] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 254.745031][T11635] ? security_socket_recvmsg+0x7e/0x2e0 [ 254.745054][T11635] ? __pfx_netlink_recvmsg+0x10/0x10 [ 254.745072][T11635] sock_recvmsg+0x229/0x270 [ 254.745100][T11635] ____sys_recvmsg+0x1c9/0x460 [ 254.745129][T11635] ? __pfx_____sys_recvmsg+0x10/0x10 [ 254.745165][T11635] ? import_iovec+0x74/0xa0 [ 254.745190][T11635] ___sys_recvmsg+0x1b5/0x510 [ 254.745215][T11635] ? __pfx____sys_recvmsg+0x10/0x10 [ 254.745259][T11635] ? __fget_files+0x3a0/0x420 [ 254.745291][T11635] do_recvmmsg+0x307/0x760 [ 254.745319][T11635] ? __pfx_do_recvmmsg+0x10/0x10 [ 254.745351][T11635] ? _copy_from_user+0x94/0xb0 [ 254.745384][T11635] __x64_sys_recvmmsg+0x1af/0x240 [ 254.745405][T11635] ? rcu_is_watching+0x15/0xb0 [ 254.745432][T11635] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 254.745458][T11635] ? do_syscall_64+0xba/0x210 [ 254.745486][T11635] do_syscall_64+0xf6/0x210 [ 254.745511][T11635] ? clear_bhb_loop+0x45/0xa0 [ 254.745533][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.745550][T11635] RIP: 0033:0x7fbf3198e969 [ 254.745565][T11635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.745581][T11635] RSP: 002b:00007fbf2f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.745599][T11635] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198e969 [ 254.745612][T11635] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 254.745624][T11635] RBP: 00007fbf2f7f6090 R08: 0000200000003700 R09: 0000000000000000 [ 254.745635][T11635] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 254.745645][T11635] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 254.745671][T11635] [ 255.242137][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 256.133322][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 256.895678][T11712] set match dimension is over the limit! [ 260.678817][T11755] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 260.708538][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 260.722015][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 260.865448][T11763] nbd: must specify at least one socket [ 262.333929][T11815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1927'. [ 262.673987][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 262.686845][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 263.018933][T11836] FAULT_INJECTION: forcing a failure. [ 263.018933][T11836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.038695][T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.1.1936 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 263.038719][T11836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 263.038729][T11836] Call Trace: [ 263.038736][T11836] [ 263.038744][T11836] dump_stack_lvl+0x189/0x250 [ 263.038774][T11836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.038796][T11836] ? __pfx__printk+0x10/0x10 [ 263.038823][T11836] should_fail_ex+0x414/0x560 [ 263.038852][T11836] _copy_to_user+0x31/0xb0 [ 263.038874][T11836] move_addr_to_user+0x146/0x200 [ 263.038893][T11836] ____sys_recvmsg+0x228/0x460 [ 263.038919][T11836] ? __pfx_____sys_recvmsg+0x10/0x10 [ 263.038951][T11836] ? import_iovec+0x74/0xa0 [ 263.038974][T11836] ___sys_recvmsg+0x1b5/0x510 [ 263.039003][T11836] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.039062][T11836] ? __fget_files+0x3a0/0x420 [ 263.039100][T11836] do_recvmmsg+0x307/0x760 [ 263.039142][T11836] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.039182][T11836] ? _copy_from_user+0x94/0xb0 [ 263.039225][T11836] __x64_sys_recvmmsg+0x1af/0x240 [ 263.039250][T11836] ? rcu_is_watching+0x15/0xb0 [ 263.039282][T11836] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.039312][T11836] ? do_syscall_64+0xba/0x210 [ 263.039345][T11836] do_syscall_64+0xf6/0x210 [ 263.039374][T11836] ? clear_bhb_loop+0x45/0xa0 [ 263.039399][T11836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.039418][T11836] RIP: 0033:0x7f60af58e969 [ 263.039435][T11836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.039452][T11836] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.039473][T11836] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 263.039488][T11836] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 263.039501][T11836] RBP: 00007f60b049e090 R08: 0000200000003700 R09: 0000000000000000 [ 263.039514][T11836] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 263.039526][T11836] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 263.039557][T11836] [ 263.672267][T11850] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1942'. [ 263.958180][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 263.967278][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 264.062763][T11868] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 264.740017][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 264.881085][T11904] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1962'. [ 265.059571][T11922] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 265.448402][T11942] FAULT_INJECTION: forcing a failure. [ 265.448402][T11942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.461758][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.1.1975 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 265.461781][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.461801][T11942] Call Trace: [ 265.461808][T11942] [ 265.461815][T11942] dump_stack_lvl+0x189/0x250 [ 265.461844][T11942] ? __lock_acquire+0xaac/0xd20 [ 265.461871][T11942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.461895][T11942] ? __pfx__printk+0x10/0x10 [ 265.461913][T11942] ? __might_fault+0xb0/0x130 [ 265.461946][T11942] should_fail_ex+0x414/0x560 [ 265.461985][T11942] _copy_from_user+0x2d/0xb0 [ 265.462009][T11942] core_sys_select+0x4d2/0x990 [ 265.462041][T11942] ? __pfx_core_sys_select+0x10/0x10 [ 265.462084][T11942] ? __pfx_set_user_sigmask+0x10/0x10 [ 265.462111][T11942] __se_sys_pselect6+0x27a/0x300 [ 265.462137][T11942] ? __pfx___se_sys_pselect6+0x10/0x10 [ 265.462164][T11942] ? __x64_sys_pselect6+0x21/0xf0 [ 265.462187][T11942] do_syscall_64+0xf6/0x210 [ 265.462214][T11942] ? clear_bhb_loop+0x45/0xa0 [ 265.462235][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.462252][T11942] RIP: 0033:0x7f60af58e969 [ 265.462268][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.462283][T11942] RSP: 002b:00007f60b047d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 265.462301][T11942] RAX: ffffffffffffffda RBX: 00007f60af7b6080 RCX: 00007f60af58e969 [ 265.462313][T11942] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 265.462324][T11942] RBP: 00007f60b047d090 R08: 0000000000000000 R09: 0000000000000000 [ 265.462334][T11942] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 265.462345][T11942] R13: 0000000000000000 R14: 00007f60af7b6080 R15: 00007ffd653aaf68 [ 265.462372][T11942] [ 266.047575][T11961] __nla_validate_parse: 1 callbacks suppressed [ 266.047592][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1980'. [ 266.548973][T11980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1985'. [ 266.713946][T11986] FAULT_INJECTION: forcing a failure. [ 266.713946][T11986] name failslab, interval 1, probability 0, space 0, times 0 [ 266.771444][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.1.1989 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 266.771469][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 266.771479][T11986] Call Trace: [ 266.771486][T11986] [ 266.771494][T11986] dump_stack_lvl+0x189/0x250 [ 266.771543][T11986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.771570][T11986] ? __pfx__printk+0x10/0x10 [ 266.771594][T11986] ? __pfx___might_resched+0x10/0x10 [ 266.771616][T11986] should_fail_ex+0x414/0x560 [ 266.771650][T11986] should_failslab+0xa8/0x100 [ 266.771675][T11986] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 266.771700][T11986] ? __alloc_skb+0x112/0x2d0 [ 266.771724][T11986] __alloc_skb+0x112/0x2d0 [ 266.771747][T11986] netlink_sendmsg+0x5c6/0xb30 [ 266.771776][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.771799][T11986] ? aa_sock_msg_perm+0x94/0x160 [ 266.771822][T11986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.771843][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.771862][T11986] __sock_sendmsg+0x219/0x270 [ 266.771902][T11986] ____sys_sendmsg+0x505/0x830 [ 266.771928][T11986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.771957][T11986] ? import_iovec+0x74/0xa0 [ 266.771982][T11986] ___sys_sendmsg+0x21f/0x2a0 [ 266.772004][T11986] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.772057][T11986] ? __fget_files+0x2a/0x420 [ 266.772078][T11986] ? __fget_files+0x3a0/0x420 [ 266.772109][T11986] __x64_sys_sendmsg+0x19b/0x260 [ 266.772133][T11986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.772175][T11986] ? do_syscall_64+0xba/0x210 [ 266.772204][T11986] do_syscall_64+0xf6/0x210 [ 266.772229][T11986] ? clear_bhb_loop+0x45/0xa0 [ 266.772250][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.772266][T11986] RIP: 0033:0x7f60af58e969 [ 266.772281][T11986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.772296][T11986] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.772314][T11986] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 266.772326][T11986] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.772337][T11986] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.772348][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.772358][T11986] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 266.772384][T11986] [ 267.328239][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 267.368983][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 267.669116][T12033] FAULT_INJECTION: forcing a failure. [ 267.669116][T12033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.692035][T12033] CPU: 0 UID: 0 PID: 12033 Comm: syz.4.2002 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 267.692060][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 267.692071][T12033] Call Trace: [ 267.692078][T12033] [ 267.692086][T12033] dump_stack_lvl+0x189/0x250 [ 267.692114][T12033] ? __lock_acquire+0xaac/0xd20 [ 267.692148][T12033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.692173][T12033] ? __pfx__printk+0x10/0x10 [ 267.692190][T12033] ? __might_fault+0xb0/0x130 [ 267.692223][T12033] should_fail_ex+0x414/0x560 [ 267.692254][T12033] _copy_from_user+0x2d/0xb0 [ 267.692277][T12033] core_sys_select+0x633/0x990 [ 267.692310][T12033] ? __pfx_core_sys_select+0x10/0x10 [ 267.692355][T12033] ? __pfx_set_user_sigmask+0x10/0x10 [ 267.692382][T12033] __se_sys_pselect6+0x27a/0x300 [ 267.692409][T12033] ? __pfx___se_sys_pselect6+0x10/0x10 [ 267.692436][T12033] ? __x64_sys_pselect6+0x21/0xf0 [ 267.692460][T12033] do_syscall_64+0xf6/0x210 [ 267.692486][T12033] ? clear_bhb_loop+0x45/0xa0 [ 267.692507][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.692524][T12033] RIP: 0033:0x7f825978e969 [ 267.692539][T12033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.692554][T12033] RSP: 002b:00007f82575d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 267.692572][T12033] RAX: ffffffffffffffda RBX: 00007f82599b6080 RCX: 00007f825978e969 [ 267.692584][T12033] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 267.692595][T12033] RBP: 00007f82575d5090 R08: 0000000000000000 R09: 0000000000000000 [ 267.692606][T12033] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 267.692616][T12033] R13: 0000000000000000 R14: 00007f82599b6080 R15: 00007fff2f3ca4d8 [ 267.692656][T12033] [ 268.217434][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 268.234574][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 268.251637][T12046] netlink: 'syz.0.2008': attribute type 13 has an invalid length. [ 268.988407][T12072] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 269.008867][T12072] batman_adv: batadv0: Adding interface: ip6gretap1 [ 269.019617][T12072] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.079822][T12072] batman_adv: batadv0: Interface activated: ip6gretap1 [ 269.316758][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 269.397886][T12089] FAULT_INJECTION: forcing a failure. [ 269.397886][T12089] name failslab, interval 1, probability 0, space 0, times 0 [ 269.418441][T12089] CPU: 1 UID: 0 PID: 12089 Comm: syz.4.2025 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 269.418466][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 269.418477][T12089] Call Trace: [ 269.418484][T12089] [ 269.418491][T12089] dump_stack_lvl+0x189/0x250 [ 269.418520][T12089] ? __rtnl_unlock+0x68/0xf0 [ 269.418543][T12089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.418567][T12089] ? __pfx__printk+0x10/0x10 [ 269.418582][T12089] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 269.418620][T12089] should_fail_ex+0x414/0x560 [ 269.418662][T12089] should_failslab+0xa8/0x100 [ 269.418687][T12089] kmem_cache_alloc_noprof+0x73/0x3c0 [ 269.418707][T12089] ? skb_clone+0x212/0x3a0 [ 269.418733][T12089] skb_clone+0x212/0x3a0 [ 269.418758][T12089] __netlink_deliver_tap+0x404/0x850 [ 269.418787][T12089] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.418807][T12089] netlink_deliver_tap+0x19c/0x1b0 [ 269.418826][T12089] netlink_dump+0x929/0xe70 [ 269.418853][T12089] ? __pfx_netlink_dump+0x10/0x10 [ 269.418880][T12089] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.418909][T12089] ? kmem_cache_free+0x192/0x3f0 [ 269.418935][T12089] netlink_recvmsg+0x67b/0xe00 [ 269.418963][T12089] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.418984][T12089] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.419015][T12089] ? aa_sock_msg_perm+0x94/0x160 [ 269.419053][T12089] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 269.419075][T12089] ? security_socket_recvmsg+0x7e/0x2e0 [ 269.419101][T12089] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.419123][T12089] sock_recvmsg+0x229/0x270 [ 269.419159][T12089] ____sys_recvmsg+0x1c9/0x460 [ 269.419194][T12089] ? __pfx_____sys_recvmsg+0x10/0x10 [ 269.419237][T12089] ? import_iovec+0x74/0xa0 [ 269.419267][T12089] ___sys_recvmsg+0x1b5/0x510 [ 269.419299][T12089] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.419352][T12089] ? __fget_files+0x3a0/0x420 [ 269.419392][T12089] do_recvmmsg+0x307/0x760 [ 269.419425][T12089] ? __pfx_do_recvmmsg+0x10/0x10 [ 269.419467][T12089] ? _copy_from_user+0x94/0xb0 [ 269.419510][T12089] __x64_sys_recvmmsg+0x1af/0x240 [ 269.419536][T12089] ? rcu_is_watching+0x15/0xb0 [ 269.419567][T12089] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 269.419598][T12089] ? do_syscall_64+0xba/0x210 [ 269.419631][T12089] do_syscall_64+0xf6/0x210 [ 269.419670][T12089] ? clear_bhb_loop+0x45/0xa0 [ 269.419695][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.419715][T12089] RIP: 0033:0x7f825978e969 [ 269.419732][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.419750][T12089] RSP: 002b:00007f82575f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 269.419772][T12089] RAX: ffffffffffffffda RBX: 00007f82599b5fa0 RCX: 00007f825978e969 [ 269.419786][T12089] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 269.419800][T12089] RBP: 00007f82575f6090 R08: 0000200000003700 R09: 0000000000000000 [ 269.419813][T12089] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 269.419826][T12089] R13: 0000000000000000 R14: 00007f82599b5fa0 R15: 00007fff2f3ca4d8 [ 269.419858][T12089] [ 270.259836][T12126] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 270.561326][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 270.573737][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 270.710720][T12111] FAULT_INJECTION: forcing a failure. [ 270.710720][T12111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.726417][T12111] CPU: 1 UID: 0 PID: 12111 Comm: syz.1.2031 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 270.726458][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.726476][T12111] Call Trace: [ 270.726487][T12111] [ 270.726499][T12111] dump_stack_lvl+0x189/0x250 [ 270.726542][T12111] ? __lock_acquire+0xaac/0xd20 [ 270.726573][T12111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.726595][T12111] ? __pfx__printk+0x10/0x10 [ 270.726611][T12111] ? __might_fault+0xb0/0x130 [ 270.726640][T12111] should_fail_ex+0x414/0x560 [ 270.726686][T12111] set_fd_set+0x3a/0xa0 [ 270.726705][T12111] core_sys_select+0x731/0x990 [ 270.726735][T12111] ? __pfx_core_sys_select+0x10/0x10 [ 270.726778][T12111] ? __pfx_set_user_sigmask+0x10/0x10 [ 270.726812][T12111] __se_sys_pselect6+0x27a/0x300 [ 270.726838][T12111] ? __pfx___se_sys_pselect6+0x10/0x10 [ 270.726865][T12111] ? __x64_sys_pselect6+0x21/0xf0 [ 270.726888][T12111] do_syscall_64+0xf6/0x210 [ 270.726913][T12111] ? clear_bhb_loop+0x45/0xa0 [ 270.726934][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.726949][T12111] RIP: 0033:0x7f60af58e969 [ 270.726965][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.726980][T12111] RSP: 002b:00007f60b047d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 270.726999][T12111] RAX: ffffffffffffffda RBX: 00007f60af7b6080 RCX: 00007f60af58e969 [ 270.727011][T12111] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 270.727021][T12111] RBP: 00007f60b047d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.727032][T12111] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 270.727042][T12111] R13: 0000000000000000 R14: 00007f60af7b6080 R15: 00007ffd653aaf68 [ 270.727074][T12111] [ 271.506499][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 271.516465][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 271.967903][T12213] syzkaller1: entered promiscuous mode [ 271.981915][T12213] syzkaller1: entered allmulticast mode [ 272.003513][T12213] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2071'. [ 272.025267][T12217] FAULT_INJECTION: forcing a failure. [ 272.025267][T12217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.053760][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.3.2073 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 272.053784][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.053796][T12217] Call Trace: [ 272.053803][T12217] [ 272.053811][T12217] dump_stack_lvl+0x189/0x250 [ 272.053839][T12217] ? __lock_acquire+0xaac/0xd20 [ 272.053865][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.053890][T12217] ? __pfx__printk+0x10/0x10 [ 272.053907][T12217] ? __might_fault+0xb0/0x130 [ 272.053939][T12217] should_fail_ex+0x414/0x560 [ 272.053971][T12217] _copy_from_user+0x2d/0xb0 [ 272.053994][T12217] get_timespec64+0x8e/0x1a0 [ 272.054016][T12217] ? __pfx_get_timespec64+0x10/0x10 [ 272.054048][T12217] __x64_sys_recvmmsg+0x143/0x240 [ 272.054070][T12217] ? rcu_is_watching+0x15/0xb0 [ 272.054097][T12217] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 272.054123][T12217] ? do_syscall_64+0xba/0x210 [ 272.054150][T12217] do_syscall_64+0xf6/0x210 [ 272.054174][T12217] ? clear_bhb_loop+0x45/0xa0 [ 272.054196][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.054212][T12217] RIP: 0033:0x7ff87938e969 [ 272.054227][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.054242][T12217] RSP: 002b:00007ff87a232038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 272.054260][T12217] RAX: ffffffffffffffda RBX: 00007ff8795b5fa0 RCX: 00007ff87938e969 [ 272.054272][T12217] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 272.054284][T12217] RBP: 00007ff87a232090 R08: 0000200000003700 R09: 0000000000000000 [ 272.054295][T12217] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 272.054305][T12217] R13: 0000000000000000 R14: 00007ff8795b5fa0 R15: 00007ffcbebad038 [ 272.054332][T12217] [ 272.263693][T12219] sctp: [Deprecated]: syz.0.2074 (pid 12219) Use of int in max_burst socket option. [ 272.263693][T12219] Use struct sctp_assoc_value instead [ 272.352781][T12222] FAULT_INJECTION: forcing a failure. [ 272.352781][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.380532][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.3.2075 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 272.380562][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.380574][T12222] Call Trace: [ 272.380582][T12222] [ 272.380590][T12222] dump_stack_lvl+0x189/0x250 [ 272.380622][T12222] ? __lock_acquire+0xaac/0xd20 [ 272.380650][T12222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.380678][T12222] ? __pfx__printk+0x10/0x10 [ 272.380698][T12222] ? __might_fault+0xb0/0x130 [ 272.380734][T12222] should_fail_ex+0x414/0x560 [ 272.380769][T12222] _copy_from_user+0x2d/0xb0 [ 272.380795][T12222] ___sys_recvmsg+0x12e/0x510 [ 272.380826][T12222] ? __pfx____sys_recvmsg+0x10/0x10 [ 272.380875][T12222] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 272.380913][T12222] do_recvmmsg+0x307/0x760 [ 272.380948][T12222] ? __pfx_do_recvmmsg+0x10/0x10 [ 272.380986][T12222] ? _copy_from_user+0x94/0xb0 [ 272.381028][T12222] __x64_sys_recvmmsg+0x1af/0x240 [ 272.381052][T12222] ? rcu_is_watching+0x15/0xb0 [ 272.381088][T12222] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 272.381117][T12222] ? do_syscall_64+0xba/0x210 [ 272.381150][T12222] do_syscall_64+0xf6/0x210 [ 272.381178][T12222] ? clear_bhb_loop+0x45/0xa0 [ 272.381203][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.381222][T12222] RIP: 0033:0x7ff87938e969 [ 272.381239][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.381256][T12222] RSP: 002b:00007ff87a232038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 272.381277][T12222] RAX: ffffffffffffffda RBX: 00007ff8795b5fa0 RCX: 00007ff87938e969 [ 272.381291][T12222] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 272.381305][T12222] RBP: 00007ff87a232090 R08: 0000200000003700 R09: 0000000000000000 [ 272.381318][T12222] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 272.381330][T12222] R13: 0000000000000000 R14: 00007ff8795b5fa0 R15: 00007ffcbebad038 [ 272.381361][T12222] [ 272.697731][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.706881][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.860873][T12236] delete_channel: no stack [ 273.180314][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2086'. [ 273.316691][T12257] FAULT_INJECTION: forcing a failure. [ 273.316691][T12257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.392500][T12257] CPU: 1 UID: 0 PID: 12257 Comm: syz.3.2090 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 273.392529][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 273.392540][T12257] Call Trace: [ 273.392548][T12257] [ 273.392556][T12257] dump_stack_lvl+0x189/0x250 [ 273.392586][T12257] ? __lock_acquire+0xaac/0xd20 [ 273.392615][T12257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.392649][T12257] ? __pfx__printk+0x10/0x10 [ 273.392667][T12257] ? __might_fault+0xb0/0x130 [ 273.392700][T12257] should_fail_ex+0x414/0x560 [ 273.392733][T12257] _copy_from_user+0x2d/0xb0 [ 273.392757][T12257] ___sys_recvmsg+0x12e/0x510 [ 273.392780][T12257] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.392808][T12257] ? __pfx____sys_recvmsg+0x10/0x10 [ 273.392855][T12257] ? __fget_files+0x3a0/0x420 [ 273.392889][T12257] do_recvmmsg+0x307/0x760 [ 273.392920][T12257] ? __pfx_do_recvmmsg+0x10/0x10 [ 273.392956][T12257] ? _copy_from_user+0x94/0xb0 [ 273.392994][T12257] __x64_sys_recvmmsg+0x1af/0x240 [ 273.393017][T12257] ? rcu_is_watching+0x15/0xb0 [ 273.393046][T12257] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 273.393074][T12257] ? do_syscall_64+0xba/0x210 [ 273.393104][T12257] do_syscall_64+0xf6/0x210 [ 273.393129][T12257] ? clear_bhb_loop+0x45/0xa0 [ 273.393152][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.393170][T12257] RIP: 0033:0x7ff87938e969 [ 273.393185][T12257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.393201][T12257] RSP: 002b:00007ff87a232038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 273.393221][T12257] RAX: ffffffffffffffda RBX: 00007ff8795b5fa0 RCX: 00007ff87938e969 [ 273.393237][T12257] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 273.393250][T12257] RBP: 00007ff87a232090 R08: 0000200000003700 R09: 0000000000000000 [ 273.393262][T12257] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 273.393273][T12257] R13: 0000000000000000 R14: 00007ff8795b5fa0 R15: 00007ffcbebad038 [ 273.393313][T12257] [ 273.713278][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 274.060562][T12275] FAULT_INJECTION: forcing a failure. [ 274.060562][T12275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.094920][T12275] CPU: 0 UID: 0 PID: 12275 Comm: syz.4.2092 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 274.094946][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.094957][T12275] Call Trace: [ 274.094964][T12275] [ 274.094971][T12275] dump_stack_lvl+0x189/0x250 [ 274.094999][T12275] ? __lock_acquire+0xaac/0xd20 [ 274.095026][T12275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.095050][T12275] ? __pfx__printk+0x10/0x10 [ 274.095068][T12275] ? __might_fault+0xb0/0x130 [ 274.095099][T12275] should_fail_ex+0x414/0x560 [ 274.095131][T12275] _copy_from_user+0x2d/0xb0 [ 274.095154][T12275] ___sys_recvmsg+0x12e/0x510 [ 274.095181][T12275] ? __pfx____sys_recvmsg+0x10/0x10 [ 274.095225][T12275] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 274.095257][T12275] do_recvmmsg+0x307/0x760 [ 274.095286][T12275] ? __pfx_do_recvmmsg+0x10/0x10 [ 274.095326][T12275] ? _copy_from_user+0x94/0xb0 [ 274.095362][T12275] __x64_sys_recvmmsg+0x1af/0x240 [ 274.095384][T12275] ? rcu_is_watching+0x15/0xb0 [ 274.095410][T12275] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 274.095436][T12275] ? do_syscall_64+0xba/0x210 [ 274.095464][T12275] do_syscall_64+0xf6/0x210 [ 274.095489][T12275] ? clear_bhb_loop+0x45/0xa0 [ 274.095510][T12275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.095527][T12275] RIP: 0033:0x7f825978e969 [ 274.095541][T12275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.095556][T12275] RSP: 002b:00007f82575f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 274.095576][T12275] RAX: ffffffffffffffda RBX: 00007f82599b5fa0 RCX: 00007f825978e969 [ 274.095588][T12275] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 274.095600][T12275] RBP: 00007f82575f6090 R08: 0000200000003700 R09: 0000000000000000 [ 274.095611][T12275] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 274.095622][T12275] R13: 0000000000000000 R14: 00007f82599b5fa0 R15: 00007fff2f3ca4d8 [ 274.095648][T12275] [ 274.829339][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 274.887555][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 275.284629][T12310] FAULT_INJECTION: forcing a failure. [ 275.284629][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 275.336832][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.2.2103 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 275.336862][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.336874][T12310] Call Trace: [ 275.336881][T12310] [ 275.336889][T12310] dump_stack_lvl+0x189/0x250 [ 275.336928][T12310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.336954][T12310] ? __pfx__printk+0x10/0x10 [ 275.336975][T12310] ? __pfx___might_resched+0x10/0x10 [ 275.336992][T12310] ? fs_reclaim_acquire+0x7d/0x100 [ 275.337023][T12310] should_fail_ex+0x414/0x560 [ 275.337057][T12310] should_failslab+0xa8/0x100 [ 275.337082][T12310] __kmalloc_noprof+0xcb/0x4f0 [ 275.337104][T12310] ? iovec_from_user+0x87/0x250 [ 275.337131][T12310] iovec_from_user+0x87/0x250 [ 275.337159][T12310] __import_iovec+0x163/0x7f0 [ 275.337192][T12310] import_iovec+0x74/0xa0 [ 275.337219][T12310] ___sys_recvmsg+0x43a/0x510 [ 275.337258][T12310] ? __pfx____sys_recvmsg+0x10/0x10 [ 275.337305][T12310] ? __fget_files+0x3a0/0x420 [ 275.337340][T12310] do_recvmmsg+0x307/0x760 [ 275.337372][T12310] ? __pfx_do_recvmmsg+0x10/0x10 [ 275.337407][T12310] ? _copy_from_user+0x94/0xb0 [ 275.337446][T12310] __x64_sys_recvmmsg+0x1af/0x240 [ 275.337469][T12310] ? rcu_is_watching+0x15/0xb0 [ 275.337497][T12310] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 275.337524][T12310] ? do_syscall_64+0xba/0x210 [ 275.337555][T12310] do_syscall_64+0xf6/0x210 [ 275.337581][T12310] ? clear_bhb_loop+0x45/0xa0 [ 275.337603][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.337621][T12310] RIP: 0033:0x7fcc99d8e969 [ 275.337636][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.337652][T12310] RSP: 002b:00007fcc9ab2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 275.337671][T12310] RAX: ffffffffffffffda RBX: 00007fcc99fb5fa0 RCX: 00007fcc99d8e969 [ 275.337684][T12310] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 275.337697][T12310] RBP: 00007fcc9ab2f090 R08: 0000200000003700 R09: 0000000000000000 [ 275.337709][T12310] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 275.337720][T12310] R13: 0000000000000000 R14: 00007fcc99fb5fa0 R15: 00007ffe554e0fb8 [ 275.337749][T12310] [ 275.858355][T12326] delete_channel: no stack [ 276.000422][T12334] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2110'. [ 276.046880][T12334] netlink: 'syz.2.2110': attribute type 13 has an invalid length. [ 276.064773][T12334] netlink: 'syz.2.2110': attribute type 12 has an invalid length. [ 276.685236][T12377] FAULT_INJECTION: forcing a failure. [ 276.685236][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.736804][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.1.2121 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 276.736832][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.736843][T12377] Call Trace: [ 276.736850][T12377] [ 276.736857][T12377] dump_stack_lvl+0x189/0x250 [ 276.736891][T12377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.736916][T12377] ? __pfx__printk+0x10/0x10 [ 276.736945][T12377] should_fail_ex+0x414/0x560 [ 276.736977][T12377] _copy_to_user+0x31/0xb0 [ 276.737002][T12377] simple_read_from_buffer+0xe1/0x170 [ 276.737028][T12377] proc_fail_nth_read+0x1df/0x250 [ 276.737056][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.737083][T12377] ? rw_verify_area+0x258/0x650 [ 276.737101][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.737134][T12377] vfs_read+0x1fd/0x980 [ 276.737158][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 276.737183][T12377] ? __pfx_vfs_read+0x10/0x10 [ 276.737204][T12377] ? __fget_files+0x2a/0x420 [ 276.737247][T12377] ? __fget_files+0x3a0/0x420 [ 276.737282][T12377] ? __fget_files+0x2a/0x420 [ 276.737310][T12377] ksys_read+0x145/0x250 [ 276.737332][T12377] ? __pfx_ksys_read+0x10/0x10 [ 276.737354][T12377] ? do_syscall_64+0xba/0x210 [ 276.737383][T12377] do_syscall_64+0xf6/0x210 [ 276.737408][T12377] ? clear_bhb_loop+0x45/0xa0 [ 276.737430][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.737446][T12377] RIP: 0033:0x7f60af58d37c [ 276.737462][T12377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 276.737480][T12377] RSP: 002b:00007f60b049e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.737498][T12377] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58d37c [ 276.737510][T12377] RDX: 000000000000000f RSI: 00007f60b049e0a0 RDI: 0000000000000005 [ 276.737521][T12377] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.737531][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.737541][T12377] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 276.737568][T12377] [ 277.381144][T12403] netlink: 'syz.1.2128': attribute type 2 has an invalid length. [ 277.597506][T12409] wireguard0: entered promiscuous mode [ 277.604429][T12409] wireguard0: entered allmulticast mode [ 278.536146][T12444] __nla_validate_parse: 5 callbacks suppressed [ 278.536188][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 279.021492][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 279.032447][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 279.502556][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 279.624631][T12484] FAULT_INJECTION: forcing a failure. [ 279.624631][T12484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.651560][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.3.2149 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 279.651591][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 279.651604][T12484] Call Trace: [ 279.651612][T12484] [ 279.651621][T12484] dump_stack_lvl+0x189/0x250 [ 279.651652][T12484] ? __lock_acquire+0xaac/0xd20 [ 279.651684][T12484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.651713][T12484] ? __pfx__printk+0x10/0x10 [ 279.651734][T12484] ? __might_fault+0xb0/0x130 [ 279.651772][T12484] should_fail_ex+0x414/0x560 [ 279.651813][T12484] _copy_from_user+0x2d/0xb0 [ 279.651840][T12484] ___sys_recvmsg+0x12e/0x510 [ 279.651872][T12484] ? __pfx____sys_recvmsg+0x10/0x10 [ 279.651924][T12484] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 279.651969][T12484] do_recvmmsg+0x307/0x760 [ 279.652005][T12484] ? __pfx_do_recvmmsg+0x10/0x10 [ 279.652044][T12484] ? _copy_from_user+0x94/0xb0 [ 279.652086][T12484] __x64_sys_recvmmsg+0x1af/0x240 [ 279.652111][T12484] ? rcu_is_watching+0x15/0xb0 [ 279.652143][T12484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 279.652174][T12484] ? do_syscall_64+0xba/0x210 [ 279.652207][T12484] do_syscall_64+0xf6/0x210 [ 279.652237][T12484] ? clear_bhb_loop+0x45/0xa0 [ 279.652262][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.652282][T12484] RIP: 0033:0x7ff87938e969 [ 279.652300][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.652318][T12484] RSP: 002b:00007ff87a232038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 279.652339][T12484] RAX: ffffffffffffffda RBX: 00007ff8795b5fa0 RCX: 00007ff87938e969 [ 279.652354][T12484] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 279.652368][T12484] RBP: 00007ff87a232090 R08: 0000200000003700 R09: 0000000000000000 [ 279.652381][T12484] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 279.652393][T12484] R13: 0000000000000000 R14: 00007ff8795b5fa0 R15: 00007ffcbebad038 [ 279.652425][T12484] [ 280.329825][T12499] hsr0: left allmulticast mode [ 280.339115][T12499] hsr_slave_0: left allmulticast mode [ 280.359339][T12499] hsr_slave_1: left allmulticast mode [ 280.368594][T12499] hsr0: left promiscuous mode [ 280.376348][T12499] bridge0: port 1(hsr0) entered disabled state [ 280.380508][T12504] xt_CT: No such helper "snmp" [ 281.354302][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 281.718762][T12558] syzkaller1: entered promiscuous mode [ 281.726944][T12558] syzkaller1: entered allmulticast mode [ 281.786699][T12562] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 281.835931][T12558] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 281.860339][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'. [ 281.938757][T12570] syz.1.2181 (12570) used obsolete PPPIOCDETACH ioctl [ 282.160697][T12584] netlink: 'syz.1.2187': attribute type 2 has an invalid length. [ 282.347323][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 282.383310][T12596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2188'. [ 283.091011][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2197'. [ 283.130194][T12618] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 283.697791][T12643] FAULT_INJECTION: forcing a failure. [ 283.697791][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.721685][T12643] CPU: 0 UID: 0 PID: 12643 Comm: syz.0.2208 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 283.721713][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 283.721725][T12643] Call Trace: [ 283.721732][T12643] [ 283.721741][T12643] dump_stack_lvl+0x189/0x250 [ 283.721774][T12643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.721806][T12643] ? __pfx__printk+0x10/0x10 [ 283.721838][T12643] should_fail_ex+0x414/0x560 [ 283.721877][T12643] _copy_to_iter+0x575/0x15a0 [ 283.721909][T12643] ? __pfx__copy_to_iter+0x10/0x10 [ 283.721928][T12643] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 283.721959][T12643] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 283.721991][T12643] __skb_datagram_iter+0x100/0x960 [ 283.722016][T12643] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 283.722048][T12643] skb_copy_datagram_iter+0xc5/0x230 [ 283.722076][T12643] netlink_recvmsg+0x2c9/0xe00 [ 283.722105][T12643] ? __pfx_netlink_recvmsg+0x10/0x10 [ 283.722128][T12643] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.722159][T12643] ? aa_sock_msg_perm+0x94/0x160 [ 283.722179][T12643] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 283.722198][T12643] ? security_socket_recvmsg+0x7e/0x2e0 [ 283.722221][T12643] ? __pfx_netlink_recvmsg+0x10/0x10 [ 283.722240][T12643] sock_recvmsg+0x229/0x270 [ 283.722270][T12643] ____sys_recvmsg+0x1c9/0x460 [ 283.722302][T12643] ? __pfx_____sys_recvmsg+0x10/0x10 [ 283.722339][T12643] ? import_iovec+0x74/0xa0 [ 283.722367][T12643] ___sys_recvmsg+0x1b5/0x510 [ 283.722394][T12643] ? __pfx____sys_recvmsg+0x10/0x10 [ 283.722441][T12643] ? __fget_files+0x3a0/0x420 [ 283.722475][T12643] do_recvmmsg+0x307/0x760 [ 283.722506][T12643] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.722542][T12643] ? _copy_from_user+0x94/0xb0 [ 283.722592][T12643] __x64_sys_recvmmsg+0x1af/0x240 [ 283.722613][T12643] ? rcu_is_watching+0x15/0xb0 [ 283.722640][T12643] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 283.722667][T12643] ? do_syscall_64+0xba/0x210 [ 283.722695][T12643] do_syscall_64+0xf6/0x210 [ 283.722719][T12643] ? clear_bhb_loop+0x45/0xa0 [ 283.722740][T12643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.722756][T12643] RIP: 0033:0x7fbf3198e969 [ 283.722771][T12643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.722786][T12643] RSP: 002b:00007fbf2f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 283.722805][T12643] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198e969 [ 283.722818][T12643] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 283.722829][T12643] RBP: 00007fbf2f7f6090 R08: 0000200000003700 R09: 0000000000000000 [ 283.722841][T12643] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 283.722851][T12643] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 283.722885][T12643] [ 284.036129][T12640] wg2: entered promiscuous mode [ 284.041024][T12640] wg2: entered allmulticast mode [ 284.070198][T12640] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2206'. [ 284.472831][T12662] ip6gre1: entered promiscuous mode [ 284.685311][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 284.745142][T12678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2219'. [ 284.817124][T12682] netlink: 'syz.1.2221': attribute type 16 has an invalid length. [ 284.836172][T12682] netlink: 'syz.1.2221': attribute type 17 has an invalid length. [ 284.876691][T12682] netlink: 'syz.1.2221': attribute type 9 has an invalid length. [ 284.890229][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 284.930925][T12682] macvlan2: entered promiscuous mode [ 284.963350][T12682] hsr0: entered promiscuous mode [ 284.972014][T12682] macvlan2: entered allmulticast mode [ 284.982410][T12682] hsr0: entered allmulticast mode [ 284.994273][T12682] hsr_slave_0: entered allmulticast mode [ 285.013299][T12682] hsr_slave_1: entered allmulticast mode [ 285.293667][T12703] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 285.319487][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2228'. [ 285.840689][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 285.861919][T12733] gretap0: entered allmulticast mode [ 285.870525][T12733] netlink: 'syz.0.2240': attribute type 8 has an invalid length. [ 285.887373][T12736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2241'. [ 285.949236][ T7146] tipc: Subscription rejected, illegal request [ 285.985061][T12742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2241'. [ 286.026761][T12742] netlink: 'syz.1.2241': attribute type 21 has an invalid length. [ 286.170533][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 286.204048][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 286.572459][T12771] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 288.584439][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.598316][T12844] atomic_op ffff88807d147198 conn xmit_atomic 0000000000000000 [ 288.623030][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.231637][T12866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.309798][T12866] wireguard0: entered promiscuous mode [ 289.872182][T12887] FAULT_INJECTION: forcing a failure. [ 289.872182][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.925623][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.1.2291 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 289.925651][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 289.925662][T12887] Call Trace: [ 289.925671][T12887] [ 289.925679][T12887] dump_stack_lvl+0x189/0x250 [ 289.925710][T12887] ? __lock_acquire+0xaac/0xd20 [ 289.925738][T12887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.925764][T12887] ? __pfx__printk+0x10/0x10 [ 289.925783][T12887] ? __might_fault+0xb0/0x130 [ 289.925818][T12887] should_fail_ex+0x414/0x560 [ 289.925850][T12887] _copy_from_user+0x2d/0xb0 [ 289.925875][T12887] ___sys_recvmsg+0x12e/0x510 [ 289.925904][T12887] ? __pfx____sys_recvmsg+0x10/0x10 [ 289.925951][T12887] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 289.925986][T12887] do_recvmmsg+0x307/0x760 [ 289.926018][T12887] ? __pfx_do_recvmmsg+0x10/0x10 [ 289.926054][T12887] ? _copy_from_user+0x94/0xb0 [ 289.926092][T12887] __x64_sys_recvmmsg+0x1af/0x240 [ 289.926115][T12887] ? rcu_is_watching+0x15/0xb0 [ 289.926144][T12887] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 289.926171][T12887] ? do_syscall_64+0xba/0x210 [ 289.926202][T12887] do_syscall_64+0xf6/0x210 [ 289.926228][T12887] ? clear_bhb_loop+0x45/0xa0 [ 289.926251][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.926269][T12887] RIP: 0033:0x7f60af58e969 [ 289.926284][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.926300][T12887] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 289.926320][T12887] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 289.926333][T12887] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 289.926345][T12887] RBP: 00007f60b049e090 R08: 0000200000003700 R09: 0000000000000000 [ 289.926358][T12887] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 289.926370][T12887] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 289.926408][T12887] [ 291.261169][T12931] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 291.360960][T12931] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 291.380580][ T7139] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.383887][T12931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.497305][T12931] veth3: entered promiscuous mode [ 291.509713][T12931] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 291.515944][ T7146] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.536767][T12943] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 291.579954][T12945] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 291.593890][T12945] __nla_validate_parse: 6 callbacks suppressed [ 291.593904][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2307'. [ 292.418979][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2320'. [ 292.675424][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 292.745038][T12997] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 292.768238][T12997] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 292.876228][T12999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 293.320602][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 293.452748][T13030] 8021q: VLANs not supported on ip_vti0 [ 293.490077][T13030] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2333'. [ 293.819566][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2334'. [ 294.613390][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 294.627482][T13076] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2344'. [ 294.656452][T13076] gretap0: entered promiscuous mode [ 294.836684][T13082] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 294.940665][T13086] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2347'. [ 294.974835][T13086] gretap0: entered promiscuous mode [ 294.980097][T13086] gretap0: left allmulticast mode [ 295.310064][T13107] netlink: 'syz.2.2350': attribute type 2 has an invalid length. [ 295.388167][T13107] : entered promiscuous mode [ 295.771656][T13126] tipc: Enabled bearer , priority 10 [ 296.109106][T13140] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2359'. [ 296.145536][T13140] gretap0: entered promiscuous mode [ 296.791166][T13170] FAULT_INJECTION: forcing a failure. [ 296.791166][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 296.831989][T13170] CPU: 0 UID: 0 PID: 13170 Comm: syz.1.2368 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 296.832016][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.832027][T13170] Call Trace: [ 296.832034][T13170] [ 296.832041][T13170] dump_stack_lvl+0x189/0x250 [ 296.832071][T13170] ? br_fdb_external_learn_add+0x534/0x680 [ 296.832098][T13170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.832123][T13170] ? __pfx__printk+0x10/0x10 [ 296.832154][T13170] should_fail_ex+0x414/0x560 [ 296.832185][T13170] should_failslab+0xa8/0x100 [ 296.832210][T13170] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 296.832233][T13170] ? __alloc_skb+0x112/0x2d0 [ 296.832255][T13170] __alloc_skb+0x112/0x2d0 [ 296.832277][T13170] rtnl_fdb_notify+0x9b/0x1b0 [ 296.832300][T13170] rtnl_fdb_add+0x84c/0xa50 [ 296.832327][T13170] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 296.832373][T13170] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 296.832390][T13170] rtnetlink_rcv_msg+0x779/0xb70 [ 296.832406][T13170] ? kasan_save_track+0x4f/0x80 [ 296.832426][T13170] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 296.832442][T13170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.832460][T13170] ? __lock_acquire+0xaac/0xd20 [ 296.832496][T13170] netlink_rcv_skb+0x219/0x490 [ 296.832516][T13170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.832537][T13170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.832574][T13170] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.832591][T13170] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.832614][T13170] netlink_unicast+0x758/0x8d0 [ 296.832656][T13170] netlink_sendmsg+0x805/0xb30 [ 296.832683][T13170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.832705][T13170] ? aa_sock_msg_perm+0x94/0x160 [ 296.832724][T13170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.832743][T13170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.832762][T13170] __sock_sendmsg+0x219/0x270 [ 296.832790][T13170] ____sys_sendmsg+0x505/0x830 [ 296.832817][T13170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.832847][T13170] ? import_iovec+0x74/0xa0 [ 296.832872][T13170] ___sys_sendmsg+0x21f/0x2a0 [ 296.832895][T13170] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.832951][T13170] ? __fget_files+0x2a/0x420 [ 296.832972][T13170] ? __fget_files+0x3a0/0x420 [ 296.833004][T13170] __x64_sys_sendmsg+0x19b/0x260 [ 296.833027][T13170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.833064][T13170] ? do_syscall_64+0xba/0x210 [ 296.833092][T13170] do_syscall_64+0xf6/0x210 [ 296.833117][T13170] ? clear_bhb_loop+0x45/0xa0 [ 296.833137][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.833154][T13170] RIP: 0033:0x7f60af58e969 [ 296.833168][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.833184][T13170] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.833202][T13170] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 296.833214][T13170] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 296.833225][T13170] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 296.833235][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.833245][T13170] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 296.833273][T13170] [ 297.423756][T13178] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.497497][T13178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.506998][T13178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.515953][T13178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.531035][T13183] gretap0: refused to change device tx_queue_len [ 297.565059][T13184] netlink: 'syz.2.2370': attribute type 3 has an invalid length. [ 297.586423][T13183] __nla_validate_parse: 1 callbacks suppressed [ 297.586441][T13183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 297.594130][T13184] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2370'. [ 297.810726][T13198] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2373'. [ 298.247736][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 298.297174][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 298.657812][T13243] FAULT_INJECTION: forcing a failure. [ 298.657812][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.711926][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.4.2388 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 298.711953][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 298.711964][T13243] Call Trace: [ 298.711971][T13243] [ 298.711978][T13243] dump_stack_lvl+0x189/0x250 [ 298.712011][T13243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.712035][T13243] ? __pfx__printk+0x10/0x10 [ 298.712064][T13243] should_fail_ex+0x414/0x560 [ 298.712094][T13243] _copy_to_user+0x31/0xb0 [ 298.712118][T13243] simple_read_from_buffer+0xe1/0x170 [ 298.712144][T13243] proc_fail_nth_read+0x1df/0x250 [ 298.712171][T13243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.712201][T13243] ? rw_verify_area+0x258/0x650 [ 298.712219][T13243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.712244][T13243] vfs_read+0x1fd/0x980 [ 298.712268][T13243] ? __pfx___mutex_lock+0x10/0x10 [ 298.712293][T13243] ? __pfx_vfs_read+0x10/0x10 [ 298.712313][T13243] ? __fget_files+0x2a/0x420 [ 298.712339][T13243] ? __fget_files+0x3a0/0x420 [ 298.712359][T13243] ? __fget_files+0x2a/0x420 [ 298.712388][T13243] ksys_read+0x145/0x250 [ 298.712404][T13243] ? rcu_is_watching+0x15/0xb0 [ 298.712431][T13243] ? __pfx_ksys_read+0x10/0x10 [ 298.712453][T13243] ? do_syscall_64+0xba/0x210 [ 298.712480][T13243] do_syscall_64+0xf6/0x210 [ 298.712504][T13243] ? clear_bhb_loop+0x45/0xa0 [ 298.712526][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.712542][T13243] RIP: 0033:0x7f825978d37c [ 298.712557][T13243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.712589][T13243] RSP: 002b:00007f82575f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.712608][T13243] RAX: ffffffffffffffda RBX: 00007f82599b5fa0 RCX: 00007f825978d37c [ 298.712621][T13243] RDX: 000000000000000f RSI: 00007f82575f60a0 RDI: 0000000000000004 [ 298.712632][T13243] RBP: 00007f82575f6090 R08: 0000000000000000 R09: 0000000000000000 [ 298.712654][T13243] R10: 000000004400c800 R11: 0000000000000246 R12: 0000000000000001 [ 298.712664][T13243] R13: 0000000000000000 R14: 00007f82599b5fa0 R15: 00007fff2f3ca4d8 [ 298.712690][T13243] [ 299.002160][T13245] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2387'. [ 299.036386][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 299.091273][T13256] bridge_slave_1: left allmulticast mode [ 299.097488][T13256] bridge_slave_1: left promiscuous mode [ 299.104053][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.134715][T13256] bridge_slave_0: left allmulticast mode [ 299.158659][T13256] bridge_slave_0: left promiscuous mode [ 299.164754][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.602349][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 299.740540][T13292] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 299.754954][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 299.761930][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 299.775597][T13290] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 300.108541][T13309] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 301.583652][T13373] netlink: 'syz.4.2432': attribute type 23 has an invalid length. [ 302.340364][T13396] IPv6: Can't replace route, no match found [ 303.027465][T13413] __nla_validate_parse: 5 callbacks suppressed [ 303.027484][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 303.037376][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 303.060774][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 303.808534][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 303.829412][T13429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 304.681320][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 305.209579][T13495] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2473'. [ 305.240621][T13498] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 305.281920][T13498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2474'. [ 305.324010][T13498] macvtap1: entered promiscuous mode [ 305.329348][T13498] vlan0: entered promiscuous mode [ 305.352284][T13498] macvtap1: entered allmulticast mode [ 305.357790][T13498] vlan0: entered allmulticast mode [ 305.372756][T13498] veth0_vlan: entered allmulticast mode [ 305.500424][T13498] vlan0: left allmulticast mode [ 305.510059][T13498] veth0_vlan: left allmulticast mode [ 305.523112][T13498] vlan0: left promiscuous mode [ 305.759928][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2476'. [ 305.806626][T13505] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 305.991925][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2478'. [ 306.126342][T13514] IPVS: Error connecting to the multicast addr [ 307.360372][T13544] IPv6: sit1: Disabled Multicast RS [ 307.726548][T13561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 307.793180][T13564] tipc: Enabling of bearer rejected, failed to enable media [ 307.959607][T13570] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 308.064791][T13577] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0 [ 308.079565][T13577] __nla_validate_parse: 4 callbacks suppressed [ 308.079582][T13577] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2498'. [ 308.278880][T13585] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2501'. [ 308.288858][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 308.382050][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 308.447241][T13588] netlink: 'syz.0.2502': attribute type 27 has an invalid length. [ 308.469430][T13588] netlink: 'syz.0.2502': attribute type 11 has an invalid length. [ 308.489069][T13588] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2502'. [ 308.514719][T13588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 309.412445][T13610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2508'. [ 309.477136][T13610] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 309.499845][T13610] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 309.520115][T13610] netlink: 'syz.1.2508': attribute type 2 has an invalid length. [ 309.542000][T13610] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 309.570118][T13610] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 309.917171][T13631] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 310.037079][T13637] xt_hashlimit: size too large, truncated to 1048576 [ 310.056251][T13636] xt_hashlimit: size too large, truncated to 1048576 [ 310.176289][T13632] team0 (unregistering): left allmulticast mode [ 310.200949][T13632] team_slave_0: left allmulticast mode [ 310.228266][T13632] team_slave_1: left allmulticast mode [ 310.247272][T13632] team0 (unregistering): left promiscuous mode [ 310.266267][T13632] team_slave_0: left promiscuous mode [ 310.280762][T13632] team_slave_1: left promiscuous mode [ 310.299312][T13632] bridge0: port 4(team0) entered disabled state [ 310.336592][T13632] team0 (unregistering): Port device team_slave_0 removed [ 310.357238][T13632] team0 (unregistering): Port device team_slave_1 removed [ 310.435583][T13635] bond0: (slave bond_slave_0): Releasing backup interface [ 310.446526][T13635] bond0: (slave bond_slave_1): Releasing backup interface [ 310.458969][T13635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.469650][T13635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.477927][T13635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.495563][T13635] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 310.503268][T13635] batman_adv: batadv0: Removing interface: ip6gretap1 [ 310.884883][T13659] netlink: 'syz.4.2524': attribute type 10 has an invalid length. [ 310.940328][T13659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.971504][T13659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 310.998636][ T7146] bond0: (slave batadv0): interface is now down [ 311.039215][ T7139] bond0: (slave batadv0): interface is now down [ 311.050126][ T7139] bond0: now running without any active interface! [ 311.155164][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 311.817767][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2536'. [ 311.839585][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2536'. [ 311.954747][T13707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.001065][T13709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2539'. [ 312.095940][T13709] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.153443][T13709] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.225156][T13709] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.300549][T13721] FAULT_INJECTION: forcing a failure. [ 312.300549][T13721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.313898][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.0.2543 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 312.313922][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 312.313936][T13721] Call Trace: [ 312.313945][T13721] [ 312.313953][T13721] dump_stack_lvl+0x189/0x250 [ 312.313981][T13721] ? __lock_acquire+0xaac/0xd20 [ 312.314011][T13721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.314035][T13721] ? __pfx__printk+0x10/0x10 [ 312.314053][T13721] ? __might_fault+0xb0/0x130 [ 312.314084][T13721] should_fail_ex+0x414/0x560 [ 312.314115][T13721] _copy_from_iter+0x1db/0x15a0 [ 312.314142][T13721] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 312.314160][T13721] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 312.314183][T13721] ? __pfx__copy_from_iter+0x10/0x10 [ 312.314204][T13721] ? __build_skb_around+0x257/0x3e0 [ 312.314227][T13721] ? skb_put+0x11b/0x210 [ 312.314249][T13721] pfkey_sendmsg+0x230/0x1090 [ 312.314271][T13721] ? __pfx___might_resched+0x10/0x10 [ 312.314294][T13721] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 312.314316][T13721] ? aa_sk_perm+0x81e/0x950 [ 312.314347][T13721] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.314371][T13721] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 312.314397][T13721] ? aa_sock_msg_perm+0x94/0x160 [ 312.314415][T13721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.314434][T13721] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 312.314451][T13721] __sock_sendmsg+0x219/0x270 [ 312.314486][T13721] ____sys_sendmsg+0x505/0x830 [ 312.314529][T13721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.314560][T13721] ? import_iovec+0x74/0xa0 [ 312.314587][T13721] ___sys_sendmsg+0x21f/0x2a0 [ 312.314611][T13721] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.314666][T13721] ? __fget_files+0x2a/0x420 [ 312.314689][T13721] ? __fget_files+0x3a0/0x420 [ 312.314722][T13721] __x64_sys_sendmsg+0x19b/0x260 [ 312.314746][T13721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.314784][T13721] ? do_syscall_64+0xba/0x210 [ 312.314814][T13721] do_syscall_64+0xf6/0x210 [ 312.314840][T13721] ? clear_bhb_loop+0x45/0xa0 [ 312.314862][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.314879][T13721] RIP: 0033:0x7fbf3198e969 [ 312.314895][T13721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.314911][T13721] RSP: 002b:00007fbf2f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.314930][T13721] RAX: ffffffffffffffda RBX: 00007fbf31bb5fa0 RCX: 00007fbf3198e969 [ 312.314943][T13721] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 312.314955][T13721] RBP: 00007fbf2f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.314966][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.314977][T13721] R13: 0000000000000000 R14: 00007fbf31bb5fa0 R15: 00007ffe1ed24158 [ 312.315005][T13721] [ 312.321507][T13718] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 312.378042][T13719] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 312.384741][T13722] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 312.631559][T13709] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.654811][T13718] team0: Port device syz_tun added [ 312.710425][T13709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.767327][T13709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.793927][T13709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.854738][T13709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.127174][T13743] __nla_validate_parse: 5 callbacks suppressed [ 313.127194][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2550'. [ 313.447756][T13750] netlink: 'syz.4.2552': attribute type 3 has an invalid length. [ 313.464998][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2552'. [ 313.501457][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 313.504028][T13750] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2552'. [ 313.510802][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 313.646605][T13761] FAULT_INJECTION: forcing a failure. [ 313.646605][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 313.680596][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.1.2557 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 313.680621][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 313.680631][T13761] Call Trace: [ 313.680638][T13761] [ 313.680645][T13761] dump_stack_lvl+0x189/0x250 [ 313.680679][T13761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.680705][T13761] ? __pfx__printk+0x10/0x10 [ 313.680729][T13761] ? __pfx___might_resched+0x10/0x10 [ 313.680746][T13761] ? fs_reclaim_acquire+0x7d/0x100 [ 313.680776][T13761] should_fail_ex+0x414/0x560 [ 313.680808][T13761] should_failslab+0xa8/0x100 [ 313.680833][T13761] kmem_cache_alloc_noprof+0x73/0x3c0 [ 313.680853][T13761] ? skb_clone+0x212/0x3a0 [ 313.680878][T13761] skb_clone+0x212/0x3a0 [ 313.680904][T13761] pfkey_sendmsg+0x44b/0x1090 [ 313.680936][T13761] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 313.680977][T13761] ? aa_sock_msg_perm+0x94/0x160 [ 313.680997][T13761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.681017][T13761] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 313.681052][T13761] __sock_sendmsg+0x219/0x270 [ 313.681083][T13761] ____sys_sendmsg+0x505/0x830 [ 313.681110][T13761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.681141][T13761] ? import_iovec+0x74/0xa0 [ 313.681168][T13761] ___sys_sendmsg+0x21f/0x2a0 [ 313.681193][T13761] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.681252][T13761] ? __fget_files+0x2a/0x420 [ 313.681276][T13761] ? __fget_files+0x3a0/0x420 [ 313.681310][T13761] __x64_sys_sendmsg+0x19b/0x260 [ 313.681335][T13761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.681375][T13761] ? do_syscall_64+0xba/0x210 [ 313.681415][T13761] do_syscall_64+0xf6/0x210 [ 313.681442][T13761] ? clear_bhb_loop+0x45/0xa0 [ 313.681465][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.681484][T13761] RIP: 0033:0x7f60af58e969 [ 313.681500][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.681516][T13761] RSP: 002b:00007f60b049e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.681535][T13761] RAX: ffffffffffffffda RBX: 00007f60af7b5fa0 RCX: 00007f60af58e969 [ 313.681549][T13761] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 313.681561][T13761] RBP: 00007f60b049e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.681572][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.681583][T13761] R13: 0000000000000000 R14: 00007f60af7b5fa0 R15: 00007ffd653aaf68 [ 313.681612][T13761] [ 313.934882][T13763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2556'. [ 313.949938][T13763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2556'. [ 314.074519][T13769] Cannot find del_set index 0 as target [ 314.107584][T13769] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 314.462537][T13781] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 314.756259][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2568'. [ 314.786938][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 314.849921][T13799] tipc: Enabling of bearer rejected, media not registered [ 315.034237][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 315.432580][T13818] netlink: 'syz.2.2575': attribute type 10 has an invalid length. [ 315.453264][T13818] veth0_vlan: left promiscuous mode [ 315.470941][T13818] veth0_vlan: entered promiscuous mode [ 315.487787][T13818] veth0_vlan: entered allmulticast mode [ 315.516942][T13818] bridge0: port 4(veth0_vlan) entered blocking state [ 315.565019][T13818] bridge0: port 4(veth0_vlan) entered disabled state [ 315.577595][T13818] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 315.770303][T13834] netlink: 'syz.0.2578': attribute type 2 has an invalid length. [ 315.848475][T13841] lo speed is unknown, defaulting to 1000 [ 315.872153][T13841] lo speed is unknown, defaulting to 1000 [ 315.905492][T13841] lo speed is unknown, defaulting to 1000 [ 315.946791][T13841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.991278][T13841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 316.065925][T13841] lo speed is unknown, defaulting to 1000 [ 316.084249][T13841] lo speed is unknown, defaulting to 1000 [ 316.105307][T13841] lo speed is unknown, defaulting to 1000 [ 316.123139][T13841] lo speed is unknown, defaulting to 1000 [ 316.135211][T13841] lo speed is unknown, defaulting to 1000 [ 316.385058][T13853] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 316.462976][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 316.664459][T13859] vxcan3: entered allmulticast mode [ 317.381397][T13884] bond0: (slave bond_slave_0): Releasing backup interface [ 317.403708][T13884] bond0: (slave bond_slave_1): Releasing backup interface [ 317.474535][T13884] team0: Port device team_slave_0 removed [ 317.493556][T13884] team0: Port device team_slave_1 removed [ 317.499856][T13884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.517885][T13884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.529315][T13884] bond1: (slave ip6gretap1): Removing an active aggregator [ 317.537998][T13884] bond1: (slave ip6gretap1): Releasing backup interface [ 317.545044][T13884] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 2e:4f:7d:b3:9b:2f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 317.567844][T13884] bond1: (slave veth3): Releasing backup interface [ 317.578883][T13877] batadv_slave_0: entered promiscuous mode [ 317.597938][T13876] batadv_slave_0: left promiscuous mode [ 318.067792][T13913] netlink: 'syz.0.2605': attribute type 12 has an invalid length. [ 318.309684][T13920] netlink: 'syz.2.2607': attribute type 39 has an invalid length. [ 318.499454][T13932] __nla_validate_parse: 9 callbacks suppressed [ 318.499472][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 319.149775][T13953] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 319.161081][T13953] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2618'. [ 319.185574][ T30] audit: type=1804 audit(1746118780.906:3): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2619" name="memory.events" dev="tmpfs" ino=2664 res=1 errno=0 [ 319.221048][T13953] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2618'. [ 319.250164][ T30] audit: type=1800 audit(1746118780.906:4): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2619" name="memory.events" dev="tmpfs" ino=2664 res=0 errno=0 [ 319.534535][T13962] netlink: 'syz.2.2622': attribute type 66 has an invalid length. [ 319.576708][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'. [ 319.631874][T13977] xt_TCPMSS: Only works on TCP SYN packets [ 319.998399][T14004] ------------[ cut here ]------------ [ 320.004179][T14004] memcpy: detected field-spanning write (size 2177) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 320.052674][T14004] WARNING: CPU: 1 PID: 14004 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 320.062779][T14004] Modules linked in: [ 320.066706][T14004] CPU: 1 UID: 0 PID: 14004 Comm: syz.0.2631 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 320.079800][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.090443][T14004] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 320.096566][T14004] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 320.116793][T14004] RSP: 0018:ffffc90003ddf920 EFLAGS: 00010246 [ 320.123927][T14004] RAX: aa969638b4209e00 RBX: ffff88806f554450 RCX: 0000000000080000 [ 320.132639][T14004] RDX: ffffc9000d3fa000 RSI: 0000000000005d50 RDI: 0000000000005d51 [ 320.140939][T14004] RBP: 0000000000000006 R08: 0000000000000003 R09: 0000000000000004 [ 320.149134][T14004] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000881 [ 320.157199][T14004] R13: 1ffff920007bbf4e R14: ffffc90003ddfa84 R15: 0000000000000881 [ 320.165220][T14004] FS: 00007fbf2f7d56c0(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 320.174220][T14004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.180831][T14004] CR2: 00002000001bf000 CR3: 00000000333b4000 CR4: 00000000003526f0 [ 320.188880][T14004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.196924][T14004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.205029][T14004] Call Trace: [ 320.208341][T14004] [ 320.211288][T14004] ip6_route_info_create+0x5cc/0xa70 [ 320.216621][T14004] ip6_route_add+0x29/0x2f0 [ 320.221145][T14004] ? ipv6_route_ioctl+0x313/0x480 [ 320.225201][T14007] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 320.226663][T14004] ipv6_route_ioctl+0x35c/0x480 [ 320.241228][T14004] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 320.246711][T14004] inet6_ioctl+0x219/0x280 [ 320.251174][T14004] ? __pfx_inet6_ioctl+0x10/0x10 [ 320.256169][T14004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.262205][T14004] sock_do_ioctl+0xd9/0x300 [ 320.266733][T14004] ? __pfx_sock_do_ioctl+0x10/0x10 [ 320.271960][T14004] ? __lock_acquire+0xaac/0xd20 [ 320.276850][T14004] sock_ioctl+0x576/0x790 [ 320.281196][T14004] ? __pfx_sock_ioctl+0x10/0x10 [ 320.286100][T14004] ? __fget_files+0x3a0/0x420 [ 320.290820][T14004] ? __fget_files+0x2a/0x420 [ 320.295470][T14004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 320.300447][T14004] ? __pfx_sock_ioctl+0x10/0x10 [ 320.305398][T14004] __se_sys_ioctl+0xf9/0x170 [ 320.310027][T14004] do_syscall_64+0xf6/0x210 [ 320.314596][T14004] ? clear_bhb_loop+0x45/0xa0 [ 320.319308][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.325279][T14004] RIP: 0033:0x7fbf3198e969 [ 320.330099][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.350002][T14004] RSP: 002b:00007fbf2f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.358505][T14004] RAX: ffffffffffffffda RBX: 00007fbf31bb6080 RCX: 00007fbf3198e969 [ 320.366566][T14004] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000004 [ 320.374576][T14004] RBP: 00007fbf31a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 320.382702][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.390686][T14004] R13: 0000000000000000 R14: 00007fbf31bb6080 R15: 00007ffe1ed24158 [ 320.398756][T14004] [ 320.401833][T14004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.409302][T14004] CPU: 1 UID: 0 PID: 14004 Comm: syz.0.2631 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 320.421393][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.431449][T14004] Call Trace: [ 320.434728][T14004] [ 320.437659][T14004] dump_stack_lvl+0x99/0x250 [ 320.442261][T14004] ? __asan_memcpy+0x40/0x70 [ 320.446856][T14004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.452063][T14004] ? __pfx__printk+0x10/0x10 [ 320.456655][T14004] panic+0x2db/0x790 [ 320.460554][T14004] ? __pfx_panic+0x10/0x10 [ 320.464967][T14004] ? show_trace_log_lvl+0x4fb/0x550 [ 320.470185][T14004] __warn+0x31b/0x4b0 [ 320.474183][T14004] ? ipv6_addr_prefix+0x124/0x1d0 [ 320.479220][T14004] ? ipv6_addr_prefix+0x124/0x1d0 [ 320.484251][T14004] report_bug+0x2be/0x4f0 [ 320.488578][T14004] ? ipv6_addr_prefix+0x124/0x1d0 [ 320.493604][T14004] ? ipv6_addr_prefix+0x124/0x1d0 [ 320.498629][T14004] ? ipv6_addr_prefix+0x126/0x1d0 [ 320.503650][T14004] handle_bug+0x84/0x160 [ 320.507889][T14004] exc_invalid_op+0x1a/0x50 [ 320.512408][T14004] asm_exc_invalid_op+0x1a/0x20 [ 320.517248][T14004] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 320.522880][T14004] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 320.542499][T14004] RSP: 0018:ffffc90003ddf920 EFLAGS: 00010246 [ 320.548567][T14004] RAX: aa969638b4209e00 RBX: ffff88806f554450 RCX: 0000000000080000 [ 320.556540][T14004] RDX: ffffc9000d3fa000 RSI: 0000000000005d50 RDI: 0000000000005d51 [ 320.564512][T14004] RBP: 0000000000000006 R08: 0000000000000003 R09: 0000000000000004 [ 320.572506][T14004] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000881 [ 320.580477][T14004] R13: 1ffff920007bbf4e R14: ffffc90003ddfa84 R15: 0000000000000881 [ 320.588464][T14004] ip6_route_info_create+0x5cc/0xa70 [ 320.593763][T14004] ip6_route_add+0x29/0x2f0 [ 320.598268][T14004] ? ipv6_route_ioctl+0x313/0x480 [ 320.603326][T14004] ipv6_route_ioctl+0x35c/0x480 [ 320.608198][T14004] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 320.613597][T14004] inet6_ioctl+0x219/0x280 [ 320.618026][T14004] ? __pfx_inet6_ioctl+0x10/0x10 [ 320.622976][T14004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.628968][T14004] sock_do_ioctl+0xd9/0x300 [ 320.633482][T14004] ? __pfx_sock_do_ioctl+0x10/0x10 [ 320.638596][T14004] ? __lock_acquire+0xaac/0xd20 [ 320.643459][T14004] sock_ioctl+0x576/0x790 [ 320.647797][T14004] ? __pfx_sock_ioctl+0x10/0x10 [ 320.652661][T14004] ? __fget_files+0x3a0/0x420 [ 320.657337][T14004] ? __fget_files+0x2a/0x420 [ 320.661931][T14004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 320.666928][T14004] ? __pfx_sock_ioctl+0x10/0x10 [ 320.671821][T14004] __se_sys_ioctl+0xf9/0x170 [ 320.676425][T14004] do_syscall_64+0xf6/0x210 [ 320.680929][T14004] ? clear_bhb_loop+0x45/0xa0 [ 320.685605][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.691492][T14004] RIP: 0033:0x7fbf3198e969 [ 320.695910][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.715518][T14004] RSP: 002b:00007fbf2f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.723937][T14004] RAX: ffffffffffffffda RBX: 00007fbf31bb6080 RCX: 00007fbf3198e969 [ 320.731911][T14004] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000004 [ 320.739893][T14004] RBP: 00007fbf31a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 320.747871][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.755840][T14004] R13: 0000000000000000 R14: 00007fbf31bb6080 R15: 00007ffe1ed24158 [ 320.763844][T14004] [ 320.767175][T14004] Kernel Offset: disabled [ 320.771587][T14004] Rebooting in 86400 seconds..