last executing test programs: 23.338423014s ago: executing program 1 (id=1057): bpf$TOKEN_CREATE(0x24, &(0x7f0000000900), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000580)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x29, 0x25, 0x7f, 0x6, 0x30, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, 0x10, 0x10, 0xd3d4, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000500000000000000aa020000182b0000", @ANYRES32=r3, @ANYBLOB="0000000005000000185400000c000600000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000008290300020000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x10, 0x19, &(0x7f00000006c0)=""/25, 0x41000, 0x34, '\x00', r7, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x0, 0x6d7}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd29, 0xa5dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@map=r3, 0x32, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 23.19058794s ago: executing program 1 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7fff, 0x2c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 58) syz_emit_ethernet(0x3a3, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "902318", 0x36d, 0x3a, 0x0, @empty, @loopback, {[@dstopts={0x5, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x66ad}, @generic={0x9, 0xa4, "729fe2c8091fbaac690f9934f5b5572d96bbddd8e3c0ed9f7d5b955799774d1ac98ae524f77bf34db6255a3b7014a5b90ebea0d1392ba8e0e6b1c47cebffda2ad3605a4559b38ee3fbbb309c6142cddeaeced91baaf26faad1e920191cf7623b86d10f4f668572f5aa463ae27608bf73f763f02ac5a00177a410e68b6a2615648d5c2b3eb15c76e5abbdab589542b8e0c71594f79cd73ec10afb446b2469ba966c06dd89"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x87, 0x2, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x4468}, @generic={0x3b, 0x2, "8b27"}]}, @dstopts={0x3b, 0x10, '\x00', [@generic={0x81, 0x75, "c9e1e0923ce0158e1dcb7e6c267b2f72740f54b86f214c76520fa9e9def4feaef993510f628cb27c8acfa76f34043e033bc4000ffb98f76e9ecbf56b9229b83c0f13151994d9df78cb8fd59d94f186270c24336ae7642cbebf87e61b7bf870499b5efc6e1d1852a4a32babdc4ca642048eff87d03c"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x3, 0x0, 0x10, '\x00', {0x6, 0x6, "9a9297", 0x8, 0x29, 0x1, @remote, @loopback, [@dstopts={0x11, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @empty}, @generic={0x1, 0xa3, "9023bd535fb4c44d103d7ab360f43b30dc7d06f8bcbecfded2a8d38c684f666da8f9a304619739a33bdfe5e47995396da64ad02bb2637f51a2148c2fb18850812e51551e1194ec9ad1f549ce92aa641ec6f9a0eddf8bb600b15c81c6158543ead9b75848f68a8180a31daa54790329a9dc43b75298bafd7817b84fbe7ff5222975127272b9d9f992e09056dcf8bb58241109858eaa4685bd18ff76c77b80292b83c20d"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], "8912f13f6effc7dd519030a2c6731aa81d088d87eb424ea96853280c29d501fa07c73e2c43dc7d0b47f004c3c7f3e23dad7fac5d8a0f9ea6d9c1ac9b94a330e93156e2586fe7889e8506c4d4859c6320ec815fbfbb8393e2fddd66e3fc7b031f6ab8e833d30aedbf73561f06b80f8f502690de1b29823910e6234b27d8e2dcd7ecd534e35a5e789fccf31bef4d4a9c79afabfb53dd4769bfff0ea7c2743b99eee978b7791a8cdcc601dda43601dcbcec81dd89d610e326a101f605baaae823f6da6a6cf3eeccf30e54fcd8aa6edf9a11ac44ff3dd3ae7c2492d3e49f2f1f19611975737e37"}}}}}}}, 0x0) 23.076920858s ago: executing program 1 (id=1063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockname$tipc(r2, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 23.047111362s ago: executing program 1 (id=1064): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000002016d0200000000000000d7a376360404000280040019"], 0x1c}, 0x1, 0x0, 0x0, 0x24040044}, 0x24004800) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x7, &(0x7f00000001c0), 0x4) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2) socket$vsock_stream(0x28, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r12}, 0x18) 22.781993388s ago: executing program 1 (id=1068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x67}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 10.813206735s ago: executing program 1 (id=1068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x67}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.494814453s ago: executing program 0 (id=1199): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xff99, @mcast2}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x2255}, @in6={0xa, 0x4e24, 0xd6e5, @loopback, 0x3}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x9, @empty, 0xcf5d}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x9}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc7}], 0xd8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x3, 0xc, 0x6, 0x1006, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000001000162c9b725000900000005000000", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0300000004000000010000c75f0da38b3f6400010000000000000000"], 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="00000000000027c504ad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r5}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r4, 0x318f}], 0x1, &(0x7f0000000400)={r6, r7+60000000}, &(0x7f0000000500), 0x8) 3.038971895s ago: executing program 3 (id=1200): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x11}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20002000}) 2.893190981s ago: executing program 3 (id=1203): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18e4", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18e4", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) (async) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f00000003c0)="8e252f33fdda923400b2e5a6cac59d0cb3a8fa72ba65f089e5083b8be4ffc03bc1c7ec294ae32ac36c0a90e4f2837e7806e93221f4b2ac1b6ad9e9e9a289afb6631ac0bc87ac28ddd6868a2c7a591d2a96ce2c7ae2ebe25ce19d7e69be4fb21dd6846d", 0x63}, {&(0x7f0000000280)="4313db1bc48753c141d5636d64598e4b2dd05973310ddaa4607527", 0x1b}, {&(0x7f0000000440)="f59528ed274b38064e126b78b2dc71fe8a057f257a875fcd4aba546c51fbab1ace1125e78d420fdd578d8a783095f5bf4b10f1a47c00d3586ff478c13859b2cc0bcf5145a2dbd4cf9218335230f10e8cae7e49c462dcb04cdb8da5cdba0ffb", 0x5f}, {&(0x7f0000000700)="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", 0xde3}], 0x5}}], 0x1, 0x24000054) accept4$unix(r2, 0x0, 0x0, 0x0) (async) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r5, 0x1000) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x5, 0x6, 0x4}) openat$cgroup_ro(r6, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80000000, 0x719627e6, 0x1}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80000000, 0x719627e6, 0x1}, &(0x7f0000000440)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x0) 2.493195289s ago: executing program 0 (id=1206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000b59d0000fc000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/234, 0xea, 0x40002140, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2a, 0x0, 0x3f00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000fc000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.387167302s ago: executing program 0 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) (async, rerun: 32) sendto(r1, &(0x7f00000000c0)="23f9728aab34cebe1f9f7e652887661f943297574447808107784ad22d7358f40f5054ed55b504248c0dad2f1c43d0a31fa6323eb6785a35499a5c8ac5d25106dcd5d6d1429641b071c33d7347213f0e4aa9fc945533cce2ba9af4023f47a509ee25eb520286bb0093a5d5d895de1b8d0957e419a177e3febf2f", 0x7a, 0x20000002, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x7, 0x3}, 0x80) (async) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r3, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x34, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) (async) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001540)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001580)=@assoc_value, &(0x7f00000015c0)=0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', 0x0, 0x8}, 0x18) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001680)=@assoc_value={0x0}, &(0x7f00000016c0)=0x8) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001700), 0x41b181, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FICLONE(r7, 0x40049409, r0) (async) close(r5) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001740)={r6, 0xb}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=@ipmr_newroute={0x50, 0x18, 0x400, 0x70bd2b, 0x25dfdbfc, {0x80, 0x20, 0x10, 0x1, 0xfc, 0x3, 0xfe, 0x6, 0x500}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x24, 0x9, r4}}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_IIF={0x8, 0x3, r2}, @RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x9800}, 0x24000800) (async) r9 = accept4(r5, &(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001940)=0x80, 0x80800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, r10, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x804) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001b00)=[0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000001b80)=[{}], 0x8, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x11, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) (async) accept$inet6(r9, &(0x7f0000001dc0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001e00)=0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001e40)={{{@in=@loopback, @in=@private}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000001f40)=0xe8) (async) bind$packet(r9, &(0x7f0000001f80)={0x11, 0xc, r2, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r9) (rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000002240)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002200)={&(0x7f0000002040)={0x19c, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x72, 0x2, "09e7462166be648948b2248c8616aa0d4b042002de4dd75ba584af0fe6a233bd1fefa0054609c3fc29fc00c63f77e104918dea82d43c3d97d3806999c4b13ebbad7a08a73227e8f701e2da66a24085770b94a9d019ce92a750defd28d89b4142fa7527228f1ac0f8f5f6b33ff72a"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}}, {0xe4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdf, 0x1, "238c5b165aa1223a644dfdd63bb42f9368def66fafe72a4fcdcf9d734c59d4b3c080c000e1854b67b038efaa6ff0bb7982b818d235c551140ef13a5e50fae6be7fc3084a28817d629d1779698a42da951f4901be4d22689c8268180ebcfb5827a8efc96f7b7d81c5d7d529c341fb77ea8083b53faabbb91b63d4f92ce6ed7ca7df6f91109a79775ac395f174a9786e332f5e679c19280238657ba3d05247f116be74157839c209c50dfb8423fa9aaf298776fcc26f4f8c171ae21b05e36df6f200c6113d35451a0173eec991d7a6a9215a8ff410556c9bb1ed3dc3"}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) (async) syz_emit_ethernet(0x2a, &(0x7f0000002280)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @remote, @loopback, @broadcast, @broadcast}}}}, &(0x7f00000022c0)={0x0, 0x2, [0x789, 0x9cd, 0x5d8, 0x525]}) close(r5) 2.17492806s ago: executing program 0 (id=1208): socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x5) listen(r0, 0x849) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20044405}, 0x8044) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040081, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r3, 0x9) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0203f3191600000000000000000000000200090040000000e900000000000000030006000000000002000000000000000000"], 0xb0}, 0x1, 0x7}, 0x58010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000008552000000000000", @ANYRES32, @ANYBLOB='\a\x00'/18, @ANYRES32=r6, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x4, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 2.056669501s ago: executing program 3 (id=1210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x17, 0x0, 0x0, @str='( '}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000640000000030800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xac}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090302000000fcdbdf251d000000180001801400020076657468305f6d6163767461700000008fb7789614292b6a676386052ad99b74692aaf8bcf0aa2361175cb1eb3ff97f54b91860fd07b28a2b82de83b764d396d5a83588e67c398202723518ccf56bca43e56d9976f73c7bcb85c200a8586eb0d2af55b1d12618a96fcd8a9451b65e9c75f4b2aac1d0ce0170a5f775d51f709be7373291ba4b8b9abfdcfca7d04178ea02ece531bcb12d1dbb982e6d076cffd47830d640926717efca66b5adcbabcb907b82ce205c063514a92afa1dc626fbdc1972db5ab"], 0x2c}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) 2.008904298s ago: executing program 4 (id=1211): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc040810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000740)=ANY=[], 0x60}], 0x1, 0x8001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000340)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000380)="cb4e88a8af3288a8eef1", 0x1c}], 0x2}, 0x8050) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x18, 0x88, 0x4000067}, 0x2c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000d0400"/20, @ANYRES32=r8, @ANYBLOB="60c000000800c90dc747adaa7fcc0000484f54c636a449e2104fb8ae214f0cb49d04d31705c2880e1a9e733a6dc5f71222f9b189b8cca24171671c8ee802d727f02df31c0644b34c9383f02c3dd72c520000000467812b1a00cd6f342dc0f9c5c7338ad7ae23e3ae7af74493a468f3cbc8c0b401ed4b16c7ac646ea5c0ffb7234ae7e8ed7c3f7e17469fc3be2a"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x5, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 1.734776218s ago: executing program 4 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x4, 0x480000, {0x1c, 0x0, 0x80, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x27, 0x800, 0x1ff, 0x6, 0xfa, 0x3, 0x8, 0x0, 0x4, 0x10, 0xd, 0x3, 0x200, 0x3, 0x6, 0x7fffffff, [0x80000000, 0x3]}}) getpeername$packet(r2, 0x0, &(0x7f0000001140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a8090032000300"], 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095", @ANYRES64=r1, @ANYBLOB="4da8d4e9211d98d755a0bdf181007bf9bb82ccae1884b9f3e66e9f7ea4b6aaba29"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x4040010) ioctl$sock_netdev_private(r5, 0x89ff, &(0x7f0000000900)="000000000000000009fd0b36dd348bfb9db503f725f5f6cf10ea97eae4b30f6dd199bdaaa14c60c8b8ec04b03b0ec914b5564831cc3c73fa930d0fc1f39c52872e989bfaabe006d25921") setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x98) 1.11766849s ago: executing program 2 (id=1215): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0xffffffffffffffff}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x8, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="190000000406000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002e0003470fbb65e1c3e4ffff060060001600000056000000250000001900130004000f0007fd17e5ff8e0606040020", 0x33}], 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001640)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="d9be249eeaf74495f1fe189cda4b6379073dc588f18177a7bdadf5407fa4adb60537377620381e92dde7499ac2737e07cd9b9fdf6862bcb1aa89888f07ddabd9862ee215adee92251f21a8e2962ce8d6e373ed5c52b2c62592c8df7fe735365795dd68e79466a63f1a9f460415d450b2c0eee8677c97a6da563b9a4f777fad2e84f699f9d29da7594af1efe9313bc1c93ee71d15b9a6b2662f555bf2ef4c7e3545c5b28b6359898187493b9a0c1af630b5eb98", 0xb3}], 0x1, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000780)="a249a70476de11820bc34b7cbac6dd3bbd5b9f1f7ab33db71176cb2b0771fc2d897e05fb209ca44a0d2c57896e48aba975d76d2ec5d440f3b75b55a6ac69ec62d6394495487bfdc9d70e6480d682b125430a6f84c53c0d6ea57781356b501ae9ea85bd6128a4784b82572825cc34732659e424ec62ddcc41cbcc20bebe65090d32ffc817d2f7063358eb6f86c51de4915a81e4147a627dc6fb4d49634548ade41913b4dca1d900046ef6c217e7aef9f54b669d12f6db7b2e230278080bcdbc45a60defe1b9fb63eb9f542c966a", 0xcd}, {&(0x7f0000000880)="d9e1692a3a780ae594a8bd0249758bb61e97d33b7d0d08437cd28ac572bf376822b50e18aa62cfb02bce6a94ef25cccdb34f31189d01ae4fe71f174005793d29bf80707d7ce511d78d0cba7c4adc5f77a272fe3872ace28d44b1c72d0ab4db769549e7b126c848033326b5c430ad516c51bf891a92ecce78edf152b27df9b61325b57d7e13f0ff9eeddeed481515a10db12c1366", 0x94}, {&(0x7f0000000600)}], 0x3, 0x0, 0x108, 0x40}], 0x2, 0x80) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.034605074s ago: executing program 0 (id=1216): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0xbabc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000007195000000000077f3a6bc800e00000000000000000011db8d990bb3f8f694e5bf307f72d4aab2460a0988055f2941f8fcc1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x8040801, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0x4f8, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r3, 0x0, 0x8000000000000000}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0xfffffff7, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000080)="c1924c05dde446629a049733fbc79a2323895296e5560759b3fb2a957f5e1a543fb5ccc863e6120145fb4a89a83e0dcd9b9d86b32f7b832339105816975c461e24b029c360b0751033603ab5fa193fda7802968372d1c612aadec6", &(0x7f0000001580)=""/4096, &(0x7f0000000300)="23a48235afd048e8f760bae771ff05e720733ea24734e585a808c2274276b5f6a26c566b70dbd55df2147ec61831034e80222985dddb6f63b2aa0557518a7b71a8eed85db113b203452dacb38a9449cf8e", &(0x7f0000000100)="366f4c5ae379a244", 0xd, r9}, 0x38) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0x10}}}, 0x24}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$sock(r4, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="72b1ceafb91f37a2", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 989.808098ms ago: executing program 3 (id=1217): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x44000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4, 0x7, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x1, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@local, @rand_addr=0x64010102, 0x1, 0x6, [@loopback, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}]}, 0x28) 769.038917ms ago: executing program 2 (id=1218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9, 0x3d9, {{0x56, 0x4, 0x1, 0x2d, 0x158, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x7, [{@rand_addr=0x64010100, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}, {@rand_addr=0x64010102, 0x7}, {@private=0xa010101, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x800}]}, @cipso={0x86, 0x4f, 0x3, [{0x7, 0xc, "8d26fae626efafdd438a"}, {0x7, 0xf, "e9bb5cf7df45aa584a0cae1b8b"}, {0x1, 0xc, "4bc71c533caeea379ef2"}, {0x1, 0x6, "141289aa"}, {0x6, 0x10, "3a64ba47a61f7fa270243f46b3e8"}, {0x7, 0x2}, {0x7, 0xa, "b7463596ebee859d"}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "e54c06dd0f275b2eae9030975baeffbd"}]}, @cipso={0x86, 0x41, 0x3, [{0x7, 0xc, "df74f4058b47097bdbd2"}, {0x6, 0xd, "f89f23e9c6dd5aff6fa576"}, {0x2, 0x5, "95f2f7"}, {0x0, 0x4, "5992"}, {0x3092744851b40430, 0x8, "23efe74c86f2"}, {0x5, 0xc, "545f545980c1a1f28990"}, {0x1, 0x5, "b0a9d5"}]}, @timestamp_prespec={0x44, 0x3c, 0x9a, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@multicast1, 0x65}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010100, 0x31c5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@multicast1, 0x7}]}, @rr={0x7, 0xb, 0x8, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x33, 0x3, 0x1, [{@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x717, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0xee, &(0x7f00000004c0)=""/238, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0xfffffffc}, 0x10, 0x20b2a, 0xffffffffffffffff, 0x7, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x4, 0x2, 0x5}, {0x4, 0x4, 0x7, 0x7}, {0x0, 0x5, 0x6, 0x1}, {0x2, 0x5, 0x10, 0x2}, {0x5, 0x1, 0x2, 0x3}, {0x4, 0x3, 0x4, 0x7}, {0x3, 0x5, 0xe, 0x8}], 0x10, 0x800, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x1000, 0x8, 0x6, 0x10020, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @value}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x2, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', r1, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xffff}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000980)=[r3, r5, r6, r7, r8, r9], &(0x7f00000009c0)=[{0x5, 0x2, 0xa, 0x7}, {0x2, 0x4, 0x401, 0x7}], 0x10, 0x8, @void, @value}, 0x94) 753.584881ms ago: executing program 4 (id=1219): r0 = socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x7, 0x4, 0x0, 0x3b, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6994}}, @sadb_key={0x1b, 0x8, 0x650, 0x0, "2a98d7be601e977b10d0c2f6739c5897eead9b3282b5cfc09a180226aa08922865e2d3db7780500308e779746f0895f93ccccae8b41961aafd4237fd8e72836a277cbc23c5d0eca2f72549983ef0146c783de6a3a2236b1b689944432e7e5eeedbc889804611b29d2f96082e4c132207857d1fc7a9d4f902679bdfaf9f1906c58a96e8a9e6faa5ef2e4c311904c6e170117936ab4ba9e58bb169e292c716760dad8a2166c6a7290256c74cd8e4b4ed31e4aa529efe9c4291ca6ba93c950b7aeef605ed4b705a735f5244"}, @sadb_key={0x15, 0x9, 0x4f8, 0x0, "638d257017a5991586c6ab31f0bc76ed1fe001dcd2ffe97b5f69c01733a3c62f71a7b2654ad0c9023ad37214cb8ebea82864e386e7ca5c91a942226b76076223836addcd40a160a63336364da81f1d07145f2df3cb3b14c8ddee8f088d47eb8d2ce41ed83e9fb7b2c662e9790f49ddad9bb5df4fb6750e2309b7ed89a6b4343cc55dbe4a8a642baad23402d437dc1ac44f595e4b2648f0a227260c54d86728"}]}, 0x1d8}}, 0x4040000) 631.523944ms ago: executing program 3 (id=1220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x22, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x88) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_emit_ethernet(0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200"/55], 0x0) r2 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (rerun: 32) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80), &(0x7f0000000340)=0x8) (async, rerun: 32) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x24, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a52"]}]}, 0x38}], 0x1}, 0x0) (async, rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x9ce3, 0x9, 0x66bc, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000680)=""/97, &(0x7f0000000700), &(0x7f00000007c0), 0xe9d, r5, 0x4}, 0x38) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) (async, rerun: 32) r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) (rerun: 32) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x400000000000156, 0x8000080) (async) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071108b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 569.153162ms ago: executing program 2 (id=1221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="3a00f6399ed615248f5e0b025aa9d00591c6472c7e307813c97ff12a61189e8c318b45b9921b2484835180a7a9850923f2c7f46503676358ce0391fc1a0b5c4d871090721ce0e28141de309e4b1151b7f0fd0de8eb28c5a87badb5008e31fd7cf7fbb0ec9e03", 0x66, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r0, 0x1) 558.78579ms ago: executing program 4 (id=1222): r0 = socket(0x18, 0x2, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x80, 0x8000, 0x9, 0x80000001, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x8, 0xa5, 0x0, 0x2, [0x800]}, @lsrr={0x83, 0x7, 0x88, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x6c, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xd}]}, @timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0x6, [{@multicast1, 0x1}, {@remote, 0x7}, {@private=0xa010100, 0x65db0209}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000d40)={0x1580, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x86f4}]}, @ETHTOOL_A_FEATURES_WANTED={0x284, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pi6 \x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&[*$#(=\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '~\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "b8ff1255a122d9a1ca82ce6ad983fccfa0c346366e76cb1ac77b9ade66f93fc49de4ac50d80bcbaff8c4913ced3edf87eb8ac4cd34bcafee4fca9d90fe4f42c0414138da435efc49bcec70500b5d3e746fd71116121f2b5e6f2186ef9ad9c82400a679e77511e9aad28c5d8e0c6bfc77bbd4632b749eca9399564fb9c07039d2cd613ad3878cf869664c5021d7fe40c2a046a2f47130745fe9453a047d2a309b8ba16f854782afdd3bfe23a878a9aabc8c0d442abafb79f3225a4e1a1d52998b65f73d7f77d28b858426b0a2772c86f7927e7919752d5c51ec16ee8139dd1aaf641572cf1ac9365099d95148be275b667e403e77"}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "49583c11372359640142d66ef32ece23b74e3c3f7fb034aa06d4bd527624fc0d8ed395da4778dc929188a68b9287458372dc85f0779865f8ecbaaafdea08efe0344a3036effc8a647e51c2d8800691a273ebb34a307b138f5498a4d56bf548066f2ae8cde682caa6539e69f4044aaa30e48fd760256e5e7b3720c78dd0005272501d314d5ca47067e1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_FEATURES_WANTED={0x129c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xc8\xb1\xfd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21edb56a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5750}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x79}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pi6 \x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a1}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',-@$^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '*@*^+#(\xc2\'@.-,^J%(\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "97d0cbec87a0dee7c98f171f519e1b1c3895d621415df4db3bda70ee4e936b793d663b5bbc033091fd499cf86171882b929ebe06f6ba977bd799a43fc679a14ed08ea09e9dd46bc62c23e53398401fa7ee50341f2d43ce0fdb99b179096fabf2a88d37b5eb35deacfb084a07ea53066f3bc61492ed52827d71329981e9e598d53178a9422a3d55952130cc1d68db8ae242169122e1d9a7"}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1580}, 0x1, 0x0, 0x0, 0x8091}, 0x40840) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x5, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x80000) sendmsg$alg(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000004) recvmsg$qrtr(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/204, 0xcc}], 0x1, 0x0, 0x0, 0x20}, 0x38, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r9}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6 \x00'}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xffffff80, @local, 0x5}]}, &(0x7f0000000280)=0x10) 452.543827ms ago: executing program 2 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x200000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x10, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x11, &(0x7f0000000300)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @exit, @generic={0x1, 0xf, 0x2, 0x8, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x5, 0x7, 0x0, 0xfffffffffffffff0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x7, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0xba, &(0x7f0000000500)=""/186, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, r3, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0xa, &(0x7f0000000400)=[r5, r0, r0, r0, r0, r0], &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0x9}, {0x5, 0x3, 0x4, 0x5}, {0x1, 0x5, 0x3, 0x9}, {0x5, 0x2, 0xe, 0x1}, {0x2, 0x1, 0x4, 0x9}, {0x4, 0x5, 0x10, 0x9}, {0x3, 0x4, 0xb, 0x1}, {0x3, 0x1, 0x10, 0x5}, {0x5, 0x4, 0x1, 0xc}, {0x4, 0x2, 0xf, 0xc}], 0x10, 0xeb, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r6}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r8, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x80, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) (async) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) close(r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x200000}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x10, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x11, &(0x7f0000000300)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @exit, @generic={0x1, 0xf, 0x2, 0x8, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x5, 0x7, 0x0, 0xfffffffffffffff0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x7, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0xba, &(0x7f0000000500)=""/186, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, r3, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0xa, &(0x7f0000000400)=[r5, r0, r0, r0, r0, r0], &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0x9}, {0x5, 0x3, 0x4, 0x5}, {0x1, 0x5, 0x3, 0x9}, {0x5, 0x2, 0xe, 0x1}, {0x2, 0x1, 0x4, 0x9}, {0x4, 0x5, 0x10, 0x9}, {0x3, 0x4, 0xb, 0x1}, {0x3, 0x1, 0x10, 0x5}, {0x5, 0x4, 0x1, 0xc}, {0x4, 0x2, 0xf, 0xc}], 0x10, 0xeb, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r6}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) accept4(r8, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x80, 0x800) (async) 235.977468ms ago: executing program 3 (id=1224): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x1c8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'dummy0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000180)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000d00)=[{0x28, 0x10e, 0x200, "362dd2d407828cd48bb7cdc028b4425092"}, {0x10, 0x10d, 0x1}], 0x38}}, {{0x0, 0x0, &(0x7f0000001300)}}], 0x2, 0x4000000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r4, 0x0, r6, 0x0, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x6, 0xac, &(0x7f0000000780)=""/172, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5c1, 0x2, 0x1, 0x8, 0x9, 0x8}, &(0x7f0000000040)=0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x7, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200400000000000ffbfffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) 234.138216ms ago: executing program 4 (id=1225): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80, 0x0, @void, @value}, 0x1f) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x6000000000000001, 0x0) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80, 0x0, @void, @value}, 0x1f) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) 233.565636ms ago: executing program 2 (id=1226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="cb9cb4ad9973080234cc913cacb2d4643981c5bbcfd698272361ac7e8e06c49a677b43b89cd7212af4bc6437a5bdc482c796977962eebe002755489ee33d143e7f2c8a63a770e313fc850ff5c7ab5119c66d2551e4e69d28f9d84b4ed5cfc1", &(0x7f0000000080)=""/185}, 0x20) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x40) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) (async) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080000000000000000000000000400000000000000000000000000000000000000100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000400)=0xffffffc5, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000400)=0xffffffc5, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r8, @ANYRES32=r1, @ANYRES16=r5, @ANYRESHEX=r3], 0x8) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x84) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000029b0f15e00", @ANYRES32=r0, @ANYBLOB="000000000000000079000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 89.028551ms ago: executing program 4 (id=1227): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0xb7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1, 0x0, 0x0, 0x4c041}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x28, &(0x7f0000000300)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa51}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x9, 0x9, 0x8, 0x18, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0xb, 0xb, 0x0, 0xffffffffffffffe0}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000000440)=""/126, 0x41100, 0x9, '\x00', r4, 0x0, r2, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000600)=[{0x0, 0x4, 0x6, 0x8}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x8, @void, @value}, 0x94) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$inet(0x2, 0x80001, 0x84) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) getpeername$inet(r8, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r5, 0x3e7f7000) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) 48.63674ms ago: executing program 0 (id=1228): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) 0s ago: executing program 2 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x1}}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c0001000000000000000000040000800800188002ac0f00"], 0x1c}], 0x1}, 0x48084) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="d15e22ebe79f4d03df250500000005000500060000000500050009000000050005000800000008000300080000000d00018008000300e00000024000018008000300e0"], 0x80}}, 0x44880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) kernel console output (not intermixed with test programs): : 0 UID: 0 PID: 6778 Comm: syz.0.215 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 109.965862][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.965875][ T6778] Call Trace: [ 109.965882][ T6778] [ 109.965891][ T6778] dump_stack_lvl+0x241/0x360 [ 109.965923][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.965947][ T6778] ? __pfx__printk+0x10/0x10 [ 109.965982][ T6778] should_fail_ex+0x40a/0x550 [ 109.966019][ T6778] prepare_alloc_pages+0x1da/0x5b0 [ 109.966053][ T6778] __alloc_frozen_pages_noprof+0x16f/0x710 [ 109.966082][ T6778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.966136][ T6778] alloc_pages_mpol+0x311/0x660 [ 109.966172][ T6778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.966212][ T6778] vma_alloc_folio_noprof+0x12b/0x260 [ 109.966252][ T6778] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 109.966285][ T6778] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.966318][ T6778] folio_prealloc+0x2e/0x170 [ 109.966343][ T6778] do_wp_page+0x1253/0x49b0 [ 109.966392][ T6778] ? __pfx_do_wp_page+0x10/0x10 [ 109.966424][ T6778] ? __pfx_validate_chain+0x10/0x10 [ 109.966452][ T6778] ? __pfx_lock_acquire+0x10/0x10 [ 109.966480][ T6778] ? rcu_is_watching+0x15/0xb0 [ 109.966507][ T6778] ? do_raw_spin_lock+0x14f/0x370 [ 109.966534][ T6778] ? __pfx____pte_offset_map+0x10/0x10 [ 109.966586][ T6778] __handle_mm_fault+0x24d5/0x70f0 [ 109.966618][ T6778] ? mark_lock+0x9a/0x360 [ 109.966669][ T6778] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.966710][ T6778] ? __pfx_lock_acquire+0x10/0x10 [ 109.966746][ T6778] ? do_raw_spin_lock+0x14f/0x370 [ 109.966793][ T6778] ? follow_page_pte+0xdd3/0x1460 [ 109.966817][ T6778] ? follow_page_pte+0xe54/0x1460 [ 109.966840][ T6778] ? __pfx_lock_release+0x10/0x10 [ 109.966878][ T6778] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.966924][ T6778] ? __pfx___might_resched+0x10/0x10 [ 109.966957][ T6778] handle_mm_fault+0x3e5/0x8d0 [ 109.967002][ T6778] __get_user_pages+0x1a92/0x4140 [ 109.967064][ T6778] ? __pfx___get_user_pages+0x10/0x10 [ 109.967088][ T6778] ? __pfx_down_read_killable+0x10/0x10 [ 109.967143][ T6778] __gup_longterm_locked+0xe64/0x17f0 [ 109.967180][ T6778] ? mark_lock+0x9a/0x360 [ 109.967204][ T6778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.967243][ T6778] ? __pfx___gup_longterm_locked+0x10/0x10 [ 109.967268][ T6778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.967299][ T6778] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 109.967337][ T6778] ? gup_fast_fallback+0x207e/0x29c0 [ 109.967362][ T6778] gup_fast_fallback+0x2266/0x29c0 [ 109.967419][ T6778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 109.967440][ T6778] ? 0xffffffffa00038c0 [ 109.967460][ T6778] ? is_bpf_text_address+0x26/0x2a0 [ 109.967482][ T6778] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.967512][ T6778] ? kernel_text_address+0xa7/0xe0 [ 109.967536][ T6778] ? __kernel_text_address+0xd/0x40 [ 109.967555][ T6778] ? unwind_get_return_address+0x4d/0x90 [ 109.967584][ T6778] ? arch_stack_walk+0xfd/0x150 [ 109.967620][ T6778] ? stack_trace_save+0x118/0x1d0 [ 109.967647][ T6778] ? is_valid_gup_args+0x124/0x200 [ 109.967672][ T6778] pin_user_pages_fast+0xcc/0x160 [ 109.967697][ T6778] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 109.967732][ T6778] iov_iter_extract_pages+0x3bb/0x5c0 [ 109.967771][ T6778] extract_iter_to_sg+0xea6/0x2650 [ 109.967813][ T6778] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 109.967858][ T6778] ? __asan_memset+0x23/0x50 [ 109.967882][ T6778] af_alg_get_rsgl+0x41e/0x850 [ 109.967933][ T6778] skcipher_recvmsg+0x3f8/0x1230 [ 109.967987][ T6778] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 109.968019][ T6778] ? aa_sock_msg_perm+0x91/0x160 [ 109.968053][ T6778] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 109.968078][ T6778] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 109.968112][ T6778] sock_recvmsg+0x22f/0x280 [ 109.968148][ T6778] ____sys_recvmsg+0x1c6/0x480 [ 109.968185][ T6778] ? __pfx_____sys_recvmsg+0x10/0x10 [ 109.968243][ T6778] __sys_recvmsg+0x291/0x390 [ 109.968276][ T6778] ? __pfx___sys_recvmsg+0x10/0x10 [ 109.968316][ T6778] ? __fget_files+0x2a/0x410 [ 109.968364][ T6778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.968399][ T6778] ? do_syscall_64+0x100/0x230 [ 109.968431][ T6778] ? do_syscall_64+0xb6/0x230 [ 109.968462][ T6778] do_syscall_64+0xf3/0x230 [ 109.968491][ T6778] ? clear_bhb_loop+0x35/0x90 [ 109.968524][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.968552][ T6778] RIP: 0033:0x7f204e18d169 [ 109.968570][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.968586][ T6778] RSP: 002b:00007f204efca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 109.968609][ T6778] RAX: ffffffffffffffda RBX: 00007f204e3a5fa0 RCX: 00007f204e18d169 [ 109.968624][ T6778] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 109.968636][ T6778] RBP: 00007f204efca090 R08: 0000000000000000 R09: 0000000000000000 [ 109.968649][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.968661][ T6778] R13: 0000000000000000 R14: 00007f204e3a5fa0 R15: 00007ffe48f60418 [ 109.968693][ T6778] [ 111.012623][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 111.160168][ T6808] pim6reg1: entered promiscuous mode [ 111.165740][ T6808] pim6reg1: entered allmulticast mode [ 111.185277][ T6816] batadv0: entered promiscuous mode [ 111.192000][ T6816] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.209733][ T6816] batadv0: left promiscuous mode [ 111.390178][ T6830] FAULT_INJECTION: forcing a failure. [ 111.390178][ T6830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.413693][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.3.232 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 111.413724][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.413738][ T6830] Call Trace: [ 111.413746][ T6830] [ 111.413755][ T6830] dump_stack_lvl+0x241/0x360 [ 111.413788][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.413813][ T6830] ? __pfx__printk+0x10/0x10 [ 111.413836][ T6830] ? __lock_acquire+0x1397/0x2100 [ 111.413878][ T6830] should_fail_ex+0x40a/0x550 [ 111.413916][ T6830] prepare_alloc_pages+0x1da/0x5b0 [ 111.413949][ T6830] __alloc_frozen_pages_noprof+0x16f/0x710 [ 111.413978][ T6830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.414026][ T6830] alloc_pages_mpol+0x311/0x660 [ 111.414060][ T6830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.414100][ T6830] vma_alloc_folio_noprof+0x12b/0x260 [ 111.414133][ T6830] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 111.414166][ T6830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 111.414199][ T6830] folio_prealloc+0x2e/0x170 [ 111.414222][ T6830] do_wp_page+0x1253/0x49b0 [ 111.414271][ T6830] ? __pfx_do_wp_page+0x10/0x10 [ 111.414312][ T6830] ? __pfx_validate_chain+0x10/0x10 [ 111.414339][ T6830] ? __pfx_lock_acquire+0x10/0x10 [ 111.414368][ T6830] ? rcu_is_watching+0x15/0xb0 [ 111.414396][ T6830] ? do_raw_spin_lock+0x14f/0x370 [ 111.414422][ T6830] ? __pfx____pte_offset_map+0x10/0x10 [ 111.414473][ T6830] __handle_mm_fault+0x24d5/0x70f0 [ 111.414505][ T6830] ? mark_lock+0x9a/0x360 [ 111.414554][ T6830] ? __pfx___handle_mm_fault+0x10/0x10 [ 111.414594][ T6830] ? __pfx_lock_acquire+0x10/0x10 [ 111.414630][ T6830] ? do_raw_spin_lock+0x14f/0x370 [ 111.414676][ T6830] ? follow_page_pte+0xdd3/0x1460 [ 111.414700][ T6830] ? follow_page_pte+0xe54/0x1460 [ 111.414724][ T6830] ? __pfx_lock_release+0x10/0x10 [ 111.414761][ T6830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 111.414806][ T6830] ? __pfx___might_resched+0x10/0x10 [ 111.414838][ T6830] handle_mm_fault+0x3e5/0x8d0 [ 111.414881][ T6830] __get_user_pages+0x1a92/0x4140 [ 111.414942][ T6830] ? __pfx___get_user_pages+0x10/0x10 [ 111.414966][ T6830] ? __pfx_down_read_killable+0x10/0x10 [ 111.415019][ T6830] __gup_longterm_locked+0xe64/0x17f0 [ 111.415055][ T6830] ? mark_lock+0x9a/0x360 [ 111.415080][ T6830] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.415112][ T6830] ? __pfx___gup_longterm_locked+0x10/0x10 [ 111.415135][ T6830] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.415166][ T6830] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 111.415204][ T6830] ? gup_fast_fallback+0x207e/0x29c0 [ 111.415229][ T6830] gup_fast_fallback+0x2266/0x29c0 [ 111.415284][ T6830] ? __pfx_gup_fast_fallback+0x10/0x10 [ 111.415315][ T6830] ? 0xffffffffa00038c0 [ 111.415336][ T6830] ? is_bpf_text_address+0x26/0x2a0 [ 111.415357][ T6830] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.415386][ T6830] ? kernel_text_address+0xa7/0xe0 [ 111.415410][ T6830] ? __kernel_text_address+0xd/0x40 [ 111.415432][ T6830] ? unwind_get_return_address+0x4d/0x90 [ 111.415464][ T6830] ? arch_stack_walk+0xfd/0x150 [ 111.415498][ T6830] ? stack_trace_save+0x118/0x1d0 [ 111.415525][ T6830] ? is_valid_gup_args+0x124/0x200 [ 111.415550][ T6830] pin_user_pages_fast+0xcc/0x160 [ 111.415575][ T6830] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 111.415609][ T6830] iov_iter_extract_pages+0x3bb/0x5c0 [ 111.415648][ T6830] extract_iter_to_sg+0xea6/0x2650 [ 111.415689][ T6830] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 111.415733][ T6830] ? __asan_memset+0x23/0x50 [ 111.415757][ T6830] af_alg_get_rsgl+0x41e/0x850 [ 111.415806][ T6830] skcipher_recvmsg+0x3f8/0x1230 [ 111.415858][ T6830] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 111.415889][ T6830] ? aa_sock_msg_perm+0x91/0x160 [ 111.415922][ T6830] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 111.415944][ T6830] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 111.415977][ T6830] sock_recvmsg+0x22f/0x280 [ 111.416012][ T6830] ____sys_recvmsg+0x1c6/0x480 [ 111.416049][ T6830] ? __pfx_____sys_recvmsg+0x10/0x10 [ 111.416099][ T6830] __sys_recvmsg+0x291/0x390 [ 111.416131][ T6830] ? __pfx___sys_recvmsg+0x10/0x10 [ 111.416172][ T6830] ? __fget_files+0x2a/0x410 [ 111.416220][ T6830] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.416253][ T6830] ? do_syscall_64+0x100/0x230 [ 111.416285][ T6830] ? do_syscall_64+0xb6/0x230 [ 111.416323][ T6830] do_syscall_64+0xf3/0x230 [ 111.416350][ T6830] ? clear_bhb_loop+0x35/0x90 [ 111.416383][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.416411][ T6830] RIP: 0033:0x7f917478d169 [ 111.416429][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.416445][ T6830] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 111.416467][ T6830] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 111.416482][ T6830] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 111.416495][ T6830] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 111.416507][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.416519][ T6830] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 111.416551][ T6830] [ 115.267458][ T6855] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 115.722092][ T6877] __nla_validate_parse: 1 callbacks suppressed [ 115.722113][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 117.510569][ T6894] FAULT_INJECTION: forcing a failure. [ 117.510569][ T6894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.521349][ T6892] Bluetooth: MGMT ver 1.23 [ 117.526547][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.4.246 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 117.526578][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.526592][ T6894] Call Trace: [ 117.526600][ T6894] [ 117.526610][ T6894] dump_stack_lvl+0x241/0x360 [ 117.526645][ T6894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.526669][ T6894] ? __pfx__printk+0x10/0x10 [ 117.526694][ T6894] ? __lock_acquire+0x1397/0x2100 [ 117.526736][ T6894] should_fail_ex+0x40a/0x550 [ 117.526776][ T6894] prepare_alloc_pages+0x1da/0x5b0 [ 117.526812][ T6894] __alloc_frozen_pages_noprof+0x16f/0x710 [ 117.526842][ T6894] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.526895][ T6894] alloc_pages_mpol+0x311/0x660 [ 117.526944][ T6894] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.526986][ T6894] vma_alloc_folio_noprof+0x12b/0x260 [ 117.527020][ T6894] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.527053][ T6894] ? do_raw_spin_unlock+0x13c/0x8b0 [ 117.527087][ T6894] folio_prealloc+0x2e/0x170 [ 117.527112][ T6894] do_wp_page+0x1253/0x49b0 [ 117.527163][ T6894] ? __pfx_do_wp_page+0x10/0x10 [ 117.527196][ T6894] ? __pfx_validate_chain+0x10/0x10 [ 117.527224][ T6894] ? __pfx_lock_acquire+0x10/0x10 [ 117.527255][ T6894] ? rcu_is_watching+0x15/0xb0 [ 117.527284][ T6894] ? do_raw_spin_lock+0x14f/0x370 [ 117.527312][ T6894] ? __pfx____pte_offset_map+0x10/0x10 [ 117.527365][ T6894] __handle_mm_fault+0x24d5/0x70f0 [ 117.527397][ T6894] ? mark_lock+0x9a/0x360 [ 117.527449][ T6894] ? __pfx___handle_mm_fault+0x10/0x10 [ 117.527498][ T6894] ? __pfx_lock_acquire+0x10/0x10 [ 117.527535][ T6894] ? do_raw_spin_lock+0x14f/0x370 [ 117.527583][ T6894] ? follow_page_pte+0xdd3/0x1460 [ 117.527609][ T6894] ? follow_page_pte+0xe54/0x1460 [ 117.527633][ T6894] ? __pfx_lock_release+0x10/0x10 [ 117.527673][ T6894] ? do_raw_spin_unlock+0x13c/0x8b0 [ 117.527720][ T6894] ? __pfx___might_resched+0x10/0x10 [ 117.527753][ T6894] handle_mm_fault+0x3e5/0x8d0 [ 117.527799][ T6894] __get_user_pages+0x1a92/0x4140 [ 117.527863][ T6894] ? __pfx___get_user_pages+0x10/0x10 [ 117.527889][ T6894] ? __pfx_down_read_killable+0x10/0x10 [ 117.527952][ T6894] __gup_longterm_locked+0xe64/0x17f0 [ 117.527990][ T6894] ? mark_lock+0x9a/0x360 [ 117.528015][ T6894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.528049][ T6894] ? __pfx___gup_longterm_locked+0x10/0x10 [ 117.528073][ T6894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.528107][ T6894] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 117.528146][ T6894] ? gup_fast_fallback+0x207e/0x29c0 [ 117.528172][ T6894] gup_fast_fallback+0x2266/0x29c0 [ 117.528231][ T6894] ? __pfx_gup_fast_fallback+0x10/0x10 [ 117.528253][ T6894] ? 0xffffffffa00007c8 [ 117.528275][ T6894] ? is_bpf_text_address+0x26/0x2a0 [ 117.528297][ T6894] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.528327][ T6894] ? kernel_text_address+0xa7/0xe0 [ 117.528352][ T6894] ? __kernel_text_address+0xd/0x40 [ 117.528374][ T6894] ? unwind_get_return_address+0x4d/0x90 [ 117.528405][ T6894] ? arch_stack_walk+0xfd/0x150 [ 117.528439][ T6894] ? stack_trace_save+0x118/0x1d0 [ 117.528467][ T6894] ? is_valid_gup_args+0x124/0x200 [ 117.528494][ T6894] pin_user_pages_fast+0xcc/0x160 [ 117.528521][ T6894] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 117.528559][ T6894] iov_iter_extract_pages+0x3bb/0x5c0 [ 117.528600][ T6894] extract_iter_to_sg+0xea6/0x2650 [ 117.528643][ T6894] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 117.528688][ T6894] ? __asan_memset+0x23/0x50 [ 117.528714][ T6894] af_alg_get_rsgl+0x41e/0x850 [ 117.528766][ T6894] skcipher_recvmsg+0x3f8/0x1230 [ 117.528821][ T6894] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 117.528855][ T6894] ? aa_sock_msg_perm+0x91/0x160 [ 117.528892][ T6894] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 117.528925][ T6894] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 117.528961][ T6894] sock_recvmsg+0x22f/0x280 [ 117.528999][ T6894] ____sys_recvmsg+0x1c6/0x480 [ 117.529035][ T6894] ? __pfx_____sys_recvmsg+0x10/0x10 [ 117.529089][ T6894] __sys_recvmsg+0x291/0x390 [ 117.529122][ T6894] ? __pfx___sys_recvmsg+0x10/0x10 [ 117.529165][ T6894] ? __fget_files+0x2a/0x410 [ 117.529213][ T6894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.529249][ T6894] ? do_syscall_64+0x100/0x230 [ 117.529282][ T6894] ? do_syscall_64+0xb6/0x230 [ 117.529315][ T6894] do_syscall_64+0xf3/0x230 [ 117.529345][ T6894] ? clear_bhb_loop+0x35/0x90 [ 117.529378][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.529409][ T6894] RIP: 0033:0x7fb9b5d8d169 [ 117.529428][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.529446][ T6894] RSP: 002b:00007fb9b6ba3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 117.529469][ T6894] RAX: ffffffffffffffda RBX: 00007fb9b5fa5fa0 RCX: 00007fb9b5d8d169 [ 117.529484][ T6894] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 117.529498][ T6894] RBP: 00007fb9b6ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 117.529512][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.529525][ T6894] R13: 0000000000000000 R14: 00007fb9b5fa5fa0 R15: 00007ffc9fa84248 [ 117.529558][ T6894] [ 118.114839][ T6905] lo speed is unknown, defaulting to 1000 [ 118.311307][ T6915] netlink: 256 bytes leftover after parsing attributes in process `syz.4.249'. [ 118.647287][ T6925] tipc: Started in network mode [ 118.657104][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 118.666440][ T6925] tipc: Node identity 40000001, cluster identity 8 [ 118.666462][ T6925] tipc: Node number set to 1073741825 [ 118.706140][ T6925] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 119.196290][ T6954] FAULT_INJECTION: forcing a failure. [ 119.196290][ T6954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.227855][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.1.259 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 119.227896][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.227909][ T6954] Call Trace: [ 119.227916][ T6954] [ 119.227925][ T6954] dump_stack_lvl+0x241/0x360 [ 119.227957][ T6954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.227981][ T6954] ? __pfx__printk+0x10/0x10 [ 119.228003][ T6954] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.228047][ T6954] should_fail_ex+0x40a/0x550 [ 119.228085][ T6954] prepare_alloc_pages+0x1da/0x5b0 [ 119.228118][ T6954] __alloc_frozen_pages_noprof+0x16f/0x710 [ 119.228148][ T6954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.228196][ T6954] alloc_pages_mpol+0x311/0x660 [ 119.228232][ T6954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.228273][ T6954] vma_alloc_folio_noprof+0x12b/0x260 [ 119.228306][ T6954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 119.228339][ T6954] ? do_raw_spin_unlock+0x13c/0x8b0 [ 119.228372][ T6954] folio_prealloc+0x2e/0x170 [ 119.228396][ T6954] do_wp_page+0x1253/0x49b0 [ 119.228446][ T6954] ? __pfx_do_wp_page+0x10/0x10 [ 119.228478][ T6954] ? __pfx_validate_chain+0x10/0x10 [ 119.228506][ T6954] ? __pfx_lock_acquire+0x10/0x10 [ 119.228535][ T6954] ? rcu_is_watching+0x15/0xb0 [ 119.228563][ T6954] ? do_raw_spin_lock+0x14f/0x370 [ 119.228591][ T6954] ? __pfx____pte_offset_map+0x10/0x10 [ 119.228641][ T6954] __handle_mm_fault+0x24d5/0x70f0 [ 119.228673][ T6954] ? mark_lock+0x9a/0x360 [ 119.228723][ T6954] ? __pfx___handle_mm_fault+0x10/0x10 [ 119.228763][ T6954] ? __pfx_lock_acquire+0x10/0x10 [ 119.228800][ T6954] ? do_raw_spin_lock+0x14f/0x370 [ 119.228847][ T6954] ? follow_page_pte+0xdd3/0x1460 [ 119.228877][ T6954] ? follow_page_pte+0xe54/0x1460 [ 119.228900][ T6954] ? __pfx_lock_release+0x10/0x10 [ 119.228938][ T6954] ? do_raw_spin_unlock+0x13c/0x8b0 [ 119.228982][ T6954] ? __pfx___might_resched+0x10/0x10 [ 119.229013][ T6954] handle_mm_fault+0x3e5/0x8d0 [ 119.229056][ T6954] __get_user_pages+0x1a92/0x4140 [ 119.229117][ T6954] ? __pfx___get_user_pages+0x10/0x10 [ 119.229141][ T6954] ? __pfx_down_read_killable+0x10/0x10 [ 119.229195][ T6954] __gup_longterm_locked+0xe64/0x17f0 [ 119.229231][ T6954] ? mark_lock+0x9a/0x360 [ 119.229255][ T6954] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.229286][ T6954] ? __pfx___gup_longterm_locked+0x10/0x10 [ 119.229308][ T6954] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.229339][ T6954] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 119.229376][ T6954] ? gup_fast_fallback+0x207e/0x29c0 [ 119.229401][ T6954] gup_fast_fallback+0x2266/0x29c0 [ 119.229457][ T6954] ? __pfx_gup_fast_fallback+0x10/0x10 [ 119.229477][ T6954] ? 0xffffffffa00007d4 [ 119.229497][ T6954] ? is_bpf_text_address+0x26/0x2a0 [ 119.229519][ T6954] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.229548][ T6954] ? kernel_text_address+0xa7/0xe0 [ 119.229571][ T6954] ? __kernel_text_address+0xd/0x40 [ 119.229593][ T6954] ? unwind_get_return_address+0x4d/0x90 [ 119.229627][ T6954] ? arch_stack_walk+0xfd/0x150 [ 119.229661][ T6954] ? stack_trace_save+0x118/0x1d0 [ 119.229688][ T6954] ? is_valid_gup_args+0x124/0x200 [ 119.229713][ T6954] pin_user_pages_fast+0xcc/0x160 [ 119.229740][ T6954] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 119.229775][ T6954] iov_iter_extract_pages+0x3bb/0x5c0 [ 119.229813][ T6954] extract_iter_to_sg+0xea6/0x2650 [ 119.229855][ T6954] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 119.229911][ T6954] ? __asan_memset+0x23/0x50 [ 119.229936][ T6954] af_alg_get_rsgl+0x41e/0x850 [ 119.229984][ T6954] skcipher_recvmsg+0x3f8/0x1230 [ 119.230037][ T6954] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 119.230070][ T6954] ? aa_sock_msg_perm+0x91/0x160 [ 119.230105][ T6954] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 119.230130][ T6954] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 119.230165][ T6954] sock_recvmsg+0x22f/0x280 [ 119.230202][ T6954] ____sys_recvmsg+0x1c6/0x480 [ 119.230239][ T6954] ? __pfx_____sys_recvmsg+0x10/0x10 [ 119.230291][ T6954] __sys_recvmsg+0x291/0x390 [ 119.230324][ T6954] ? __pfx___sys_recvmsg+0x10/0x10 [ 119.230366][ T6954] ? __fget_files+0x2a/0x410 [ 119.230415][ T6954] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.230449][ T6954] ? do_syscall_64+0x100/0x230 [ 119.230482][ T6954] ? do_syscall_64+0xb6/0x230 [ 119.230513][ T6954] do_syscall_64+0xf3/0x230 [ 119.230541][ T6954] ? clear_bhb_loop+0x35/0x90 [ 119.230574][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.230602][ T6954] RIP: 0033:0x7f577538d169 [ 119.230620][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.230637][ T6954] RSP: 002b:00007f57731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 119.230659][ T6954] RAX: ffffffffffffffda RBX: 00007f57755a5fa0 RCX: 00007f577538d169 [ 119.230675][ T6954] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 119.230688][ T6954] RBP: 00007f57731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.230700][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.230712][ T6954] R13: 0000000000000000 R14: 00007f57755a5fa0 R15: 00007fffd6a38058 [ 119.230745][ T6954] [ 120.359019][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 120.600466][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 120.772105][ T7033] xt_hashlimit: size too large, truncated to 1048576 [ 120.807347][ T7036] FAULT_INJECTION: forcing a failure. [ 120.807347][ T7036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.851031][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.274 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 120.851060][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.851073][ T7036] Call Trace: [ 120.851080][ T7036] [ 120.851088][ T7036] dump_stack_lvl+0x241/0x360 [ 120.851119][ T7036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.851142][ T7036] ? __pfx__printk+0x10/0x10 [ 120.851162][ T7036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.851203][ T7036] should_fail_ex+0x40a/0x550 [ 120.851240][ T7036] prepare_alloc_pages+0x1da/0x5b0 [ 120.851271][ T7036] __alloc_frozen_pages_noprof+0x16f/0x710 [ 120.851299][ T7036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.851343][ T7036] alloc_pages_mpol+0x311/0x660 [ 120.851377][ T7036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.851417][ T7036] vma_alloc_folio_noprof+0x12b/0x260 [ 120.851459][ T7036] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 120.851492][ T7036] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.851524][ T7036] folio_prealloc+0x2e/0x170 [ 120.851549][ T7036] do_wp_page+0x1253/0x49b0 [ 120.851597][ T7036] ? __pfx_do_wp_page+0x10/0x10 [ 120.851629][ T7036] ? __pfx_validate_chain+0x10/0x10 [ 120.851657][ T7036] ? __pfx_lock_acquire+0x10/0x10 [ 120.851685][ T7036] ? rcu_is_watching+0x15/0xb0 [ 120.851713][ T7036] ? do_raw_spin_lock+0x14f/0x370 [ 120.851740][ T7036] ? __pfx____pte_offset_map+0x10/0x10 [ 120.851790][ T7036] __handle_mm_fault+0x24d5/0x70f0 [ 120.851821][ T7036] ? mark_lock+0x9a/0x360 [ 120.851870][ T7036] ? __pfx___handle_mm_fault+0x10/0x10 [ 120.851911][ T7036] ? __pfx_lock_acquire+0x10/0x10 [ 120.851947][ T7036] ? do_raw_spin_lock+0x14f/0x370 [ 120.851993][ T7036] ? follow_page_pte+0xdd3/0x1460 [ 120.852018][ T7036] ? follow_page_pte+0xe54/0x1460 [ 120.852041][ T7036] ? __pfx_lock_release+0x10/0x10 [ 120.852079][ T7036] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.852127][ T7036] ? __pfx___might_resched+0x10/0x10 [ 120.852158][ T7036] handle_mm_fault+0x3e5/0x8d0 [ 120.852203][ T7036] __get_user_pages+0x1a92/0x4140 [ 120.852265][ T7036] ? __pfx___get_user_pages+0x10/0x10 [ 120.852289][ T7036] ? __pfx_down_read_killable+0x10/0x10 [ 120.852342][ T7036] __gup_longterm_locked+0xe64/0x17f0 [ 120.852379][ T7036] ? mark_lock+0x9a/0x360 [ 120.852403][ T7036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.852433][ T7036] ? __pfx___gup_longterm_locked+0x10/0x10 [ 120.852463][ T7036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.852494][ T7036] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 120.852532][ T7036] ? gup_fast_fallback+0x207e/0x29c0 [ 120.852558][ T7036] gup_fast_fallback+0x2266/0x29c0 [ 120.852615][ T7036] ? __pfx_gup_fast_fallback+0x10/0x10 [ 120.852636][ T7036] ? 0xffffffffa00007cc [ 120.852656][ T7036] ? is_bpf_text_address+0x26/0x2a0 [ 120.852677][ T7036] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.852707][ T7036] ? kernel_text_address+0xa7/0xe0 [ 120.852730][ T7036] ? __kernel_text_address+0xd/0x40 [ 120.852751][ T7036] ? unwind_get_return_address+0x4d/0x90 [ 120.852784][ T7036] ? arch_stack_walk+0xfd/0x150 [ 120.852819][ T7036] ? stack_trace_save+0x118/0x1d0 [ 120.852845][ T7036] ? is_valid_gup_args+0x124/0x200 [ 120.852871][ T7036] pin_user_pages_fast+0xcc/0x160 [ 120.852897][ T7036] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 120.852930][ T7036] iov_iter_extract_pages+0x3bb/0x5c0 [ 120.852966][ T7036] extract_iter_to_sg+0xea6/0x2650 [ 120.853007][ T7036] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 120.853052][ T7036] ? __asan_memset+0x23/0x50 [ 120.853076][ T7036] af_alg_get_rsgl+0x41e/0x850 [ 120.853128][ T7036] skcipher_recvmsg+0x3f8/0x1230 [ 120.853181][ T7036] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 120.853214][ T7036] ? aa_sock_msg_perm+0x91/0x160 [ 120.853249][ T7036] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 120.853273][ T7036] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 120.853308][ T7036] sock_recvmsg+0x22f/0x280 [ 120.853345][ T7036] ____sys_recvmsg+0x1c6/0x480 [ 120.853382][ T7036] ? __pfx_____sys_recvmsg+0x10/0x10 [ 120.853434][ T7036] __sys_recvmsg+0x291/0x390 [ 120.853474][ T7036] ? __pfx___sys_recvmsg+0x10/0x10 [ 120.853516][ T7036] ? __fget_files+0x2a/0x410 [ 120.853564][ T7036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.853599][ T7036] ? do_syscall_64+0x100/0x230 [ 120.853631][ T7036] ? do_syscall_64+0xb6/0x230 [ 120.853662][ T7036] do_syscall_64+0xf3/0x230 [ 120.853691][ T7036] ? clear_bhb_loop+0x35/0x90 [ 120.853724][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.853753][ T7036] RIP: 0033:0x7f917478d169 [ 120.853771][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.853787][ T7036] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.853810][ T7036] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 120.853825][ T7036] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 120.853837][ T7036] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 120.853850][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.853861][ T7036] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 120.853894][ T7036] [ 122.246373][ T7055] lo speed is unknown, defaulting to 1000 [ 122.283345][ T7058] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 122.301773][ T7061] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 122.420857][ T7058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.446245][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 122.697754][ T7085] FAULT_INJECTION: forcing a failure. [ 122.697754][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 122.715095][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.2.287 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 122.715127][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.715140][ T7085] Call Trace: [ 122.715147][ T7085] [ 122.715156][ T7085] dump_stack_lvl+0x241/0x360 [ 122.715188][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.715212][ T7085] ? __pfx__printk+0x10/0x10 [ 122.715235][ T7085] ? __kmalloc_noprof+0xb5/0x4c0 [ 122.715266][ T7085] ? __pfx___might_resched+0x10/0x10 [ 122.715300][ T7085] should_fail_ex+0x40a/0x550 [ 122.715347][ T7085] should_failslab+0xac/0x100 [ 122.715378][ T7085] __kmalloc_noprof+0xdd/0x4c0 [ 122.715406][ T7085] ? sock_kmalloc+0xd7/0x160 [ 122.715437][ T7085] sock_kmalloc+0xd7/0x160 [ 122.715467][ T7085] skcipher_recvmsg+0x5ff/0x1230 [ 122.715520][ T7085] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 122.715552][ T7085] ? aa_sock_msg_perm+0x91/0x160 [ 122.715585][ T7085] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 122.715610][ T7085] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 122.715644][ T7085] sock_recvmsg+0x22f/0x280 [ 122.715680][ T7085] ____sys_recvmsg+0x1c6/0x480 [ 122.715715][ T7085] ? __pfx_____sys_recvmsg+0x10/0x10 [ 122.715766][ T7085] __sys_recvmsg+0x291/0x390 [ 122.715797][ T7085] ? __pfx___sys_recvmsg+0x10/0x10 [ 122.715837][ T7085] ? __fget_files+0x2a/0x410 [ 122.715882][ T7085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.715915][ T7085] ? do_syscall_64+0x100/0x230 [ 122.715947][ T7085] ? do_syscall_64+0xb6/0x230 [ 122.715978][ T7085] do_syscall_64+0xf3/0x230 [ 122.716005][ T7085] ? clear_bhb_loop+0x35/0x90 [ 122.716038][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.716066][ T7085] RIP: 0033:0x7ff1f298d169 [ 122.716085][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.716101][ T7085] RSP: 002b:00007ff1f3743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 122.716124][ T7085] RAX: ffffffffffffffda RBX: 00007ff1f2ba5fa0 RCX: 00007ff1f298d169 [ 122.716139][ T7085] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000004 [ 122.716152][ T7085] RBP: 00007ff1f3743090 R08: 0000000000000000 R09: 0000000000000000 [ 122.716164][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.716176][ T7085] R13: 0000000000000000 R14: 00007ff1f2ba5fa0 R15: 00007ffcffac1c88 [ 122.716207][ T7085] [ 123.090570][ T7090] xt_hashlimit: size too large, truncated to 1048576 [ 123.118663][ T7092] lo speed is unknown, defaulting to 1000 [ 123.235327][ T7096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 123.842819][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 124.044455][ T7128] @ÿ: renamed from veth0_vlan (while UP) [ 124.070387][ T7135] FAULT_INJECTION: forcing a failure. [ 124.070387][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.145636][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.4.302 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 124.145666][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.145678][ T7135] Call Trace: [ 124.145685][ T7135] [ 124.145694][ T7135] dump_stack_lvl+0x241/0x360 [ 124.145726][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.145750][ T7135] ? __pfx__printk+0x10/0x10 [ 124.145777][ T7135] ? snprintf+0xda/0x120 [ 124.145801][ T7135] should_fail_ex+0x40a/0x550 [ 124.145838][ T7135] _copy_to_user+0x31/0xb0 [ 124.145868][ T7135] simple_read_from_buffer+0xca/0x150 [ 124.145900][ T7135] proc_fail_nth_read+0x1e9/0x250 [ 124.145931][ T7135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.145962][ T7135] ? rw_verify_area+0x243/0x630 [ 124.145984][ T7135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.146014][ T7135] vfs_read+0x1f8/0xb40 [ 124.146037][ T7135] ? fdget_pos+0x254/0x320 [ 124.146068][ T7135] ? __pfx___mutex_lock+0x10/0x10 [ 124.146096][ T7135] ? __pfx_vfs_read+0x10/0x10 [ 124.146121][ T7135] ? __fget_files+0x2a/0x410 [ 124.146154][ T7135] ? __fget_files+0x395/0x410 [ 124.146183][ T7135] ? __fget_files+0x2a/0x410 [ 124.146222][ T7135] ksys_read+0x18f/0x2b0 [ 124.146247][ T7135] ? __pfx_ksys_read+0x10/0x10 [ 124.146270][ T7135] ? do_syscall_64+0x100/0x230 [ 124.146300][ T7135] ? do_syscall_64+0xb6/0x230 [ 124.146330][ T7135] do_syscall_64+0xf3/0x230 [ 124.146357][ T7135] ? clear_bhb_loop+0x35/0x90 [ 124.146386][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.146413][ T7135] RIP: 0033:0x7fb9b5d8bb7c [ 124.146431][ T7135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.146446][ T7135] RSP: 002b:00007fb9b6ba3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.146477][ T7135] RAX: ffffffffffffffda RBX: 00007fb9b5fa5fa0 RCX: 00007fb9b5d8bb7c [ 124.146493][ T7135] RDX: 000000000000000f RSI: 00007fb9b6ba30a0 RDI: 0000000000000005 [ 124.146506][ T7135] RBP: 00007fb9b6ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 124.146518][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.146529][ T7135] R13: 0000000000000000 R14: 00007fb9b5fa5fa0 R15: 00007ffc9fa84248 [ 124.146560][ T7135] [ 124.481742][ T7144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.308'. [ 124.549650][ T7144] netlink: 300 bytes leftover after parsing attributes in process `syz.0.308'. [ 124.752692][ T7151] xt_hashlimit: size too large, truncated to 1048576 [ 124.832747][ T7157] FAULT_INJECTION: forcing a failure. [ 124.832747][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.912599][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.3.311 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 124.912631][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.912644][ T7157] Call Trace: [ 124.912651][ T7157] [ 124.912659][ T7157] dump_stack_lvl+0x241/0x360 [ 124.912691][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.912714][ T7157] ? __pfx__printk+0x10/0x10 [ 124.912738][ T7157] ? __pfx_lock_release+0x10/0x10 [ 124.912779][ T7157] should_fail_ex+0x40a/0x550 [ 124.912816][ T7157] _copy_from_user+0x2d/0xb0 [ 124.912845][ T7157] __sys_bpf+0x1be/0x820 [ 124.912877][ T7157] ? __pfx___sys_bpf+0x10/0x10 [ 124.912919][ T7157] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.912953][ T7157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.912986][ T7157] ? do_syscall_64+0x100/0x230 [ 124.913019][ T7157] __x64_sys_bpf+0x7c/0x90 [ 124.913047][ T7157] do_syscall_64+0xf3/0x230 [ 124.913074][ T7157] ? clear_bhb_loop+0x35/0x90 [ 124.913106][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.913134][ T7157] RIP: 0033:0x7f917478d169 [ 124.913151][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.913167][ T7157] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.913189][ T7157] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 124.913204][ T7157] RDX: 0000000000000050 RSI: 00004000000006c0 RDI: 0000000000000000 [ 124.913217][ T7157] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 124.913229][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.913240][ T7157] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 124.913270][ T7157] [ 124.937477][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 125.247995][ T7173] netlink: 104 bytes leftover after parsing attributes in process `syz.3.316'. [ 125.582092][ T7187] lo speed is unknown, defaulting to 1000 [ 125.782724][ T7200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.323'. [ 125.837753][ T7203] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.637913][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 126.688409][ T7233] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 126.784413][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 126.827090][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 127.059524][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 128.419940][ T7292] __nla_validate_parse: 2 callbacks suppressed [ 128.419961][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 128.438773][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'. [ 128.459407][ T7292] geneve2: entered promiscuous mode [ 128.464816][ T7292] geneve2: entered allmulticast mode [ 128.482981][ T7291] tap0: tun_chr_ioctl cmd 1074025677 [ 128.488481][ T7291] tap0: linktype set to 774 [ 128.528411][ T5939] IPVS: starting estimator thread 0... [ 128.537681][ T7291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.346'. [ 128.548057][ T7291] vlan0: entered promiscuous mode [ 128.634542][ T7296] IPVS: using max 23 ests per chain, 55200 per kthread [ 128.709880][ T7298] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 128.719399][ T7298] macsec2: entered promiscuous mode [ 128.727272][ T7298] macsec2: entered allmulticast mode [ 128.744818][ T7298] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 128.994052][ T7309] : renamed from bond_slave_0 (while UP) [ 129.000335][ T7310] netlink: 'syz.4.354': attribute type 15 has an invalid length. [ 129.025055][ T7310] netlink: 'syz.4.354': attribute type 15 has an invalid length. [ 129.044676][ T7310] netlink: 'syz.4.354': attribute type 15 has an invalid length. [ 129.108570][ T7317] xt_hashlimit: size too large, truncated to 1048576 [ 129.501778][ T7329] dvmrp0: entered allmulticast mode [ 129.996219][ T7342] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 130.024345][ T7342] bond1: entered promiscuous mode [ 130.029682][ T7342] bond1: entered allmulticast mode [ 130.035364][ T7342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.055203][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.065506][ T7342] batadv1: entered promiscuous mode [ 130.070937][ T7342] batadv1: entered allmulticast mode [ 130.077452][ T7342] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 130.133834][ T1107] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.292755][ T1122] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.921293][ T7372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.370'. [ 130.980506][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 131.024123][ T7375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.371'. [ 131.082378][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 131.441664][ T7388] xt_hashlimit: size too large, truncated to 1048576 [ 132.740589][ T7429] lo speed is unknown, defaulting to 1000 [ 133.202790][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.209560][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.783015][ T7456] xt_hashlimit: size too large, truncated to 1048576 [ 134.528384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032141c00: rx timeout, send abort [ 134.741609][ T7484] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 134.780092][ T7484] team0: Device veth1_vlan failed to register rx_handler [ 134.937505][ T7484] syz.0.405 (7484) used greatest stack depth: 17328 bytes left [ 135.037867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032141c00: abort rx timeout. Force session deactivation [ 135.232457][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.409'. [ 135.721752][ T7508] xt_hashlimit: size too large, truncated to 1048576 [ 136.313267][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032143800: rx timeout, send abort [ 136.766904][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 136.793315][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 136.821613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032143800: abort rx timeout. Force session deactivation [ 137.113281][ T7566] xt_hashlimit: size too large, truncated to 1048576 [ 137.437305][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 137.465870][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 137.887492][ T7601] openvswitch: netlink: IP tunnel dst address not specified [ 138.217454][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 138.601307][ T7648] netlink: 168 bytes leftover after parsing attributes in process `syz.0.454'. [ 138.612687][ T7649] netlink: 2 bytes leftover after parsing attributes in process `syz.4.451'. [ 138.627820][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.650716][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.684204][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.740573][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.797479][ T7649] batadv_slave_1: entered promiscuous mode [ 139.417533][ T7678] lo speed is unknown, defaulting to 1000 [ 139.964605][ T7678] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 140.453198][ T7711] netlink: 148 bytes leftover after parsing attributes in process `syz.2.471'. [ 140.479262][ T7711] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.524757][ T7715] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 140.537277][ T7711] netlink: 'syz.2.471': attribute type 2 has an invalid length. [ 140.714711][ T7715] lo speed is unknown, defaulting to 1000 [ 141.074303][ T7731] geneve1: entered promiscuous mode [ 141.102331][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 141.357687][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 141.535124][ T7743] lo speed is unknown, defaulting to 1000 [ 141.541457][ T7748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.483'. [ 141.677822][ T7751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.841291][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 142.009177][ T7763] lo speed is unknown, defaulting to 1000 [ 142.094752][ T7771] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 142.179508][ T7772] bond0 (unregistering): Released all slaves [ 142.548335][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 143.005296][ T7808] lo speed is unknown, defaulting to 1000 [ 143.477895][ T7817] xt_TCPMSS: Only works on TCP SYN packets [ 143.818258][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 144.027829][ T7811] syzkaller0: entered promiscuous mode [ 144.048344][ T7811] syzkaller0: entered allmulticast mode [ 144.210380][ T7844] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 144.297666][ T7842] can: request_module (can-proto-5) failed. [ 144.504946][ T7857] xt_hashlimit: size too large, truncated to 1048576 [ 144.754032][ T7865] openvswitch: netlink: Flow key attr not present in new flow. [ 144.780402][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.520'. [ 145.035190][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 145.367755][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 145.717428][ T7910] syz.4.532: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.743556][ T7910] CPU: 0 UID: 0 PID: 7910 Comm: syz.4.532 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 145.743589][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.743602][ T7910] Call Trace: [ 145.743610][ T7910] [ 145.743619][ T7910] dump_stack_lvl+0x241/0x360 [ 145.743653][ T7910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.743677][ T7910] ? __pfx__printk+0x10/0x10 [ 145.743704][ T7910] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 145.743732][ T7910] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 145.743763][ T7910] warn_alloc+0x278/0x410 [ 145.743792][ T7910] ? __pfx_warn_alloc+0x10/0x10 [ 145.743821][ T7910] ? xskq_create+0xb6/0x170 [ 145.743842][ T7910] ? __get_vm_area_node+0x1c8/0x2d0 [ 145.743874][ T7910] ? __get_vm_area_node+0x25c/0x2d0 [ 145.743913][ T7910] __vmalloc_node_range_noprof+0x62f/0x1380 [ 145.743967][ T7910] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.743994][ T7910] ? __kasan_kmalloc+0x98/0xb0 [ 145.744031][ T7910] vmalloc_user_noprof+0x74/0x80 [ 145.744053][ T7910] ? xskq_create+0xb6/0x170 [ 145.744073][ T7910] xskq_create+0xb6/0x170 [ 145.744096][ T7910] xsk_init_queue+0xa1/0x100 [ 145.744121][ T7910] xsk_setsockopt+0x560/0x810 [ 145.744144][ T7910] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.744165][ T7910] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.744199][ T7910] ? __pfx_lock_acquire+0x10/0x10 [ 145.744229][ T7910] ? aa_sock_opt_perm+0x79/0x120 [ 145.744268][ T7910] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.744287][ T7910] do_sock_setsockopt+0x3af/0x720 [ 145.744319][ T7910] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.744349][ T7910] ? __fget_files+0x395/0x410 [ 145.744380][ T7910] ? __fget_files+0x2a/0x410 [ 145.744420][ T7910] __x64_sys_setsockopt+0x1ee/0x280 [ 145.744452][ T7910] do_syscall_64+0xf3/0x230 [ 145.744480][ T7910] ? clear_bhb_loop+0x35/0x90 [ 145.744512][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.744539][ T7910] RIP: 0033:0x7fb9b5d8d169 [ 145.744557][ T7910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.744573][ T7910] RSP: 002b:00007fb9b6b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.744593][ T7910] RAX: ffffffffffffffda RBX: 00007fb9b5fa6080 RCX: 00007fb9b5d8d169 [ 145.744609][ T7910] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 145.744620][ T7910] RBP: 00007fb9b5e0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 145.744633][ T7910] R10: 00004000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 145.744645][ T7910] R13: 0000000000000001 R14: 00007fb9b5fa6080 R15: 00007ffc9fa84248 [ 145.744673][ T7910] [ 145.744692][ T7910] Mem-Info: [ 145.928199][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 146.002489][ T7910] active_anon:6045 inactive_anon:0 isolated_anon:0 [ 146.002489][ T7910] active_file:1659 inactive_file:38322 isolated_file:0 [ 146.002489][ T7910] unevictable:768 dirty:32 writeback:0 [ 146.002489][ T7910] slab_reclaimable:10149 slab_unreclaimable:98646 [ 146.002489][ T7910] mapped:29689 shmem:1404 pagetables:832 [ 146.002489][ T7910] sec_pagetables:0 bounce:0 [ 146.002489][ T7910] kernel_misc_reclaimable:0 [ 146.002489][ T7910] free:1336798 free_pcp:1370 free_cma:0 [ 146.077351][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.078097][ T7918] netlink: zone id is out of range [ 146.084970][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.096850][ T7918] netlink: set zone limit has 8 unknown bytes [ 146.119725][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 146.121551][ T7910] Node 0 active_anon:24180kB inactive_anon:0kB active_file:6636kB inactive_file:153212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118756kB dirty:128kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11224kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no [ 146.191887][ T7910] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 146.252780][ T7910] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.280971][ T7910] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 146.289069][ T7910] Node 0 DMA32 free:1433504kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:24076kB inactive_anon:0kB active_file:6636kB inactive_file:152908kB unevictable:1536kB writepending:164kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:3500kB local_pcp:2832kB free_cma:0kB [ 146.325099][ T7910] lowmem_reserve[]: 0 0 0 0 0 [ 146.330139][ T7910] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 146.359870][ T7910] lowmem_reserve[]: 0 0 0 0 0 [ 146.389260][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 146.397743][ T7910] Node 1 Normal free:3901260kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 146.428564][ T7910] lowmem_reserve[]: 0 0 0 0 0 [ 146.446795][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.460127][ T7910] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.480512][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.498625][ T7910] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 168*16kB (UM) 201*32kB (UME) 233*64kB (UME) 127*128kB (UME) 67*256kB (UME) 36*512kB (UME) 13*1024kB (UME) 4*2048kB (UME) 326*4096kB (M) = 1432700kB [ 146.521075][ T7910] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 146.533708][ T7910] Node 1 Normal: 241*4kB (UE) 61*8kB (UME) 38*16kB (UME) 230*32kB (UME) 112*64kB (UME) 29*128kB (UME) 18*256kB (UM) 9*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 943*4096kB (M) = 3901260kB [ 146.563257][ T7910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.573442][ T7910] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.583095][ T7910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.595268][ T7910] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.607475][ T7910] 41389 total pagecache pages [ 146.616628][ T7910] 0 pages in swap cache [ 146.621048][ T7910] Free swap = 124996kB [ 146.628867][ T7898] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.630044][ T7910] Total swap = 124996kB [ 146.643066][ T7898] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.643151][ T7898] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.643181][ T7898] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.681000][ T7910] 2097051 pages RAM [ 146.690412][ T7910] 0 pages HighMem/MovableOnly [ 146.701429][ T7910] 427902 pages reserved [ 146.707457][ T7910] 0 pages cma reserved [ 146.843165][ T7904] bridge0: port 3(gretap0) entered blocking state [ 146.849733][ T7904] bridge0: port 3(gretap0) entered disabled state [ 146.865096][ T7904] gretap0: entered allmulticast mode [ 146.871726][ T7904] gretap0: entered promiscuous mode [ 146.878981][ T7914] gretap0: left allmulticast mode [ 146.884716][ T7914] gretap0: left promiscuous mode [ 146.893085][ T7914] bridge0: port 3(gretap0) entered disabled state [ 146.909514][ T7916] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 147.000340][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 147.358410][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 147.389497][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 147.428264][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.546'. [ 147.802428][ T7972] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 147.822423][ T7971] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 147.837121][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 147.859057][ T7972] bond1: entered promiscuous mode [ 147.864496][ T7972] bond1: entered allmulticast mode [ 148.330183][ T8001] netlink: 'syz.1.562': attribute type 11 has an invalid length. [ 148.487334][ T8008] xt_hashlimit: size too large, truncated to 1048576 [ 148.819161][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.567'. [ 148.966815][ T8023] lo speed is unknown, defaulting to 1000 [ 149.299485][ T8026] lo speed is unknown, defaulting to 1000 [ 152.005069][ T8033] tipc: Failed to remove unknown binding: 66,1,1/1073741825:4191712520/4191712522 [ 152.293376][ T8059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.310195][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.330041][ T8059] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 152.350289][ T8059] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 152.371395][ T8059] netlink: 80 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.403408][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.433579][ T8056] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 152.467102][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 152.647808][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 152.720857][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 152.745859][ T8080] xt_hashlimit: size too large, truncated to 1048576 [ 152.763813][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 152.796058][ T8078] vlan2: entered allmulticast mode [ 152.809591][ T8078] batadv0: entered allmulticast mode [ 152.921045][ T8044] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 153.127421][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 153.290553][ T8108] lo speed is unknown, defaulting to 1000 [ 153.621846][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 153.881902][ T8134] ax25_connect(): syz.1.602 uses autobind, please contact jreuter@yaina.de [ 154.162425][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 154.170086][ T8147] xt_hashlimit: size too large, truncated to 1048576 [ 155.335387][ T8164] lo speed is unknown, defaulting to 1000 [ 155.846255][ T8182] sctp: [Deprecated]: syz.1.613 (pid 8182) Use of int in max_burst socket option deprecated. [ 155.846255][ T8182] Use struct sctp_assoc_value instead [ 156.433536][ T8207] xt_hashlimit: size too large, truncated to 1048576 [ 156.571065][ T8213] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 157.352892][ T8239] __nla_validate_parse: 12 callbacks suppressed [ 157.352913][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.234560][ T8280] xt_hashlimit: size too large, truncated to 1048576 [ 158.470813][ T8291] netlink: 'syz.1.648': attribute type 4 has an invalid length. [ 158.689704][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 159.327434][ T8322] netlink: 52 bytes leftover after parsing attributes in process `syz.3.658'. [ 159.712566][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 159.935321][ T8347] xt_hashlimit: size too large, truncated to 1048576 [ 159.964558][ T8349] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 159.995614][ T8349] veth0_macvtap: left promiscuous mode [ 160.044197][ T8349] veth0_macvtap: entered promiscuous mode [ 160.124807][ T8349] team0: Device macvtap0 failed to register rx_handler [ 160.434477][ T8349] veth0_macvtap: left promiscuous mode [ 160.973411][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 160.988498][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.678'. [ 161.018192][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 161.102732][ T8391] xt_l2tp: invalid flags combination: c [ 161.470102][ T8409] xt_hashlimit: size too large, truncated to 1048576 [ 161.653069][ T8416] sctp: [Deprecated]: syz.3.689 (pid 8416) Use of int in max_burst socket option. [ 161.653069][ T8416] Use struct sctp_assoc_value instead [ 161.786694][ T8423] lo speed is unknown, defaulting to 1000 [ 162.068058][ T8423] netlink: 240 bytes leftover after parsing attributes in process `syz.0.690'. [ 162.079496][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 162.569724][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.698'. [ 162.702483][ T8451] netlink: 96 bytes leftover after parsing attributes in process `syz.2.697'. [ 162.718148][ T8451] netlink: 120 bytes leftover after parsing attributes in process `syz.2.697'. [ 162.993568][ T8468] xt_hashlimit: size too large, truncated to 1048576 [ 163.031803][ T8469] bridge0: port 2(gretap0) entered blocking state [ 163.045333][ T8469] bridge0: port 2(gretap0) entered disabled state [ 163.051997][ T8469] gretap0: entered allmulticast mode [ 163.091279][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 163.139773][ T8469] gretap0: entered promiscuous mode [ 163.148764][ T8469] bridge0: port 2(gretap0) entered blocking state [ 163.155488][ T8469] bridge0: port 2(gretap0) entered forwarding state [ 163.839565][ T8491] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 163.864925][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 164.118865][ T8503] lo speed is unknown, defaulting to 1000 [ 164.399659][ T8510] lo speed is unknown, defaulting to 1000 [ 164.594431][ T8500] netlink: 88 bytes leftover after parsing attributes in process `syz.2.712'. [ 164.603655][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 164.628210][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.712'. [ 164.670617][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 164.688813][ T8500] netlink: 80 bytes leftover after parsing attributes in process `syz.2.712'. [ 165.180464][ T8503] lo speed is unknown, defaulting to 1000 [ 165.255531][ T8537] xt_hashlimit: size too large, truncated to 1048576 [ 165.429513][ T8500] x_tables: duplicate entry at hook 2 [ 165.462699][ T8503] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 165.781988][ T8553] Cannot find add_set index 0 as target [ 166.060605][ T8555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.068766][ T8555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.098127][ T8555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.140296][ T8555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.112627][ T8588] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 167.140916][ T8588] team0: Port device bridge0 added [ 167.223988][ T8589] syz_tun: entered promiscuous mode [ 167.414229][ T8598] xt_hashlimit: size too large, truncated to 1048576 [ 167.670049][ T8606] __nla_validate_parse: 4 callbacks suppressed [ 167.670071][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 168.195998][ T8601] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.212566][ T8601] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.234379][ T8601] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.251067][ T8601] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.311501][ T5894] lo speed is unknown, defaulting to 1000 [ 168.395404][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.440449][ T8607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.492310][ T8585] syz_tun: left promiscuous mode [ 168.509599][ T5894] lo speed is unknown, defaulting to 1000 [ 168.924973][ T8646] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 168.937802][ T8646] veth0_macvtap: left promiscuous mode [ 168.947473][ T8646] veth0_macvtap: entered promiscuous mode [ 168.985237][ T8646] team0: Device macvtap0 failed to register rx_handler [ 169.019763][ T8646] veth0_macvtap: left promiscuous mode [ 169.648403][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 169.675023][ T5895] lo speed is unknown, defaulting to 1000 [ 169.933550][ T8667] xt_hashlimit: size too large, truncated to 1048576 [ 170.029519][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.755'. [ 170.123224][ T8669] netlink: 'syz.4.755': attribute type 13 has an invalid length. [ 170.412994][ T8669] bridge0: port 2(gretap0) entered disabled state [ 170.442884][ T8669] gretap0: refused to change device tx_queue_len [ 170.484653][ T8669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.767424][ T8680] netlink: 1275 bytes leftover after parsing attributes in process `syz.2.759'. [ 170.795116][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.813443][ T8680] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.823090][ T8680] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.832220][ T8680] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.840974][ T8680] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.856877][ T8680] vxlan0: entered promiscuous mode [ 170.864304][ T8684] netlink: 304 bytes leftover after parsing attributes in process `syz.0.761'. [ 170.888847][ T8680] vxlan0: entered allmulticast mode [ 170.914934][ T8680] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.924725][ T8680] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.934113][ T8680] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.943123][ T8680] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.352503][ T978] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 171.801102][ T8723] xt_hashlimit: size too large, truncated to 1048576 [ 172.399251][ T8751] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 172.409022][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 172.910432][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 173.268601][ T8802] netlink: 'syz.1.803': attribute type 15 has an invalid length. [ 173.300272][ T8805] xt_hashlimit: size too large, truncated to 1048576 [ 173.356775][ T8808] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 173.915652][ T8831] tc_dump_action: action bad kind [ 174.155568][ T8845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.814'. [ 174.444645][ T8854] lo speed is unknown, defaulting to 1000 [ 174.689946][ T978] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 174.713311][ T978] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 175.229812][ T8884] xt_hashlimit: size too large, truncated to 1048576 [ 175.254704][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 175.470713][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 175.545981][ T8900] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 175.677629][ T8900] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 175.898300][ T8900] lo speed is unknown, defaulting to 1000 [ 176.390833][ T8923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.467684][ T8926] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 176.713094][ T8613] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec [ 176.814070][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 177.035520][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 177.564552][ T8956] lo speed is unknown, defaulting to 1000 [ 177.669429][ T8967] xt_hashlimit: size too large, truncated to 1048576 [ 177.776964][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 177.776991][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 177.959094][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 178.054128][ T8975] bond_slave_0: entered promiscuous mode [ 178.060197][ T8975] bond_slave_1: entered promiscuous mode [ 178.066338][ T8975] macvlan2: entered promiscuous mode [ 178.071777][ T8975] bond0: entered promiscuous mode [ 178.078792][ T8975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.096152][ T8976] macvlan3: entered promiscuous mode [ 178.105908][ T8976] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 178.179093][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 178.669338][ T8999] lo speed is unknown, defaulting to 1000 [ 179.126069][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 179.166911][ T9020] siw: device registration error -23 [ 179.327869][ T9025] lo speed is unknown, defaulting to 1000 [ 179.338853][ T9026] netlink: 88 bytes leftover after parsing attributes in process `syz.2.871'. [ 179.372520][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 179.393433][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.871'. [ 179.402968][ T9026] netlink: 80 bytes leftover after parsing attributes in process `syz.2.871'. [ 179.448840][ T9029] lo speed is unknown, defaulting to 1000 [ 179.456351][ T9032] xt_hashlimit: size too large, truncated to 1048576 [ 179.699364][ T9009] netlink: 'syz.4.865': attribute type 2 has an invalid length. [ 179.788294][ T9009] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.865'. [ 179.941233][ T9025] x_tables: duplicate entry at hook 2 [ 180.731458][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 181.110900][ T9092] FAULT_INJECTION: forcing a failure. [ 181.110900][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.159252][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.4.886 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 181.159285][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.159299][ T9092] Call Trace: [ 181.159306][ T9092] [ 181.159314][ T9092] dump_stack_lvl+0x241/0x360 [ 181.159345][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.159368][ T9092] ? __pfx__printk+0x10/0x10 [ 181.159391][ T9092] ? __pfx_lock_release+0x10/0x10 [ 181.159434][ T9092] should_fail_ex+0x40a/0x550 [ 181.159471][ T9092] _copy_from_user+0x2d/0xb0 [ 181.159501][ T9092] copy_msghdr_from_user+0xae/0x680 [ 181.159533][ T9092] ? __lock_acquire+0x1397/0x2100 [ 181.159569][ T9092] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 181.159605][ T9092] ? __fget_files+0x2a/0x410 [ 181.159640][ T9092] ? __fget_files+0x2a/0x410 [ 181.159681][ T9092] do_recvmmsg+0x3bd/0xab0 [ 181.159718][ T9092] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.159766][ T9092] ? ksys_write+0x22a/0x2b0 [ 181.159787][ T9092] ? __pfx_lock_release+0x10/0x10 [ 181.159824][ T9092] ? sb_end_write+0xe9/0x1c0 [ 181.159854][ T9092] ? vfs_write+0x7fa/0xd10 [ 181.159878][ T9092] ? __mutex_unlock_slowpath+0x227/0x800 [ 181.159917][ T9092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.159944][ T9092] ? __fget_files+0x2a/0x410 [ 181.159990][ T9092] __x64_sys_recvmmsg+0x199/0x250 [ 181.160021][ T9092] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.160051][ T9092] ? do_syscall_64+0x100/0x230 [ 181.160082][ T9092] ? do_syscall_64+0xb6/0x230 [ 181.160113][ T9092] do_syscall_64+0xf3/0x230 [ 181.160141][ T9092] ? clear_bhb_loop+0x35/0x90 [ 181.160175][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.160203][ T9092] RIP: 0033:0x7fb9b5d8d169 [ 181.160222][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.160239][ T9092] RSP: 002b:00007fb9b6ba3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.160261][ T9092] RAX: ffffffffffffffda RBX: 00007fb9b5fa5fa0 RCX: 00007fb9b5d8d169 [ 181.160277][ T9092] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 181.160292][ T9092] RBP: 00007fb9b6ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 181.160304][ T9092] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 181.160341][ T9092] R13: 0000000000000000 R14: 00007fb9b5fa5fa0 R15: 00007ffc9fa84248 [ 181.160373][ T9092] [ 181.501006][ T9097] lo speed is unknown, defaulting to 1000 [ 181.680407][ T9109] Cannot find set identified by id 0 to match [ 181.809959][ T9103] dvmrp0: entered allmulticast mode [ 181.823823][ T9119] netlink: 'syz.0.893': attribute type 13 has an invalid length. [ 181.902454][ T9111] xt_hashlimit: size too large, truncated to 1048576 [ 181.942410][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 181.967902][ T9124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.482613][ T8613] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 182.620874][ T9147] FAULT_INJECTION: forcing a failure. [ 182.620874][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.638798][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.1.902 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 182.638829][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.638842][ T9147] Call Trace: [ 182.638850][ T9147] [ 182.638859][ T9147] dump_stack_lvl+0x241/0x360 [ 182.638891][ T9147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.638914][ T9147] ? __pfx__printk+0x10/0x10 [ 182.638938][ T9147] ? __pfx_lock_release+0x10/0x10 [ 182.638979][ T9147] should_fail_ex+0x40a/0x550 [ 182.639016][ T9147] _copy_from_user+0x2d/0xb0 [ 182.639045][ T9147] copy_msghdr_from_user+0xae/0x680 [ 182.639078][ T9147] ? __pfx___might_resched+0x10/0x10 [ 182.639109][ T9147] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 182.639147][ T9147] ? do_recvmmsg+0x44e/0xab0 [ 182.639173][ T9147] ? __might_fault+0xaa/0x120 [ 182.639200][ T9147] do_recvmmsg+0x3bd/0xab0 [ 182.639239][ T9147] ? __pfx_do_recvmmsg+0x10/0x10 [ 182.639286][ T9147] ? ksys_write+0x22a/0x2b0 [ 182.639316][ T9147] ? __pfx_lock_release+0x10/0x10 [ 182.639355][ T9147] ? sb_end_write+0xe9/0x1c0 [ 182.639386][ T9147] ? vfs_write+0x7fa/0xd10 [ 182.639411][ T9147] ? __mutex_unlock_slowpath+0x227/0x800 [ 182.639450][ T9147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.639477][ T9147] ? __fget_files+0x2a/0x410 [ 182.639525][ T9147] __x64_sys_recvmmsg+0x199/0x250 [ 182.639555][ T9147] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 182.639588][ T9147] ? do_syscall_64+0x100/0x230 [ 182.639619][ T9147] ? do_syscall_64+0xb6/0x230 [ 182.639650][ T9147] do_syscall_64+0xf3/0x230 [ 182.639677][ T9147] ? clear_bhb_loop+0x35/0x90 [ 182.639710][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.639738][ T9147] RIP: 0033:0x7f577538d169 [ 182.639755][ T9147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.639772][ T9147] RSP: 002b:00007f57731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 182.639794][ T9147] RAX: ffffffffffffffda RBX: 00007f57755a5fa0 RCX: 00007f577538d169 [ 182.639809][ T9147] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 182.639822][ T9147] RBP: 00007f57731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.639835][ T9147] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 182.639847][ T9147] R13: 0000000000000000 R14: 00007f57755a5fa0 R15: 00007fffd6a38058 [ 182.639878][ T9147] [ 183.267792][ T9165] __nla_validate_parse: 1 callbacks suppressed [ 183.267814][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 183.284591][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 183.314136][ T9167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 183.562617][ T9175] FAULT_INJECTION: forcing a failure. [ 183.562617][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.579107][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.1.914 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 183.579138][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.579151][ T9175] Call Trace: [ 183.579158][ T9175] [ 183.579167][ T9175] dump_stack_lvl+0x241/0x360 [ 183.579205][ T9175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.579237][ T9175] ? __pfx__printk+0x10/0x10 [ 183.579261][ T9175] ? __pfx_lock_release+0x10/0x10 [ 183.579304][ T9175] should_fail_ex+0x40a/0x550 [ 183.579341][ T9175] _copy_from_user+0x2d/0xb0 [ 183.579371][ T9175] copy_msghdr_from_user+0xae/0x680 [ 183.579410][ T9175] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 183.579439][ T9175] ? __fget_files+0x2a/0x410 [ 183.579474][ T9175] ? __fget_files+0x2a/0x410 [ 183.579515][ T9175] do_recvmmsg+0x3bd/0xab0 [ 183.579553][ T9175] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.579605][ T9175] ? __lock_acquire+0x1397/0x2100 [ 183.579675][ T9175] ? __might_fault+0xaa/0x120 [ 183.579705][ T9175] __x64_sys_recvmmsg+0x199/0x250 [ 183.579735][ T9175] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.579763][ T9175] ? rcu_is_watching+0x15/0xb0 [ 183.579788][ T9175] ? trace_sys_enter+0x25/0x120 [ 183.579815][ T9175] do_syscall_64+0xf3/0x230 [ 183.579843][ T9175] ? clear_bhb_loop+0x35/0x90 [ 183.579877][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.579905][ T9175] RIP: 0033:0x7f577538d169 [ 183.579923][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.579941][ T9175] RSP: 002b:00007f57731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.579964][ T9175] RAX: ffffffffffffffda RBX: 00007f57755a5fa0 RCX: 00007f577538d169 [ 183.579979][ T9175] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 183.579994][ T9175] RBP: 00007f57731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.580007][ T9175] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 183.580019][ T9175] R13: 0000000000000000 R14: 00007f57755a5fa0 R15: 00007fffd6a38058 [ 183.580050][ T9175] [ 183.920977][ T978] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 184.170264][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 184.378412][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 184.459824][ T9202] lo speed is unknown, defaulting to 1000 [ 184.492047][ T9206] xt_hashlimit: size too large, truncated to 1048576 [ 184.875235][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.925'. [ 184.938617][ T9224] FAULT_INJECTION: forcing a failure. [ 184.938617][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.952826][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.1.928 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 184.952855][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.952868][ T9224] Call Trace: [ 184.952876][ T9224] [ 184.952885][ T9224] dump_stack_lvl+0x241/0x360 [ 184.952917][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.952940][ T9224] ? __pfx__printk+0x10/0x10 [ 184.952964][ T9224] ? __pfx_lock_release+0x10/0x10 [ 184.953006][ T9224] should_fail_ex+0x40a/0x550 [ 184.953049][ T9224] _copy_from_user+0x2d/0xb0 [ 184.953084][ T9224] copy_msghdr_from_user+0xae/0x680 [ 184.953126][ T9224] ? __pfx___might_resched+0x10/0x10 [ 184.953171][ T9224] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 184.953229][ T9224] ? do_recvmmsg+0x44e/0xab0 [ 184.953266][ T9224] ? __might_fault+0xaa/0x120 [ 184.953304][ T9224] do_recvmmsg+0x3bd/0xab0 [ 184.953343][ T9224] ? __pfx_do_recvmmsg+0x10/0x10 [ 184.953397][ T9224] ? ksys_write+0x22a/0x2b0 [ 184.953426][ T9224] ? __pfx_lock_release+0x10/0x10 [ 184.953465][ T9224] ? sb_end_write+0xe9/0x1c0 [ 184.953496][ T9224] ? vfs_write+0x7fa/0xd10 [ 184.953521][ T9224] ? __mutex_unlock_slowpath+0x227/0x800 [ 184.953559][ T9224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.953586][ T9224] ? __fget_files+0x2a/0x410 [ 184.953632][ T9224] __x64_sys_recvmmsg+0x199/0x250 [ 184.953661][ T9224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 184.953690][ T9224] ? do_syscall_64+0x100/0x230 [ 184.953721][ T9224] ? do_syscall_64+0xb6/0x230 [ 184.953751][ T9224] do_syscall_64+0xf3/0x230 [ 184.953784][ T9224] ? clear_bhb_loop+0x35/0x90 [ 184.953817][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.953845][ T9224] RIP: 0033:0x7f577538d169 [ 184.953863][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.953882][ T9224] RSP: 002b:00007f57731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 184.953903][ T9224] RAX: ffffffffffffffda RBX: 00007f57755a5fa0 RCX: 00007f577538d169 [ 184.953920][ T9224] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 184.953933][ T9224] RBP: 00007f57731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.953947][ T9224] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 184.953959][ T9224] R13: 0000000000000000 R14: 00007f57755a5fa0 R15: 00007fffd6a38058 [ 184.953990][ T9224] [ 185.588327][ T9245] Bluetooth: MGMT ver 1.23 [ 185.623165][ T9243] pim6reg1: entered promiscuous mode [ 185.628535][ T9243] pim6reg1: entered allmulticast mode [ 185.691496][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 185.840597][ T9263] xt_hashlimit: size too large, truncated to 1048576 [ 186.084472][ T9275] FAULT_INJECTION: forcing a failure. [ 186.084472][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.100023][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.4.941 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 186.100062][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.100075][ T9275] Call Trace: [ 186.100083][ T9275] [ 186.100091][ T9275] dump_stack_lvl+0x241/0x360 [ 186.100124][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.100147][ T9275] ? __pfx__printk+0x10/0x10 [ 186.100171][ T9275] ? __pfx_lock_release+0x10/0x10 [ 186.100213][ T9275] should_fail_ex+0x40a/0x550 [ 186.100250][ T9275] _copy_from_user+0x2d/0xb0 [ 186.100280][ T9275] copy_msghdr_from_user+0xae/0x680 [ 186.100312][ T9275] ? __pfx___might_resched+0x10/0x10 [ 186.100343][ T9275] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.100382][ T9275] ? do_recvmmsg+0x44e/0xab0 [ 186.100407][ T9275] ? __might_fault+0xaa/0x120 [ 186.100435][ T9275] do_recvmmsg+0x3bd/0xab0 [ 186.100473][ T9275] ? __pfx_do_recvmmsg+0x10/0x10 [ 186.100522][ T9275] ? ksys_write+0x22a/0x2b0 [ 186.100546][ T9275] ? __pfx_lock_release+0x10/0x10 [ 186.100584][ T9275] ? sb_end_write+0xe9/0x1c0 [ 186.100615][ T9275] ? vfs_write+0x7fa/0xd10 [ 186.100641][ T9275] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.100680][ T9275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.100707][ T9275] ? __fget_files+0x2a/0x410 [ 186.100755][ T9275] __x64_sys_recvmmsg+0x199/0x250 [ 186.100785][ T9275] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 186.100813][ T9275] ? do_syscall_64+0x100/0x230 [ 186.100845][ T9275] ? do_syscall_64+0xb6/0x230 [ 186.100882][ T9275] do_syscall_64+0xf3/0x230 [ 186.100910][ T9275] ? clear_bhb_loop+0x35/0x90 [ 186.100943][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.100971][ T9275] RIP: 0033:0x7fb9b5d8d169 [ 186.100989][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.101007][ T9275] RSP: 002b:00007fb9b6ba3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.101029][ T9275] RAX: ffffffffffffffda RBX: 00007fb9b5fa5fa0 RCX: 00007fb9b5d8d169 [ 186.101059][ T9275] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 186.101074][ T9275] RBP: 00007fb9b6ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 186.101086][ T9275] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 186.101098][ T9275] R13: 0000000000000000 R14: 00007fb9b5fa5fa0 R15: 00007ffc9fa84248 [ 186.101130][ T9275] [ 186.611262][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 186.657353][ T9279] tap0: tun_chr_ioctl cmd 1074025677 [ 186.663501][ T9279] tap0: linktype set to 1 [ 186.725720][ T9298] bond0: (slave bond_slave_0): Releasing backup interface [ 186.737337][ T9298] bond_slave_0: left promiscuous mode [ 186.755958][ T9298] bond0: (slave bond_slave_1): Releasing backup interface [ 186.769294][ T9298] bond_slave_1: left promiscuous mode [ 186.789287][ T9298] team0: Port device team_slave_0 removed [ 186.806287][ T9298] team0: Port device team_slave_1 removed [ 187.004400][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 187.014047][ T9314] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 187.026554][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 187.066869][ T9309] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 187.098619][ T8626] lo speed is unknown, defaulting to 1000 [ 187.361456][ T9324] FAULT_INJECTION: forcing a failure. [ 187.361456][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.383583][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.3.955 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 187.383614][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.383627][ T9324] Call Trace: [ 187.383634][ T9324] [ 187.383643][ T9324] dump_stack_lvl+0x241/0x360 [ 187.383676][ T9324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.383712][ T9324] ? __pfx__printk+0x10/0x10 [ 187.383735][ T9324] ? __pfx_lock_release+0x10/0x10 [ 187.383774][ T9324] should_fail_ex+0x40a/0x550 [ 187.383808][ T9324] _copy_from_user+0x2d/0xb0 [ 187.383838][ T9324] copy_msghdr_from_user+0xae/0x680 [ 187.383869][ T9324] ? __pfx___might_resched+0x10/0x10 [ 187.383899][ T9324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.383935][ T9324] ? do_recvmmsg+0x44e/0xab0 [ 187.383977][ T9324] ? __might_fault+0xaa/0x120 [ 187.384003][ T9324] do_recvmmsg+0x3bd/0xab0 [ 187.384040][ T9324] ? __pfx_do_recvmmsg+0x10/0x10 [ 187.384087][ T9324] ? ksys_write+0x22a/0x2b0 [ 187.384110][ T9324] ? __pfx_lock_release+0x10/0x10 [ 187.384147][ T9324] ? sb_end_write+0xe9/0x1c0 [ 187.384184][ T9324] ? vfs_write+0x7fa/0xd10 [ 187.384209][ T9324] ? __mutex_unlock_slowpath+0x227/0x800 [ 187.384245][ T9324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.384272][ T9324] ? __fget_files+0x2a/0x410 [ 187.384317][ T9324] __x64_sys_recvmmsg+0x199/0x250 [ 187.384363][ T9324] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 187.384392][ T9324] ? do_syscall_64+0x100/0x230 [ 187.384424][ T9324] ? do_syscall_64+0xb6/0x230 [ 187.384455][ T9324] do_syscall_64+0xf3/0x230 [ 187.384483][ T9324] ? clear_bhb_loop+0x35/0x90 [ 187.384515][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.384544][ T9324] RIP: 0033:0x7f917478d169 [ 187.384562][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.384579][ T9324] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 187.384602][ T9324] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 187.384617][ T9324] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 187.384637][ T9324] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 187.384650][ T9324] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 187.384662][ T9324] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 187.384693][ T9324] [ 187.713814][ T9339] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 187.723176][ T9330] xt_hashlimit: size too large, truncated to 1048576 [ 187.947604][ T9342] lo speed is unknown, defaulting to 1000 [ 188.017887][ T9345] lo speed is unknown, defaulting to 1000 [ 188.382804][ T9368] __nla_validate_parse: 5 callbacks suppressed [ 188.382824][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'. [ 188.416341][ T9353] xt_NFQUEUE: number of total queues is 0 [ 188.568688][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 188.686346][ T9372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 188.712464][ T8613] page_pool_release_retry() stalled pool shutdown: id 39, 2 inflight 60 sec [ 188.807712][ T9382] FAULT_INJECTION: forcing a failure. [ 188.807712][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.817491][ T9392] netlink: 52 bytes leftover after parsing attributes in process `syz.4.974'. [ 188.821046][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.1.975 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 188.821074][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.821087][ T9382] Call Trace: [ 188.821095][ T9382] [ 188.821104][ T9382] dump_stack_lvl+0x241/0x360 [ 188.821145][ T9382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.821171][ T9382] ? __pfx__printk+0x10/0x10 [ 188.821195][ T9382] ? __pfx_lock_release+0x10/0x10 [ 188.821238][ T9382] should_fail_ex+0x40a/0x550 [ 188.821276][ T9382] _copy_from_user+0x2d/0xb0 [ 188.821307][ T9382] copy_msghdr_from_user+0xae/0x680 [ 188.821340][ T9382] ? __pfx___might_resched+0x10/0x10 [ 188.821372][ T9382] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.821411][ T9382] ? do_recvmmsg+0x44e/0xab0 [ 188.821436][ T9382] ? __might_fault+0xaa/0x120 [ 188.821464][ T9382] do_recvmmsg+0x3bd/0xab0 [ 188.821503][ T9382] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.821552][ T9382] ? ksys_write+0x22a/0x2b0 [ 188.821576][ T9382] ? __pfx_lock_release+0x10/0x10 [ 188.821616][ T9382] ? sb_end_write+0xe9/0x1c0 [ 188.821647][ T9382] ? vfs_write+0x7fa/0xd10 [ 188.821673][ T9382] ? __mutex_unlock_slowpath+0x227/0x800 [ 188.821712][ T9382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.821739][ T9382] ? __fget_files+0x2a/0x410 [ 188.821786][ T9382] __x64_sys_recvmmsg+0x199/0x250 [ 188.821817][ T9382] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 188.821865][ T9382] ? do_syscall_64+0x100/0x230 [ 188.821898][ T9382] ? do_syscall_64+0xb6/0x230 [ 188.821931][ T9382] do_syscall_64+0xf3/0x230 [ 188.821960][ T9382] ? clear_bhb_loop+0x35/0x90 [ 188.821996][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.822025][ T9382] RIP: 0033:0x7f577538d169 [ 188.822044][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.822063][ T9382] RSP: 002b:00007f57731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.822088][ T9382] RAX: ffffffffffffffda RBX: 00007f57755a5fa0 RCX: 00007f577538d169 [ 188.822107][ T9382] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 188.822123][ T9382] RBP: 00007f57731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.822143][ T9382] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 188.822155][ T9382] R13: 0000000000000000 R14: 00007f57755a5fa0 R15: 00007fffd6a38058 [ 188.822189][ T9382] [ 189.210393][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 189.393624][ T9410] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.980'. [ 189.419248][ T9410] openvswitch: netlink: Message has 2 unknown bytes. [ 189.439255][ T9416] xt_hashlimit: size too large, truncated to 1048576 [ 189.465741][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.981'. [ 189.826628][ T9428] FAULT_INJECTION: forcing a failure. [ 189.826628][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.859285][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.3.987 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 189.859316][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.859329][ T9428] Call Trace: [ 189.859337][ T9428] [ 189.859345][ T9428] dump_stack_lvl+0x241/0x360 [ 189.859377][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.859400][ T9428] ? __pfx__printk+0x10/0x10 [ 189.859423][ T9428] ? __pfx_lock_release+0x10/0x10 [ 189.859464][ T9428] should_fail_ex+0x40a/0x550 [ 189.859500][ T9428] _copy_from_user+0x2d/0xb0 [ 189.859530][ T9428] copy_msghdr_from_user+0xae/0x680 [ 189.859561][ T9428] ? __pfx___might_resched+0x10/0x10 [ 189.859592][ T9428] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 189.859628][ T9428] ? do_recvmmsg+0x44e/0xab0 [ 189.859654][ T9428] ? __might_fault+0xaa/0x120 [ 189.859680][ T9428] do_recvmmsg+0x3bd/0xab0 [ 189.859717][ T9428] ? __pfx_do_recvmmsg+0x10/0x10 [ 189.859789][ T9428] ? ksys_write+0x22a/0x2b0 [ 189.859812][ T9428] ? __pfx_lock_release+0x10/0x10 [ 189.859849][ T9428] ? sb_end_write+0xe9/0x1c0 [ 189.859878][ T9428] ? vfs_write+0x7fa/0xd10 [ 189.859903][ T9428] ? __mutex_unlock_slowpath+0x227/0x800 [ 189.859939][ T9428] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.859965][ T9428] ? __fget_files+0x2a/0x410 [ 189.860012][ T9428] __x64_sys_recvmmsg+0x199/0x250 [ 189.860040][ T9428] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 189.860068][ T9428] ? do_syscall_64+0x100/0x230 [ 189.860098][ T9428] ? do_syscall_64+0xb6/0x230 [ 189.860128][ T9428] do_syscall_64+0xf3/0x230 [ 189.860154][ T9428] ? clear_bhb_loop+0x35/0x90 [ 189.860187][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.860213][ T9428] RIP: 0033:0x7f917478d169 [ 189.860231][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.860248][ T9428] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.860270][ T9428] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 189.860285][ T9428] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 189.860299][ T9428] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 189.860312][ T9428] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 189.860324][ T9428] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 189.860354][ T9428] [ 190.103056][ T9426] lo speed is unknown, defaulting to 1000 [ 190.189005][ T9438] tipc: Failed to obtain node identity [ 190.194802][ T9438] tipc: Enabling of bearer rejected, failed to enable media [ 190.324060][ T5895] IPVS: starting estimator thread 0... [ 190.412305][ T9446] IPVS: using max 18 ests per chain, 43200 per kthread [ 190.439123][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.681516][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.997'. [ 190.694839][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 190.712472][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 190.737236][ T9469] vlan3: entered promiscuous mode [ 190.742404][ T9469] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 190.754375][ T9469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.948235][ T9479] FAULT_INJECTION: forcing a failure. [ 190.948235][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.962601][ T9482] xt_hashlimit: size too large, truncated to 1048576 [ 190.971154][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.3.1002 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 190.971184][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.971197][ T9479] Call Trace: [ 190.971204][ T9479] [ 190.971213][ T9479] dump_stack_lvl+0x241/0x360 [ 190.971246][ T9479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.971269][ T9479] ? __pfx__printk+0x10/0x10 [ 190.971294][ T9479] ? __pfx_lock_release+0x10/0x10 [ 190.971335][ T9479] should_fail_ex+0x40a/0x550 [ 190.971371][ T9479] _copy_from_user+0x2d/0xb0 [ 190.971401][ T9479] copy_msghdr_from_user+0xae/0x680 [ 190.971433][ T9479] ? __pfx___might_resched+0x10/0x10 [ 190.971465][ T9479] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.971502][ T9479] ? do_recvmmsg+0x44e/0xab0 [ 190.971528][ T9479] ? __might_fault+0xaa/0x120 [ 190.971555][ T9479] do_recvmmsg+0x3bd/0xab0 [ 190.971593][ T9479] ? __pfx_do_recvmmsg+0x10/0x10 [ 190.971641][ T9479] ? ksys_write+0x22a/0x2b0 [ 190.971665][ T9479] ? __pfx_lock_release+0x10/0x10 [ 190.971703][ T9479] ? sb_end_write+0xe9/0x1c0 [ 190.971734][ T9479] ? vfs_write+0x7fa/0xd10 [ 190.971759][ T9479] ? __mutex_unlock_slowpath+0x227/0x800 [ 190.971798][ T9479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.971824][ T9479] ? __fget_files+0x2a/0x410 [ 190.971871][ T9479] __x64_sys_recvmmsg+0x199/0x250 [ 190.971901][ T9479] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 190.971935][ T9479] ? do_syscall_64+0x100/0x230 [ 190.971971][ T9479] ? do_syscall_64+0xb6/0x230 [ 190.972002][ T9479] do_syscall_64+0xf3/0x230 [ 190.972029][ T9479] ? clear_bhb_loop+0x35/0x90 [ 190.972063][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.972091][ T9479] RIP: 0033:0x7f917478d169 [ 190.972108][ T9479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.972126][ T9479] RSP: 002b:00007f9175625038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.972147][ T9479] RAX: ffffffffffffffda RBX: 00007f91749a5fa0 RCX: 00007f917478d169 [ 190.972162][ T9479] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 190.972176][ T9479] RBP: 00007f9175625090 R08: 0000000000000000 R09: 0000000000000000 [ 190.972190][ T9479] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 190.972203][ T9479] R13: 0000000000000000 R14: 00007f91749a5fa0 R15: 00007fffaae697c8 [ 190.972234][ T9479] [ 191.746979][ T9502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.853740][ T9502] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.934376][ T9520] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 192.080269][ T9524] tap0: tun_chr_ioctl cmd 2147767507 [ 192.104643][ T9525] lo speed is unknown, defaulting to 1000 [ 192.152046][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.701955][ T9553] xt_hashlimit: size too large, truncated to 1048576 [ 192.712837][ T9561] bridge0: port 1(syz_tun) entered blocking state [ 192.720518][ T9561] bridge0: port 1(syz_tun) entered disabled state [ 192.727667][ T9561] syz_tun: entered allmulticast mode [ 192.737067][ T9561] syz_tun: entered promiscuous mode [ 192.747031][ T9561] bridge0: port 1(syz_tun) entered blocking state [ 192.753683][ T9561] bridge0: port 1(syz_tun) entered forwarding state [ 193.208629][ T9577] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 193.257113][ T9580] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 193.323900][ T9577] vlan0: entered allmulticast mode [ 193.618128][ T9600] __nla_validate_parse: 4 callbacks suppressed [ 193.618146][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 193.858708][ T9609] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.117417][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 194.156169][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 194.272419][ T9639] xt_hashlimit: size too large, truncated to 1048576 [ 194.353276][ T9648] x_tables: ip_tables: udp match: only valid for protocol 17 [ 194.425901][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.435208][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.474914][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.533450][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.581078][ T9657] netlink: 'syz.3.1048': attribute type 3 has an invalid length. [ 194.599516][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.612469][ T9657] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1048'. [ 194.630935][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 194.652880][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659440][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835281][ T9665] netlink: zone id is out of range [ 194.840674][ T9665] netlink: zone id is out of range [ 194.847076][ T9665] netlink: zone id is out of range [ 194.853171][ T9665] netlink: zone id is out of range [ 194.858441][ T9665] netlink: zone id is out of range [ 194.864201][ T9665] netlink: zone id is out of range [ 194.869360][ T9665] netlink: zone id is out of range [ 194.877964][ T9665] netlink: zone id is out of range [ 194.883607][ T9665] netlink: zone id is out of range [ 194.888930][ T9665] netlink: zone id is out of range [ 195.028038][ T9678] sctp: [Deprecated]: syz.2.1056 (pid 9678) Use of int in maxseg socket option. [ 195.028038][ T9678] Use struct sctp_assoc_value instead [ 195.451229][ T5838] bridge0: port 1(syz_tun) entered disabled state [ 195.497257][ T5838] syz_tun (unregistering): left allmulticast mode [ 195.503913][ T5838] syz_tun (unregistering): left promiscuous mode [ 195.510360][ T5838] bridge0: port 1(syz_tun) entered disabled state [ 195.757942][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.863763][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.021302][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.118358][ T9723] xt_hashlimit: size too large, truncated to 1048576 [ 196.150620][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.409677][ T9727] lo speed is unknown, defaulting to 1000 [ 196.503375][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.513897][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.529823][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.538082][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.546165][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.553859][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.113308][ T13] dvmrp0 (unregistering): left allmulticast mode [ 197.605832][ T13] bond0 (unregistering): left promiscuous mode [ 197.664203][ T13] bond0 (unregistering): Released all slaves [ 197.685342][ T13] bond1 (unregistering): Released all slaves [ 197.822190][ T13] bond2 (unregistering): Released all slaves [ 197.931454][ T13] bond3 (unregistering): Released all slaves [ 197.992073][ T9733] lo speed is unknown, defaulting to 1000 [ 198.070828][ T9758] lo speed is unknown, defaulting to 1000 [ 198.127059][ T13] IPVS: stopping backup sync thread 9580 ... [ 198.289773][ T13] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 198.481977][ T13] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 198.551068][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.595484][ T9773] team0: Port device bond0 added [ 198.601133][ T9774] bridge0: port 1(team0) entered blocking state [ 198.613125][ T9774] bridge0: port 1(team0) entered disabled state [ 198.619903][ T9774] team0: entered allmulticast mode [ 198.625526][ T9774] bridge0: entered allmulticast mode [ 198.630880][ T9774] bond0: entered allmulticast mode [ 198.634785][ T5852] Bluetooth: hci1: command tx timeout [ 198.638187][ T9774] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 198.666137][ T9774] team0: left allmulticast mode [ 198.671321][ T9774] bridge0: left allmulticast mode [ 198.686497][ T9774] bond0: left allmulticast mode [ 198.691430][ T9774] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 198.781222][ T13] hsr_slave_1: left promiscuous mode [ 198.839350][ T13] veth1_macvtap: left promiscuous mode [ 198.850518][ T13] veth0_macvtap: left promiscuous mode [ 198.856689][ T13] veth1_vlan: left promiscuous mode [ 198.865888][ T13] veth0_vlan: left promiscuous mode [ 199.178578][ T9800] __nla_validate_parse: 79 callbacks suppressed [ 199.178601][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 199.592478][ T8626] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 199.918746][ T9733] chnl_net:caif_netlink_parms(): no params data found [ 200.200383][ T9818] netlink: 'syz.4.1094': attribute type 58 has an invalid length. [ 200.211989][ T9817] netlink: 'syz.3.1096': attribute type 13 has an invalid length. [ 200.220062][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 200.269884][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.301198][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.318923][ T9733] bridge_slave_0: entered allmulticast mode [ 200.344070][ T9733] bridge_slave_0: entered promiscuous mode [ 200.386219][ T9817] gretap0: refused to change device tx_queue_len [ 200.402461][ T9817] net_ratelimit: 2094 callbacks suppressed [ 200.402482][ T9817] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.598862][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.628120][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.651506][ T9733] bridge_slave_1: entered allmulticast mode [ 200.666500][ T9733] bridge_slave_1: entered promiscuous mode [ 200.713662][ T9820] lo speed is unknown, defaulting to 1000 [ 200.714762][ T5852] Bluetooth: hci1: command tx timeout [ 200.867078][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.929856][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.072765][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 201.098314][ T9843] xt_TCPMSS: Only works on TCP SYN packets [ 201.121672][ T9733] team0: Port device team_slave_0 added [ 201.159948][ T9733] team0: Port device team_slave_1 added [ 201.274327][ T9822] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 201.363245][ T9822] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 201.412759][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.427268][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.459724][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.525479][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.542665][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.573185][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.672781][ T8628] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 201.727791][ T9733] hsr_slave_0: entered promiscuous mode [ 201.734571][ T9733] hsr_slave_1: entered promiscuous mode [ 201.741137][ T9733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.749726][ T9733] Cannot create hsr debugfs directory [ 201.805953][ T9873] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1112'. [ 201.836062][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 201.850851][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 201.865678][ T9873] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1112'. [ 201.894682][ T9873] openvswitch: netlink: Key type 15125 is out of range max 32 [ 202.390214][ T9893] xt_hashlimit: size too large, truncated to 1048576 [ 202.478732][ T9896] xt_hashlimit: size too large, truncated to 1048576 [ 202.798440][ T5854] Bluetooth: hci1: command tx timeout [ 202.818645][ T9902] sctp: [Deprecated]: syz.2.1119 (pid 9902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.818645][ T9902] Use struct sctp_sack_info instead [ 203.119640][ T9733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.139119][ T9733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.171046][ T9733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.259827][ T9733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.278483][ T9913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.409807][ T9920] batadv_slave_1: entered promiscuous mode [ 203.417855][ T9920] batadv_slave_1: entered allmulticast mode [ 203.426627][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.438835][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.454130][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.491975][ T9920] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 203.523813][ T9931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1124'. [ 203.658572][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.716706][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.753589][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.760866][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.807067][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.814349][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.960622][ T9733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.993744][ T9733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.199237][ T9943] lo speed is unknown, defaulting to 1000 [ 204.361852][ T9947] IPv4: Oversized IP packet from 127.202.26.0 [ 204.402524][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 204.411548][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 204.459448][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 204.519294][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 204.543400][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.594168][ T9958] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1132'. [ 204.641936][ T9958] netlink: 'syz.4.1132': attribute type 4 has an invalid length. [ 204.658745][ T9733] veth0_vlan: entered promiscuous mode [ 204.692275][ T9733] veth1_vlan: entered promiscuous mode [ 204.727955][ T9962] xt_hashlimit: size too large, truncated to 1048576 [ 204.760147][ T9733] veth0_macvtap: entered promiscuous mode [ 204.779361][ T9733] veth1_macvtap: entered promiscuous mode [ 204.833262][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.851932][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.876770][ T5844] Bluetooth: hci1: command tx timeout [ 204.893857][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.966484][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.988164][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.009753][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.030118][ T9733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.041172][ T9733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.050448][ T9733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.061038][ T9733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.264627][ T9979] xt_l2tp: invalid flags combination: c [ 205.675198][ T9987] xt_NFQUEUE: number of total queues is 0 [ 205.744079][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.751956][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.762867][ T9988] xt_hashlimit: size too large, truncated to 1048576 [ 205.853105][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'. [ 205.894917][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.922429][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.084939][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 206.606963][T10016] sctp: [Deprecated]: syz.2.1145 (pid 10016) Use of int in max_burst socket option deprecated. [ 206.606963][T10016] Use struct sctp_assoc_value instead [ 206.777650][T10022] netlink: 'syz.4.1148': attribute type 10 has an invalid length. [ 206.852853][T10022] syzkaller0: entered allmulticast mode [ 206.885247][T10022] syzkaller0 (unregistering): left allmulticast mode [ 206.910298][T10029] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 206.919836][T10029] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1150'. [ 206.950354][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 206.959428][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 207.059199][T10027] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 207.161491][T10037] xt_hashlimit: size too large, truncated to 1048576 [ 207.299670][T10041] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 207.524340][T10041] lo speed is unknown, defaulting to 1000 [ 207.730138][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 207.816553][ T1122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.026911][ T1122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.102871][T10056] bridge0: port 1(team0) entered blocking state [ 208.109297][T10056] bridge0: port 1(team0) entered disabled state [ 208.170056][T10056] team0: entered allmulticast mode [ 208.188855][T10056] bridge0: entered allmulticast mode [ 208.222726][T10056] bond0: entered allmulticast mode [ 208.260404][T10056] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 208.330236][T10056] team0: left allmulticast mode [ 208.351055][T10056] bridge0: left allmulticast mode [ 208.372320][T10056] bond0: left allmulticast mode [ 208.390209][T10056] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 208.479615][ T1122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.508824][T10051] lo speed is unknown, defaulting to 1000 [ 208.524760][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.541369][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.551822][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.561070][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.574318][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.593798][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.660335][ T1122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.678821][T10076] batadv_slave_1: entered promiscuous mode [ 208.754980][T10072] lo speed is unknown, defaulting to 1000 [ 208.898101][ T1122] bridge_slave_1: left allmulticast mode [ 208.906117][ T1122] bridge_slave_1: left promiscuous mode [ 208.916040][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.934002][ T1122] bridge_slave_0: left allmulticast mode [ 208.939888][ T1122] bridge_slave_0: left promiscuous mode [ 208.946355][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.584433][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.611291][T10111] xt_hashlimit: size too large, truncated to 1048576 [ 209.618845][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.646511][ T1122] bond0 (unregistering): Released all slaves [ 209.813758][T10106] xt_hashlimit: size too large, truncated to 1048576 [ 210.416893][T10128] __nla_validate_parse: 5 callbacks suppressed [ 210.416915][T10128] netlink: 1608 bytes leftover after parsing attributes in process `syz.3.1168'. [ 210.543249][T10072] chnl_net:caif_netlink_parms(): no params data found [ 210.642504][ T5844] Bluetooth: hci1: command tx timeout [ 211.003069][ T1122] hsr_slave_0: left promiscuous mode [ 211.013810][ T1122] hsr_slave_1: left promiscuous mode [ 211.042523][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.050122][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.104416][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.112050][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.145380][ T1122] veth1_macvtap: left promiscuous mode [ 211.152836][ T1122] veth0_macvtap: left promiscuous mode [ 211.158563][ T1122] veth1_vlan: left promiscuous mode [ 211.165025][ T1122] veth0_vlan: left promiscuous mode [ 211.193612][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1177'. [ 212.015885][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 212.075435][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 212.110641][T10192] xt_hashlimit: size too large, truncated to 1048576 [ 212.712399][ T5844] Bluetooth: hci1: command tx timeout [ 212.809635][T10198] xt_hashlimit: invalid rate [ 212.830642][T10169] lo speed is unknown, defaulting to 1000 [ 212.855791][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.870093][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.887293][T10072] bridge_slave_0: entered allmulticast mode [ 212.895445][T10072] bridge_slave_0: entered promiscuous mode [ 212.917625][T10202] sctp: [Deprecated]: syz.3.1185 (pid 10202) Use of int in max_burst socket option. [ 212.917625][T10202] Use struct sctp_assoc_value instead [ 212.987744][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.000526][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.011391][T10072] bridge_slave_1: entered allmulticast mode [ 213.026441][T10072] bridge_slave_1: entered promiscuous mode [ 213.143440][T10198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.298797][T10198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.305071][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 213.339796][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 213.354877][T10072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.375017][T10072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.398154][T10207] lo speed is unknown, defaulting to 1000 [ 213.479385][T10198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.600434][T10198] bond0: (slave netdevsim0): Releasing backup interface [ 213.611647][T10198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.691529][T10072] team0: Port device team_slave_0 added [ 213.717017][T10208] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 213.725567][T10208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1187'. [ 213.774631][T10072] team0: Port device team_slave_1 added [ 213.877501][T10072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.892256][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.926901][T10072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.013705][T10072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.020703][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.099691][T10072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.150411][T10198] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.170177][T10198] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.250172][T10198] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.298342][T10198] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.386528][T10072] hsr_slave_0: entered promiscuous mode [ 214.404286][T10072] hsr_slave_1: entered promiscuous mode [ 214.425314][T10072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.452664][T10072] Cannot create hsr debugfs directory [ 214.792375][ T5844] Bluetooth: hci1: command tx timeout [ 214.953661][T10248] xt_hashlimit: size too large, truncated to 1048576 [ 215.016330][T10244] tipc: Enabled bearer , priority 0 [ 215.067244][T10250] pim6reg: entered allmulticast mode [ 215.207412][T10244] pim6reg: left allmulticast mode [ 215.501693][T10261] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 215.547551][T10261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.561156][T10265] tc_dump_action: action bad kind [ 215.576111][T10072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.594535][T10072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.657081][T10072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.668752][T10072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.750061][T10072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.775789][T10072] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.788407][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.795628][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.828856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.836081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.850320][T10276] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 215.891813][T10276] bond2: entered promiscuous mode [ 215.898424][T10276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.915018][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 215.925223][T10279] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1206'. [ 215.927325][T10276] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1205'. [ 215.968239][T10276] batadv1: entered promiscuous mode [ 215.981650][T10276] batadv1: entered allmulticast mode [ 215.983890][T10280] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1205'. [ 215.989806][T10276] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 216.004927][T10276] bond2: (slave batadv1): making interface the new active one [ 216.014287][T10276] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 216.090658][T10280] batadv2: entered promiscuous mode [ 216.113243][T10280] batadv2: entered allmulticast mode [ 216.123140][T10280] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 216.136667][T10280] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 216.177756][T10276] bond2: (slave veth3): Enslaving as an active interface with a down link [ 216.405686][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 216.426985][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 216.429034][T10072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.518289][T10072] veth0_vlan: entered promiscuous mode [ 216.526778][T10301] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.539061][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 216.543005][T10072] veth1_vlan: entered promiscuous mode [ 216.554006][ T8628] IPVS: starting estimator thread 0... [ 216.597168][T10072] veth0_macvtap: entered promiscuous mode [ 216.609493][T10072] veth1_macvtap: entered promiscuous mode [ 216.639869][T10072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.655894][T10304] IPVS: using max 30 ests per chain, 72000 per kthread [ 216.663163][T10072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.699888][T10072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.725819][T10072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.743088][T10072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.773204][T10072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.800702][T10072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.819767][T10072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.832150][T10072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.841022][T10072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.874137][ T5844] Bluetooth: hci1: command tx timeout [ 216.939202][T10313] xt_hashlimit: size too large, truncated to 1048576 [ 216.973702][T10315] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 217.013929][T10315] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 217.055729][T10315] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 217.091305][T10315] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 217.172652][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.180506][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.377558][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.397172][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.663476][T10335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1218'. [ 218.188796][T10361] Unsupported ieee802154 address type: 0 [ 218.207101][T10364] Unsupported ieee802154 address type: 0 [ 218.398404][T10381] [ 218.400800][T10381] ====================================================== [ 218.407838][T10381] WARNING: possible circular locking dependency detected [ 218.414876][T10381] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted [ 218.421990][T10381] ------------------------------------------------------ [ 218.429006][T10381] syz.3.1224/10381 is trying to acquire lock: [ 218.435075][T10381] ffff888078398768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 218.444865][T10381] [ 218.444865][T10381] but task is already holding lock: [ 218.452237][T10381] ffff888027b98d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 218.461228][T10381] [ 218.461228][T10381] which lock already depends on the new lock. [ 218.461228][T10381] [ 218.471631][T10381] [ 218.471631][T10381] the existing dependency chain (in reverse order) is: [ 218.480643][T10381] [ 218.480643][T10381] -> #1 (&dev->lock){+.+.}-{4:4}: [ 218.487866][T10381] lock_acquire+0x1ed/0x550 [ 218.492908][T10381] __mutex_lock+0x19c/0x1010 [ 218.498027][T10381] register_netdevice+0x12d8/0x1b70 [ 218.503766][T10381] cfg80211_register_netdevice+0x149/0x2f0 [ 218.510113][T10381] ieee80211_if_add+0x119d/0x1780 [ 218.515665][T10381] ieee80211_register_hw+0x3708/0x42e0 [ 218.521648][T10381] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 218.527897][T10381] init_mac80211_hwsim+0x87a/0xb00 [ 218.533544][T10381] do_one_initcall+0x248/0x930 [ 218.538847][T10381] do_initcall_level+0x157/0x210 [ 218.544337][T10381] do_initcalls+0x71/0xd0 [ 218.549203][T10381] kernel_init_freeable+0x435/0x5d0 [ 218.554952][T10381] kernel_init+0x1d/0x2b0 [ 218.559826][T10381] ret_from_fork+0x4b/0x80 [ 218.564784][T10381] ret_from_fork_asm+0x1a/0x30 [ 218.570087][T10381] [ 218.570087][T10381] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 218.577853][T10381] validate_chain+0x18ef/0x5920 [ 218.583241][T10381] __lock_acquire+0x1397/0x2100 [ 218.588624][T10381] lock_acquire+0x1ed/0x550 [ 218.593660][T10381] __mutex_lock+0x19c/0x1010 [ 218.598783][T10381] ieee80211_change_mac+0xc6/0x1160 [ 218.604517][T10381] netif_set_mac_address+0x327/0x510 [ 218.610330][T10381] dev_set_mac_address+0x38/0x50 [ 218.615792][T10381] bond_set_mac_address+0x28e/0x830 [ 218.621525][T10381] netif_set_mac_address+0x327/0x510 [ 218.627336][T10381] do_setlink+0xaa6/0x40f0 [ 218.632282][T10381] rtnl_newlink+0x15a6/0x1d90 [ 218.637494][T10381] rtnetlink_rcv_msg+0x791/0xcf0 [ 218.642972][T10381] netlink_rcv_skb+0x206/0x480 [ 218.648316][T10381] netlink_unicast+0x7f6/0x990 [ 218.653611][T10381] netlink_sendmsg+0x8de/0xcb0 [ 218.658906][T10381] __sock_sendmsg+0x221/0x270 [ 218.664120][T10381] ____sys_sendmsg+0x53a/0x860 [ 218.669414][T10381] __sys_sendmsg+0x269/0x350 [ 218.674548][T10381] do_syscall_64+0xf3/0x230 [ 218.679594][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.686031][T10381] [ 218.686031][T10381] other info that might help us debug this: [ 218.686031][T10381] [ 218.696274][T10381] Possible unsafe locking scenario: [ 218.696274][T10381] [ 218.703732][T10381] CPU0 CPU1 [ 218.709118][T10381] ---- ---- [ 218.714494][T10381] lock(&dev->lock); [ 218.718493][T10381] lock(&rdev->wiphy.mtx); [ 218.725528][T10381] lock(&dev->lock); [ 218.732046][T10381] lock(&rdev->wiphy.mtx); [ 218.736570][T10381] [ 218.736570][T10381] *** DEADLOCK *** [ 218.736570][T10381] [ 218.745052][T10381] 3 locks held by syz.3.1224/10381: [ 218.750253][T10381] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 218.759346][T10381] #1: ffff8880329f4d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 218.769471][T10381] #2: ffff888027b98d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 218.778931][T10381] [ 218.778931][T10381] stack backtrace: [ 218.784825][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.3.1224 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 218.784846][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.784858][T10381] Call Trace: [ 218.784866][T10381] [ 218.784874][T10381] dump_stack_lvl+0x241/0x360 [ 218.784897][T10381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.784916][T10381] ? __pfx__printk+0x10/0x10 [ 218.784937][T10381] print_circular_bug+0x13a/0x1b0 [ 218.784959][T10381] check_noncircular+0x36a/0x4a0 [ 218.784978][T10381] ? check_path+0x21/0x40 [ 218.784998][T10381] ? __pfx_check_noncircular+0x10/0x10 [ 218.785018][T10381] ? lockdep_lock+0x123/0x2b0 [ 218.785043][T10381] ? lockdep_unlock+0x16a/0x300 [ 218.785066][T10381] ? __pfx_lockdep_unlock+0x10/0x10 [ 218.785090][T10381] ? check_path+0x21/0x40 [ 218.785108][T10381] ? check_noncircular+0x259/0x4a0 [ 218.785128][T10381] validate_chain+0x18ef/0x5920 [ 218.785157][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785180][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785199][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785218][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785236][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785259][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.785278][T10381] ? mark_lock+0x9a/0x360 [ 218.785295][T10381] __lock_acquire+0x1397/0x2100 [ 218.785329][T10381] lock_acquire+0x1ed/0x550 [ 218.785353][T10381] ? ieee80211_change_mac+0xc6/0x1160 [ 218.785380][T10381] ? __pfx_lock_acquire+0x10/0x10 [ 218.785407][T10381] ? __pfx___might_resched+0x10/0x10 [ 218.785436][T10381] __mutex_lock+0x19c/0x1010 [ 218.785459][T10381] ? ieee80211_change_mac+0xc6/0x1160 [ 218.785482][T10381] ? __pfx_lock_release+0x10/0x10 [ 218.785510][T10381] ? ieee80211_change_mac+0xc6/0x1160 [ 218.785533][T10381] ? __pfx___mutex_lock+0x10/0x10 [ 218.785558][T10381] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 218.785576][T10381] ? ib_device_get_by_netdev+0x85/0x5e0 [ 218.785604][T10381] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 218.785630][T10381] ? hsr_netdev_notify+0x295/0xb50 [ 218.785656][T10381] ieee80211_change_mac+0xc6/0x1160 [ 218.785680][T10381] ? ip6_route_dev_notify+0x99/0x600 [ 218.785701][T10381] ? notifier_call_chain+0x15a/0x3f0 [ 218.785726][T10381] ? notifier_call_chain+0x3cc/0x3f0 [ 218.785753][T10381] netif_set_mac_address+0x327/0x510 [ 218.785781][T10381] ? __pfx_netif_set_mac_address+0x10/0x10 [ 218.785804][T10381] ? net_generic+0x1f/0x240 [ 218.785824][T10381] ? net_generic+0x1f0/0x240 [ 218.785846][T10381] dev_set_mac_address+0x38/0x50 [ 218.785865][T10381] bond_set_mac_address+0x28e/0x830 [ 218.785890][T10381] ? __pfx_bond_set_mac_address+0x10/0x10 [ 218.785912][T10381] ? hsr_netdev_notify+0x295/0xb50 [ 218.785940][T10381] ? notifier_call_chain+0x15a/0x3f0 [ 218.785965][T10381] ? notifier_call_chain+0x3cc/0x3f0 [ 218.785991][T10381] netif_set_mac_address+0x327/0x510 [ 218.786015][T10381] ? __pfx_netif_set_mac_address+0x10/0x10 [ 218.786037][T10381] ? rcu_is_watching+0x15/0xb0 [ 218.786056][T10381] ? trace_kmalloc+0x1f/0xd0 [ 218.786080][T10381] ? do_setlink+0x7a7/0x40f0 [ 218.786099][T10381] do_setlink+0xaa6/0x40f0 [ 218.786127][T10381] ? __pfx_do_setlink+0x10/0x10 [ 218.786153][T10381] ? __pfx___might_resched+0x10/0x10 [ 218.786177][T10381] ? __pfx___mutex_trylock_common+0x10/0x10 [ 218.786200][T10381] ? rcu_is_watching+0x15/0xb0 [ 218.786218][T10381] ? trace_contention_end+0x3c/0x120 [ 218.786237][T10381] ? __mutex_lock+0x397/0x1010 [ 218.786261][T10381] ? __pfx_aa_get_newest_label+0x10/0x10 [ 218.786291][T10381] ? rtnl_newlink+0xc4c/0x1d90 [ 218.786317][T10381] ? __pfx___mutex_lock+0x10/0x10 [ 218.786344][T10381] ? ns_capable+0x8a/0xf0 [ 218.786364][T10381] ? rtnl_link_get_net_capable+0x168/0x340 [ 218.786383][T10381] rtnl_newlink+0x15a6/0x1d90 [ 218.786409][T10381] ? stack_depot_save_flags+0x37/0x940 [ 218.786443][T10381] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.786469][T10381] ? __netlink_deliver_tap+0x561/0x7f0 [ 218.786496][T10381] ? __pfx_validate_chain+0x10/0x10 [ 218.786513][T10381] ? __sock_sendmsg+0x221/0x270 [ 218.786537][T10381] ? ____sys_sendmsg+0x53a/0x860 [ 218.786556][T10381] ? __sys_sendmsg+0x269/0x350 [ 218.786574][T10381] ? do_syscall_64+0xf3/0x230 [ 218.786597][T10381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.786629][T10381] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.786656][T10381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.786686][T10381] ? mark_lock+0x9a/0x360 [ 218.786703][T10381] ? __lock_acquire+0x1397/0x2100 [ 218.786742][T10381] ? __pfx_lock_release+0x10/0x10 [ 218.786779][T10381] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.786806][T10381] rtnetlink_rcv_msg+0x791/0xcf0 [ 218.786832][T10381] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 218.786860][T10381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.786890][T10381] ? ref_tracker_free+0x643/0x7e0 [ 218.786909][T10381] netlink_rcv_skb+0x206/0x480 [ 218.786935][T10381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.786963][T10381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.786998][T10381] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.787026][T10381] netlink_unicast+0x7f6/0x990 [ 218.787053][T10381] ? __pfx_netlink_unicast+0x10/0x10 [ 218.787075][T10381] ? __virt_addr_valid+0x45f/0x530 [ 218.787092][T10381] ? __phys_addr_symbol+0x2f/0x70 [ 218.787108][T10381] ? __check_object_size+0x47a/0x730 [ 218.787133][T10381] netlink_sendmsg+0x8de/0xcb0 [ 218.787164][T10381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.787193][T10381] ? aa_sock_msg_perm+0x91/0x160 [ 218.787221][T10381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.787247][T10381] __sock_sendmsg+0x221/0x270 [ 218.787273][T10381] ____sys_sendmsg+0x53a/0x860 [ 218.787297][T10381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.787316][T10381] ? __fget_files+0x2a/0x410 [ 218.787343][T10381] ? __fget_files+0x2a/0x410 [ 218.787371][T10381] __sys_sendmsg+0x269/0x350 [ 218.787391][T10381] ? __pfx_futex_wake+0x10/0x10 [ 218.787418][T10381] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.787456][T10381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.787483][T10381] ? do_syscall_64+0x100/0x230 [ 218.787507][T10381] ? do_syscall_64+0xb6/0x230 [ 218.787531][T10381] do_syscall_64+0xf3/0x230 [ 218.787553][T10381] ? clear_bhb_loop+0x35/0x90 [ 218.787579][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.787602][T10381] RIP: 0033:0x7f917478d169 [ 218.787618][T10381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.787633][T10381] RSP: 002b:00007f91755c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.787651][T10381] RAX: ffffffffffffffda RBX: 00007f91749a6240 RCX: 00007f917478d169 [ 218.787664][T10381] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 000000000000000c [ 218.787676][T10381] RBP: 00007f917480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 218.787686][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.787697][T10381] R13: 0000000000000000 R14: 00007f91749a6240 R15: 00007fffaae697c8 [ 218.787716][T10381] [ 219.458361][ T8613] page_pool_release_retry() stalled pool shutdown: id 70, 1 inflight 60 sec [ 219.557287][T10391] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 219.617695][T10386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1229'. [ 219.829678][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.096032][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.138113][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.177561][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.249468][ T36] bridge_slave_1: left allmulticast mode [ 221.255283][ T36] bridge_slave_1: left promiscuous mode [ 221.260963][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.271359][ T36] bridge_slave_0: left allmulticast mode [ 221.277245][ T36] bridge_slave_0: left promiscuous mode [ 221.283096][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.410574][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.420739][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.430320][ T36] bond0 (unregistering): Released all slaves [ 221.618187][ T36] hsr_slave_0: left promiscuous mode [ 221.624143][ T36] hsr_slave_1: left promiscuous mode [ 221.629891][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.637540][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.645291][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.652883][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.662054][ T36] veth1_macvtap: left promiscuous mode [ 221.667662][ T36] veth0_macvtap: left promiscuous mode [ 221.673765][ T36] veth1_vlan: left promiscuous mode [ 221.679073][ T36] veth0_vlan: left promiscuous mode [ 221.837512][ T36] team0 (unregistering): Port device team_slave_1 removed [ 221.863486][ T36] team0 (unregistering): Port device team_slave_0 removed [ 224.632314][ T978] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 61 sec [ 226.712375][ T978] page_pool_release_retry() stalled pool shutdown: id 80, 1 inflight 60 sec