last executing test programs: 1.50596308s ago: executing program 0 (id=3501): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000010200000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000042850000007200000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.317540799s ago: executing program 0 (id=3504): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a}, {0x0, @broadcast}, 0x6a, {0x2, 0x4e20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="b40800000000000073113e0000000000000000009500c2000000000095000012000000000000000000000000000000002cc58578d093d0adb0782dc8f22475b6c94308356f224b7f4100000020000000006e9e9792481d62162f1529ed00eb377a405a08a254b5fac2748887b5d98568bcab60"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaa1aaaa3aaa0500aaaabb08004500003000000020fc0290780000001ce0000300030602000000000945f4fff60000ac1414aa76bb51283982f1040000004e9ae11fb634b437cccb99490b588a881dc7a2b727afa96731bd81f0fcbc8b21f2f7b113c4499c00"/112], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000e22dcbc80b47befa0000000900010073797a30000000002c000000030a01020000000000000000010000030900030073797a30000000000900010073797a3000000000540000001a0a010400000000000000000100000008000b4000000000090001"], 0xc8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sendfile(0xffffffffffffffff, r8, 0x0, 0x8000000000010000) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1358}}, 0x8000) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000ac758f6dd9fb0f17000000000000000a20000000000a05000000000000000000010000000900010073797a300000000020000000030a01010000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 1.27004821s ago: executing program 1 (id=3505): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000340)={0x100000001, 0x20, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000640)="1c0bfd21d6daf5", 0x7}], 0x2, &(0x7f0000000300)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}], 0x20}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @empty}, {0x1, @remote}, 0x42, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.265903284s ago: executing program 2 (id=3506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c040) 1.179946891s ago: executing program 4 (id=3507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08000500060000"], 0x30}}, 0x0) 1.179420665s ago: executing program 3 (id=3508): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x28}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x470bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x20004880) (async) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}, {&(0x7f00000001c0)="877ba26b4957606fb1e825155fdfd219a2e8852392b2a954ba3ca6a6b5d0196756af9d11b41e44527c82e6b6c4fa06b841a84e241cf4bea99ae1acfa07f4c1cc4c06552c51f0603fd5292b74f8981d3816a65292c9dc797ce027eac497a4cb85d44b5d44de727e037b8f6c2634f69f06c242271b572ce5942312154aa74c63ae7fcfa1b518cba69f51b8177d56ef01c3515eb9d9f84afcefc435ec2cc0427a66af12dd9cde0b06821e10dcd511e8be474460c24b7e3d9c3543ae26e6a34782fa47d4923e4c60000000", 0xffe7}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.131871332s ago: executing program 4 (id=3509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000070}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xc0ffffff}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) 1.02264182s ago: executing program 2 (id=3510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x9, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/142, 0x27, 0x8e, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 892.014288ms ago: executing program 3 (id=3511): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 891.34202ms ago: executing program 1 (id=3512): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100014000000800020011"], 0x68}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 855.436361ms ago: executing program 4 (id=3513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000002b80)=""/4120, 0x1018}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000b80)=""/218, 0xda}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x13a4}, 0xa}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x9, 0x20, 0x0) 824.413399ms ago: executing program 2 (id=3514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a050000000000000000000200000609000100030000000000000008000340000000070c000640000000"], 0x5c}}, 0x48080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r2, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x2000c090) 675.082913ms ago: executing program 3 (id=3515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x400c8d0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r5, 0xd1271c32ee762850, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001dc0)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000500)="8e1834754644ba12541b13e5b8c1ea6bd9e5a98bace6704dbff6f5833f705b4ade912b1bc6c43d7698f32d564757df85f5d0e25dedd986592080e3eff14e6c6b256c98b3b634023e41c65494bd4544ebd257b6acab441cdb4235f51b2a11d72ae19dcca51573bd5db193c639d27e498ec1f0de6408d21f7c77927f128954be22bfe1c2515a8e3c611868b4b58ff7fb17a78662f6", 0x94}, {&(0x7f00000005c0)="7b529a35e019eec3e368515c6d34e6693ac2f6d436c6d587ce74d7f899ea8bb51fdc19d0d93e4013c5c41ccee955a38d4bc7b839894f3f44541db6aa5ba44460302957496415de9f43dc432f34382ac45096859707440fa17ee2190777be1f492d62723f78b0763fd6458547177df2b27a5ac318f3feac10ff0e669487c25d4b79083c3b5362dd1d5255ca4001fa40ab0e6c8769ac7a1ae689985bf4e25c85c6b0473c248c8eb14651e5f0486a63e9a3e34e25a300dcebfc3d4530ee8e1da154fd20a622dfa00e4712855147e966", 0xce}, {&(0x7f00000006c0)="c5b79f624ed2e116d94ce69efab8deac0f5607ddffe8f276bbb93ea6b6c773638fa5cde02dd5d3f21f95fe44f79a1a8957b523b17b4851f3bf70ea450bc61b13fe5b673ecf292e157332c75356482259b558ce61b706d03153823ce2f131e55108d38e021f04036d1c4d15815677eab00ff407ba6d82e9aa24e6e86ecaacbb4aef9a0870a492e2df66bb5c9b507f19797dafca48d05d56bf21427de0b2d7722cddd15acd5db467ac4f7d732d6b5e8c6fb3a270f151180f74aa41744a6de2bc42609f81ad9fac1f", 0xc7}, {&(0x7f00000007c0)="0d95dd4dfde1cb886007be886c2e91fbd9a44a343985e90804", 0x19}], 0x4, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @end, @ssrr={0x89, 0x7, 0x1f, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x1, 0x9, "4e35df6de8469e"}, {0x1, 0x6, "7394bf2f"}, {0x3, 0x2}, {0x9a1b1496d82d319d, 0x7, "48f3769150"}]}, @timestamp={0x44, 0x28, 0x69, 0x0, 0x2, [0x3, 0x2, 0x4, 0x8000, 0x2, 0x0, 0x0, 0x1ff, 0x0]}, @timestamp_addr={0x44, 0x24, 0x73, 0x1, 0x6, [{@multicast1, 0x2}, {@local, 0x8}, {@multicast1, 0x5341}, {@empty, 0x2}]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x90, [@local, @private=0xa010100, @private=0xa010100, @loopback, @multicast1, @private=0xa010100, @multicast1, @local, @private=0xa010100, @empty]}, @rr={0x7, 0x23, 0x7, [@empty, @private=0xa010100, @local, @multicast1, @multicast2, @broadcast, @loopback, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xf2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf2}}], 0x140}}, {{&(0x7f0000000980)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001cc0)=[{&(0x7f00000009c0)="33b51b9ce7c43329e876b3c4c93b007b3152d88e087a1523206fb9887471aa2bd886294e466656cef7f903728beaee3ed1b875935f826704f06715e856c46431bc2d5c9aded295a5bfb52af4599189d277504a60d89d0c28743d02b16813ed2ad046574c23960a2b1c31b83c7525df035d59011bcde89ce9ac26694c644a4b8d7de87cf9167edaa4136f353eb49d97ee897f4dd3fcce9a51b8ff22d4b0cb9e11de9779de9fbd40baa9b8482fa79a421a41921312c367c64a19", 0xb9}, {&(0x7f0000000a80)="1aa8296d1e55b7c4329ec6d81b1b4230ab60026d202892c679267035c13f6e53f5dd6abd05c72aeb4b751457a20994e6291b738e90e1d066356f4b4f61b25b6702279ad8e243e8f8cd0e24325db013222f263d67e8c4b1f54132f96dafd17eb7a2e3de676d084610678855add63f46145a7fa82ab62e01cf83193e0a77102d8f4e2c75685ec8e851873058863ead224fc7296e81f16432c4484009c31c5ff3d743", 0xa1}, {&(0x7f0000000b40)="babdef618c58da2dbc58b1977097ae2e2330fea0029d90e2876dde031c6de41227a9cf1db257113d47f41ae0deb4f09f9d312854d5de91807801ebc7df949e2c80abb13318b1df47ae9c8708ec08aac6d32c75174eaf511abdc27df2c65903ddac721af0e89100ee58fe28fbc37a119eb85018e055b45880b58b6d28c1c9b82f38b7426e2ee58d678407ed1aed034ee5e9cee591b41b6ebdabcbf6c1a65ab1e0bbbb366d7fc43e5e35fb5c5ffe8d668ad449da363e8cb0c2c5c312a4c6468744b6315d258d04c75b09a8fafe6df83d5614e52650c533bbab9f4c770f6fda9cdeb8a81a0238163890c65d65b57d07ea513749011928bd", 0xf6}, {&(0x7f0000000c40)="00d58904c2e3a2370c011a887b6af13ad0", 0x11}, {&(0x7f0000000c80)="4309a249934cf8dba17cfb9c75e025081ac386", 0x13}, {&(0x7f0000000cc0)="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", 0x1000}], 0x6, &(0x7f0000001d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xd0, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x5, [{@loopback, 0x3}]}, @rr={0x7, 0x1b, 0x5, [@broadcast, @broadcast, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}]}}}], 0x80}}], 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001e40)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001e80)={0x1d, r7, 0x3, {0x2, 0xff, 0x2}, 0xfd}, 0x18) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xd0, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r9 = accept$netrom(r6, &(0x7f0000002080)={{0x3, @bcast}, [@rose, @netrom, @null, @rose, @remote, @rose, @rose, @default]}, &(0x7f0000002100)=0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000002140)={0x0, 'veth0_to_batadv\x00', {}, 0x6}) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x10) (async, rerun: 32) listen(r6, 0x6) (async, rerun: 32) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xde}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bind$bt_hci(r6, &(0x7f0000002380)={0x1f, 0x2, 0x3}, 0x6) (async) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000c010}, 0x0) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000002540), r4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x94, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffe01}, @NBD_ATTR_BACKEND_IDENTIFIER={0x27, 0xa, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8cd}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040050) (async) socket(0x10, 0x3, 0x3) (async) sendto$inet6(r6, &(0x7f0000002740)="1f0413af1379d1455b34c5c57296f229b6095d61c489f3e0ab8b21f78bcf20f77982c4ccf7798ec5cd49375a3d1c2b4a1745eaced5740b1da39d9842fb089b55f5fd89bcb107767a25ecd9c8e781295ed6de54574b34016e1e9c90b4d9fe", 0x5e, 0x40, &(0x7f00000027c0)={0xa, 0x4e24, 0x2, @remote, 0x8}, 0x1c) sendfile(r12, r13, &(0x7f0000002800)=0x9, 0x9) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (rerun: 64) 674.461753ms ago: executing program 1 (id=3516): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000ff390000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}}, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000002c0), 0x0, 0x40800) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockname(r4, &(0x7f0000000600)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@delchain={0x38, 0x65, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x51f76ac8598a9d3c}, {0xd, 0x7}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 673.814168ms ago: executing program 4 (id=3517): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 638.694433ms ago: executing program 2 (id=3518): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x8, 0x4e21, @broadcast}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000640)="1c0bfd21", 0x4}], 0x2, 0x0, 0x30}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0d02020000000000080004"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000514010028bd7010fedbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000340)=[{&(0x7f0000003000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea27a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e233e193b171c9a24fc2fb84be22c88", 0x100f}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0xe}], 0x2, 0xa) close(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000006c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000940)=""/56, 0x38}, {&(0x7f0000000980)=""/198, 0xc6}, {&(0x7f0000000a80)=""/37, 0x25}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/199, 0xc7}, {&(0x7f0000000cc0)=""/248, 0xf8}, {&(0x7f0000000ac0)=""/40, 0x28}], 0xa}, 0x12040) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="4d199e2c51143a657f6486e0807dcac8cb2143512bba2c8d8e5ed11e856392f18c524eb1604e3b8340d91fda10200463031d329eca307869a444655a925e8919d4490e1947fcc50cefec2f5250f9f495b6fedb2a04518b70f073f3a84d22bf5b646f9ec6d88412781740f622f4372d1ebf14ade34e904e099f05d18284dc78b88073c7d90ec8a0b701e661e1fa785736be6cf21836a117de98a21d4ac1a0254f2935f6216da193e2249392bb53ae9687b40b1dfed1b146dd07e7cd61132a10f9735d6fb83e6f9fa30dcd7ccf8c9e8900cdab0e6415d42165269379bcbc4f9919b6", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 591.90348ms ago: executing program 0 (id=3519): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000640)="1c0bfd21d6daf5", 0x7}], 0x1, &(0x7f0000000300)=ANY=[], 0x30}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 427.939662ms ago: executing program 1 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c040) 408.967247ms ago: executing program 0 (id=3521): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x80800) read(r0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 408.48425ms ago: executing program 3 (id=3522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x65dfdbfd, {0x2, 0x20, 0x7, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}]}, 0x28}}, 0x4c040) 391.522808ms ago: executing program 4 (id=3523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808ffffffd000000009000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 327.826279ms ago: executing program 2 (id=3524): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000006000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x4f7a, &(0x7f0000000180)=""/226, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 271.319304ms ago: executing program 0 (id=3525): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 267.707435ms ago: executing program 1 (id=3526): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb1cd7064a882c783}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x4008090) setsockopt$inet_opts(r2, 0x0, 0x20, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea20}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 252.899998ms ago: executing program 3 (id=3527): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000700)={0x4, 0x6, {0xffffffffffff93c6, @usage=0x4, 0x0, 0x4000000000000004, 0x0, 0x1, 0x2e, 0x8, 0x40, @usage=0x56f, 0xc0a61cb, 0xc6, [0xffffffffffffe748, 0x7f, 0x3, 0x91, 0x7, 0x45d]}, {0x8, @usage=0xfffffffffffffff1, 0x0, 0x33, 0x400, 0x3, 0x10000004, 0x8dbf, 0x46, @usage=0x7, 0x73, 0x7, [0x9, 0x5, 0x7, 0x9, 0x0, 0x3]}, {0x9, @struct={0x6, 0x6bbb}, 0x0, 0x7, 0xfffffffffffffff7, 0x7f, 0x40, 0x0, 0x8, @usage=0x8, 0x135, 0x2, [0x81, 0xfffffffffffffffc, 0xac46, 0x2, 0x2d, 0x8]}, {0x5, 0xab4, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b00)={0x0, 0x1, {0x5, @usage, 0x0, 0x80000000, 0x1, 0x5, 0x10000, 0xfffffffffffffffb, 0x4e5, @struct={0x1, 0xf548d190}, 0xb, 0x2000000, [0x8001, 0x5, 0x4, 0x5, 0x8, 0xd044]}, {0x80, @struct={0x2, 0x6}, 0x0, 0x3, 0x0, 0x9, 0x7, 0x8001, 0x14, @struct={0x6, 0xffffffff}, 0x9, 0x9, [0x9, 0xb0e, 0x707, 0x7fff, 0x8, 0x9]}, {0x0, @struct={0xfffffe00, 0x1}, 0x0, 0x3, 0x9, 0x9, 0x8d, 0x4, 0x30, @struct={0x7, 0xfffffff8}, 0xf, 0x100, [0x3, 0x7, 0x9, 0x7ff, 0x7fff, 0x9]}, {0x9, 0x10, 0x4a}}) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x46, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c01"]}]}, 0x5c}], 0x1}, 0x300) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001780)={0x0, 0x3, {0x9, @struct={0x3, 0x210}, r2, 0x1, 0xb25, 0x7fffffff, 0x9, 0x0, 0x801, @usage=0x7fffffffffffffff, 0x0, 0xf6f, [0x5, 0x0, 0x7, 0x6, 0x1, 0x3]}, {0x7, @usage, r3, 0x3, 0x7fffffff, 0x0, 0x4, 0x0, 0xc, @struct={0x3, 0x6448}, 0x80, 0x4, [0x7ff, 0x7fffffffffffffff, 0x8, 0x0, 0x4, 0xff]}, {0x2000002c, @usage=0x7, r5, 0x0, 0xc, 0x1, 0x9, 0x80, 0x24, @struct={0x8, 0x13}, 0x7, 0xffffff47, [0x81, 0x7f, 0x9, 0x7, 0x5]}, {0x6, 0x6, 0x4}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)=ANY=[@ANYBLOB="dd63f5b0f3e96d7193e3737ddb8e2d9e210d1a64f1b76248b2b26acceaa845132230d276d47b985b6e6233e27deab30deb4fd126064cbfc5c5c62ff72ba207a18a76f073aff6ad6326f806728536ad0dba278edc39bdabe008a317903c905b2bc44e27e01fc606b64bc6d2c3b0363c5426f22fda200c65dcaf40a27ec8bee34ca46add21f238b2b19f04e56a59266bb9bf943b", @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="895f15d22046300d52e7fb34e723f1fc9f082c18c0b0b2fab2757f48fffb12481ded583ca8b4883a60bbe3bc05c3691d9583454182c546e4195cc1dc1e72bb1ced842b2df989a31929dd1151e1fc3d77744898dda8df"]) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000004c0)={r5, 0x75be, 0x6, 0x1}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001380)={0x0, 'erspan0\x00', {0x4}, 0x2}) 155.7057ms ago: executing program 4 (id=3528): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x800) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0xffff7fff, 0x7fe, 0xf83, 0x28}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000480012800e00010061703667726574617000000034000280140007002001000000000000000000000000000014000600fe80001508000100", @ANYRES32=r9, @ANYBLOB], 0x68}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r10, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0xf, 0x80000, 0x5093, &(0x7f0000000000)={0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000bf75de36b01f867e770a1349553ee8c9df6b95f6d2bee9d8", @ANYRES16=r12, @ANYBLOB="000329bd7000fedbdf2501000000000000000941000000140018ffffffff7564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) 122.678614ms ago: executing program 2 (id=3529): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001000000000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 67.304908ms ago: executing program 1 (id=3530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto, @datasec={0x2, 0x1, 0x0, 0xf, 0x42, [{0x3, 0x1, 0x5}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b83d"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000900)=""/149, 0x50, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) 53.681307ms ago: executing program 0 (id=3531): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000640)="1c0bfd21d6daf5", 0x7}], 0x1, &(0x7f0000000300)=ANY=[], 0x30}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=3532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1], 0x8c}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.0.2507'. [ 372.266333][T13205] netlink: 'syz.1.2508': attribute type 72 has an invalid length. [ 372.690422][T13220] xt_CT: No such helper "snmp" [ 373.607773][T13264] lo: entered promiscuous mode [ 373.798845][T13274] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 374.573002][T13301] bridge_slave_0: left allmulticast mode [ 374.591414][T13301] bridge_slave_0: left promiscuous mode [ 374.597935][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.682706][T13301] bridge_slave_1: left allmulticast mode [ 374.715876][T13301] bridge_slave_1: left promiscuous mode [ 374.748950][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.796662][T13301] bond0: (slave bond_slave_0): Releasing backup interface [ 374.843207][T13301] bond0: (slave bond_slave_1): Releasing backup interface [ 374.904124][T13301] team0: Port device team_slave_0 removed [ 374.925082][T13301] team0: Port device team_slave_1 removed [ 374.960150][T13301] bond1: (slave bond2): Releasing backup interface [ 374.966969][T13301] bond2: left promiscuous mode [ 374.996550][T13301] bond3: (slave bond4): Releasing backup interface [ 375.009923][T13301] bond4: left promiscuous mode [ 375.422785][T13336] __nla_validate_parse: 13 callbacks suppressed [ 375.422807][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 375.468490][T13336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2552'. [ 375.570916][T13336] vlan2: entered allmulticast mode [ 375.580801][T13340] x_tables: duplicate underflow at hook 1 [ 375.590554][T13340] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 375.609352][T13340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2555'. [ 375.633529][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2554'. [ 375.665535][T13345] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2555'. [ 375.722227][T13345] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2555'. [ 375.952069][T13350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.044926][T13354] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2559'. [ 376.930203][T13386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2572'. [ 376.960626][T13386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2572'. [ 377.012893][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 377.691203][T13414] xt_CT: No such helper "snmp" [ 377.796957][T13426] FAULT_INJECTION: forcing a failure. [ 377.796957][T13426] name failslab, interval 1, probability 0, space 0, times 0 [ 377.817495][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.4.2588 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 377.817547][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.817563][T13426] Call Trace: [ 377.817571][T13426] [ 377.817580][T13426] dump_stack_lvl+0x189/0x250 [ 377.817619][T13426] ? __pfx____ratelimit+0x10/0x10 [ 377.817647][T13426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.817679][T13426] ? __pfx__printk+0x10/0x10 [ 377.817709][T13426] ? __pfx___might_resched+0x10/0x10 [ 377.817728][T13426] ? fs_reclaim_acquire+0x7d/0x100 [ 377.817761][T13426] should_fail_ex+0x414/0x560 [ 377.817796][T13426] should_failslab+0xa8/0x100 [ 377.817822][T13426] __kmalloc_noprof+0xcb/0x4f0 [ 377.817842][T13426] ? bpf_test_init+0xc2/0x170 [ 377.817880][T13426] bpf_test_init+0xc2/0x170 [ 377.817916][T13426] bpf_prog_test_run_xdp+0x37c/0x1000 [ 377.817955][T13426] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.817981][T13426] ? __fget_files+0x2a/0x420 [ 377.818011][T13426] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.818033][T13426] bpf_prog_test_run+0x2c7/0x340 [ 377.818069][T13426] __sys_bpf+0x4a4/0x860 [ 377.818099][T13426] ? __pfx___sys_bpf+0x10/0x10 [ 377.818164][T13426] ? ksys_write+0x22a/0x250 [ 377.818187][T13426] ? __pfx_ksys_write+0x10/0x10 [ 377.818209][T13426] ? rcu_is_watching+0x15/0xb0 [ 377.818238][T13426] __x64_sys_bpf+0x7c/0x90 [ 377.818265][T13426] do_syscall_64+0xfa/0x3b0 [ 377.818292][T13426] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.818317][T13426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.818336][T13426] ? clear_bhb_loop+0x60/0xb0 [ 377.818363][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.818383][T13426] RIP: 0033:0x7fdf85b8e929 [ 377.818402][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.818420][T13426] RSP: 002b:00007fdf869cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.818442][T13426] RAX: ffffffffffffffda RBX: 00007fdf85db5fa0 RCX: 00007fdf85b8e929 [ 377.818456][T13426] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 377.818469][T13426] RBP: 00007fdf869cc090 R08: 0000000000000000 R09: 0000000000000000 [ 377.818481][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.818493][T13426] R13: 0000000000000000 R14: 00007fdf85db5fa0 R15: 00007ffed5c2bd58 [ 377.818526][T13426] [ 378.343666][T13433] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.353094][T13433] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.361970][T13433] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.370821][T13433] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.422777][T13433] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.431843][T13433] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.441157][T13433] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.450458][T13433] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.995769][T13461] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 379.068329][T13454] xt_CT: No such helper "snmp" [ 379.145731][T13461] bond11: entered promiscuous mode [ 379.151813][T13461] 8021q: adding VLAN 0 to HW filter on device bond11 [ 379.193642][T13468] 8021q: adding VLAN 0 to HW filter on device bond12 [ 379.204825][T13468] bond11: (slave bond12): making interface the new active one [ 379.212978][T13468] bond12: entered promiscuous mode [ 379.220867][T13468] bond11: (slave bond12): Enslaving as an active interface with an up link [ 379.248818][T13471] batadv_slave_0: left allmulticast mode [ 380.003002][T13536] netlink: 'syz.3.2619': attribute type 4 has an invalid length. [ 380.151448][T13544] lo: entered allmulticast mode [ 380.309325][T13488] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 380.559057][T13558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.689328][T13564] __nla_validate_parse: 7 callbacks suppressed [ 380.689350][T13564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2631'. [ 380.820303][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 380.888461][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2636'. [ 380.930612][T13576] x_tables: duplicate underflow at hook 1 [ 380.945276][T13576] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 380.969895][T13576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 381.009097][T13582] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.023484][T13576] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2638'. [ 381.030721][T13582] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 381.060766][T13578] xt_CT: No such helper "snmp" [ 381.064481][T13576] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2638'. [ 381.380164][T13525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.541967][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 381.760616][T13610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2649'. [ 381.783231][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 381.872588][T13612] xt_CT: No such helper "snmp" [ 381.977603][T13621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2653'. [ 382.152001][T13630] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20004 [ 382.503065][T13639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.739718][T13644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.784557][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 382.915967][T13655] xt_CT: No such helper "snmp" [ 383.002693][T13664] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 383.013330][T13664] SET target dimension over the limit! [ 383.508645][T13690] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20004 [ 384.430256][T13721] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 384.976622][T13745] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20004 [ 385.167417][T13751] FAULT_INJECTION: forcing a failure. [ 385.167417][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.216139][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.4.2705 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 385.216174][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.216187][T13751] Call Trace: [ 385.216198][T13751] [ 385.216209][T13751] dump_stack_lvl+0x189/0x250 [ 385.216247][T13751] ? __pfx____ratelimit+0x10/0x10 [ 385.216275][T13751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.216307][T13751] ? __pfx__printk+0x10/0x10 [ 385.216345][T13751] should_fail_ex+0x414/0x560 [ 385.216379][T13751] _copy_from_user+0x2d/0xb0 [ 385.216402][T13751] bpf_test_init+0xf8/0x170 [ 385.216440][T13751] bpf_prog_test_run_xdp+0x37c/0x1000 [ 385.216479][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 385.216505][T13751] ? __fget_files+0x2a/0x420 [ 385.216534][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 385.216555][T13751] bpf_prog_test_run+0x2c7/0x340 [ 385.216589][T13751] __sys_bpf+0x4a4/0x860 [ 385.216620][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 385.216661][T13751] ? ksys_write+0x22a/0x250 [ 385.216685][T13751] ? __pfx_ksys_write+0x10/0x10 [ 385.216702][T13751] ? rcu_is_watching+0x15/0xb0 [ 385.216730][T13751] __x64_sys_bpf+0x7c/0x90 [ 385.216757][T13751] do_syscall_64+0xfa/0x3b0 [ 385.216784][T13751] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.216810][T13751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.216842][T13751] ? clear_bhb_loop+0x60/0xb0 [ 385.216880][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.216900][T13751] RIP: 0033:0x7fdf85b8e929 [ 385.216919][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.216937][T13751] RSP: 002b:00007fdf869cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.216960][T13751] RAX: ffffffffffffffda RBX: 00007fdf85db5fa0 RCX: 00007fdf85b8e929 [ 385.216975][T13751] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 385.216988][T13751] RBP: 00007fdf869cc090 R08: 0000000000000000 R09: 0000000000000000 [ 385.217000][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.217013][T13751] R13: 0000000000000000 R14: 00007fdf85db5fa0 R15: 00007ffed5c2bd58 [ 385.217046][T13751] [ 385.760729][T13759] netlink: 'syz.2.2707': attribute type 72 has an invalid length. [ 386.246104][T13787] __nla_validate_parse: 6 callbacks suppressed [ 386.246127][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2721'. [ 386.305300][T13779] xt_CT: No such helper "snmp" [ 386.410943][T13793] netlink: 'syz.1.2722': attribute type 72 has an invalid length. [ 386.504145][T13790] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20004 [ 386.565419][T13798] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2724'. [ 386.877149][T13812] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2728'. [ 387.147917][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.315537][T13825] netlink: 'syz.2.2735': attribute type 72 has an invalid length. [ 387.391070][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2736'. [ 387.924797][T13851] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2743'. [ 387.941570][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2742'. [ 387.967664][T13853] FAULT_INJECTION: forcing a failure. [ 387.967664][T13853] name failslab, interval 1, probability 0, space 0, times 0 [ 387.985122][T13853] CPU: 0 UID: 0 PID: 13853 Comm: syz.1.2744 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 387.985154][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.985167][T13853] Call Trace: [ 387.985175][T13853] [ 387.985184][T13853] dump_stack_lvl+0x189/0x250 [ 387.985223][T13853] ? __pfx____ratelimit+0x10/0x10 [ 387.985253][T13853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.985285][T13853] ? __pfx__printk+0x10/0x10 [ 387.985313][T13853] ? __pfx___might_resched+0x10/0x10 [ 387.985337][T13853] should_fail_ex+0x414/0x560 [ 387.985368][T13853] should_failslab+0xa8/0x100 [ 387.985394][T13853] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 387.985417][T13853] ? __get_vm_area_node+0x13f/0x300 [ 387.985443][T13853] __get_vm_area_node+0x13f/0x300 [ 387.985469][T13853] __vmalloc_node_range_noprof+0x301/0x12f0 [ 387.985492][T13853] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 387.985525][T13853] ? is_bpf_text_address+0x26/0x2b0 [ 387.985584][T13853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.985608][T13853] ? __might_fault+0xb0/0x130 [ 387.985628][T13853] ? __pfx_aa_get_newest_label+0x10/0x10 [ 387.985657][T13853] ? _parse_integer_limit+0x1ae/0x1f0 [ 387.985692][T13853] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 387.985720][T13853] __vmalloc_noprof+0xb1/0xf0 [ 387.985762][T13853] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 387.985796][T13853] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 387.985832][T13853] bpf_prog_alloc+0x3c/0x1a0 [ 387.985867][T13853] bpf_prog_load+0x735/0x1930 [ 387.985910][T13853] ? __pfx_bpf_prog_load+0x10/0x10 [ 387.985966][T13853] ? bpf_lsm_bpf+0x9/0x20 [ 387.985983][T13853] ? security_bpf+0x7e/0x300 [ 387.986026][T13853] __sys_bpf+0x5f1/0x860 [ 387.986058][T13853] ? __pfx___sys_bpf+0x10/0x10 [ 387.986102][T13853] ? ksys_write+0x22a/0x250 [ 387.986176][T13853] ? __pfx_ksys_write+0x10/0x10 [ 387.986196][T13853] ? rcu_is_watching+0x15/0xb0 [ 387.986224][T13853] __x64_sys_bpf+0x7c/0x90 [ 387.986250][T13853] do_syscall_64+0xfa/0x3b0 [ 387.986278][T13853] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.986303][T13853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.986322][T13853] ? clear_bhb_loop+0x60/0xb0 [ 387.986350][T13853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.986369][T13853] RIP: 0033:0x7f66b9d8e929 [ 387.986388][T13853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.986406][T13853] RSP: 002b:00007f66bab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.986428][T13853] RAX: ffffffffffffffda RBX: 00007f66b9fb5fa0 RCX: 00007f66b9d8e929 [ 387.986444][T13853] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 387.986456][T13853] RBP: 00007f66bab96090 R08: 0000000000000000 R09: 0000000000000000 [ 387.986469][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.986481][T13853] R13: 0000000000000000 R14: 00007f66b9fb5fa0 R15: 00007fffd3d8b2c8 [ 387.986513][T13853] [ 387.986523][T13853] warn_alloc: 1 callbacks suppressed [ 387.986534][T13853] syz.1.2744: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 388.050769][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2745'. [ 388.078356][T13859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2745'. [ 388.102470][T13853] ,cpuset= [ 388.131585][T13849] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.172486][T13853] / [ 388.181164][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2745'. [ 388.199452][T13849] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 388.241400][T13853] ,mems_allowed=0-1 [ 388.365285][T13853] CPU: 1 UID: 0 PID: 13853 Comm: syz.1.2744 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 388.365317][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.365330][T13853] Call Trace: [ 388.365338][T13853] [ 388.365347][T13853] dump_stack_lvl+0x189/0x250 [ 388.365385][T13853] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 388.365415][T13853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.365446][T13853] ? __pfx__printk+0x10/0x10 [ 388.365469][T13853] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.365515][T13853] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.365547][T13853] warn_alloc+0x214/0x310 [ 388.365577][T13853] ? __pfx_warn_alloc+0x10/0x10 [ 388.365602][T13853] ? __get_vm_area_node+0x13f/0x300 [ 388.365628][T13853] ? __get_vm_area_node+0x2b5/0x300 [ 388.365658][T13853] __vmalloc_node_range_noprof+0x326/0x12f0 [ 388.365686][T13853] ? is_bpf_text_address+0x26/0x2b0 [ 388.365732][T13853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.365753][T13853] ? __might_fault+0xb0/0x130 [ 388.365771][T13853] ? __pfx_aa_get_newest_label+0x10/0x10 [ 388.365796][T13853] ? _parse_integer_limit+0x1ae/0x1f0 [ 388.365829][T13853] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 388.365857][T13853] __vmalloc_noprof+0xb1/0xf0 [ 388.365888][T13853] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 388.365922][T13853] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 388.365957][T13853] bpf_prog_alloc+0x3c/0x1a0 [ 388.365988][T13853] bpf_prog_load+0x735/0x1930 [ 388.366032][T13853] ? __pfx_bpf_prog_load+0x10/0x10 [ 388.366084][T13853] ? bpf_lsm_bpf+0x9/0x20 [ 388.366099][T13853] ? security_bpf+0x7e/0x300 [ 388.366123][T13853] __sys_bpf+0x5f1/0x860 [ 388.366152][T13853] ? __pfx___sys_bpf+0x10/0x10 [ 388.366194][T13853] ? ksys_write+0x22a/0x250 [ 388.366282][T13853] ? __pfx_ksys_write+0x10/0x10 [ 388.366299][T13853] ? rcu_is_watching+0x15/0xb0 [ 388.366327][T13853] __x64_sys_bpf+0x7c/0x90 [ 388.366354][T13853] do_syscall_64+0xfa/0x3b0 [ 388.366383][T13853] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.366409][T13853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.366430][T13853] ? clear_bhb_loop+0x60/0xb0 [ 388.366455][T13853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.366478][T13853] RIP: 0033:0x7f66b9d8e929 [ 388.366497][T13853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.366514][T13853] RSP: 002b:00007f66bab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.366536][T13853] RAX: ffffffffffffffda RBX: 00007f66b9fb5fa0 RCX: 00007f66b9d8e929 [ 388.366551][T13853] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 388.366564][T13853] RBP: 00007f66bab96090 R08: 0000000000000000 R09: 0000000000000000 [ 388.366576][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.366588][T13853] R13: 0000000000000000 R14: 00007f66b9fb5fa0 R15: 00007fffd3d8b2c8 [ 388.366620][T13853] [ 388.366629][T13853] Mem-Info: [ 388.510617][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2747'. [ 388.515458][T13853] active_anon:5011 inactive_anon:0 isolated_anon:0 [ 388.515458][T13853] active_file:2057 inactive_file:39939 isolated_file:0 [ 388.515458][T13853] unevictable:768 dirty:235 writeback:0 [ 388.515458][T13853] slab_reclaimable:12450 slab_unreclaimable:109255 [ 388.515458][T13853] mapped:30554 shmem:1379 pagetables:952 [ 388.515458][T13853] sec_pagetables:0 bounce:0 [ 388.515458][T13853] kernel_misc_reclaimable:0 [ 388.515458][T13853] free:1319535 free_pcp:12411 free_cma:0 [ 388.723338][T13853] Node 0 active_anon:20044kB inactive_anon:0kB active_file:8228kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118116kB dirty:940kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13848kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.759963][T13853] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.875438][T13853] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.967778][T13853] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 388.973647][T13853] Node 0 DMA32 free:1355704kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20000kB inactive_anon:0kB active_file:8228kB inactive_file:157724kB unevictable:1536kB writepending:940kB present:3129332kB managed:2561076kB mlocked:0kB bounce:0kB free_pcp:33120kB local_pcp:21388kB free_cma:0kB [ 389.147626][T13853] lowmem_reserve[]: 0 0 1 1 1 [ 389.155205][T13853] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 389.237405][T13853] lowmem_reserve[]: 0 0 0 0 0 [ 389.242213][T13853] Node 1 Normal free:3907060kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:8576kB free_cma:0kB [ 389.340119][T13853] lowmem_reserve[]: 0 0 0 0 0 [ 389.344931][T13853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 389.368549][T13853] Node 0 DMA32: 1130*4kB (UME) 779*8kB (UME) 328*16kB (UME) 651*32kB (UME) 360*64kB (UM) 51*128kB (UM) 30*256kB (UM) 10*512kB (UM) 6*1024kB (M) 4*2048kB (UME) 308*4096kB (UM) = 1355104kB [ 389.425973][T13853] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 389.495054][T13853] Node 1 Normal: 177*4kB (UE) 56*8kB (UME) 37*16kB (UME) 113*32kB (UME) 30*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3907060kB [ 389.565608][T13853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.612810][T13853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.628969][T13853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.639005][T13853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.648484][T13853] 43374 total pagecache pages [ 389.653358][T13853] 0 pages in swap cache [ 389.659343][T13853] Free swap = 124996kB [ 389.663712][T13853] Total swap = 124996kB [ 389.668059][T13853] 2097051 pages RAM [ 389.681163][T13853] 0 pages HighMem/MovableOnly [ 389.695829][T13853] 424676 pages reserved [ 389.749121][T13853] 0 pages cma reserved [ 389.935044][T13915] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20004 [ 389.998822][T13919] x_tables: duplicate underflow at hook 1 [ 390.018141][T13919] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 390.397634][T13933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.348678][T13971] __nla_validate_parse: 16 callbacks suppressed [ 391.348701][T13971] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2785'. [ 391.690938][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2790'. [ 391.749136][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2790'. [ 392.011876][T13989] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2792'. [ 392.037653][T13989] 0·: renamed from hsr0 [ 392.069895][T13989] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.118251][T13989] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.159581][T13989] 0·: entered allmulticast mode [ 392.164518][T13989] hsr_slave_0: entered allmulticast mode [ 392.170717][T13989] hsr_slave_1: entered allmulticast mode [ 392.178384][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.187861][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.196201][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.210105][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.218223][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.219456][T13989] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 392.393736][T13521] tipc: Resetting bearer [ 392.493739][T13526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.515537][T13526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.709675][T13526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.752804][T13526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.835697][T14024] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 392.884409][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 392.950700][T13526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.968624][T13526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.032477][T14031] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2806'. [ 393.078880][T13526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.099314][T13526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.217804][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'. [ 393.282934][T14038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2808'. [ 394.338445][ T5845] Bluetooth: hci4: command tx timeout [ 394.980246][T13526] dvmrp1 (unregistering): left allmulticast mode [ 395.352945][T13526] bond0 (unregistering): Released all slaves [ 395.369261][T13526] bond1 (unregistering): Released all slaves [ 395.496970][T13526] bond2 (unregistering): Released all slaves [ 395.513194][T13526] bond3 (unregistering): Released all slaves [ 395.631987][T13526] bond4 (unregistering): Released all slaves [ 395.751272][T13526] bond5 (unregistering): Released all slaves [ 395.767763][T13526] bond6 (unregistering): Released all slaves [ 395.897106][T13526] bond7 (unregistering): (slave bond8): Releasing backup interface [ 395.905381][T13526] bond8 (unregistering): left promiscuous mode [ 395.912661][T13526] bond7 (unregistering): Released all slaves [ 396.031731][T13526] bond8 (unregistering): Released all slaves [ 396.155938][T13526] bond9 (unregistering): (slave bond10): Releasing backup interface [ 396.164254][T13526] bond10 (unregistering): left promiscuous mode [ 396.171504][T13526] bond9 (unregistering): Released all slaves [ 396.284721][T13526] bond10 (unregistering): Released all slaves [ 396.404695][T13526] bond11 (unregistering): (slave bond12): Releasing backup interface [ 396.413198][T13526] bond12 (unregistering): left promiscuous mode [ 396.419266][ T5845] Bluetooth: hci4: command tx timeout [ 396.426071][T13526] bond11 (unregistering): Released all slaves [ 396.557912][T13526] bond12 (unregistering): Released all slaves [ 396.586793][T13999] chnl_net:caif_netlink_parms(): no params data found [ 396.784009][T14075] FAULT_INJECTION: forcing a failure. [ 396.784009][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 396.784069][T13526] þ`Ì: left promiscuous mode [ 396.817490][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.3.2819 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 396.817536][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.817549][T14075] Call Trace: [ 396.817557][T14075] [ 396.817566][T14075] dump_stack_lvl+0x189/0x250 [ 396.817605][T14075] ? __pfx____ratelimit+0x10/0x10 [ 396.817635][T14075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.817666][T14075] ? __pfx__printk+0x10/0x10 [ 396.817692][T14075] ? __pfx___might_resched+0x10/0x10 [ 396.817711][T14075] ? fs_reclaim_acquire+0x7d/0x100 [ 396.817742][T14075] should_fail_ex+0x414/0x560 [ 396.817790][T14075] should_failslab+0xa8/0x100 [ 396.817815][T14075] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 396.817838][T14075] ? page_pool_create_percpu+0x76/0xbe0 [ 396.817879][T14075] page_pool_create_percpu+0x76/0xbe0 [ 396.817902][T14075] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 396.817923][T14075] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 396.817950][T14075] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 396.817976][T14075] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 396.818021][T14075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.818058][T14075] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 396.818077][T14075] ? bpf_dispatcher_xdp+0x800/0x1000 [ 396.818098][T14075] ? bpf_dispatcher_xdp+0x800/0x1000 [ 396.818172][T14075] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 396.818198][T14075] ? _copy_from_user+0x94/0xb0 [ 396.818223][T14075] ? bpf_test_init+0x133/0x170 [ 396.818249][T14075] ? xdp_convert_md_to_buff+0x5b/0x330 [ 396.818270][T14075] bpf_prog_test_run_xdp+0x713/0x1000 [ 396.818306][T14075] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 396.818330][T14075] ? __fget_files+0x2a/0x420 [ 396.818355][T14075] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 396.818373][T14075] bpf_prog_test_run+0x2c7/0x340 [ 396.818403][T14075] __sys_bpf+0x4a4/0x860 [ 396.818430][T14075] ? __pfx___sys_bpf+0x10/0x10 [ 396.818465][T14075] ? ksys_write+0x22a/0x250 [ 396.818484][T14075] ? __pfx_ksys_write+0x10/0x10 [ 396.818499][T14075] ? rcu_is_watching+0x15/0xb0 [ 396.818540][T14075] __x64_sys_bpf+0x7c/0x90 [ 396.818564][T14075] do_syscall_64+0xfa/0x3b0 [ 396.818588][T14075] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.818610][T14075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.818628][T14075] ? clear_bhb_loop+0x60/0xb0 [ 396.818648][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.818665][T14075] RIP: 0033:0x7f7b7978e929 [ 396.818681][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.818703][T14075] RSP: 002b:00007f7b7a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.818721][T14075] RAX: ffffffffffffffda RBX: 00007f7b799b5fa0 RCX: 00007f7b7978e929 [ 396.818733][T14075] RDX: 000000000000004c RSI: 0000200000000200 RDI: 000000000000000a [ 396.818745][T14075] RBP: 00007f7b7a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 396.818755][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.818765][T14075] R13: 0000000000000000 R14: 00007f7b799b5fa0 R15: 00007ffe40a47ae8 [ 396.818795][T14075] [ 396.861943][T14077] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 397.157057][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 397.243316][T14086] FAULT_INJECTION: forcing a failure. [ 397.243316][T14086] name failslab, interval 1, probability 0, space 0, times 0 [ 397.259791][T14086] CPU: 1 UID: 0 PID: 14086 Comm: syz.4.2821 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 397.259823][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.259848][T14086] Call Trace: [ 397.259857][T14086] [ 397.259867][T14086] dump_stack_lvl+0x189/0x250 [ 397.259907][T14086] ? __pfx____ratelimit+0x10/0x10 [ 397.259936][T14086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.259968][T14086] ? __pfx__printk+0x10/0x10 [ 397.259998][T14086] ? __pfx___might_resched+0x10/0x10 [ 397.260023][T14086] should_fail_ex+0x414/0x560 [ 397.260058][T14086] should_failslab+0xa8/0x100 [ 397.260084][T14086] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 397.260108][T14086] ? __get_vm_area_node+0x13f/0x300 [ 397.260135][T14086] __get_vm_area_node+0x13f/0x300 [ 397.260163][T14086] __vmalloc_node_range_noprof+0x301/0x12f0 [ 397.260188][T14086] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 397.260220][T14086] ? is_bpf_text_address+0x26/0x2b0 [ 397.260268][T14086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.260290][T14086] ? __might_fault+0xb0/0x130 [ 397.260310][T14086] ? __pfx_aa_get_newest_label+0x10/0x10 [ 397.260337][T14086] ? _parse_integer_limit+0x1ae/0x1f0 [ 397.260372][T14086] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 397.260401][T14086] __vmalloc_noprof+0xb1/0xf0 [ 397.260423][T14086] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 397.260456][T14086] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 397.260491][T14086] bpf_prog_alloc+0x3c/0x1a0 [ 397.260521][T14086] bpf_prog_load+0x735/0x1930 [ 397.260560][T14086] ? __pfx_bpf_prog_load+0x10/0x10 [ 397.260612][T14086] ? bpf_lsm_bpf+0x9/0x20 [ 397.260629][T14086] ? security_bpf+0x7e/0x300 [ 397.260656][T14086] __sys_bpf+0x5f1/0x860 [ 397.260685][T14086] ? __pfx___sys_bpf+0x10/0x10 [ 397.260728][T14086] ? ksys_write+0x22a/0x250 [ 397.260759][T14086] ? __pfx_ksys_write+0x10/0x10 [ 397.260775][T14086] ? rcu_is_watching+0x15/0xb0 [ 397.260802][T14086] __x64_sys_bpf+0x7c/0x90 [ 397.260828][T14086] do_syscall_64+0xfa/0x3b0 [ 397.260856][T14086] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.260882][T14086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.260902][T14086] ? clear_bhb_loop+0x60/0xb0 [ 397.260927][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.260945][T14086] RIP: 0033:0x7fdf85b8e929 [ 397.260965][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.260983][T14086] RSP: 002b:00007fdf869cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.261005][T14086] RAX: ffffffffffffffda RBX: 00007fdf85db5fa0 RCX: 00007fdf85b8e929 [ 397.261020][T14086] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 397.261032][T14086] RBP: 00007fdf869cc090 R08: 0000000000000000 R09: 0000000000000000 [ 397.261045][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.261057][T14086] R13: 0000000000000000 R14: 00007fdf85db5fa0 R15: 00007ffed5c2bd58 [ 397.261099][T14086] [ 397.623601][T13526] tipc: Disabling bearer [ 397.637107][T13526] tipc: Left network mode [ 397.642697][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2823'. [ 397.653346][T14091] FAULT_INJECTION: forcing a failure. [ 397.653346][T14091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.667168][T14091] CPU: 1 UID: 0 PID: 14091 Comm: syz.3.2822 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 397.667193][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.667208][T14091] Call Trace: [ 397.667216][T14091] [ 397.667224][T14091] dump_stack_lvl+0x189/0x250 [ 397.667262][T14091] ? __pfx____ratelimit+0x10/0x10 [ 397.667290][T14091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.667320][T14091] ? __pfx__printk+0x10/0x10 [ 397.667344][T14091] ? fs_reclaim_acquire+0x7d/0x100 [ 397.667378][T14091] should_fail_ex+0x414/0x560 [ 397.667412][T14091] prepare_alloc_pages+0x213/0x610 [ 397.667445][T14091] __alloc_frozen_pages_noprof+0x123/0x370 [ 397.667486][T14091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 397.667520][T14091] ? policy_nodemask+0x27c/0x720 [ 397.667548][T14091] alloc_pages_mpol+0x232/0x4a0 [ 397.667575][T14091] alloc_pages_noprof+0xa9/0x190 [ 397.667599][T14091] bpf_prog_test_run_xdp+0xb8d/0x1000 [ 397.667638][T14091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.667664][T14091] ? __fget_files+0x2a/0x420 [ 397.667693][T14091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.667715][T14091] bpf_prog_test_run+0x2c7/0x340 [ 397.667750][T14091] __sys_bpf+0x4a4/0x860 [ 397.667780][T14091] ? __pfx___sys_bpf+0x10/0x10 [ 397.667824][T14091] ? ksys_write+0x22a/0x250 [ 397.667846][T14091] ? __pfx_ksys_write+0x10/0x10 [ 397.667863][T14091] ? rcu_is_watching+0x15/0xb0 [ 397.667905][T14091] __x64_sys_bpf+0x7c/0x90 [ 397.667932][T14091] do_syscall_64+0xfa/0x3b0 [ 397.667959][T14091] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.667985][T14091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.668005][T14091] ? clear_bhb_loop+0x60/0xb0 [ 397.668031][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.668050][T14091] RIP: 0033:0x7f7b7978e929 [ 397.668070][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.668087][T14091] RSP: 002b:00007f7b7a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.668109][T14091] RAX: ffffffffffffffda RBX: 00007f7b799b5fa0 RCX: 00007f7b7978e929 [ 397.668125][T14091] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 397.668138][T14091] RBP: 00007f7b7a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 397.668150][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.668162][T14091] R13: 0000000000000000 R14: 00007f7b799b5fa0 R15: 00007ffe40a47ae8 [ 397.668193][T14091] [ 397.988047][T14089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2823'. [ 398.036318][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.046151][T13999] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.098348][T13999] bridge_slave_0: entered allmulticast mode [ 398.165134][T13999] bridge_slave_0: entered promiscuous mode [ 398.172987][T14071] infiniband syz!: set down [ 398.178000][T14071] infiniband syz!: added team_slave_0 [ 398.187129][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2824'. [ 398.191175][T14071] syz!: rxe_create_cq: returned err = -12 [ 398.204064][T14071] infiniband syz!: Couldn't create ib_mad CQ [ 398.210973][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2824'. [ 398.220495][T14071] infiniband syz!: Couldn't open port 1 [ 398.290195][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.305902][T13999] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.323193][T13999] bridge_slave_1: entered allmulticast mode [ 398.331570][T14071] RDS/IB: syz!: added [ 398.336469][T14071] smc: adding ib device syz! with port count 1 [ 398.349784][T13999] bridge_slave_1: entered promiscuous mode [ 398.363833][T14071] smc: ib device syz! port 1 has pnetid [ 398.497673][ T5845] Bluetooth: hci4: command tx timeout [ 398.570594][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.644316][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.144351][T13999] team0: Port device team_slave_0 added [ 399.285549][T13999] team0: Port device team_slave_1 added [ 399.575080][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.598336][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.650883][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.666241][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.673638][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.700182][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.826963][T14122] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 400.005166][T13999] hsr_slave_0: entered promiscuous mode [ 400.019175][T13999] hsr_slave_1: entered promiscuous mode [ 400.036184][T13999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.045291][T13999] Cannot create hsr debugfs directory [ 400.399335][T14136] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2839'. [ 400.578225][ T5845] Bluetooth: hci4: command tx timeout [ 401.070231][T13999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.098615][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 401.107787][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 401.118284][T13999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.140211][T13999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.162578][T13999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.443542][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.491788][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.546196][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.553507][T13521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.569185][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.576464][T13521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.724438][T13999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.187693][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.273965][T13999] veth0_vlan: entered promiscuous mode [ 402.298984][T13999] veth1_vlan: entered promiscuous mode [ 402.330193][T14185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2853'. [ 402.364366][T13999] veth0_macvtap: entered promiscuous mode [ 402.385862][T13999] veth1_macvtap: entered promiscuous mode [ 402.422932][T13999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.451761][T13999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.473767][T13999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.491867][T13999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.528155][T13999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.536933][T13999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.747865][T14189] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2855'. [ 402.793112][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.806338][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.945848][T13525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.967320][T13525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.077910][T14193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2857'. [ 403.601955][T14204] netlink: 'syz.4.2858': attribute type 4 has an invalid length. [ 404.542894][T13526] hsr_slave_0: left promiscuous mode [ 404.555296][T13526] hsr_slave_1: left promiscuous mode [ 404.599209][T13526] veth1_macvtap: left promiscuous mode [ 404.608194][T13526] veth0_macvtap: left promiscuous mode [ 404.615395][T13526] veth1_vlan: left allmulticast mode [ 404.622362][T13526] veth1_vlan: left promiscuous mode [ 404.651178][T14228] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 405.694883][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.715686][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.724383][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.737991][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.745913][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.832022][T13526] batadv_slave_0 (unregistering): left allmulticast mode [ 405.879768][T14235] xt_CT: No such helper "snmp" [ 406.162680][T13526] batadv0 (unregistering): left allmulticast mode [ 407.054378][T13526] IPVS: stop unused estimator thread 0... [ 407.238583][T14252] xt_CT: No such helper "snmp" [ 407.521803][T13526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.558830][T14262] Bluetooth: MGMT ver 1.23 [ 407.859563][ T5837] Bluetooth: hci0: command tx timeout [ 407.964347][T13526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.175753][T13526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.372129][T13526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.509193][T14282] FAULT_INJECTION: forcing a failure. [ 408.509193][T14282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.550829][T14282] CPU: 0 UID: 0 PID: 14282 Comm: syz.1.2884 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 408.550863][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.550876][T14282] Call Trace: [ 408.550884][T14282] [ 408.550893][T14282] dump_stack_lvl+0x189/0x250 [ 408.550932][T14282] ? __pfx____ratelimit+0x10/0x10 [ 408.550962][T14282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.550994][T14282] ? __pfx__printk+0x10/0x10 [ 408.551066][T14282] ? fs_reclaim_acquire+0x7d/0x100 [ 408.551103][T14282] should_fail_ex+0x414/0x560 [ 408.551138][T14282] prepare_alloc_pages+0x213/0x610 [ 408.551173][T14282] __alloc_frozen_pages_noprof+0x123/0x370 [ 408.551206][T14282] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.551246][T14282] ? policy_nodemask+0x27c/0x720 [ 408.551265][T14282] ? __lock_acquire+0xab9/0xd20 [ 408.551315][T14282] alloc_pages_mpol+0x232/0x4a0 [ 408.551343][T14282] alloc_pages_noprof+0xa9/0x190 [ 408.551368][T14282] get_free_pages_noprof+0xf/0x80 [ 408.551395][T14282] kasan_populate_vmalloc+0x33/0x1a0 [ 408.551425][T14282] ? do_raw_spin_unlock+0x122/0x240 [ 408.551455][T14282] alloc_vmap_area+0xd51/0x1490 [ 408.551494][T14282] ? __pfx_alloc_vmap_area+0x10/0x10 [ 408.551515][T14282] ? __kasan_kmalloc+0x93/0xb0 [ 408.551537][T14282] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 408.551566][T14282] ? __get_vm_area_node+0x13f/0x300 [ 408.551588][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.551620][T14282] __get_vm_area_node+0x1f8/0x300 [ 408.551650][T14282] __vmalloc_node_range_noprof+0x301/0x12f0 [ 408.551674][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.551706][T14282] ? is_bpf_text_address+0x26/0x2b0 [ 408.551753][T14282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.551775][T14282] ? __might_fault+0xb0/0x130 [ 408.551795][T14282] ? __pfx_aa_get_newest_label+0x10/0x10 [ 408.551828][T14282] ? _parse_integer_limit+0x1ae/0x1f0 [ 408.551864][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.551891][T14282] __vmalloc_noprof+0xb1/0xf0 [ 408.551914][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.551948][T14282] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.551984][T14282] bpf_prog_alloc+0x3c/0x1a0 [ 408.552017][T14282] bpf_prog_load+0x735/0x1930 [ 408.552061][T14282] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.552116][T14282] ? bpf_lsm_bpf+0x9/0x20 [ 408.552133][T14282] ? security_bpf+0x7e/0x300 [ 408.552169][T14282] __sys_bpf+0x5f1/0x860 [ 408.552199][T14282] ? __pfx___sys_bpf+0x10/0x10 [ 408.552243][T14282] ? ksys_write+0x22a/0x250 [ 408.552266][T14282] ? __pfx_ksys_write+0x10/0x10 [ 408.552283][T14282] ? rcu_is_watching+0x15/0xb0 [ 408.552312][T14282] __x64_sys_bpf+0x7c/0x90 [ 408.552339][T14282] do_syscall_64+0xfa/0x3b0 [ 408.552365][T14282] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.552391][T14282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.552412][T14282] ? clear_bhb_loop+0x60/0xb0 [ 408.552437][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.552457][T14282] RIP: 0033:0x7f66b9d8e929 [ 408.552477][T14282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.552494][T14282] RSP: 002b:00007f66bab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.552515][T14282] RAX: ffffffffffffffda RBX: 00007f66b9fb5fa0 RCX: 00007f66b9d8e929 [ 408.552530][T14282] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 408.552541][T14282] RBP: 00007f66bab96090 R08: 0000000000000000 R09: 0000000000000000 [ 408.552559][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.552571][T14282] R13: 0000000000000000 R14: 00007f66b9fb5fa0 R15: 00007fffd3d8b2c8 [ 408.552604][T14282] [ 408.552656][T14282] warn_alloc: 1 callbacks suppressed [ 408.552668][T14282] syz.1.2884: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 408.576049][T14277] xt_CT: No such helper "snmp" [ 408.725983][T14232] chnl_net:caif_netlink_parms(): no params data found [ 408.756392][T14282] ,cpuset= [ 408.870055][T14286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2885'. [ 408.879181][T14287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2885'. [ 408.982898][T14282] /,mems_allowed=0-1 [ 408.987009][T14282] CPU: 0 UID: 0 PID: 14282 Comm: syz.1.2884 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 408.987038][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.987051][T14282] Call Trace: [ 408.987061][T14282] [ 408.987070][T14282] dump_stack_lvl+0x189/0x250 [ 408.987110][T14282] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 408.987139][T14282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.987171][T14282] ? __pfx__printk+0x10/0x10 [ 408.987194][T14282] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.987220][T14282] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.987251][T14282] warn_alloc+0x214/0x310 [ 408.987275][T14282] ? kasan_quarantine_put+0xdd/0x220 [ 408.987306][T14282] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.987336][T14282] ? __pfx_warn_alloc+0x10/0x10 [ 408.987362][T14282] ? kfree+0x18e/0x440 [ 408.987378][T14282] ? __get_vm_area_node+0x13f/0x300 [ 408.987402][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.987434][T14282] ? __get_vm_area_node+0x211/0x300 [ 408.987463][T14282] __vmalloc_node_range_noprof+0x326/0x12f0 [ 408.987503][T14282] ? is_bpf_text_address+0x26/0x2b0 [ 408.987547][T14282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.987569][T14282] ? __might_fault+0xb0/0x130 [ 408.987589][T14282] ? __pfx_aa_get_newest_label+0x10/0x10 [ 408.987617][T14282] ? _parse_integer_limit+0x1ae/0x1f0 [ 408.987653][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.987680][T14282] __vmalloc_noprof+0xb1/0xf0 [ 408.987703][T14282] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.987736][T14282] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 408.987779][T14282] bpf_prog_alloc+0x3c/0x1a0 [ 408.987812][T14282] bpf_prog_load+0x735/0x1930 [ 408.987856][T14282] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.987912][T14282] ? bpf_lsm_bpf+0x9/0x20 [ 408.987930][T14282] ? security_bpf+0x7e/0x300 [ 408.987958][T14282] __sys_bpf+0x5f1/0x860 [ 408.987990][T14282] ? __pfx___sys_bpf+0x10/0x10 [ 408.988033][T14282] ? ksys_write+0x22a/0x250 [ 408.988056][T14282] ? __pfx_ksys_write+0x10/0x10 [ 408.988074][T14282] ? rcu_is_watching+0x15/0xb0 [ 408.988101][T14282] __x64_sys_bpf+0x7c/0x90 [ 408.988129][T14282] do_syscall_64+0xfa/0x3b0 [ 408.988154][T14282] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.988180][T14282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.988201][T14282] ? clear_bhb_loop+0x60/0xb0 [ 408.988226][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.988246][T14282] RIP: 0033:0x7f66b9d8e929 [ 408.988265][T14282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.988282][T14282] RSP: 002b:00007f66bab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.988304][T14282] RAX: ffffffffffffffda RBX: 00007f66b9fb5fa0 RCX: 00007f66b9d8e929 [ 408.988325][T14282] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 408.988339][T14282] RBP: 00007f66bab96090 R08: 0000000000000000 R09: 0000000000000000 [ 408.988352][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.988363][T14282] R13: 0000000000000000 R14: 00007f66b9fb5fa0 R15: 00007fffd3d8b2c8 [ 408.988396][T14282] [ 409.307460][T14282] Mem-Info: [ 409.310643][T14282] active_anon:7867 inactive_anon:0 isolated_anon:0 [ 409.310643][T14282] active_file:2078 inactive_file:39952 isolated_file:0 [ 409.310643][T14282] unevictable:768 dirty:113 writeback:0 [ 409.310643][T14282] slab_reclaimable:12411 slab_unreclaimable:112100 [ 409.310643][T14282] mapped:32507 shmem:4249 pagetables:924 [ 409.310643][T14282] sec_pagetables:0 bounce:0 [ 409.310643][T14282] kernel_misc_reclaimable:0 [ 409.310643][T14282] free:1305046 free_pcp:20111 free_cma:0 [ 409.364720][T14282] Node 0 active_anon:31404kB inactive_anon:0kB active_file:8312kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133936kB dirty:456kB writeback:0kB shmem:15460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13360kB pagetables:3632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.426588][T14282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.460111][T14282] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.491342][T14282] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 409.493116][T13526] bridge_slave_1: left allmulticast mode [ 409.497408][T14282] Node 0 DMA32 free:1301560kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31460kB inactive_anon:0kB active_file:8312kB inactive_file:157776kB unevictable:1536kB writepending:452kB present:3129332kB managed:2561076kB mlocked:0kB bounce:0kB free_pcp:59840kB local_pcp:23068kB free_cma:0kB [ 409.536051][T14282] lowmem_reserve[]: 0 0 1 1 1 [ 409.540374][T13526] bridge_slave_1: left promiscuous mode [ 409.543178][T14282] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 409.575946][T14282] lowmem_reserve[]: 0 0 0 0 0 [ 409.577809][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.581627][T14282] Node 1 Normal free:3907060kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:8576kB free_cma:0kB [ 409.620839][T14282] lowmem_reserve[]: 0 0 0 0 0 [ 409.625783][T14282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.638820][T14282] Node 0 DMA32: 650*4kB (UME) 110*8kB (UME) 64*16kB (UME) 47*32kB (U) 8*64kB (UE) 18*128kB (UM) 12*256kB (UM) 35*512kB (UM) 14*1024kB (UME) 2*2048kB (UM) 306*4096kB (UM) = 1301624kB [ 409.639212][T13526] bridge_slave_0: left allmulticast mode [ 409.657146][T14282] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 409.657429][T14282] Node 1 Normal: 177*4kB (UE) 56*8kB (UME) 37*16kB (UME) 113*32kB (UME) 30*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3907060kB [ 409.690884][T13526] bridge_slave_0: left promiscuous mode [ 409.695010][T14282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.709971][T14282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.718020][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.719640][T14282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.739258][T14282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.749075][T14282] 46276 total pagecache pages [ 409.753992][T14282] 0 pages in swap cache [ 409.759028][T14282] Free swap = 124996kB [ 409.763352][T14282] Total swap = 124996kB [ 409.767910][T14282] 2097051 pages RAM [ 409.771906][T14282] 0 pages HighMem/MovableOnly [ 409.776726][T14282] 424676 pages reserved [ 409.788537][T14282] 0 pages cma reserved [ 409.874209][T14296] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2888'. [ 409.939453][ T5837] Bluetooth: hci0: command tx timeout [ 410.002319][T13526] bond1 (unregistering): (slave gretap1): Releasing active interface [ 410.058768][T13526] dvmrp1 (unregistering): left allmulticast mode [ 410.433604][T13526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.444232][T13526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.453759][T13526] bond0 (unregistering): Released all slaves [ 410.566862][T13526] bond1 (unregistering): Released all slaves [ 410.691682][T13526] bond2 (unregistering): (slave bond3): Releasing backup interface [ 410.699869][T13526] bond3 (unregistering): left promiscuous mode [ 410.707425][T13526] bond2 (unregistering): Released all slaves [ 410.809551][T13526] bond3 (unregistering): Released all slaves [ 410.829030][T13526] bond4 (unregistering): Released all slaves [ 411.271730][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.289655][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.300963][T14232] bridge_slave_0: entered allmulticast mode [ 411.309459][T14232] bridge_slave_0: entered promiscuous mode [ 411.424777][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.438133][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.449244][T14232] bridge_slave_1: entered allmulticast mode [ 411.485632][T14232] bridge_slave_1: entered promiscuous mode [ 411.649391][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 411.686112][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.711303][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.017708][ T5837] Bluetooth: hci0: command tx timeout [ 412.141817][T14232] team0: Port device team_slave_0 added [ 412.210620][T14232] team0: Port device team_slave_1 added [ 412.350773][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 412.616987][T14328] bridge_slave_1: left allmulticast mode [ 412.647488][T14328] bridge_slave_1: left promiscuous mode [ 412.659877][T14328] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.687018][T14328] bridge_slave_0: left promiscuous mode [ 412.693215][T14328] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.746578][T13525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.883901][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.949046][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.003266][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.172529][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.181911][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.238740][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.326821][T13526] hsr_slave_0: left promiscuous mode [ 413.339339][T13526] hsr_slave_1: left promiscuous mode [ 413.345673][T13526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.355852][T13526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.381537][T14349] x_tables: duplicate underflow at hook 1 [ 413.393017][T14349] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 413.401980][T14349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2902'. [ 413.456848][T14350] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2902'. [ 413.472832][T14350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2902'. [ 413.883972][T13526] team0 (unregistering): Port device team_slave_1 removed [ 413.944732][T13526] team0 (unregistering): Port device team_slave_0 removed [ 413.955725][T13521] smc: removing ib device syz! [ 414.101763][ T5837] Bluetooth: hci0: command tx timeout [ 414.747948][T14232] hsr_slave_0: entered promiscuous mode [ 414.768017][T14232] hsr_slave_1: entered promiscuous mode [ 415.514402][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 415.530184][T14359] tipc: Started in network mode [ 415.535387][T14359] tipc: Node identity 000000000063d6f27a775af94e000001, cluster identity 4711 [ 415.546946][T14359] tipc: Enabling of bearer rejected, failed to enable media [ 415.836297][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 415.959414][T10152] IPVS: starting estimator thread 0... [ 415.969175][T14379] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.057335][T14381] IPVS: using max 28 ests per chain, 67200 per kthread [ 416.212290][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 416.494780][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 416.516313][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2916'. [ 416.685056][T14397] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.701829][T14395] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20004 [ 416.754686][T14402] xt_hashlimit: max too large, truncated to 1048576 [ 416.766213][T14402] netlink: 'syz.0.2917': attribute type 3 has an invalid length. [ 416.778025][T14402] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2917'. [ 416.827021][T14404] FAULT_INJECTION: forcing a failure. [ 416.827021][T14404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.852193][T14404] CPU: 0 UID: 0 PID: 14404 Comm: syz.3.2918 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 416.852226][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.852239][T14404] Call Trace: [ 416.852247][T14404] [ 416.852257][T14404] dump_stack_lvl+0x189/0x250 [ 416.852297][T14404] ? __pfx____ratelimit+0x10/0x10 [ 416.852325][T14404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.852356][T14404] ? __pfx__printk+0x10/0x10 [ 416.852379][T14404] ? __might_fault+0xb0/0x130 [ 416.852413][T14404] should_fail_ex+0x414/0x560 [ 416.852447][T14404] _copy_from_user+0x2d/0xb0 [ 416.852470][T14404] __sys_bpf+0x1ed/0x860 [ 416.852503][T14404] ? __pfx___sys_bpf+0x10/0x10 [ 416.852546][T14404] ? ksys_write+0x22a/0x250 [ 416.852570][T14404] ? __pfx_ksys_write+0x10/0x10 [ 416.852587][T14404] ? rcu_is_watching+0x15/0xb0 [ 416.852616][T14404] __x64_sys_bpf+0x7c/0x90 [ 416.852643][T14404] do_syscall_64+0xfa/0x3b0 [ 416.852669][T14404] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.852695][T14404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.852715][T14404] ? clear_bhb_loop+0x60/0xb0 [ 416.852741][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.852760][T14404] RIP: 0033:0x7f7b7978e929 [ 416.852780][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.852797][T14404] RSP: 002b:00007f7b7a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.852818][T14404] RAX: ffffffffffffffda RBX: 00007f7b799b5fa0 RCX: 00007f7b7978e929 [ 416.852833][T14404] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 416.852847][T14404] RBP: 00007f7b7a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 416.852860][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.852871][T14404] R13: 0000000000000000 R14: 00007f7b799b5fa0 R15: 00007ffe40a47ae8 [ 416.852905][T14404] [ 417.144911][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 417.233038][T14232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.233204][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 417.253384][T14410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2920'. [ 417.302514][T14232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.329999][T14232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.359088][T14232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.584481][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2927'. [ 417.678632][T14232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.778441][T14445] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.806259][T14445] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20004 [ 417.829531][T14448] netlink: 'syz.0.2932': attribute type 13 has an invalid length. [ 417.964270][T14232] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.002350][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.009684][T13521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.030929][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.038203][T13521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.676978][T14484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.735221][T14484] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004 [ 418.859976][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.021026][T14232] veth0_vlan: entered promiscuous mode [ 419.051485][T14232] veth1_vlan: entered promiscuous mode [ 419.199679][T14232] veth0_macvtap: entered promiscuous mode [ 419.243443][T14232] veth1_macvtap: entered promiscuous mode [ 419.404626][T14232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.436872][T14232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.437058][T13521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.481561][T13521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.532032][T14521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.539771][T14521] IPv6: NLM_F_CREATE should be set when creating new route [ 419.547077][T14521] IPv6: NLM_F_CREATE should be set when creating new route [ 419.554464][T14521] IPv6: NLM_F_CREATE should be set when creating new route [ 419.679467][T14232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.697786][T14232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.707117][T14232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.726741][T14232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.829039][T14528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.853794][T14528] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004 [ 419.895072][T14529] xt_CT: No such helper "snmp" [ 420.175108][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.203476][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.286088][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.305965][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.931626][T14570] xt_CT: No such helper "snmp" [ 421.145452][T14587] __nla_validate_parse: 5 callbacks suppressed [ 421.145474][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.193663][T14588] x_tables: duplicate underflow at hook 1 [ 421.213006][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.227414][T14588] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 421.237656][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.268295][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.271191][T14588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2977'. [ 421.304018][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.330853][T14588] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2977'. [ 421.341059][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.358346][T14588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2977'. [ 421.368235][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.417368][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.426711][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.459352][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 421.503987][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.566014][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.628220][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.676380][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.692608][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.768692][T14587] validate_nla: 47 callbacks suppressed [ 421.768732][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.788074][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.813544][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.842138][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.852311][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.868789][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.879589][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.902225][T14587] netlink: 'syz.0.2976': attribute type 14 has an invalid length. [ 421.911873][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.181135][T14623] xt_CT: No such helper "snmp" [ 422.495349][T14633] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 422.725016][T14607] chnl_net:caif_netlink_parms(): no params data found [ 422.898469][T14607] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.905763][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.913777][T14607] bridge_slave_0: entered allmulticast mode [ 422.922303][T14607] bridge_slave_0: entered promiscuous mode [ 422.931730][T14607] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.939240][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.946661][T14607] bridge_slave_1: entered allmulticast mode [ 422.954961][T14607] bridge_slave_1: entered promiscuous mode [ 423.047105][T14607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.074550][T14607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.220156][T14607] team0: Port device team_slave_0 added [ 423.240236][T14607] team0: Port device team_slave_1 added [ 423.306282][T14607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.327291][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.382912][T14607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.414629][T14607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.433090][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.460395][T14607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.590070][T14607] hsr_slave_0: entered promiscuous mode [ 423.597182][T14607] hsr_slave_1: entered promiscuous mode [ 423.607026][T14607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.623618][T14607] Cannot create hsr debugfs directory [ 423.761946][T14667] netlink: 'syz.3.3000': attribute type 72 has an invalid length. [ 424.018298][ T5845] Bluetooth: hci3: command tx timeout [ 424.334051][T14691] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 424.504405][T14607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.519878][T14607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.536507][T14607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.556762][T14607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.585687][T14698] netlink: 'syz.1.3014': attribute type 72 has an invalid length. [ 424.713940][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.763240][T14607] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.787725][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.794903][T13529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.830348][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.837961][T13529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.273030][T14607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.439203][T14729] netlink: 'syz.2.3021': attribute type 11 has an invalid length. [ 426.037615][T14758] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 426.066404][T14607] veth0_vlan: entered promiscuous mode [ 426.098153][ T5845] Bluetooth: hci3: command tx timeout [ 426.154209][T14607] veth1_vlan: entered promiscuous mode [ 426.294041][T14607] veth0_macvtap: entered promiscuous mode [ 426.325431][T14607] veth1_macvtap: entered promiscuous mode [ 426.405368][T14607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.471087][T14607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.546684][T14607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.584120][T14607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.594287][T14607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.608695][T14607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.941462][T14773] dvmrp1: entered allmulticast mode [ 426.972136][T14773] __nla_validate_parse: 113 callbacks suppressed [ 426.972159][T14773] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3036'. [ 427.019495][T13527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.027538][T13527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.162590][T13529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.189626][T13529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.388715][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.471877][T14787] xt_CT: No such helper "snmp" [ 428.178285][ T5845] Bluetooth: hci3: command tx timeout [ 428.267966][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 428.515991][T14834] gre0: entered promiscuous mode [ 428.748367][T14843] bridge0: port 1(veth0_to_bridge) entered blocking state [ 428.761410][T14843] bridge0: port 1(veth0_to_bridge) entered disabled state [ 428.769784][T14843] veth0_to_bridge: entered allmulticast mode [ 428.778230][T14843] veth0_to_bridge: entered promiscuous mode [ 428.814649][T14849] netlink: 'syz.3.3063': attribute type 10 has an invalid length. [ 428.940949][T14849] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.169706][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 429.193415][T14864] tipc: Enabling of bearer rejected, media not registered [ 429.264974][T14864] tipc: Started in network mode [ 429.282705][T14864] tipc: Node identity , cluster identity 4711 [ 429.296582][T14864] tipc: Failed to set node id, please configure manually [ 429.315287][T14864] tipc: Enabling of bearer rejected, failed to enable media [ 429.501128][T14878] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 429.579824][T14878] bond1 (unregistering): Released all slaves [ 430.259024][ T5845] Bluetooth: hci3: command tx timeout [ 430.375263][T14889] team0 (unregistering): Port device team_slave_0 removed [ 430.422061][T14889] team0 (unregistering): Port device team_slave_1 removed [ 430.810627][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.821504][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.830060][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.842550][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.856796][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.022607][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 431.082344][T14923] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3093'. [ 431.301400][T13529] wlan1: Trigger new scan to find an IBSS to join [ 431.467075][T14941] FAULT_INJECTION: forcing a failure. [ 431.467075][T14941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.516867][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.1.3098 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 431.516898][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.516922][T14941] Call Trace: [ 431.516931][T14941] [ 431.516940][T14941] dump_stack_lvl+0x189/0x250 [ 431.516978][T14941] ? __pfx____ratelimit+0x10/0x10 [ 431.517005][T14941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.517036][T14941] ? __pfx__printk+0x10/0x10 [ 431.517072][T14941] should_fail_ex+0x414/0x560 [ 431.517106][T14941] _copy_to_user+0x31/0xb0 [ 431.517130][T14941] bpf_test_finish+0x1ab/0x700 [ 431.517161][T14941] ? __pfx_bpf_test_finish+0x10/0x10 [ 431.517190][T14941] ? rep_movs_alternative+0x4a/0x90 [ 431.517214][T14941] bpf_prog_test_run_xdp+0x79a/0x1000 [ 431.517251][T14941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.517276][T14941] ? __fget_files+0x2a/0x420 [ 431.517305][T14941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.517325][T14941] bpf_prog_test_run+0x2c7/0x340 [ 431.517359][T14941] __sys_bpf+0x4a4/0x860 [ 431.517389][T14941] ? __pfx___sys_bpf+0x10/0x10 [ 431.517430][T14941] ? ksys_write+0x22a/0x250 [ 431.517453][T14941] ? __pfx_ksys_write+0x10/0x10 [ 431.517469][T14941] ? rcu_is_watching+0x15/0xb0 [ 431.517494][T14941] __x64_sys_bpf+0x7c/0x90 [ 431.517520][T14941] do_syscall_64+0xfa/0x3b0 [ 431.517544][T14941] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.517569][T14941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.517589][T14941] ? clear_bhb_loop+0x60/0xb0 [ 431.517614][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.517653][T14941] RIP: 0033:0x7f66b9d8e929 [ 431.517671][T14941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.517693][T14941] RSP: 002b:00007f66bab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.517714][T14941] RAX: ffffffffffffffda RBX: 00007f66b9fb5fa0 RCX: 00007f66b9d8e929 [ 431.517729][T14941] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 431.517741][T14941] RBP: 00007f66bab96090 R08: 0000000000000000 R09: 0000000000000000 [ 431.517754][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.517766][T14941] R13: 0000000000000000 R14: 00007f66b9fb5fa0 R15: 00007fffd3d8b2c8 [ 431.517796][T14941] [ 431.529450][T14913] chnl_net:caif_netlink_parms(): no params data found [ 432.026724][T14964] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3106'. [ 432.059962][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.109611][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.133007][T14913] bridge_slave_0: entered allmulticast mode [ 432.149751][T14957] xt_CT: No such helper "snmp" [ 432.158217][T14913] bridge_slave_0: entered promiscuous mode [ 432.219161][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.245051][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.272950][T14913] bridge_slave_1: entered allmulticast mode [ 432.291119][T14913] bridge_slave_1: entered promiscuous mode [ 432.369446][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.392412][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.510262][T14913] team0: Port device team_slave_0 added [ 432.526905][T14913] team0: Port device team_slave_1 added [ 432.681715][T14983] bond12: entered promiscuous mode [ 432.706718][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 432.706848][T14983] 8021q: adding VLAN 0 to HW filter on device bond12 [ 432.716459][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 432.735699][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 432.762579][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.816766][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.867534][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.898169][ T5837] Bluetooth: hci1: command tx timeout [ 432.948485][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.955622][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.961319][T15001] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3119'. [ 432.983703][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.163006][T15002] xt_CT: No such helper "snmp" [ 433.243354][T14913] hsr_slave_0: entered promiscuous mode [ 433.253826][T14913] hsr_slave_1: entered promiscuous mode [ 433.261759][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.269519][T14913] Cannot create hsr debugfs directory [ 433.784672][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 433.822369][T14913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.850280][T14913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43844 - 0 [ 433.866291][T14913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 55816 - 0 [ 434.024717][T15038] xt_CT: No such helper "snmp" [ 434.044527][T14913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.074519][T14913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43844 - 0 [ 434.102787][T14913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 55816 - 0 [ 434.206011][T15050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3136'. [ 434.243261][T14913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.254481][T14913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43844 - 0 [ 434.274098][T14913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55816 - 0 [ 434.434386][T14913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.455412][T14913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43844 - 0 [ 434.474045][T14913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 55816 - 0 [ 434.948349][T15073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3142'. [ 434.987766][ T5837] Bluetooth: hci1: command tx timeout [ 435.081867][T14913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.117018][T14913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.188609][T14913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.241142][T14913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.534195][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.730758][T15104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'. [ 435.815794][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.829033][T15099] syzkaller0: entered promiscuous mode [ 435.834797][T15099] syzkaller0: entered allmulticast mode [ 435.874355][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.881694][T13521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.921784][T15111] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20004 [ 436.030595][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.038958][T13521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.259315][T13527] wlan1: Trigger new scan to find an IBSS to join [ 436.640993][T15132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.758532][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.782859][T15137] hsr0: entered promiscuous mode [ 436.802416][T15137] macvtap1: entered promiscuous mode [ 436.819440][T15137] macvtap1: entered allmulticast mode [ 436.825993][T15137] hsr0: entered allmulticast mode [ 436.836051][T15137] hsr_slave_0: entered allmulticast mode [ 436.850891][T15137] hsr_slave_1: entered allmulticast mode [ 436.865238][T15137] hsr0: left allmulticast mode [ 436.870976][T15137] hsr_slave_0: left allmulticast mode [ 436.876853][T15137] hsr_slave_1: left allmulticast mode [ 437.058494][ T5837] Bluetooth: hci1: command tx timeout [ 437.092908][T14913] veth0_vlan: entered promiscuous mode [ 437.108642][T14913] veth1_vlan: entered promiscuous mode [ 437.126056][T15145] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3165'. [ 437.171080][T14913] veth0_macvtap: entered promiscuous mode [ 437.202344][T14913] veth1_macvtap: entered promiscuous mode [ 437.245122][T13525] wlan1: Creating new IBSS network, BSSID b6:14:fe:10:e4:0c [ 437.275412][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.329836][T15148] xt_CT: No such helper "snmp" [ 437.335064][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.365240][T14913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.379468][T15152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3167'. [ 437.388868][T14913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.417978][T14913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.426825][T14913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.680630][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.732312][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.808909][T15167] FAULT_INJECTION: forcing a failure. [ 437.808909][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 437.826842][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.0.3169 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 437.826871][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.826883][T15167] Call Trace: [ 437.826891][T15167] [ 437.826900][T15167] dump_stack_lvl+0x189/0x250 [ 437.826938][T15167] ? __pfx____ratelimit+0x10/0x10 [ 437.826949][T13525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.826964][T15167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.826993][T15167] ? __pfx__printk+0x10/0x10 [ 437.827017][T15167] ? __pfx___might_resched+0x10/0x10 [ 437.827037][T15167] ? fs_reclaim_acquire+0x7d/0x100 [ 437.827072][T15167] should_fail_ex+0x414/0x560 [ 437.827111][T15167] should_failslab+0xa8/0x100 [ 437.827149][T15167] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 437.827176][T15167] ? __alloc_skb+0x112/0x2d0 [ 437.827202][T15167] ? bpf_bprintf_prepare+0x146/0x1450 [ 437.827237][T15167] __alloc_skb+0x112/0x2d0 [ 437.827263][T15167] alloc_skb_with_frags+0xca/0x890 [ 437.827287][T15167] ? aa_label_sk_perm+0x413/0x560 [ 437.827318][T15167] ? __pfx___irq_work_queue_local+0x10/0x10 [ 437.827353][T15167] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 437.827383][T15167] sock_alloc_send_pskb+0x857/0x990 [ 437.827435][T15167] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 437.827475][T15167] ? aa_sk_perm+0x81e/0x950 [ 437.827506][T15167] hci_sock_sendmsg+0x207/0xef0 [ 437.827573][T15167] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 437.827599][T15167] ? aa_sock_msg_perm+0x94/0x160 [ 437.827632][T15167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.827661][T15167] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 437.827687][T15167] __sock_sendmsg+0x219/0x270 [ 437.827722][T15167] sock_write_iter+0x258/0x330 [ 437.827762][T15167] ? __pfx_sock_write_iter+0x10/0x10 [ 437.827800][T15167] ? bpf_lsm_file_permission+0x9/0x20 [ 437.827830][T15167] ? security_file_permission+0x75/0x290 [ 437.827882][T15167] vfs_write+0x54b/0xa90 [ 437.827918][T15167] ? __pfx_sock_write_iter+0x10/0x10 [ 437.827946][T15167] ? __pfx_vfs_write+0x10/0x10 [ 437.827981][T15167] ? __fget_files+0x2a/0x420 [ 437.828018][T15167] ksys_write+0x145/0x250 [ 437.828043][T15167] ? __pfx_ksys_write+0x10/0x10 [ 437.828062][T15167] ? rcu_is_watching+0x15/0xb0 [ 437.828091][T15167] ? do_syscall_64+0xbe/0x3b0 [ 437.828127][T15167] do_syscall_64+0xfa/0x3b0 [ 437.828162][T15167] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.828190][T15167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.828213][T15167] ? clear_bhb_loop+0x60/0xb0 [ 437.828241][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.828262][T15167] RIP: 0033:0x7f72b8d8e929 [ 437.828283][T15167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.828303][T15167] RSP: 002b:00007f72b9c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.828328][T15167] RAX: ffffffffffffffda RBX: 00007f72b8fb6160 RCX: 00007f72b8d8e929 [ 437.828343][T15167] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000009 [ 437.828358][T15167] RBP: 00007f72b9c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 437.828371][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.828385][T15167] R13: 0000000000000000 R14: 00007f72b8fb6160 R15: 00007fff8e80c378 [ 437.828420][T15167] [ 438.213713][T13525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.757039][T15189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3176'. [ 438.885501][T15192] xt_CT: No such helper "snmp" [ 438.994408][T15205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3183'. [ 439.006123][T15205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3183'. [ 439.041801][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 439.080436][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 439.137865][ T5837] Bluetooth: hci1: command tx timeout [ 439.258892][T15211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3185'. [ 439.407585][T15214] FAULT_INJECTION: forcing a failure. [ 439.407585][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 439.443561][T15214] CPU: 1 UID: 0 PID: 15214 Comm: syz.4.3188 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 439.443595][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.443609][T15214] Call Trace: [ 439.443618][T15214] [ 439.443627][T15214] dump_stack_lvl+0x189/0x250 [ 439.443666][T15214] ? __pfx____ratelimit+0x10/0x10 [ 439.443695][T15214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.443731][T15214] ? __pfx__printk+0x10/0x10 [ 439.443761][T15214] ? __pfx___might_resched+0x10/0x10 [ 439.443779][T15214] ? fs_reclaim_acquire+0x7d/0x100 [ 439.443816][T15214] should_fail_ex+0x414/0x560 [ 439.443851][T15214] should_failslab+0xa8/0x100 [ 439.443876][T15214] __kmalloc_cache_noprof+0x70/0x3d0 [ 439.443897][T15214] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 439.443930][T15214] __xdp_reg_mem_model+0x1d8/0x5a0 [ 439.443959][T15214] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 439.443983][T15214] ? page_pool_create_percpu+0x800/0xbe0 [ 439.444022][T15214] xdp_reg_mem_model+0x22/0x40 [ 439.444043][T15214] bpf_test_run_xdp_live+0x215/0x1b10 [ 439.444070][T15214] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 439.444113][T15214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.444153][T15214] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 439.444177][T15214] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.444198][T15214] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.444277][T15214] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 439.444308][T15214] ? _copy_from_user+0x94/0xb0 [ 439.444330][T15214] ? bpf_test_init+0x133/0x170 [ 439.444358][T15214] ? xdp_convert_md_to_buff+0x5b/0x330 [ 439.444382][T15214] bpf_prog_test_run_xdp+0x713/0x1000 [ 439.444421][T15214] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.444447][T15214] ? __fget_files+0x2a/0x420 [ 439.444477][T15214] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.444504][T15214] bpf_prog_test_run+0x2c7/0x340 [ 439.444545][T15214] __sys_bpf+0x4a4/0x860 [ 439.444581][T15214] ? __pfx___sys_bpf+0x10/0x10 [ 439.444624][T15214] ? ksys_write+0x22a/0x250 [ 439.444646][T15214] ? __pfx_ksys_write+0x10/0x10 [ 439.444663][T15214] ? rcu_is_watching+0x15/0xb0 [ 439.444691][T15214] __x64_sys_bpf+0x7c/0x90 [ 439.444718][T15214] do_syscall_64+0xfa/0x3b0 [ 439.444749][T15214] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.444778][T15214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.444799][T15214] ? clear_bhb_loop+0x60/0xb0 [ 439.444824][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.444844][T15214] RIP: 0033:0x7f097398e929 [ 439.444861][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.444879][T15214] RSP: 002b:00007f097485d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.444902][T15214] RAX: ffffffffffffffda RBX: 00007f0973bb5fa0 RCX: 00007f097398e929 [ 439.444917][T15214] RDX: 000000000000004c RSI: 0000200000000200 RDI: 000000000000000a [ 439.444930][T15214] RBP: 00007f097485d090 R08: 0000000000000000 R09: 0000000000000000 [ 439.444947][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.444959][T15214] R13: 0000000000000000 R14: 00007f0973bb5fa0 R15: 00007ffdc9190b08 [ 439.444995][T15214] [ 440.026656][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.040181][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.048541][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.057874][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.065705][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.524028][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3198'. [ 440.763338][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'. [ 440.884267][T15220] chnl_net:caif_netlink_parms(): no params data found [ 441.294906][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.336135][T15220] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.366614][T15220] bridge_slave_0: entered allmulticast mode [ 441.401039][T15220] bridge_slave_0: entered promiscuous mode [ 441.465185][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.482946][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.504701][T15220] bridge_slave_1: entered allmulticast mode [ 441.515486][T15220] bridge_slave_1: entered promiscuous mode [ 441.826459][T15270] xt_CT: No such helper "snmp" [ 441.887939][T15220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.947886][T15220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.997122][T15281] netlink: 'syz.2.3212': attribute type 1 has an invalid length. [ 442.053037][T15220] team0: Port device team_slave_0 added [ 442.065028][T15220] team0: Port device team_slave_1 added [ 442.184050][ T5845] Bluetooth: hci5: command tx timeout [ 442.260138][T15220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.267584][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.293966][T15220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.323501][T15220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.348576][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.404358][T15220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.505049][T15292] gre0: entered promiscuous mode [ 442.614782][T15298] __nla_validate_parse: 1 callbacks suppressed [ 442.614804][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 442.720831][T15220] hsr_slave_0: entered promiscuous mode [ 442.735539][T15220] hsr_slave_1: entered promiscuous mode [ 442.742659][T15220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.758162][T15220] Cannot create hsr debugfs directory [ 443.503553][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 443.962602][T15220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 443.981119][T15220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.008390][T15220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.050111][T15220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.258189][ T5845] Bluetooth: hci5: command tx timeout [ 444.300691][T15356] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3237'. [ 444.356117][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.419722][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.441766][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.449073][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.487142][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.494533][T13530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.583873][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 444.644767][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 444.761580][T15372] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 444.890171][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 445.315036][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.515621][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 445.540429][T15220] veth0_vlan: entered promiscuous mode [ 445.659422][T15220] veth1_vlan: entered promiscuous mode [ 445.747136][T15220] veth0_macvtap: entered promiscuous mode [ 445.820128][T15220] veth1_macvtap: entered promiscuous mode [ 445.887651][T15220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.936847][T15220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.010050][T15220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.041966][T15220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.056652][T15220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.067956][T15220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.337685][ T5845] Bluetooth: hci5: command tx timeout [ 446.594354][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'. [ 446.704543][T15404] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 446.715111][T15407] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3254'. [ 446.724458][T15407] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3254'. [ 446.929702][T13529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.957813][T13529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.058641][T15423] bridge0: port 3(erspan0) entered blocking state [ 447.066003][T15423] bridge0: port 3(erspan0) entered disabled state [ 447.088694][T15423] erspan0: entered allmulticast mode [ 447.103451][T15423] erspan0: entered promiscuous mode [ 447.113255][T15423] bridge0: port 3(erspan0) entered blocking state [ 447.120377][T15423] bridge0: port 3(erspan0) entered forwarding state [ 447.161722][T13525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.179606][T13525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.180821][T15429] erspan0: left allmulticast mode [ 447.204490][T15429] erspan0: left promiscuous mode [ 447.212939][T15429] bridge0: port 3(erspan0) entered disabled state [ 447.333321][T15432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.342193][T15432] batadv_slave_0: entered promiscuous mode [ 447.351778][T15433] FAULT_INJECTION: forcing a failure. [ 447.351778][T15433] name failslab, interval 1, probability 0, space 0, times 0 [ 447.407475][T15433] CPU: 0 UID: 0 PID: 15433 Comm: syz.2.3263 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 447.407507][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.407519][T15433] Call Trace: [ 447.407528][T15433] [ 447.407536][T15433] dump_stack_lvl+0x189/0x250 [ 447.407574][T15433] ? __pfx____ratelimit+0x10/0x10 [ 447.407601][T15433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.407631][T15433] ? __pfx__printk+0x10/0x10 [ 447.407658][T15433] ? __pfx___might_resched+0x10/0x10 [ 447.407676][T15433] ? fs_reclaim_acquire+0x7d/0x100 [ 447.407721][T15433] should_fail_ex+0x414/0x560 [ 447.407754][T15433] should_failslab+0xa8/0x100 [ 447.407778][T15433] __kmalloc_noprof+0xcb/0x4f0 [ 447.407797][T15433] ? kfree+0x4d/0x440 [ 447.407811][T15433] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.407846][T15433] tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.407877][T15433] ? tomoyo_domain+0xd9/0x130 [ 447.407912][T15433] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 447.407935][T15433] tomoyo_path_number_perm+0x1e8/0x5a0 [ 447.407963][T15433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.408006][T15433] ? __lock_acquire+0xab9/0xd20 [ 447.408057][T15433] ? __fget_files+0x2a/0x420 [ 447.408084][T15433] ? __fget_files+0x2a/0x420 [ 447.408105][T15433] ? __fget_files+0x3a0/0x420 [ 447.408131][T15433] ? __fget_files+0x2a/0x420 [ 447.408158][T15433] security_file_ioctl+0xcb/0x2d0 [ 447.408183][T15433] __se_sys_ioctl+0x47/0x170 [ 447.408216][T15433] do_syscall_64+0xfa/0x3b0 [ 447.408261][T15433] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.408291][T15433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.408311][T15433] ? clear_bhb_loop+0x60/0xb0 [ 447.408336][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.408356][T15433] RIP: 0033:0x7f6ba5d8e929 [ 447.408382][T15433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.408400][T15433] RSP: 002b:00007f6ba6b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.408422][T15433] RAX: ffffffffffffffda RBX: 00007f6ba5fb5fa0 RCX: 00007f6ba5d8e929 [ 447.408438][T15433] RDX: 0000200000000000 RSI: 0000000080047441 RDI: 0000000000000003 [ 447.408451][T15433] RBP: 00007f6ba6b83090 R08: 0000000000000000 R09: 0000000000000000 [ 447.408463][T15433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.408475][T15433] R13: 0000000000000000 R14: 00007f6ba5fb5fa0 R15: 00007fff725b2618 [ 447.408508][T15433] [ 447.408604][T15433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.719346][T15445] __nla_validate_parse: 2 callbacks suppressed [ 447.719370][T15445] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3265'. [ 447.902284][T15451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3266'. [ 447.925578][T15453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.995372][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 448.122396][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 448.144080][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 448.155758][T15460] netlink: 'syz.2.3268': attribute type 13 has an invalid length. [ 448.170336][T15460] netlink: 'syz.2.3268': attribute type 11 has an invalid length. [ 448.423467][ T5845] Bluetooth: hci5: command tx timeout [ 448.560721][T15473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3274'. [ 448.589665][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.706481][T15480] Bluetooth: MGMT ver 1.23 [ 448.839220][T15491] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3279'. [ 448.902480][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3281'. [ 448.931786][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 448.985813][T15498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3281'. [ 449.081362][T15493] bond1: entered promiscuous mode [ 449.086477][T15493] bond1: entered allmulticast mode [ 449.370256][T15512] x_tables: duplicate underflow at hook 1 [ 449.398047][T15512] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 449.630971][T15522] sctp: [Deprecated]: syz.2.3292 (pid 15522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.630971][T15522] Use struct sctp_sack_info instead [ 450.140809][T15531] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 450.636938][T15562] vlan2: entered allmulticast mode [ 450.653928][T15562] macvlan1: entered allmulticast mode [ 450.674620][T15562] veth1_vlan: entered allmulticast mode [ 451.057245][T15577] FAULT_INJECTION: forcing a failure. [ 451.057245][T15577] name failslab, interval 1, probability 0, space 0, times 0 [ 451.071689][T15577] CPU: 0 UID: 0 PID: 15577 Comm: syz.2.3313 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 451.071722][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.071735][T15577] Call Trace: [ 451.071745][T15577] [ 451.071754][T15577] dump_stack_lvl+0x189/0x250 [ 451.071793][T15577] ? __pfx____ratelimit+0x10/0x10 [ 451.071822][T15577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.071853][T15577] ? __pfx__printk+0x10/0x10 [ 451.071883][T15577] ? __pfx___might_resched+0x10/0x10 [ 451.071908][T15577] should_fail_ex+0x414/0x560 [ 451.071941][T15577] should_failslab+0xa8/0x100 [ 451.071966][T15577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.071989][T15577] ? __alloc_skb+0x112/0x2d0 [ 451.072014][T15577] __alloc_skb+0x112/0x2d0 [ 451.072038][T15577] netlink_sendmsg+0x5c6/0xb30 [ 451.072071][T15577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.072095][T15577] ? aa_sock_msg_perm+0x94/0x160 [ 451.072126][T15577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.072153][T15577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.072176][T15577] __sock_sendmsg+0x219/0x270 [ 451.072207][T15577] ____sys_sendmsg+0x505/0x830 [ 451.072236][T15577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.072270][T15577] ? import_iovec+0x74/0xa0 [ 451.072296][T15577] ___sys_sendmsg+0x21f/0x2a0 [ 451.072321][T15577] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.072393][T15577] ? __fget_files+0x2a/0x420 [ 451.072416][T15577] ? __fget_files+0x3a0/0x420 [ 451.072452][T15577] __x64_sys_sendmsg+0x19b/0x260 [ 451.072477][T15577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.072511][T15577] ? __pfx_ksys_write+0x10/0x10 [ 451.072529][T15577] ? rcu_is_watching+0x15/0xb0 [ 451.072555][T15577] ? do_syscall_64+0xbe/0x3b0 [ 451.072588][T15577] do_syscall_64+0xfa/0x3b0 [ 451.072614][T15577] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.072653][T15577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.072673][T15577] ? clear_bhb_loop+0x60/0xb0 [ 451.072698][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.072718][T15577] RIP: 0033:0x7f6ba5d8e929 [ 451.072737][T15577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.072755][T15577] RSP: 002b:00007f6ba6b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.072778][T15577] RAX: ffffffffffffffda RBX: 00007f6ba5fb5fa0 RCX: 00007f6ba5d8e929 [ 451.072793][T15577] RDX: 000000000004c040 RSI: 0000200000000140 RDI: 0000000000000003 [ 451.072807][T15577] RBP: 00007f6ba6b83090 R08: 0000000000000000 R09: 0000000000000000 [ 451.072820][T15577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.072832][T15577] R13: 0000000000000000 R14: 00007f6ba5fb5fa0 R15: 00007fff725b2618 [ 451.072865][T15577] [ 451.579589][T15588] dvmrp1: entered allmulticast mode [ 451.968077][T15597] tipc: Started in network mode [ 451.975541][T15597] tipc: Node identity be060a5cd6e8, cluster identity 4711 [ 451.983267][T15597] tipc: Enabled bearer , priority 0 [ 452.042623][T15597] syzkaller0: entered promiscuous mode [ 452.049464][T15597] syzkaller0: entered allmulticast mode [ 452.055941][T15597] tipc: Resetting bearer [ 452.304297][T15595] tipc: Resetting bearer [ 452.356893][T15613] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 453.028736][ T10] tipc: Node number set to 1760430684 [ 454.051933][T15595] tipc: Disabling bearer [ 454.567957][T15648] __nla_validate_parse: 12 callbacks suppressed [ 454.567981][T15648] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3337'. [ 454.651075][T15650] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3338'. [ 455.921416][T15689] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 455.973232][T15691] dvmrp1: entered allmulticast mode [ 456.063192][T15694] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3351'. [ 456.617711][T15701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3355'. [ 456.639257][T15701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.652669][T15701] batadv_slave_0: entered promiscuous mode [ 456.691047][T15705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3355'. [ 457.186181][T15721] FAULT_INJECTION: forcing a failure. [ 457.186181][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 457.271587][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.1.3360 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 457.271621][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.271634][T15721] Call Trace: [ 457.271643][T15721] [ 457.271653][T15721] dump_stack_lvl+0x189/0x250 [ 457.271693][T15721] ? __pfx____ratelimit+0x10/0x10 [ 457.271721][T15721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.271754][T15721] ? __pfx__printk+0x10/0x10 [ 457.271788][T15721] ? __pfx___might_resched+0x10/0x10 [ 457.271819][T15721] ? fs_reclaim_acquire+0x7d/0x100 [ 457.271850][T15721] should_fail_ex+0x414/0x560 [ 457.271885][T15721] should_failslab+0xa8/0x100 [ 457.271908][T15721] __kmalloc_noprof+0xcb/0x4f0 [ 457.271929][T15721] ? tomoyo_encode+0x28b/0x550 [ 457.271963][T15721] tomoyo_encode+0x28b/0x550 [ 457.271997][T15721] tomoyo_realpath_from_path+0x58d/0x5d0 [ 457.272036][T15721] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 457.272060][T15721] tomoyo_path_number_perm+0x1e8/0x5a0 [ 457.272087][T15721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 457.272130][T15721] ? __lock_acquire+0xab9/0xd20 [ 457.272181][T15721] ? __fget_files+0x2a/0x420 [ 457.272210][T15721] ? __fget_files+0x2a/0x420 [ 457.272231][T15721] ? __fget_files+0x3a0/0x420 [ 457.272253][T15721] ? __fget_files+0x2a/0x420 [ 457.272280][T15721] security_file_ioctl+0xcb/0x2d0 [ 457.272307][T15721] __se_sys_ioctl+0x47/0x170 [ 457.272340][T15721] do_syscall_64+0xfa/0x3b0 [ 457.272367][T15721] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.272391][T15721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.272410][T15721] ? clear_bhb_loop+0x60/0xb0 [ 457.272433][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.272452][T15721] RIP: 0033:0x7f467e38e929 [ 457.272470][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.272488][T15721] RSP: 002b:00007f467f258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.272510][T15721] RAX: ffffffffffffffda RBX: 00007f467e5b6080 RCX: 00007f467e38e929 [ 457.272526][T15721] RDX: 0000200000000000 RSI: 0000000080047441 RDI: 0000000000000003 [ 457.272540][T15721] RBP: 00007f467f258090 R08: 0000000000000000 R09: 0000000000000000 [ 457.272553][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.272568][T15721] R13: 0000000000000001 R14: 00007f467e5b6080 R15: 00007fff5ac8ec18 [ 457.272597][T15721] [ 457.274968][T15721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.512241][T15754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 458.688281][T15763] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004 [ 458.721976][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3374'. [ 458.734833][T15762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.774962][T15762] batadv_slave_0: entered promiscuous mode [ 458.802475][T15767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3374'. [ 459.055969][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 459.203427][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 459.338849][T15779] vlan2: entered allmulticast mode [ 459.344141][T15779] macvlan1: entered allmulticast mode [ 459.367359][T15779] veth1_vlan: entered allmulticast mode [ 459.504800][T15788] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 459.612818][T15784] bond1 (unregistering): Released all slaves [ 459.708162][T15788] bond1: entered promiscuous mode [ 459.715537][T15788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.718167][T15797] __nla_validate_parse: 1 callbacks suppressed [ 459.718191][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 459.767847][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3383'. [ 459.850640][T15801] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3385'. [ 460.212729][T15815] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3390'. [ 460.796215][T15848] dvmrp1: entered allmulticast mode [ 460.850839][T15848] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3401'. [ 460.973303][T15853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3402'. [ 461.429025][T15873] FAULT_INJECTION: forcing a failure. [ 461.429025][T15873] name failslab, interval 1, probability 0, space 0, times 0 [ 461.467120][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3411'. [ 461.481278][T15873] CPU: 1 UID: 0 PID: 15873 Comm: syz.0.3410 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 461.481310][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.481323][T15873] Call Trace: [ 461.481332][T15873] [ 461.481340][T15873] dump_stack_lvl+0x189/0x250 [ 461.481379][T15873] ? __pfx____ratelimit+0x10/0x10 [ 461.481408][T15873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.481440][T15873] ? __pfx__printk+0x10/0x10 [ 461.481469][T15873] ? __pfx___might_resched+0x10/0x10 [ 461.481489][T15873] ? fs_reclaim_acquire+0x7d/0x100 [ 461.481520][T15873] should_fail_ex+0x414/0x560 [ 461.481554][T15873] should_failslab+0xa8/0x100 [ 461.481580][T15873] __kmalloc_noprof+0xcb/0x4f0 [ 461.481601][T15873] ? bpf_test_init+0xc2/0x170 [ 461.481637][T15873] bpf_test_init+0xc2/0x170 [ 461.481672][T15873] bpf_prog_test_run_skb+0x1e9/0x1560 [ 461.481704][T15873] ? __fget_files+0x2a/0x420 [ 461.481732][T15873] ? __fget_files+0x2a/0x420 [ 461.481765][T15873] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 461.481798][T15873] bpf_prog_test_run+0x2c7/0x340 [ 461.481834][T15873] __sys_bpf+0x4a4/0x860 [ 461.481865][T15873] ? __pfx___sys_bpf+0x10/0x10 [ 461.481908][T15873] ? ksys_write+0x22a/0x250 [ 461.481932][T15873] ? __pfx_ksys_write+0x10/0x10 [ 461.481948][T15873] ? rcu_is_watching+0x15/0xb0 [ 461.481977][T15873] __x64_sys_bpf+0x7c/0x90 [ 461.482004][T15873] do_syscall_64+0xfa/0x3b0 [ 461.482031][T15873] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.482057][T15873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.482077][T15873] ? clear_bhb_loop+0x60/0xb0 [ 461.482103][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.482122][T15873] RIP: 0033:0x7f72b8d8e929 [ 461.482141][T15873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.482159][T15873] RSP: 002b:00007f72b9c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.482195][T15873] RAX: ffffffffffffffda RBX: 00007f72b8fb5fa0 RCX: 00007f72b8d8e929 [ 461.482211][T15873] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 461.482230][T15873] RBP: 00007f72b9c50090 R08: 0000000000000000 R09: 0000000000000000 [ 461.482243][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.482260][T15873] R13: 0000000000000000 R14: 00007f72b8fb5fa0 R15: 00007fff8e80c378 [ 461.482293][T15873] [ 461.815307][T15882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3415'. [ 461.858693][T15882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3415'. [ 461.869846][T15883] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 461.927662][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 461.967252][T15888] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 461.979685][T15888] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 463.830131][T15951] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 465.023343][T15985] __nla_validate_parse: 3 callbacks suppressed [ 465.023369][T15985] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3451'. [ 465.122555][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3454'. [ 465.207690][T15989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3454'. [ 465.262515][T15989] vlan2: entered allmulticast mode [ 465.280955][T15989] macvlan1: entered allmulticast mode [ 465.290804][T15989] veth1_vlan: entered allmulticast mode [ 465.521896][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3461'. [ 465.719601][T16016] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 465.813114][T16019] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 465.934792][T16021] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3466'. [ 466.368912][T16033] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3471'. [ 466.607701][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 466.790803][T16049] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3476'. [ 466.818246][T16053] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 466.891747][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 466.950928][T16053] bond2: entered promiscuous mode [ 466.975286][T16053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.979245][T16062] FAULT_INJECTION: forcing a failure. [ 466.979245][T16062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.997551][T16062] CPU: 0 UID: 0 PID: 16062 Comm: syz.3.3482 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 466.997584][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.997597][T16062] Call Trace: [ 466.997605][T16062] [ 466.997615][T16062] dump_stack_lvl+0x189/0x250 [ 466.997665][T16062] ? __pfx____ratelimit+0x10/0x10 [ 466.997694][T16062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.997749][T16062] ? __pfx__printk+0x10/0x10 [ 466.997788][T16062] should_fail_ex+0x414/0x560 [ 466.997823][T16062] _copy_from_user+0x2d/0xb0 [ 466.997847][T16062] bpf_test_init+0xf8/0x170 [ 466.997886][T16062] bpf_prog_test_run_skb+0x1e9/0x1560 [ 466.997918][T16062] ? __fget_files+0x2a/0x420 [ 466.997946][T16062] ? __fget_files+0x2a/0x420 [ 466.998003][T16062] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 466.998037][T16062] bpf_prog_test_run+0x2c7/0x340 [ 466.998073][T16062] __sys_bpf+0x4a4/0x860 [ 466.998104][T16062] ? __pfx___sys_bpf+0x10/0x10 [ 466.998147][T16062] ? ksys_write+0x22a/0x250 [ 466.998171][T16062] ? __pfx_ksys_write+0x10/0x10 [ 466.998188][T16062] ? rcu_is_watching+0x15/0xb0 [ 466.998217][T16062] __x64_sys_bpf+0x7c/0x90 [ 466.998244][T16062] do_syscall_64+0xfa/0x3b0 [ 466.998271][T16062] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.998297][T16062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.998318][T16062] ? clear_bhb_loop+0x60/0xb0 [ 466.998343][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.998363][T16062] RIP: 0033:0x7efdb638e929 [ 466.998382][T16062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.998399][T16062] RSP: 002b:00007efdb71bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.998421][T16062] RAX: ffffffffffffffda RBX: 00007efdb65b5fa0 RCX: 00007efdb638e929 [ 466.998436][T16062] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 466.998449][T16062] RBP: 00007efdb71bc090 R08: 0000000000000000 R09: 0000000000000000 [ 466.998462][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.998473][T16062] R13: 0000000000000000 R14: 00007efdb65b5fa0 R15: 00007ffc54031768 [ 466.998506][T16062] [ 467.098833][T16055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.245840][T16055] bond2: (slave bond3): making interface the new active one [ 467.258650][T16055] bond3: entered promiscuous mode [ 467.265087][T16055] bond2: (slave bond3): Enslaving as an active interface with an up link [ 467.292137][T16061] batman_adv: batadv0: Adding interface: dummy0 [ 467.299612][T16061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.325387][T16061] batman_adv: batadv0: Interface activated: dummy0 [ 467.575355][T16081] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3486'. [ 469.124672][T16157] ip6gretap0: entered promiscuous mode [ 469.703745][T13527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.726067][T13527] ------------[ cut here ]------------ [ 469.748389][T13527] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 469.784393][T16191] vlan2: entered allmulticast mode [ 469.787691][T13527] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 469.840775][T13527] CPU: 1 UID: 0 PID: 13527 Comm: kworker/u8:26 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 469.840809][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.840824][T13527] Workqueue: events_unbound cfg80211_wiphy_work [ 469.840885][T13527] Call Trace: [ 469.840894][T13527] [ 469.840903][T13527] dump_stack_lvl+0x189/0x250 [ 469.840943][T13527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.840975][T13527] ? __pfx__printk+0x10/0x10 [ 469.841014][T13527] ubsan_epilogue+0xa/0x40 [ 469.841036][T13527] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 469.841088][T13527] ieee80211_request_ibss_scan+0x600/0x8b0 [ 469.841146][T13527] ieee80211_ibss_work+0xd85/0x1060 [ 469.841171][T13527] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.841199][T13527] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.841225][T13527] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.841251][T13527] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 469.841283][T13527] ? skb_dequeue+0x10e/0x150 [ 469.841310][T13527] ? ieee80211_iface_work+0xcdb/0xfe0 [ 469.841342][T13527] ? ieee80211_iface_work+0xf39/0xfe0 [ 469.841372][T13527] ? rcu_is_watching+0x15/0xb0 [ 469.841398][T13527] cfg80211_wiphy_work+0x2dc/0x460 [ 469.841431][T13527] ? process_scheduled_works+0x9ef/0x17b0 [ 469.841466][T13527] process_scheduled_works+0xae1/0x17b0 [ 469.841540][T13527] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.841593][T13527] worker_thread+0x8a0/0xda0 [ 469.841645][T13527] kthread+0x70e/0x8a0 [ 469.841674][T13527] ? __pfx_worker_thread+0x10/0x10 [ 469.841692][T13527] ? __pfx_kthread+0x10/0x10 [ 469.841719][T13527] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.841743][T13527] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.841766][T13527] ? __pfx_kthread+0x10/0x10 [ 469.841792][T13527] ret_from_fork+0x3f9/0x770 [ 469.841827][T13527] ? __pfx_ret_from_fork+0x10/0x10 [ 469.841862][T13527] ? __switch_to_asm+0x39/0x70 [ 469.841881][T13527] ? __switch_to_asm+0x33/0x70 [ 469.841899][T13527] ? __pfx_kthread+0x10/0x10 [ 469.841923][T13527] ret_from_fork_asm+0x1a/0x30 [ 469.841965][T13527] [ 469.841973][T13527] ---[ end trace ]--- [ 470.055434][T13527] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 470.062949][T13527] CPU: 1 UID: 0 PID: 13527 Comm: kworker/u8:26 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 470.074948][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.085127][T13527] Workqueue: events_unbound cfg80211_wiphy_work [ 470.091417][T13527] Call Trace: [ 470.094716][T13527] [ 470.097660][T13527] dump_stack_lvl+0x99/0x250 [ 470.102304][T13527] ? __asan_memcpy+0x40/0x70 [ 470.106914][T13527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.112133][T13527] ? __pfx__printk+0x10/0x10 [ 470.116755][T13527] panic+0x2db/0x790 [ 470.120682][T13527] ? __pfx_panic+0x10/0x10 [ 470.125120][T13527] ? _printk+0xcf/0x120 [ 470.129381][T13527] ? __pfx__printk+0x10/0x10 [ 470.133995][T13527] check_panic_on_warn+0x89/0xb0 [ 470.138982][T13527] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 470.144727][T13527] ieee80211_request_ibss_scan+0x600/0x8b0 [ 470.150560][T13527] ieee80211_ibss_work+0xd85/0x1060 [ 470.155784][T13527] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.160995][T13527] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.166900][T13527] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.173241][T13527] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 470.178989][T13527] ? skb_dequeue+0x10e/0x150 [ 470.183590][T13527] ? ieee80211_iface_work+0xcdb/0xfe0 [ 470.188973][T13527] ? ieee80211_iface_work+0xf39/0xfe0 [ 470.194369][T13527] ? rcu_is_watching+0x15/0xb0 [ 470.199236][T13527] cfg80211_wiphy_work+0x2dc/0x460 [ 470.204384][T13527] ? process_scheduled_works+0x9ef/0x17b0 [ 470.210148][T13527] process_scheduled_works+0xae1/0x17b0 [ 470.215767][T13527] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.221802][T13527] worker_thread+0x8a0/0xda0 [ 470.226440][T13527] kthread+0x70e/0x8a0 [ 470.230546][T13527] ? __pfx_worker_thread+0x10/0x10 [ 470.235688][T13527] ? __pfx_kthread+0x10/0x10 [ 470.240301][T13527] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.245534][T13527] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.250746][T13527] ? __pfx_kthread+0x10/0x10 [ 470.255372][T13527] ret_from_fork+0x3f9/0x770 [ 470.260022][T13527] ? __pfx_ret_from_fork+0x10/0x10 [ 470.265249][T13527] ? __switch_to_asm+0x39/0x70 [ 470.270017][T13527] ? __switch_to_asm+0x33/0x70 [ 470.274811][T13527] ? __pfx_kthread+0x10/0x10 [ 470.279407][T13527] ret_from_fork_asm+0x1a/0x30 [ 470.284196][T13527] [ 470.287598][T13527] Kernel Offset: disabled [ 470.292014][T13527] Rebooting in 86400 seconds..