last executing test programs: 4.052146841s ago: executing program 4 (id=2028): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r2, 0x607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001100"/16, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.814522813s ago: executing program 4 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x14}}, 0x7c}}, 0x0) 3.696164573s ago: executing program 4 (id=2033): socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e000008001e000002"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4898) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x130, 0x248, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff000000], 'netdevsim0\x00', 'wlan0\x00', {}, {0xff}, 0x2f, 0x2, 0xf, 0x24}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7f, 0x500, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r9, 0x0, 0xffffffff000) listen(r1, 0x795b2058) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd44518ce86d02ef3, 0xffffffffffffffff, 0x0) unshare(0x5a010800) 3.649261942s ago: executing program 1 (id=2034): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='contention_begin\x00', r1}, 0x18) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="3c00000010003b150000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002a80), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="b2f7000000000000"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f00000004c0)}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) r6 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000ed0b00070000000000000000000800090000000000090006006e6f6e6500000000080008"], 0x58}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r10) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x6e6, 0x8b, 0x2, 0x7, 'syz1\x00'}) 2.228061749s ago: executing program 0 (id=2046): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x7, 0x4) 1.929670427s ago: executing program 1 (id=2048): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) 1.925105975s ago: executing program 2 (id=2049): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002102) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) r3 = socket(0xb, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.913734187s ago: executing program 0 (id=2050): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000006d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f00000003c0)="6852a070df7f03ecc693d4c2434ea821652ab71d9524e4c43520042f56bc57f53f75ffed9b67fc33ad53198dce21c4781fe0c7c430562633eb06aba60725bcaf08bceb3418caca1a5bb81a7a6ac2aa0f7adc0071391c5e9f0af49904dab99f7a4b3a36a547a30d8833ee021db2a9a8f4897e86759c05dbc6f677b4354ec1c7ef09a7f4a9e53f97b371331143317c946d3e8f050bdfe185ac0b096a89442ca5954f93e1a04a9573687014d1025b1ed1b1f3597b980557b91a08dfda9ca4a5c6be8554ab60619b5e1e489db0f4e53c0f786ffc9d6c0c0356cb2f989501298e5bf1dfb4ab3f096d061c2f724e2f5ea1aa16be79ccf91b72954be524249bf39d05989f82f74ed8ca0f2c4c4e6c29303c78fcccda6385fffb130a846ac74db57b20affce51663de32208f98", 0x129}, {&(0x7f0000000100)="7bbeee04aac859b2d695d957719d43e571f400a38e6e8bec5c1f025253c9ec3b5d037c15dae82920920bdd4e296b95e3c76863b77b4afe01a8ee53e1f25d6c10056b6d527d6c894c149a5ed5f622f7ca957bd12b031c51d29998635e77cca10f76d4aa018052f02e0b2c8e396a51b370c2ff294fd05c288f3bbd42799b11d6db8608718e4c4705002d5796e136d7c7f88ad9ab", 0x93}, {&(0x7f0000000900)="fccbd24a9a06a624d68d27664e5a2bc3d635bf1a222583240c875338f4878cae105867546af787da62ced0280b67414dc96d4a078e062fb70e493d9f594e563ac0c0a8b9aa8380a33480eb14f0a3f406984c74b01f86be59322be68f2441909037caea2cbecd83c4da7300d3e09192aae5bfd5d394947296a0aa6a01bb1048a3714a0162142c10026b70062579b806ffb039cbac47a3613615d4bb614c9fe8486a5950b28a7534aebd167c199a18f2c879a9c486ccc8aab9f5cd12f7905af687c43f094b6292864df8f8f21d9a9111f4ba4ae4dd4a64f9a1f6697fc3a869c53c4bcd43c7d1b51232cc9bce8e7e26564882c37ef1490e460506b7f0403d710de32698b3795c", 0x105}, {&(0x7f0000000300)="a28358d4c0323c1e1457b07c382cbe439b7b76512510096d76c0a908b7c31786e9eb8d7ea7816c2c1b035939158948ad3050c401db12518c91c1a778033e40a9d30aff4d4df5c9d75e225ce553295a4f9d557fe058eea44994decf3f5d1e73fa764b0f912b68979f4355a4697bdde74ca8de4d1090b5e5c726e1f8158b2834dafc22bb9324b02afaea1382e53a6c429de394996c66210dc2ed210ae8ce17663b236da2e17da5d738abecdc39a764fa54673d60a4c0479d1879e8", 0xba}, {}, {&(0x7f00000006c0)="111600e481d29e585e4993b349b3b33c91a81b4628b003611107d45806d350cf25f9dfa8fbb8ca8cdfbdc85dd4431736e556765c910ea09e8cd2375abf2f7f24f351175dbfc5f946753324b455cdec7cf9378b1841da8ca48f69dc19aad259f5510ddd8676bfede2bdf893b67e5781bf2975c29ed419a9050f434221cd6b60302a332930d03dce5d986ca246b46519b58f113e5bbc0492cef7062a30b2c36cceef5f38869b518ca68fcdf00000000000001000c1753f77217e6940a476d1ab52ef92b75a7cafb7b1d097d612f54ea733567d9ed09322fcffacecc842ea8a8a642407be5a601e4e583315d8486f28f7be6919571dbe2c134842eda43917cb126852728de55858034f2e6ff288119e0e6b3f2a5841508eeddf7ba83f53acb4b8dd376dee08fcdf2a17d894533bc13993fbed3bab04a2b8e1fc24f0298a2a1234d8b75c7e5a231d8b236e657c3dc30ceea382193ae82268c7913ea766071568d82cb556c3bd9fc258a626f4d3f921d6c6d70def40366da946c47f88d63d2804f5aa65c0313fc5c6942cc6c7a34f8beba67a0d80934953cbdddf914713fb7d4f721dfcf154d042e38968e19413ea7a0179354406b05924b98a73be51be101ed1706a3c32af5cd6c0895ddaa8508a4acd3bcdedffc352c53a0385d930a7f85027e0fb24452f27d7c6a2637c78394b5c7c2eafb203455ee60ba548e98ba1a58b2ca7a95c289d0d99f54ef70fc35cf8b7fda1066e86a3ed77b89e84c38b6dbce01c3384d3da55e5716a5dee09a09bc045b21577062af3", 0x233}], 0x6}}], 0x1, 0x400c0) listen(r0, 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003700010324bd7002f8dbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000005000000000000000500480005000000", 0x24) r3 = accept4(r1, 0x0, 0x0, 0x101000) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) 1.695369306s ago: executing program 2 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1d, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe0}]}, &(0x7f0000000640)='GPL\x00', 0x3, 0xf8, &(0x7f00000019c0)=""/248, 0x41100, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xb, 0xa, 0x4}, 0x10, 0x0, r2, 0x2, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3], &(0x7f0000001bc0)=[{0x3, 0x4, 0x0, 0x4}, {0x3, 0x2, 0x9, 0x4}], 0x10, 0x324495b7, @void, @value}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f00000005c0)) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r7, &(0x7f0000000300), 0x0}, 0x20) listen(r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002b00)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="dde431fa682a44d59feb010018000000000000000c0000000c00000002000000000000000200000d000000000000"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x0, @void, @value}, 0x20) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000300)) r9 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000100)=@caif, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000200)=""/79, 0x4f}], 0x2, &(0x7f00000009c0)=""/4096, 0x1000}, 0x22) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480)}}], 0x400, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.668502041s ago: executing program 1 (id=2052): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7100040000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0d0034008b01a16479bb6261e5000000060066002f8900000e00fe0094252efd45a7473d0105000004006700342084c4e285be75be84fdd8"], 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x0) 1.599165203s ago: executing program 0 (id=2053): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='tegra_dma_complete_cb\x00', r2, 0x0, 0xff}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2, 0x18, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e24, @local}}]}, 0x40}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x74, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x60, 0x98, 0x0, 0x1, [@generic="01ac0f00", @nested={0x58, 0xc2, 0x0, 0x1, [@generic="84f2f6425865324075de3e4c14849471ae44404800ff10979659bd1e51c64eeaef1d31e634799fc5a8ae00fa3b5babce0f3673316042464442388172b581bfc5236dd1bb04d4d49555282aacd7a6b8050a9a8c7e"]}]}]}, 0x74}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f0500010002000000050000000a000000040000000000000e020000000000000000300000cfbcc2002e"], 0x0, 0x4a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}}}}}}, 0x0) 1.54841109s ago: executing program 4 (id=2054): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, &(0x7f0000000180)="d1a3c27762d4f4f556c85109bc9c9bbfb406441b7338929f0ece08068d325515a8f5", 0x22, 0x4000, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r3, 0x1478}, &(0x7f0000000080)=0x8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', 0x0}) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r5}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth0_vlan\x00', 0x10}) r7 = socket$kcm(0x2, 0xa, 0x2) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000580)={'full', 0x20, 0xffffffffffffa9aa, 0x20, 0x4}, 0x2f) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local}) (async) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) unshare(0x62040200) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r8 = gettid() (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r9) (rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf25090000000800310002000000050030000000000008003b004000000008000300", @ANYRES32=r4, @ANYBLOB="081fdbd4e078e3dffeae7211e7fa08b9da003c00090000000a00090000000000070000007b889038c7bcc0f3bcdc38ad12db80b498666a7bd6793f66de868f22e1474cf96d337ba33999a712cdd07acfbfd9b6d4354b17e1a713056b34d2c19b17aa8f9eaf881a665ad59b381d8ad4c2a5e3cddce5be106ba3af55992fc3787356918836bc534a645bdee5e3c90d4a9d5936a4910ec7cec12d6dd22194da"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000400)) 1.478616134s ago: executing program 1 (id=2055): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x804) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) (async) 1.295273341s ago: executing program 0 (id=2056): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000040000000800000008000000000000004d40fb589a9b45d1c594f1e29accb0fdb04bb91f9c200e01e1a593863557e32faae3f4ddfa2d38d9aadd3d50cc4869ebcdbbd7fe038fa953695e580f8b028257cbe7b4b48e1b46c7530a07e815bcfc647afdbccda733ae90530d054f0587e74fe7f379a589e92c20f2b4c20b9e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0xfffffffffffffffd}], 0x1, 0x1) 1.287586605s ago: executing program 3 (id=2057): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1cc, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1b8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f0a3a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x250b74fe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51e0f6e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b1be9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74680bd4}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5fd093}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5380e6d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a6c4519}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e84357}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b54773}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3c28f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc78d98b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33bb2f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bdf80d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3df539}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79a94691}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27a4ef4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72e5abbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74915677}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc588d39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x679da9ca}]}, {0x627ce848732881a4, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x97}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x427a56fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15ecc928}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x545f60ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f9ac028}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000800)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f00000030c0)={0x250, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xad, 0x3, "b361bb2911e6c11dc81f41f72b4f74e18c239e00081e03bc458d5ea150d6827415b3df3a5afc4dcba0d1055b85b04550878175b230a844960629f992be26e7061538f97750ccddb5813c1040324a386990eb135e1c6f75f7f5f83e0e0e9827e0eaa6b9385dd44edf91598b48050e8a0fbcba5e2f16075cc2c65d5a5d9f53b0b63541b5ebdba21b7b65b9672dfbc11d1fae9a41c3613672fd8ffe7989895f576fedb85f3796905f5bf6"}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cd0dc2f4cf2bd75a852b5e55fd870f8ab765f22b"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "05b7984910543567900640368a07a6ff8792dd74"}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002800)=""/123, 0x7b}], 0x1}, 0x2000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf25090014"], 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) 1.084657961s ago: executing program 4 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB="000000000000000000ffffffff00000000", @ANYRES32], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xa}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}]}}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e00000000000000000100000009000100"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000406010100000000000000000200000a0500010027000000"], 0x1a}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050008000000b96079cc2b43b41ea1d2d9aee686548b4deadd6261412de58f27d2997001ba57493d1dd5a3e024a652b790826f274830bf2b3b4bdb2f66d0f6223e11df2632ddf173904004880315e0b31a2159788c5f5ae50356edf1a5fcf958e160783510888dc2e47735f04c54c6261968ec7fe597167263949e332e21a648a3ba9db4ea7df8e994ce2c63dfc2a6d2d576ad"], 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) nanosleep(&(0x7f0000000380), &(0x7f00000003c0)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r7, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000080), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYRES64], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) 1.027040101s ago: executing program 1 (id=2059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af989023", 0xa2}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a432", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d0", 0x52}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7058169", 0x98}], 0x2}}], 0x2, 0xc0) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES32], 0x398}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 979.310614ms ago: executing program 3 (id=2060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 914.960018ms ago: executing program 0 (id=2061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000001ba81, 0xfffffd1a) readv(r0, 0x0, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x58}}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000000339, &(0x7f0000001180), &(0x7f00000011c0), 0x0, 0xf0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001280), 0x0, 0x0, 0x91, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r12, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000022c0)={'ip_vti0\x00', &(0x7f00000021c0)={'syztnl1\x00', r8, 0x8, 0x8000, 0x10000, 0xc633, {{0x33, 0x4, 0x0, 0x27, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xe6, 0x1, 0x1, [{@loopback, 0x7}, {@private=0xa010102}]}, @cipso={0x86, 0x47, 0x2, [{0x0, 0xc, "9712eb02149cffe084bf"}, {0x7, 0x8, "4471bf4d5199"}, {0x0, 0x7, "4689ee1463"}, {0x5, 0xf, "f89f3f0bfdd11699da72bce48b"}, {0x6, 0xc, "203f58d21596377787ff"}, {0x7, 0xb, "4d68b29af28916454e"}]}, @timestamp={0x44, 0x14, 0x3e, 0x0, 0x0, [0x0, 0x3de, 0x7ff, 0x9]}, @ssrr={0x89, 0xf, 0x7e, [@local, @broadcast, @empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0x8, "103b7c68c7a8"}, {0x7, 0x5, "912e1c"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "55c0df06"}, {0x0, 0xc, "cc0436911dc4ecefccd2"}, {0x0, 0x2}]}, @end, @timestamp_prespec={0x44, 0xc, 0x3e, 0x3, 0x7, [{@broadcast, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002e40)={'syztnl0\x00', &(0x7f0000002dc0)={'ip6tnl0\x00', r6, 0x4, 0xfb, 0x6, 0x6fe5, 0x8, @local, @mcast2, 0xa0, 0x20, 0x5, 0x14a0}}) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001180)="1493cea8d2dfe64061c23cf9605e59304dc6cd6448e27c328de2954baf6cb1758c9897174d543c2dea5d526442bde3c6227ba04518e9c373cd10e7274b1058c05fc12f53af870198bf576dd005e00ff296898ef92331bbc6d5", 0x59}, {&(0x7f00000012c0)="5b46134807a914e6a5fb1c0d536f23f9", 0x10}, {&(0x7f0000001340)="20bf7ab2b08ced2a1e729043e3974fc45b6033e7a9cf9aa55f393a7117c8afab55c88e1f86acde1d5efbff4061a670803f3bdb26782d01826aa6962fe7bfb81bc476bfb4b4e9e3ced54f10d69318a746144ccd7ea06845eab08b05616ff67824d67d20392884d8cce0fba13cfc2344", 0x6f}, {&(0x7f0000001a40)="c7a3b0c25aed21247c02a787eb08a3b63ee78f4e4d89cd4409bd20638ede55cb888e47115ea8a21ae0e8f2a8b9a61ef1bc7431ea22b30dc6369e55dd60a5bdbf2a97b0f11a5653062230faa1a7c341dedf17d9852f3afb670f586b77020c755e2d340f198c2ebe6e2f128734378da892093bc2855a7cf93c64c992b55c1d96d94c34baf43dd3bb5d43adb0e1db8e78fbcde612bf408977a0", 0x98}, {&(0x7f0000001b00)="9db2a16553d862011d1205c8bd1574f92f7fd0b17cf4dd79fbcff43f79bdb8e56581bb709af540385defbfbd412a1a8b85257e919c1b431385cb7e8db297f6ecf9a007b6e9c997516758c2b6aa86350ebf692dcff558e9e3a561f3e26d25cae4bf52cb9f7af308be1ece2dc5cc91bf7e19e68a91c53be62951eaa042cc8439c397aafee78f2088f152feb8eb2d0beda0346642f11eb77c3905edd7990f451897c1c1416556dd1315d5476a19e91a578188b5c8720326ee70343f397dece2d99003dcb590c4c22b43e9b70f96b98806448d937fa8f704d152a49b92629f57b8f233d391a23b61b20da26b9addbb785d2af00f8d6a", 0xf4}, {&(0x7f0000001c00)="7d9c7070619df38e5d1d93511b1192e43366fc6e73d5f27570b18078c4e0f31d7aebe085d3d9a43cbf09873f2f73ac488c00fd67b397e68dbec5757452f929ee646919b694f92b3a76d1996d863ab101e80fa2d8d2fdd5913b9268c1c7319c7a243e92763546ed6acd5d84c58e03dc02b87e4ac02c1ddf3c93936aa8942e997ab59d3b2c29c40cf266ee9a25c66cecb3142ad45446d9fb6bf97bb36e74a744d472d521d407fc049f06487b7a8ebf9d57e5", 0xb1}, {&(0x7f0000001cc0)="629e70b50f0fe598be858f0697eea12765ba26167ac57494613aa7d7b1cb21605ef9ee8a607c0b7f6ccfac527a907385539f76a969d26be94a31864ce2b14d3dad42874961abdaf2825fb0929c305578611459ce3b8a96cc4c95f458a297f3c47684ceed3004e1d42ffa296c6962a1f8d5832d5eec73bdf6d7f214033607199ff302eb2c70f7972fd138af6ecde67cf6a3186179431be20b4e9f2ee3e2a1", 0x9e}, {&(0x7f00000013c0)="d7a7dc1b526012695320c3c129981a79e32bc9", 0x13}, {&(0x7f0000001400)="ce149f949e9736445a344abbe6994c2d364283e055fd87728a3aead6c4a2144fda42896ed1d8a45df96e53df98788b6d2bc2e2b0", 0x34}, {&(0x7f0000001d80)="a96106decfe8659a8369583e3f953bca98d77f8e31125f70764a70e7a881fd4672d10b8869557461db8512b28e4e24651b66f3f67aa42f6150055a9c21d0299b6b642de233b2210b7bf30f8c579da578495eb35f8d17decf155d0701aebf52d088e74df25b1e0a22ec40496072c568e49a6e617b6bdb57f05309d07283658ce1d170b1595d5ef00cba7199f2266c56217137b15e8972eb80f366eddbc367a8d2997b3e4bbadd5f44883a6b33ebbd1138815ab11c768b6a53a84d68f550ab7f53129e73066604f9aea37c23fc38532abe970cef6b599b7bb066f8ae08bc0f89", 0xdf}], 0xa, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x62, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xfc}, @jumbo, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x1ff}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x1d, 0xf, '\x00', [@generic={0x2d, 0x46, "4f36fbfdefb13e294e2c2ed57af09a5360ca73c64d515ab7fe935f594aa31ca559933e416eeb86bda76b2ef0bbaac5d8660ab3090b00298791e5a0cb85b443774a3430ae4230"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x4, [0xa, 0x8, 0xcc6]}}, @pad1, @jumbo={0xc2, 0x4, 0x200}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x160}}, {{&(0x7f0000001740)={0xa, 0x4e22, 0xffff77ce, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000020c0)="c30cf316a317b0191f04f77288515d95595d9953d3f1933e829bbbb06c23d741014f5a7479c76ec99a75a9a7ca2363478637a6c2a8f6315f8aa59ef9af9c70e92f934f9918297518da53924c9e1a78872ea2e6e871d34189c5ae671138b94cf8217d05e7485901980b98626c01f549f922468915a55ff68f0d12b3c6b13fd22ed9e89c940b9eccdf8cca5e04d5a4ba8ac52657dab0137973ef131ccc0975cd5d54268b6fcf70fff6a42cc146f0d1e050654873d09c136f129e5205c956ee9bb399e2ea1946285a256440e5c159b4713f46337a76a0dd5d3919e49f3e757a806b0be22e6c87d5135fd9e6", 0xea}], 0x1, &(0x7f0000002300)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x3, 0x0, [@remote, @empty]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0x6, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r16}}}], 0xa8}}, {{&(0x7f00000023c0)={0xa, 0x4e22, 0x2800000, @mcast2, 0x4}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000002400)="6020a95a0e977322d9c813a0fe35b423714af78f7f5a4503ada79842f1c0801601666d29b1e9d1b6dd5fab15913119167562d7b0f7624f32770fdd82fc75e3c588973df0b422cf5eff532dfd511c05c77d937f5d8565a7777ea3c7b20678de086db2b0256b8e9c8658ecbbca08d2cfcb9e2744f557fdb2c6123fd2b8cd2dc1a07f7f3cbccae3893230f7012f2ffb18f37267bb85758cab96187695dc098c1020b502abf658062690f2bc1c4d6b6c97f8e45b", 0xb2}, {&(0x7f00000024c0)="b93185925d911cc437f989b640383b5e05df35021d79b7d3c28fc2c7133433bec4f9751b8c8503cd635e2f41ad3cd77af04cfa25348480285415df29bdbb56e8d9b2409d386f98ed71e6680d8b4878fe2c04f19891edd11eb1d61f19b3bca23be72f6785db234b1f991041dbe23eb187c195919fd3089bb657b5dbd3df22c38f7f0a9088dd783997b42df4de5b9f941bcd3c0c6b4f9c18c4374fd5ccfcbd63909572d2c2373f2af828942d41082b9149887a44775f28873ed37f212f0d4ef4962bdced1fb9b73ca54c1958b9b28a9aa5be9535d8373771f8d82b93b71859ae78af6fec4d117c", 0xe6}, {&(0x7f00000025c0)="1c584c447d51bcec14ab3209351de931a95d88679d9e7f6e4b74fab7fb982d9b57255aef99041351", 0x28}, {&(0x7f0000002600)="66686529f3773192f7947be734fcbc51920dff5547c9ea", 0x17}, {&(0x7f0000002640)="3809427d9624b5f3a809fcb1fa195d322d19410087768efb2dcb0473", 0x1c}, {&(0x7f0000002680)="df4c8404a0f7430437a4f2e20e797693249d38dd334d6deb28b49e23e7683ddd9fab6e0e5206df84992ef0c20c2cd0e3ada8e547729877b0a3116a4f21f2bcc763a0c1ea7f8ad9007b8b77b44713fe39927569af172ea4f9ba74f320e9b0f67656ccfa03b84c9bd6d83d5fac4b06783897aaec8f8b27eb0fa21a48beea81879d37ffde67e1ba4ccbcf486ebe638eba906382fdf5f00c45b6b934e7dc9eb32af5090ed1480d6e407a0fcd30c4f09aeccca202b76464924ef9bc3b95c7391710398d082d1bf4a360b682046afc66f64d9fe4f002c517ba4ce91e3593eb94f7b0ceb35f5e70672cb352c23cfb6e3a3b5257a391", 0xf2}, {&(0x7f0000002780)="960cba91fc35191c67fcc5548a333fd1f24492db679962fd582ec27cc506b68a3354d521fbdbeb6cc4b9afcf83a21713356ae7a2fc772de5ae7b71115e6f68846d92648767914ff24dda0cba2798314197ccfc30cc667f2e4aaf781d4b7a742b1cc3489969fc5d1d549e46b290a26da0b0c091cad825c9400263b21892b32a6b3e28be22f8d76fee26e8b7ea1f6c81202bfbf4ab5971fe9abe60aa61c77ee8f76997c50566fc9bb342ea59257f4f39015c5be1cf7d6b36b16bafe85899a4441bd0a67fa507f6c5f231a2175dec8a31a8dbf27780fa0f15e9", 0xd8}, {&(0x7f0000002880)="2d23330909145d18f22751845420a8d73a8aae97fbf0f1845a170ebf7e4c100a7d2b0ece5db43e2f66816517c68780cfa85f7ed85f0b9f41d87b2ede77a5cf9a64d4f87eb3ccaa3f2b0803f0885847c8c78f17adc2a199bd3a4aee531dfe", 0x5e}, {&(0x7f0000002900)="b7b89ed365c878e6f843411880cd97a91aa0edfea823860d916443490cab0c39d36998b9b725c829fcd0d9", 0x2b}], 0x9}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a00)="1b6b6f21faec8b4b0bd694e8c3e3ea6ed6bb0e9be94669fb0d317de0035d87a105304ac2c2ec12bbe49cbe09965fcf66df1a97db9e0616a893f15685c34b23b1fe73d06a13507c1b44afb17b7ccf8e2e", 0x50}, {&(0x7f0000002a80)="551656c29d55e6a8e106b4529d5d91b6a67ebd04b441cb6a6a3ac24a7b165994eb9491c8b9f99671075c5d0c8b14c455df2c6060e6b4120fb10c59377f9fa340a6aab942f3ad73a94119184e741b3c9d2f4dfd974556b2b25322d25fc4e26bae045b7d6d4368f587de5ca291f0ed2214822c4395046ae7d5f72cb8c9542e670f8ab8f3ce35834bcecd70ae8a281fcb87b78ab5e1677e7c6bd770286ecf79830b63b58343ab80", 0xa6}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="123b8afd4a0030c25fce328166b955cb58da4ec04442f6c877b8d09044b8478602810c26f53ee5be96e1bcaceef162cdef2573c3af4a297e62ad3276cac3bef700a776e7940c6a6c95d7dda1cfa30fc598dd1a3719037c4dda38994ef72e0d71fccf17283720ee7b8cdd584a", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c40)="b975c9779573a267b42155592fcb9b41548897ed03c753b7f71b6823dcf4827e5c1be4925dfc99f6fc69d68ba97081fcff2276282478a518239199b3bd938fece31dd455f35c378854cab10e5d916dbd5d2585568c832dd21ae60c7fd69bf9017f2d74539419598a8fad31b76760501f5893e5d0028db4cf5bd84a9cbc5885d30ab71e0b1bf92d06fc3a80d0a7472f84234d3b30b12122257ae135", 0x9b}], 0x1, &(0x7f0000002d40)=[@rthdr={{0x28, 0x29, 0x39, {0x88, 0x2, 0x1, 0x8, 0x0, [@remote]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002d80), 0x0, &(0x7f0000002e80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xfd, 0x0, [@mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r17}}}, @rthdrdstopts={{0x1060, 0x29, 0x37, {0x33, 0x208, '\x00', [@pad1, @generic={0x9, 0x1000, "9ed97744180aea5f4fe0ac8dd539492c683c9c066937070491c6034c27c3af005e1075f19910d895230258b4b65171abe0591f0de09489b2dd887fcaa9741a17aa04d683c6c37c0ddb89617f0b0d9d9abd1ea602f69d9be02a06a1714ec268676284fd8df9971ff05d9f5f54be9ea77c1a39f96d07db7b3ffa314bcc00870e6df38bdd196faa621ab6a99ce080670a7868e0d486619e3b2fc4917d28ce05802942113959601bfd53ded3f1f63c20cb456a4a2ab0877160e17103a9a5e03ddfab862b350877256784cdc7295efb426d735979e1cb2c24b3f59f6cebecb83ce63af941a086aa62892700607204f4c4a3d2a8a9f4c3ae695ab6ddba5cd9704cac9cdcc348e8bcc725b63f893fe0ba15623e11ba429b210d8d69bb6ac53febd1d23f29d21227b0d9b90404b33c2b719f68c823f0a928ae2c9fc47841d7ada71289fa00aa0b2e6a72014710030ed5572ca1ec329110565961bd7d8c08feb5142467282a6a505e6a57edbb39beeb7274dc7737c23bce994a511df3fb14bd6a70b7cbad7955baca144e0a0062476d7c7e22aa34e7d4c0b0a85a71694ff31ea513344f31f2b20e1cf2dab9b71842100a0dea9a37b62280a95985f1e5287daf281f3ccf2dceaee236b242602e77bbc18533a2ea9989092fcd2f07dec6207d843199422ae88e890e262b0c28ff31d2727ab411eeb4bc0b1cb902f11a67da12defcef7d82ff0bf76276fe1c17ae14591c380be95c0e0e27446ca8caae59d33218ec7651cd0c7ccc21ce70fb75e0512ad527ed8c7d1db2a20a78e1c0b2e156192c75f1ebfeb6c34d379679c950e558db1cafb7dc3a2bed8f3707b8df5d03f003bb5ce4de4640c5aad5286144c10c5e3996d3ee5d51d064c671b995715c7f813c0a123523dcd647372d68a922e741f653c973bce263ac0798629b5f9e01e888e11216f098395438be58877425674df3b07329b3b1ce0c4f99b405ba8ebbe4bdb9b35ecd7551fdbcb3b07a4079764f8487d26dc6c7b8e967c81ce9112e825b60c388c10c410fdd2566239f779222956fbd5e0599a4bb93c8630f6fc5673bec91affa4080353b31c5f5657dd50045f83bcc081b1cbbc3ec4935a7e9e85efd89b1befefc76eb94e239432fbc920f4f7c20fc90142fe3c426855d984df223f0154d3d168e63d4c7775e5329b4da6be8b341c91e203994bda75fb810e5ffd37f2ea0b4b48cfc647917ee3577f4cfde959c8c30e37571461d58fa0845f635eead7c77237881a5c19d7aa277ee21934e766033bd677bb19eec00c6f160db9448e75f82cd01718645dc635713c7cd0d61e511eb96b76a4391856ce64815b2e931a2f456f165874e1bd9f976a0f81e5ca84af5a2a82c283a44ad14388b4cfacb5e6c726341f242259274323e229230381c2ee4a2cd3f07e3b675f7b1e517cbfae8fb71888e637239e8d5ae45d77f024a7f1e532ea1b9082a1a6cf153469fbe03c7e56d76ebf52857ece8919b2b6c5a2c488d75447243319e60851dec69105fc370d670faa52e2a5759cb53b09484c35a1b2321e7bfb7cba0528883827b0d2ba6f4d3c3c51fc60d9ebc94c99ec12e0f0217829487bcecc0755872873e32a21fbe7d3868cea51c59c63e5399251cd7b6f2abcfffa74d4a660e23de501cadefcfe24530cc7a5f325867af55af4efd87d9a5e52d403b9e7db84dc170c9f28e1a80ac6a64d515a6f39b4989d14b16bc7176f6aa3e012eecc554e59feb3ec0e7598e90b827cb31adbb614b171af54c65f3f61db39f62c52db5ae25883f7ccaa1bdf1ce3904b7c6b5e42fa01d0baeb6096d8bf16136ee22fbb7162308f52548f9dc3a910663db0de200867e7c1729a504c0df377a1669f54859bcef10d55059b7157d89aea3ed38cd345073ae3daa840f0888f2e506462e58aac7ce12ec94b6bf04492a9507b4d0e2ff3800db834e79e7f8e32ceced0e90ce3be2c961a9ddfe45ab166d00a0335286b863ab0a3bacca6eee342f0ef958645fba4c3d8b65d8f6bd6acadae3c01d3dbedbae3ad69a3da34661c93bcaf9719698806ced2556b5675fe387ad2414cdf4ef2a791cc6d85fff6982ea5f4106f105f81c64e266e1cc535bb3a765a427b524a76e6b16821a8eb5ae09ecdd06195a8999286c003818e1e6ac41883e05132130c69e3cf401eb968f926eca52b44bef4e7d2027c12589f2f7cbbb57bd94568ce088830631fd016bc5401739e2dbfb0684390a3bcb2b9050b4f2fe8c3ea4ec7aabe78b7e4f64421472ece84d99b79246bb78d41707e9a5ef909bdb0271ed578fd591cae4b0a4c1316b36c24fc849e935568aea2a526dcdd79418a6fbaa125a63fa85f692ceb1f344096aa0d75ffa75e4a696b857c331282715dbcdb2a5067ff3fe928911a509df156d7a81c4e5fe05a8dcf4897c01c3591db8b17108be0e8ebe915da61f2881eef577966ee69e2fb89b8ae1b09fd18f4e1792a289416797a9d5972252e3a335ff07e92a11a55235a4ce026f0d7c8ef4d2373ba47eeb320dd393babcf2901c55e767df6e86e66e6c454ec0ad7febfd65cbde24a9121a34b78a6096411969b19270a0ae6841b202fc958579a5dc68a61d3bc2531ecea7f20aa62db33f9b5653e620ddb6a7e81c3fdd07b2a76196b0078ee00db62fdeb7879e6f59fca0a8743513975bf8fe27cc64a7dc798b8da7edeca5c9092b487053552c24f718571169a66a9672db55f8de76c07b4fac5341e6a3a4024dfc1ee8298503e8aeb1dbe62b0501dbac371d64bf98ab4dad4ca95a5824929e96d571c3ab5aecb2d68bdc2c8a578411d305b1949ef4ab1d1e8ccc3f6f80d25fed3a22addce63e630b2243455ca90c3b198581d6b95061f00d34516f8f6f090ef5c453f4ec891352e18dde1e48522932767d9d6eb9b62b7e692b3a28e0b5730a4fc6c3f5330b823a3a3eea269cb2d6c4cb47a793725b3ba89058b3a6fbcf935fc4fb610fa75629b1ba2ce710f3ebc0abf0705d0babae0b6430c6dcac9c8e6cc70789f82f262252ff3779459d8ab1f3246f9f24fa316bd28dbdd61cc76999bf058e26b455e560bb34bc020e93d9ebee118e4a4381532f5033a9312293dc9437bb4a64dae13683623b273637d2904be5b97539e56c82e1184aa32786f3ee15abf06c47121fd5adef3b223e168d0afce5c40acd97c08cf44422096076067ff7245ca5ecabac3eb04e0f17a3835e0e2174176857daf90dd65c230aa2db9b088dd13450f553347cbfcf55eea0be6314994e1e7b6f4518d9ea8ebc2ed5175a1f0bac46ea27efa52cc844ea10c7d2595162a36881e535a99463c41ec41cee8af82b01ed576dd1e9fb0905103fb3aa974a31ce9a48ef0d0761dcfbf8b4293a649fe7bdf7e795ee483eb9819e1fecb96cc9f176d3a6760fdf9d9368a1bfe5f8319bef7dd14919b23e2ee8f63324ffef8579fc0a5fb3f7686657e1f540ad62df7739f726b065ad19eb745dd67de6e8cd78e6c2b51471f24cf721148a14e288cde8d91f2bf26fa5179cf42050714644cffa2801ac06e86a6fdf837c8a69c6afe5047ab0c6eff0523dea15b9193c3a6172dfacea8e9737fae58a23fe2c9dbc6be56901b324c1138740047f10be0bd5e58806a009697e6b6d5913cc280d7ca198fb1787a737e5f3ed33f173c69d64470a02a1b1a41d804c9bbb8d99d8e66276dc0642da23c190a3a4921190d2c6cf4008614a3305661a73d9448a395df9134590223a06543fc45e9ce3fa90752fdc85924882b7c81933758403a8ff6a38ebca5a149a213cfcc59a696c43ea20cda2dfaa0b94e471b44819f1ad259a6990868bd8a6eb550c5bce5b15060fbd8093af6d9573d262f9a21720c2b9c5997fc20644c3946907538abd9e692173197314c28d2826579acc439b92949f4808c6ae0e48630b3893e7063b2d9dbf54403eb0476bd542bfef68c1543a33d4911a66ecc26e5cf44e74e4a5d9fc12dc1b0d853a54d4f43d76b5e76d99faf9f3c2e5985b62325bd8771c4cf9d5c67e8c2ec1bc632fbab82506136d6b41b28baec0e6b8e8a6c5bd118299d600c26cf848fa3ee8e8fe05f93b15634e3a29e87e9e9fe8ecf6d1711ba36ad70539b60fc70dc04a08b3e8b303f437d35573bb34a4b5bde41e315eb29ced688e640f045b64292f71435448b29cb366fcc5a57eaacf1300a7ae3e92bfcd3403bfe55f0cb6eadaa92e9f7ad039366ff11c24a6a4bd691c68ecb97848d9a7fa12b91ff18aac0f0bf87e1a1de1f2fe2f5d5b7d263133ae49bf068114d4a78659c147179e8db545d3ce31fef9d30e38e885349e46ba3296041636367f5eaa4a4c7cb616192702531e48eff0e4d3ab3bd5db1129f917cb4809fd30989a1cdda2dc1695e0dadd3e1295e8e2350aa1a602550178c853e23f355e10ab4b252adfa0bda0b6d95d5b93f076c479fff42208379dbe6c276e38bd51826bf96b86a469eb633dc987104eb128821db0a7f8cbb6fa2244744184a52368dad9e858845580af1a7bde0a3a66a96895288381837869b53e9f0cabe55b9f16f2c30857a5ca24b9de8e8abe5648223de1a3d36e7e7e9a211868082600d3e5fa75140728b2bf615b7175465ce80540a163adde1b95fedb222ab2dad353660eafb80a62b606e83b0798519a5743c09b9ff233dfd424f47fb31a3e33fc60b77e626a6d38c28585abb5233e91906ca2cf39a6c297c9e6ecf31d1caf76592e3ae9bc19b8c7b1f628963fa4dd2e9be79781edbc2371455a284403f976e3d97c6c71de5b9eaf91445204b23be9e87f048080ff899e4f5b9391ff215fad08782e978f6781902a66c2627ffd8611a212006a4b9a6d90f133bf5b99a661182437210a47a5eb67b60b0a2b278f723e906e164a24b0969c954c873e0da6b52ee94a4becf257287be06c2849367a37d7760d6e5253e81031acf056abc45fcf42ddc5e83fc7c0ddc990c93ff09a3e8bf06e42dc0f9af2bac01cba1166c3559345cbb9181daaf55f47cc0f7a479bc88ab816e9d8aecb38df294eb6feb885ef6d95173fd5ed90ae9f99e21d67e3c1b3b6da24930916a1590c990db292bfbc1aa6406238342a0beca1927b1012c094ed2fd6cf67e3da49f5b498d3e593e827c69d005b54cd1a46caacc3a4861a01ae9ec5418e816631b244ac8c9da864528aed3770872f3936178416c0d5cfba3ddc4c9e16c4229f31ebaeb070800f396d9e55d8983b9c29cbb354979e288b4f9dfd75bdf6f9fe145f1ddd8dce9dc0adb02d7d90ea07e350567f82c141e8bb7666decb466c0846a6dfdc681ca27bd58e3080d338a4ffe4462ca4d6530a9c3295bf96289c98caed13996849de8d708895f6ebbc82ff31f2e8007874cca318a10f9116ded1714f051fc185401ee3c84f88e3fcd9689663fb4578c5befbe881f4812371637ef7536e88f82b72527207619c0204d91cbf002466ee10176d13c1c071f41a2e90ec9d4b3e74cb6e9a7fae100fede2be9f09aa22cef28a01ff174ed9cecfefbf1838579e1568ba38fd8c98c87a99b4c9dcf93eee38e5941db2e44e222e0f07ae2cc900f4d10970bd46ad8abbbbad5af9fb1470f25c89ed056678227637d0ad423306342234aab96f7709e482b394a0f7eca0d0756b853e787b3c5fe112b263686679690b64d1550921119d7b4d75883e784fe536de35475ef846083d380e2d07e5dbb6004e91c61166453d5c8e2e65f841c1cfebf85b3e53b194997ab4bc855dfb126d473c0cb10f1162efa0e01d37cb0cbabc9bf21219aebcff4ff199be5d34b0dea4d24e9860d6efa8d9d79f468240a65cbc3cad4fb8"}, @generic={0x1, 0x36, "408fc98a01dd3300e1cbd78acdd2273549ae735ba5b569e86a2ab6668f2858aab66c76b6f382d19a2a6a2b4dcd4d9153bf5d5530772d"}, @jumbo={0xc2, 0x4, 0x46}]}}}], 0x1138}}], 0x6, 0x20000004) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', 0x0, 0x4008, r2}, 0x18) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x30, r13, 0x1b6af000) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000020000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000e28400000083000000bf0900000000000055090100000000009500000000000000182b0000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b702000000000000"], &(0x7f0000000f80)='syzkaller\x00', 0x5, 0xea, &(0x7f0000000fc0)=""/234, 0x41100, 0x34, '\x00', r6, @sk_msg, r7, 0x8, &(0x7f00000010c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0xf, 0x3, 0x81}, 0x10, r9, 0xffffffffffffffff, 0x7, &(0x7f0000001680)=[r13, r14, r15, r18], &(0x7f00000016c0)=[{0x3, 0x5, 0x4, 0xd}, {0x1, 0x4, 0xd, 0x5}, {0x0, 0x2, 0x6, 0x5}, {0x4, 0x4, 0x1, 0xc50579f3273ead37}, {0x5, 0x3, 0x0, 0x3}, {0x4, 0x3, 0x7, 0x3}, {0x3, 0x5, 0x1, 0xb}], 0x10, 0x400, @void, @value}, 0x94) 803.058409ms ago: executing program 3 (id=2062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async, rerun: 32) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0xffffffed}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x13}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getchain={0x34, 0x66, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0x9}, {0x2, 0x8}, {0xfff2, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008014}, 0x20000010) poll(&(0x7f00000000c0)=[{r1, 0x1012}, {r2}], 0x2, 0x85) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82111cf808004502001c0067000002019078ac1414bbac141425911e20f8a4d40108"], 0x0) (async) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x5d) 703.403752ms ago: executing program 2 (id=2063): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) 489.693571ms ago: executing program 2 (id=2064): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c}, 0x0) 395.264478ms ago: executing program 3 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7100040000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0d0034008b01a16479bb6261e5000000060066002f8900000e00fe0094252efd45a7473d0105000004006700342084c4e285be75be84fdd8"], 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x0) 394.423658ms ago: executing program 4 (id=2066): r0 = socket$inet(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000006d00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000080)="6806", 0x2}], 0x1}}], 0x1, 0x4000000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)="34d3caaae6c14283870a8723fa7817687ca8c4629c30fee87a3ac02cbcc7cd02a2e29a487966af50d9aa8c2e8ee8bfd5c1a6bd85c8ad1260e17bb38c38eb43bf1442190a87c9e3cea4436862250dd81c1bddaed82b709768b4e682044a4f74a99d343d3a3855ad0b58cd82f28959d1f5ab37f646fbda050ecce9f6e301f0a67799cc6937e293475bc2cbaf4bb9696aa55b98ac106699a9390abf8a5049f5995249a7a5efb11a92a5ef0cc418b45bad", 0xaf) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r4 = socket$inet(0x2, 0x6, 0xc3c2) write(r4, &(0x7f0000000040)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x200, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffb, 0x99, 0x9, 0x5, 0x5, 0x81}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2005}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_dump={0x40, 0x1, 0xffffffff, 0xc2, "a2b2364c6bf57db8d34633685a74cc005845f1748a955c6dd756db24e033814316c044c50d9034a2047009ad4dcc1e69aba9d3fb303abe2cdd7371bb5a961508fe6a06db6b911e5e17c4a0f79229056c0cc88f94634d8549cc6fc9667992625fe0cc15d763428edd6258ac984f5cb67dfbf1d98954b249ffd4b84d67d6cab75381ee89092088d15724245e1dfca62ac165df9114009fe19adb909a307cfca2db1a451b127771c7b92ae75ceac93020fba6d8d41e548a4fd6683f15d2080efb333e4b"}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x100, 0xffffffff, 0x0, 0x1, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet_sctp(0x2, 0x1, 0x84) 267.49054ms ago: executing program 2 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61124400000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 187.162411ms ago: executing program 3 (id=2068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 23.320346ms ago: executing program 2 (id=2069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000e40)) socket$inet_udplite(0x2, 0x2, 0x88) 21.233054ms ago: executing program 3 (id=2070): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xa}, 0x1c) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) listen(r1, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x42, 0x0, 0x0) (async) listen(r0, 0x20000005) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 15.151954ms ago: executing program 0 (id=2071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x104}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802830f00000000000000000000000085000000bb00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=2072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 211.018329][ T8746] ? minstrel_ht_alloc+0x84b/0x940 [ 211.018369][ T8746] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 211.018409][ T8746] ieee80211_register_hw+0x35d9/0x42e0 [ 211.018446][ T8746] ? ieee80211_register_hw+0x1681/0x42e0 [ 211.018477][ T8746] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 211.018512][ T8746] ? __asan_memset+0x23/0x50 [ 211.018535][ T8746] ? __hrtimer_init+0x170/0x250 [ 211.018563][ T8746] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 211.018628][ T8746] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.018658][ T8746] ? trace_kmalloc+0x1f/0xd0 [ 211.018685][ T8746] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 211.018718][ T8746] ? kstrndup+0xbb/0x150 [ 211.018762][ T8746] hwsim_new_radio_nl+0xece/0x2290 [ 211.018806][ T8746] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.018837][ T8746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.018906][ T8746] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 211.018945][ T8746] genl_rcv_msg+0xb1f/0xec0 [ 211.018994][ T8746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.019050][ T8746] ? __pfx_lock_acquire+0x10/0x10 [ 211.019090][ T8746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.019121][ T8746] ? __pfx___might_resched+0x10/0x10 [ 211.019162][ T8746] netlink_rcv_skb+0x206/0x480 [ 211.019195][ T8746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.019222][ T8746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.019289][ T8746] genl_rcv+0x28/0x40 [ 211.019311][ T8746] netlink_unicast+0x7f6/0x990 [ 211.019349][ T8746] ? __pfx_netlink_unicast+0x10/0x10 [ 211.019374][ T8746] ? __virt_addr_valid+0x45f/0x530 [ 211.019396][ T8746] ? __phys_addr_symbol+0x2f/0x70 [ 211.019415][ T8746] ? __check_object_size+0x47a/0x730 [ 211.019449][ T8746] netlink_sendmsg+0x8de/0xcb0 [ 211.019496][ T8746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.019534][ T8746] ? aa_sock_msg_perm+0x91/0x160 [ 211.019572][ T8746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.019603][ T8746] __sock_sendmsg+0x221/0x270 [ 211.019638][ T8746] ____sys_sendmsg+0x53a/0x860 [ 211.019673][ T8746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.019696][ T8746] ? __fget_files+0x2a/0x410 [ 211.019731][ T8746] ? __fget_files+0x2a/0x410 [ 211.019783][ T8746] __sys_sendmsg+0x269/0x350 [ 211.019805][ T8746] ? __pfx_futex_wake+0x10/0x10 [ 211.019839][ T8746] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.019909][ T8746] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.019940][ T8746] ? do_syscall_64+0x100/0x230 [ 211.019970][ T8746] ? do_syscall_64+0xb6/0x230 [ 211.019999][ T8746] do_syscall_64+0xf3/0x230 [ 211.020024][ T8746] ? clear_bhb_loop+0x35/0x90 [ 211.020055][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.020089][ T8746] RIP: 0033:0x7f625778d169 [ 211.020108][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.020124][ T8746] RSP: 002b:00007f62585ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.020145][ T8746] RAX: ffffffffffffffda RBX: 00007f62579a5fa0 RCX: 00007f625778d169 [ 211.020159][ T8746] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000a [ 211.020171][ T8746] RBP: 00007f625780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.020183][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.020194][ T8746] R13: 0000000000000000 R14: 00007f62579a5fa0 R15: 00007fffb00f8398 [ 211.020225][ T8746] [ 211.730363][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.761'. [ 211.763260][ T13] ip6erspan0: left promiscuous mode [ 211.796371][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 211.813419][ T8763] bond0: option miimon: invalid value (18446744073537628286) [ 211.870273][ T8763] bond0: option miimon: allowed values 0 - 2147483647 [ 211.909994][ T8766] bridge1: left promiscuous mode [ 211.915012][ T8766] bridge1: left allmulticast mode [ 212.119170][ T8774] ipt_REJECT: TCP_RESET invalid for non-tcp [ 212.656538][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.705164][ T8796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.798100][ T8802] wg1: entered promiscuous mode [ 212.805584][ T8802] wg1: entered allmulticast mode [ 213.308572][ T8830] xt_TCPMSS: Only works on TCP SYN packets [ 213.401869][ T8836] lo: entered allmulticast mode [ 213.452144][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.472261][ T8832] lo: left allmulticast mode [ 213.479167][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.498341][ T8840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.539702][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 214.236818][ T8864] pimreg3: entered allmulticast mode [ 214.340507][ T8872] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 214.355510][ T8873] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 214.636274][ T8883] lo speed is unknown, defaulting to 1000 [ 214.950736][ T8900] __nla_validate_parse: 5 callbacks suppressed [ 214.950755][ T8900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.802'. [ 214.958069][ T8898] netlink: 'syz.4.803': attribute type 11 has an invalid length. [ 215.024014][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.798'. [ 215.411960][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.807'. [ 215.427734][ T8912] FAULT_INJECTION: forcing a failure. [ 215.427734][ T8912] name failslab, interval 1, probability 0, space 0, times 1 [ 215.455648][ T8910] unsupported nlmsg_type 40 [ 215.460606][ T8912] CPU: 1 UID: 0 PID: 8912 Comm: syz.4.808 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 215.460633][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.460645][ T8912] Call Trace: [ 215.460653][ T8912] [ 215.460662][ T8912] dump_stack_lvl+0x241/0x360 [ 215.460695][ T8912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.460719][ T8912] ? __pfx__printk+0x10/0x10 [ 215.460743][ T8912] ? fs_reclaim_acquire+0x93/0x130 [ 215.460767][ T8912] ? __pfx___might_resched+0x10/0x10 [ 215.460799][ T8912] should_fail_ex+0x40a/0x550 [ 215.460836][ T8912] should_failslab+0xac/0x100 [ 215.460866][ T8912] __kmalloc_noprof+0xdd/0x4c0 [ 215.460894][ T8912] ? kstrtouint_from_user+0x128/0x190 [ 215.460916][ T8912] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 215.460945][ T8912] tomoyo_realpath_from_path+0xcf/0x5e0 [ 215.460981][ T8912] tomoyo_path_number_perm+0x239/0x770 [ 215.461010][ T8912] ? __lock_acquire+0x1397/0x2100 [ 215.461052][ T8912] ? tomoyo_path_number_perm+0x209/0x770 [ 215.461084][ T8912] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.461158][ T8912] ? __fget_files+0x2a/0x410 [ 215.461193][ T8912] ? __fget_files+0x2a/0x410 [ 215.461229][ T8912] security_file_ioctl+0xc6/0x2a0 [ 215.461271][ T8912] __se_sys_ioctl+0x46/0x170 [ 215.461297][ T8912] do_syscall_64+0xf3/0x230 [ 215.461342][ T8912] ? clear_bhb_loop+0x35/0x90 [ 215.461375][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.461410][ T8912] RIP: 0033:0x7f625778d169 [ 215.461428][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.461445][ T8912] RSP: 002b:00007f62585ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.461467][ T8912] RAX: ffffffffffffffda RBX: 00007f62579a5fa0 RCX: 00007f625778d169 [ 215.461481][ T8912] RDX: 0000400000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 215.461494][ T8912] RBP: 00007f62585ee090 R08: 0000000000000000 R09: 0000000000000000 [ 215.461507][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.461519][ T8912] R13: 0000000000000000 R14: 00007f62579a5fa0 R15: 00007fffb00f8398 [ 215.461550][ T8912] [ 215.464438][ T8912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.629918][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 215.743901][ T8915] FAULT_INJECTION: forcing a failure. [ 215.743901][ T8915] name failslab, interval 1, probability 0, space 0, times 0 [ 215.777234][ T8915] CPU: 0 UID: 0 PID: 8915 Comm: syz.0.809 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 215.777265][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.777278][ T8915] Call Trace: [ 215.777286][ T8915] [ 215.777294][ T8915] dump_stack_lvl+0x241/0x360 [ 215.777325][ T8915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.777348][ T8915] ? __pfx__printk+0x10/0x10 [ 215.777379][ T8915] should_fail_ex+0x40a/0x550 [ 215.777413][ T8915] should_failslab+0xac/0x100 [ 215.777442][ T8915] ? skb_clone+0x20c/0x390 [ 215.777465][ T8915] kmem_cache_alloc_noprof+0x70/0x380 [ 215.777500][ T8915] skb_clone+0x20c/0x390 [ 215.777529][ T8915] __netlink_deliver_tap+0x3c4/0x7f0 [ 215.777571][ T8915] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.777601][ T8915] netlink_deliver_tap+0x19d/0x1b0 [ 215.777647][ T8915] netlink_unicast+0x7c4/0x990 [ 215.777684][ T8915] ? __pfx_netlink_unicast+0x10/0x10 [ 215.777710][ T8915] ? __virt_addr_valid+0x45f/0x530 [ 215.777731][ T8915] ? __phys_addr_symbol+0x2f/0x70 [ 215.777749][ T8915] ? __check_object_size+0x47a/0x730 [ 215.777783][ T8915] netlink_sendmsg+0x8de/0xcb0 [ 215.777827][ T8915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.777863][ T8915] ? aa_sock_msg_perm+0x91/0x160 [ 215.777900][ T8915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.777929][ T8915] __sock_sendmsg+0x221/0x270 [ 215.777962][ T8915] ____sys_sendmsg+0x53a/0x860 [ 215.777999][ T8915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.778021][ T8915] ? __fget_files+0x2a/0x410 [ 215.778054][ T8915] ? __fget_files+0x2a/0x410 [ 215.778094][ T8915] __sys_sendmsg+0x269/0x350 [ 215.778124][ T8915] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.778163][ T8915] ? do_sys_openat2+0x17a/0x1d0 [ 215.778221][ T8915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.778255][ T8915] ? do_syscall_64+0x100/0x230 [ 215.778285][ T8915] ? do_syscall_64+0xb6/0x230 [ 215.778315][ T8915] do_syscall_64+0xf3/0x230 [ 215.778342][ T8915] ? clear_bhb_loop+0x35/0x90 [ 215.778374][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.778401][ T8915] RIP: 0033:0x7fd9b0f8d169 [ 215.778419][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.778435][ T8915] RSP: 002b:00007fd9b1dca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.778456][ T8915] RAX: ffffffffffffffda RBX: 00007fd9b11a5fa0 RCX: 00007fd9b0f8d169 [ 215.778471][ T8915] RDX: 0000000000000000 RSI: 0000400000001980 RDI: 0000000000000003 [ 215.778483][ T8915] RBP: 00007fd9b1dca090 R08: 0000000000000000 R09: 0000000000000000 [ 215.778495][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.778507][ T8915] R13: 0000000000000000 R14: 00007fd9b11a5fa0 R15: 00007ffcfc56c7b8 [ 215.778538][ T8915] [ 215.779042][ T8917] netlink: 'syz.3.810': attribute type 15 has an invalid length. [ 216.105629][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 216.241965][ T8923] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 216.258805][ T8927] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.815'. [ 216.360319][ T8931] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 216.368775][ T8931] macsec1: entered promiscuous mode [ 216.374394][ T8931] macsec1: entered allmulticast mode [ 216.380996][ T8931] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 216.506174][ T8938] netlink: 'syz.4.817': attribute type 5 has an invalid length. [ 216.523081][ T8938] ip6erspan0: entered promiscuous mode [ 216.924119][ T8953] FAULT_INJECTION: forcing a failure. [ 216.924119][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 216.944423][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.0.822 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 216.944454][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.944467][ T8953] Call Trace: [ 216.944474][ T8953] [ 216.944484][ T8953] dump_stack_lvl+0x241/0x360 [ 216.944523][ T8953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.944547][ T8953] ? __pfx__printk+0x10/0x10 [ 216.944571][ T8953] ? fs_reclaim_acquire+0x93/0x130 [ 216.944594][ T8953] ? __pfx___might_resched+0x10/0x10 [ 216.944620][ T8953] ? dynamic_dname+0x144/0x1b0 [ 216.944646][ T8953] should_fail_ex+0x40a/0x550 [ 216.944683][ T8953] should_failslab+0xac/0x100 [ 216.944714][ T8953] __kmalloc_noprof+0xdd/0x4c0 [ 216.944743][ T8953] ? tomoyo_encode+0x26f/0x540 [ 216.944769][ T8953] tomoyo_encode+0x26f/0x540 [ 216.944792][ T8953] ? __pfx_sockfs_dname+0x10/0x10 [ 216.944826][ T8953] tomoyo_realpath_from_path+0x59e/0x5e0 [ 216.944861][ T8953] tomoyo_path_number_perm+0x239/0x770 [ 216.944891][ T8953] ? __lock_acquire+0x1397/0x2100 [ 216.944926][ T8953] ? tomoyo_path_number_perm+0x209/0x770 [ 216.944958][ T8953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.945031][ T8953] ? __fget_files+0x2a/0x410 [ 216.945066][ T8953] ? __fget_files+0x2a/0x410 [ 216.945102][ T8953] security_file_ioctl+0xc6/0x2a0 [ 216.945136][ T8953] __se_sys_ioctl+0x46/0x170 [ 216.945163][ T8953] do_syscall_64+0xf3/0x230 [ 216.945192][ T8953] ? clear_bhb_loop+0x35/0x90 [ 216.945226][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.945253][ T8953] RIP: 0033:0x7fd9b0f8d169 [ 216.945270][ T8953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.945286][ T8953] RSP: 002b:00007fd9b1dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.945307][ T8953] RAX: ffffffffffffffda RBX: 00007fd9b11a5fa0 RCX: 00007fd9b0f8d169 [ 216.945321][ T8953] RDX: 0000400000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 216.945334][ T8953] RBP: 00007fd9b1dca090 R08: 0000000000000000 R09: 0000000000000000 [ 216.945346][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.945357][ T8953] R13: 0000000000000000 R14: 00007fd9b11a5fa0 R15: 00007ffcfc56c7b8 [ 216.945388][ T8953] [ 217.212992][ T8953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.342917][ T8956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.390297][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 217.404946][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.825'. [ 217.447171][ T8960] FAULT_INJECTION: forcing a failure. [ 217.447171][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 217.508837][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.1.824 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 217.508866][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.508878][ T8960] Call Trace: [ 217.508885][ T8960] [ 217.508894][ T8960] dump_stack_lvl+0x241/0x360 [ 217.508924][ T8960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.508946][ T8960] ? __pfx__printk+0x10/0x10 [ 217.508969][ T8960] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 217.509000][ T8960] ? __pfx___might_resched+0x10/0x10 [ 217.509031][ T8960] should_fail_ex+0x40a/0x550 [ 217.509066][ T8960] should_failslab+0xac/0x100 [ 217.509111][ T8960] kmem_cache_alloc_node_noprof+0x77/0x380 [ 217.509141][ T8960] ? __alloc_skb+0x1c3/0x440 [ 217.509169][ T8960] __alloc_skb+0x1c3/0x440 [ 217.509206][ T8960] ? __pfx___alloc_skb+0x10/0x10 [ 217.509235][ T8960] ? netlink_ack_tlv_len+0x6e/0x200 [ 217.509269][ T8960] netlink_ack+0x145/0xa60 [ 217.509297][ T8960] ? __pfx_lock_acquire+0x10/0x10 [ 217.509327][ T8960] ? __pfx_ethnl_set_features+0x10/0x10 [ 217.509354][ T8960] ? __pfx___might_resched+0x10/0x10 [ 217.509392][ T8960] netlink_rcv_skb+0x294/0x480 [ 217.509424][ T8960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.509451][ T8960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.509511][ T8960] genl_rcv+0x28/0x40 [ 217.509534][ T8960] netlink_unicast+0x7f6/0x990 [ 217.509571][ T8960] ? __pfx_netlink_unicast+0x10/0x10 [ 217.509597][ T8960] ? __virt_addr_valid+0x45f/0x530 [ 217.509619][ T8960] ? __phys_addr_symbol+0x2f/0x70 [ 217.509647][ T8960] ? __check_object_size+0x47a/0x730 [ 217.509682][ T8960] netlink_sendmsg+0x8de/0xcb0 [ 217.509728][ T8960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.509765][ T8960] ? aa_sock_msg_perm+0x91/0x160 [ 217.509804][ T8960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.509834][ T8960] __sock_sendmsg+0x221/0x270 [ 217.509866][ T8960] ____sys_sendmsg+0x53a/0x860 [ 217.509900][ T8960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.509922][ T8960] ? __fget_files+0x2a/0x410 [ 217.509953][ T8960] ? __fget_files+0x2a/0x410 [ 217.509990][ T8960] __sys_sendmsg+0x269/0x350 [ 217.510020][ T8960] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.510058][ T8960] ? do_sys_openat2+0x17a/0x1d0 [ 217.510113][ T8960] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.510147][ T8960] ? do_syscall_64+0x100/0x230 [ 217.510185][ T8960] ? do_syscall_64+0xb6/0x230 [ 217.510215][ T8960] do_syscall_64+0xf3/0x230 [ 217.510242][ T8960] ? clear_bhb_loop+0x35/0x90 [ 217.510275][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.510304][ T8960] RIP: 0033:0x7f290158d169 [ 217.510322][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.510339][ T8960] RSP: 002b:00007f29024a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.510361][ T8960] RAX: ffffffffffffffda RBX: 00007f29017a5fa0 RCX: 00007f290158d169 [ 217.510376][ T8960] RDX: 0000000000000000 RSI: 0000400000001980 RDI: 0000000000000003 [ 217.510388][ T8960] RBP: 00007f29024a2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.510401][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.510413][ T8960] R13: 0000000000000000 R14: 00007f29017a5fa0 R15: 00007ffe6d4b4708 [ 217.510444][ T8960] [ 218.163630][ T8983] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 218.258054][ T8986] FAULT_INJECTION: forcing a failure. [ 218.258054][ T8986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.275689][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: syz.0.834 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 218.275720][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.275733][ T8986] Call Trace: [ 218.275740][ T8986] [ 218.275749][ T8986] dump_stack_lvl+0x241/0x360 [ 218.275782][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.275806][ T8986] ? __pfx__printk+0x10/0x10 [ 218.275830][ T8986] ? __pfx_lock_release+0x10/0x10 [ 218.275862][ T8986] ? __lock_acquire+0x1397/0x2100 [ 218.275901][ T8986] should_fail_ex+0x40a/0x550 [ 218.275939][ T8986] _copy_from_user+0x2d/0xb0 [ 218.275970][ T8986] kstrtouint_from_user+0xc6/0x190 [ 218.275997][ T8986] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 218.276025][ T8986] ? __pfx_lock_acquire+0x10/0x10 [ 218.276068][ T8986] proc_fail_nth_write+0xaa/0x2d0 [ 218.276099][ T8986] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 218.276126][ T8986] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 218.276163][ T8986] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 218.276196][ T8986] vfs_write+0x29f/0xd10 [ 218.276222][ T8986] ? fdget_pos+0x254/0x320 [ 218.276252][ T8986] ? __mutex_unlock_slowpath+0x227/0x800 [ 218.276284][ T8986] ? __pfx_vfs_write+0x10/0x10 [ 218.276311][ T8986] ? __fget_files+0x2a/0x410 [ 218.276344][ T8986] ? __fget_files+0x395/0x410 [ 218.276381][ T8986] ? __fget_files+0x2a/0x410 [ 218.276419][ T8986] ksys_write+0x18f/0x2b0 [ 218.276444][ T8986] ? __pfx_ksys_write+0x10/0x10 [ 218.276467][ T8986] ? do_syscall_64+0x100/0x230 [ 218.276498][ T8986] ? do_syscall_64+0xb6/0x230 [ 218.276531][ T8986] do_syscall_64+0xf3/0x230 [ 218.276559][ T8986] ? clear_bhb_loop+0x35/0x90 [ 218.276593][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.276622][ T8986] RIP: 0033:0x7fd9b0f8bc1f [ 218.276640][ T8986] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 218.276657][ T8986] RSP: 002b:00007fd9b1dca030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 218.276679][ T8986] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9b0f8bc1f [ 218.276694][ T8986] RDX: 0000000000000001 RSI: 00007fd9b1dca0a0 RDI: 0000000000000004 [ 218.276707][ T8986] RBP: 00007fd9b1dca090 R08: 0000000000000000 R09: 0000000000000000 [ 218.276719][ T8986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 218.276731][ T8986] R13: 0000000000000000 R14: 00007fd9b11a5fa0 R15: 00007ffcfc56c7b8 [ 218.276764][ T8986] [ 218.597369][ T8988] lo speed is unknown, defaulting to 1000 [ 218.635561][ T8992] FAULT_INJECTION: forcing a failure. [ 218.635561][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.649854][ T8992] CPU: 1 UID: 0 PID: 8992 Comm: syz.1.837 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 218.649881][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.649892][ T8992] Call Trace: [ 218.649899][ T8992] [ 218.649907][ T8992] dump_stack_lvl+0x241/0x360 [ 218.649937][ T8992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.649958][ T8992] ? __pfx__printk+0x10/0x10 [ 218.649980][ T8992] ? __pfx_lock_release+0x10/0x10 [ 218.650018][ T8992] should_fail_ex+0x40a/0x550 [ 218.650064][ T8992] _copy_from_user+0x2d/0xb0 [ 218.650092][ T8992] arp_ioctl+0x142/0x530 [ 218.650119][ T8992] ? __pfx_arp_ioctl+0x10/0x10 [ 218.650162][ T8992] inet_ioctl+0x2b5/0x4f0 [ 218.650186][ T8992] ? tomoyo_path_number_perm+0x209/0x770 [ 218.650216][ T8992] ? __pfx_inet_ioctl+0x10/0x10 [ 218.650244][ T8992] ? tomoyo_path_number_perm+0x5dd/0x770 [ 218.650284][ T8992] ? __lock_acquire+0x1397/0x2100 [ 218.650325][ T8992] sock_do_ioctl+0x158/0x460 [ 218.650380][ T8992] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.650428][ T8992] sock_ioctl+0x626/0x8e0 [ 218.650471][ T8992] ? __pfx_sock_ioctl+0x10/0x10 [ 218.650499][ T8992] ? __fget_files+0x2a/0x410 [ 218.650532][ T8992] ? __fget_files+0x2a/0x410 [ 218.650585][ T8992] ? __pfx_sock_ioctl+0x10/0x10 [ 218.650615][ T8992] __se_sys_ioctl+0xf5/0x170 [ 218.650641][ T8992] do_syscall_64+0xf3/0x230 [ 218.650669][ T8992] ? clear_bhb_loop+0x35/0x90 [ 218.650702][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.650730][ T8992] RIP: 0033:0x7f290158d169 [ 218.650748][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.650765][ T8992] RSP: 002b:00007f29024a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.650786][ T8992] RAX: ffffffffffffffda RBX: 00007f29017a5fa0 RCX: 00007f290158d169 [ 218.650800][ T8992] RDX: 0000400000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 218.650813][ T8992] RBP: 00007f29024a2090 R08: 0000000000000000 R09: 0000000000000000 [ 218.650825][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.650837][ T8992] R13: 0000000000000000 R14: 00007f29017a5fa0 R15: 00007ffe6d4b4708 [ 218.650868][ T8992] [ 219.316671][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 219.540767][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 219.557007][ T9024] netlink: 'syz.2.847': attribute type 30 has an invalid length. [ 219.574775][ T9024] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 219.624862][ T9024] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 219.665584][ T9031] netlink: 'syz.3.846': attribute type 12 has an invalid length. [ 219.693936][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.846'. [ 219.780065][ T9022] vlan3: entered allmulticast mode [ 219.801763][ T9022] hsr0: entered allmulticast mode [ 219.811655][ T9022] hsr_slave_0: entered allmulticast mode [ 219.823869][ T9022] hsr_slave_1: entered allmulticast mode [ 219.853107][ T9022] hsr0: left allmulticast mode [ 219.864970][ T9022] hsr_slave_0: left allmulticast mode [ 219.872267][ T9022] hsr_slave_1: left allmulticast mode [ 219.943321][ T9039] tap0: tun_chr_ioctl cmd 1074025677 [ 219.969314][ T9039] tap0: linktype set to 804 [ 220.008727][ T9022] netlink: 'syz.3.846': attribute type 12 has an invalid length. [ 220.044468][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.846'. [ 220.110939][ T9045] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 220.123241][ T9045] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 220.150633][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.202663][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.220415][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.231004][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.244385][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.295529][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.302831][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.325495][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.332766][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.364365][ T9047] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.390854][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 220.432681][ T9059] FAULT_INJECTION: forcing a failure. [ 220.432681][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.450906][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.1.857 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 220.450937][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.450949][ T9059] Call Trace: [ 220.450956][ T9059] [ 220.450964][ T9059] dump_stack_lvl+0x241/0x360 [ 220.450994][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.451016][ T9059] ? __pfx__printk+0x10/0x10 [ 220.451041][ T9059] ? snprintf+0xda/0x120 [ 220.451064][ T9059] should_fail_ex+0x40a/0x550 [ 220.451099][ T9059] _copy_to_user+0x31/0xb0 [ 220.451128][ T9059] simple_read_from_buffer+0xca/0x150 [ 220.451169][ T9059] proc_fail_nth_read+0x1e9/0x250 [ 220.451200][ T9059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.451232][ T9059] ? rw_verify_area+0x243/0x630 [ 220.451253][ T9059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.451284][ T9059] vfs_read+0x1f8/0xb40 [ 220.451306][ T9059] ? fdget_pos+0x254/0x320 [ 220.451337][ T9059] ? __pfx___mutex_lock+0x10/0x10 [ 220.451364][ T9059] ? __pfx_vfs_read+0x10/0x10 [ 220.451382][ T9059] ? do_sys_openat2+0x17a/0x1d0 [ 220.451416][ T9059] ? __fget_files+0x2a/0x410 [ 220.451447][ T9059] ? __fget_files+0x395/0x410 [ 220.451475][ T9059] ? __fget_files+0x2a/0x410 [ 220.451514][ T9059] ksys_read+0x18f/0x2b0 [ 220.451539][ T9059] ? __pfx_ksys_read+0x10/0x10 [ 220.451561][ T9059] ? do_syscall_64+0x100/0x230 [ 220.451591][ T9059] ? do_syscall_64+0xb6/0x230 [ 220.451620][ T9059] do_syscall_64+0xf3/0x230 [ 220.451647][ T9059] ? clear_bhb_loop+0x35/0x90 [ 220.451678][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.451705][ T9059] RIP: 0033:0x7f290158bb7c [ 220.451722][ T9059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.451738][ T9059] RSP: 002b:00007f29024a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.451759][ T9059] RAX: ffffffffffffffda RBX: 00007f29017a5fa0 RCX: 00007f290158bb7c [ 220.451774][ T9059] RDX: 000000000000000f RSI: 00007f29024a20a0 RDI: 0000000000000004 [ 220.451786][ T9059] RBP: 00007f29024a2090 R08: 0000000000000000 R09: 0000000000000000 [ 220.451798][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.451809][ T9059] R13: 0000000000000000 R14: 00007f29017a5fa0 R15: 00007ffe6d4b4708 [ 220.451840][ T9059] [ 220.744193][ T9064] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 220.795150][ T9064] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 220.862183][ T9062] lo speed is unknown, defaulting to 1000 [ 220.896270][ T5884] lo speed is unknown, defaulting to 1000 [ 221.050822][ T9073] netlink: 'syz.1.862': attribute type 4 has an invalid length. [ 221.250132][ T9078] wg1: entered promiscuous mode [ 221.255086][ T9078] wg1: entered allmulticast mode [ 221.560638][ T9091] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.584656][ T9093] netlink: 348 bytes leftover after parsing attributes in process `syz.1.869'. [ 221.595143][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 221.605003][ T9093] 8021q: VLANs not supported on vcan0 [ 221.674831][ T9096] bridge0: port 3(netdevsim2) entered blocking state [ 221.714919][ T9096] bridge0: port 3(netdevsim2) entered disabled state [ 221.730275][ T9096] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 221.750784][ T9096] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 221.761345][ T9096] bridge0: port 3(netdevsim2) entered blocking state [ 221.768210][ T9096] bridge0: port 3(netdevsim2) entered forwarding state [ 221.902661][ T9104] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 221.918153][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.874'. [ 222.176573][ T9119] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 222.334216][ T9126] FAULT_INJECTION: forcing a failure. [ 222.334216][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 222.368348][ T9122] lo speed is unknown, defaulting to 1000 [ 222.391643][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.1.879 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 222.391675][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.391688][ T9126] Call Trace: [ 222.391695][ T9126] [ 222.391703][ T9126] dump_stack_lvl+0x241/0x360 [ 222.391736][ T9126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.391760][ T9126] ? __pfx__printk+0x10/0x10 [ 222.391783][ T9126] ? fs_reclaim_acquire+0x93/0x130 [ 222.391807][ T9126] ? __pfx___might_resched+0x10/0x10 [ 222.391838][ T9126] should_fail_ex+0x40a/0x550 [ 222.391875][ T9126] should_failslab+0xac/0x100 [ 222.391906][ T9126] __kmalloc_noprof+0xdd/0x4c0 [ 222.391933][ T9126] ? kstrtouint_from_user+0x128/0x190 [ 222.391962][ T9126] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.391990][ T9126] tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.392026][ T9126] tomoyo_path_number_perm+0x239/0x770 [ 222.392055][ T9126] ? __lock_acquire+0x1397/0x2100 [ 222.392090][ T9126] ? tomoyo_path_number_perm+0x209/0x770 [ 222.392123][ T9126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.392196][ T9126] ? __fget_files+0x2a/0x410 [ 222.392232][ T9126] ? __fget_files+0x2a/0x410 [ 222.392268][ T9126] security_file_ioctl+0xc6/0x2a0 [ 222.392299][ T9126] __se_sys_ioctl+0x46/0x170 [ 222.392326][ T9126] do_syscall_64+0xf3/0x230 [ 222.392355][ T9126] ? clear_bhb_loop+0x35/0x90 [ 222.392388][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.392416][ T9126] RIP: 0033:0x7f290158d169 [ 222.392433][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.392449][ T9126] RSP: 002b:00007f29024a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.392471][ T9126] RAX: ffffffffffffffda RBX: 00007f29017a5fa0 RCX: 00007f290158d169 [ 222.392486][ T9126] RDX: 0000400000000380 RSI: 0000000040305829 RDI: 0000000000000004 [ 222.392499][ T9126] RBP: 00007f29024a2090 R08: 0000000000000000 R09: 0000000000000000 [ 222.392511][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.392523][ T9126] R13: 0000000000000000 R14: 00007f29017a5fa0 R15: 00007ffe6d4b4708 [ 222.392554][ T9126] [ 222.392563][ T9126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.892725][ T9144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.916621][ T9147] netlink: 'syz.4.886': attribute type 5 has an invalid length. [ 223.097279][ T9153] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 223.161012][ T9153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.884'. [ 223.240469][ T9152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.331674][ T9153] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 223.386847][ T9153] team0: Failed to send options change via netlink (err -105) [ 223.404834][ T9153] team0: Port device geneve0 added [ 223.528442][ T9152] bridge0: port 3(netdevsim2) entered disabled state [ 223.602837][ T9152] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 223.613373][ T9152] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode [ 223.634037][ T9152] bridge0: port 3(netdevsim2) entered disabled state [ 223.661840][ T9152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.681272][ T9171] tipc: Started in network mode [ 223.687551][ T9171] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 223.696967][ T9171] tipc: Enabling of bearer rejected, failed to enable media [ 223.720114][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 223.745029][ T9169] xt_TCPMSS: Only works on TCP SYN packets [ 223.758970][ T9152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.821239][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 223.842821][ T9174] ipvlan2: entered promiscuous mode [ 223.851404][ T9174] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 223.924406][ T9152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.942290][ T5148] Bluetooth: hci0: command tx timeout [ 224.050239][ T9152] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.067987][ T9152] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.093336][ T9152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.161011][ T9152] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.548990][ T9212] lo speed is unknown, defaulting to 1000 [ 224.726028][ T9228] netlink: 'syz.2.911': attribute type 6 has an invalid length. [ 224.745925][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 224.940409][ T9235] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.988281][ T9235] bond0: (slave bond7): Enslaving as an active interface with an up link [ 225.627908][ T9251] netlink: 52 bytes leftover after parsing attributes in process `syz.0.917'. [ 225.713772][ T9259] netlink: 'syz.1.920': attribute type 4 has an invalid length. [ 225.756696][ T9259] netlink: 'syz.1.920': attribute type 2 has an invalid length. [ 225.875794][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 226.006796][ T9266] netlink: 'syz.1.923': attribute type 2 has an invalid length. [ 226.053139][ T9266] netlink: 'syz.1.923': attribute type 9 has an invalid length. [ 226.105440][ T9266] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.923'. [ 226.408107][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 227.139195][ T9301] sctp: [Deprecated]: syz.1.932 (pid 9301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.139195][ T9301] Use struct sctp_sack_info instead [ 227.423151][ T9312] netlink: 104 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.496608][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.919834][ T9327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.942'. [ 228.092650][ T9336] net_ratelimit: 23 callbacks suppressed [ 228.092671][ T9336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.163232][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.945'. [ 228.344631][ T9336] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 228.618599][ T9352] lo speed is unknown, defaulting to 1000 [ 229.053931][ T9365] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 229.211314][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.950'. [ 229.481092][ T9372] bridge0: entered promiscuous mode [ 229.736655][ T9379] xt_hashlimit: size too large, truncated to 1048576 [ 230.228754][ T9399] SET target dimension over the limit! [ 230.436242][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 230.580390][ T9406] lo speed is unknown, defaulting to 1000 [ 230.789382][ T9412] syzkaller1: entered promiscuous mode [ 230.794935][ T9412] syzkaller1: entered allmulticast mode [ 230.870644][ T9415] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.391657][ T9428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.421625][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.4.974'. [ 231.523371][ T9430] netlink: 'syz.0.976': attribute type 5 has an invalid length. [ 231.563222][ T9435] pim6reg: entered allmulticast mode [ 231.575723][ T9430] netlink: 'syz.0.976': attribute type 11 has an invalid length. [ 231.637102][ T9435] Bluetooth: MGMT ver 1.23 [ 231.648605][ T9433] pim6reg: left allmulticast mode [ 232.701288][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.028302][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 233.052536][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 233.249688][ T9479] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.276052][ T9475] x_tables: duplicate entry at hook 1 [ 233.535066][ T9487] netlink: 156 bytes leftover after parsing attributes in process `syz.2.995'. [ 233.660327][ T9489] netlink: 'syz.4.996': attribute type 21 has an invalid length. [ 233.675509][ T9489] netlink: 128 bytes leftover after parsing attributes in process `syz.4.996'. [ 233.684576][ T9489] netlink: 'syz.4.996': attribute type 4 has an invalid length. [ 233.748042][ T9489] netlink: 'syz.4.996': attribute type 3 has an invalid length. [ 233.778685][ T9489] netlink: 3 bytes leftover after parsing attributes in process `syz.4.996'. [ 234.106822][ T9501] ipt_ECN: cannot use operation on non-tcp rule [ 234.176679][ T9501] vlan3: entered promiscuous mode [ 234.678194][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1007'. [ 234.851627][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 235.003614][ T9530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1010'. [ 235.484459][ T9540] syzkaller1: entered promiscuous mode [ 235.495665][ T9540] syzkaller1: entered allmulticast mode [ 235.590865][ T9545] wg1: left promiscuous mode [ 235.596018][ T9545] wg1: left allmulticast mode [ 236.077320][ T9560] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 236.087669][ T9560] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 236.347822][ T9569] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1023'. [ 236.493926][ T9573] : renamed from bond0 [ 236.686079][ T9584] pim6reg9: entered allmulticast mode [ 237.100302][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 237.118308][ T9614] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 237.402990][ T9627] lo speed is unknown, defaulting to 1000 [ 237.501759][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 237.512903][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 237.536045][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 238.492057][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 238.536257][ T9641] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 238.564256][ T9651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1048'. [ 238.772219][ T9668] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1051'. [ 238.827030][ T9668] netlink: 'syz.0.1051': attribute type 32 has an invalid length. [ 238.835728][ T9671] tipc: Started in network mode [ 238.840648][ T9671] tipc: Node identity 7, cluster identity 4711 [ 238.876441][ T9671] tipc: Node number set to 7 [ 239.490162][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'. [ 239.555837][ T9710] lo speed is unknown, defaulting to 1000 [ 240.127759][ T9710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.686891][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 240.784045][ T9769] bridge0: left promiscuous mode [ 240.794159][ T9771] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 240.807765][ T9773] netlink: 'syz.1.1083': attribute type 12 has an invalid length. [ 240.823080][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 240.839300][ T9769] vlan2: entered allmulticast mode [ 240.854005][ T9769] macsec0: entered allmulticast mode [ 240.868576][ T9769] veth1_macvtap: entered allmulticast mode [ 240.896914][ T9769] bridge0: port 3(vlan2) entered blocking state [ 240.936333][ T9769] bridge0: port 3(vlan2) entered disabled state [ 240.961216][ T9769] vlan2: entered promiscuous mode [ 240.967461][ T9769] macsec0: entered promiscuous mode [ 240.982451][ T9769] bridge0: port 3(vlan2) entered blocking state [ 240.988910][ T9769] bridge0: port 3(vlan2) entered forwarding state [ 241.019101][ T9774] lo speed is unknown, defaulting to 1000 [ 241.031670][ T9782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.270878][ T9793] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 241.353842][ T9793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.400813][ T9797] bond8: (slave gretap1): making interface the new active one [ 241.413197][ T9797] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 242.071492][ T9817] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20004 [ 242.232873][ T9830] __nla_validate_parse: 3 callbacks suppressed [ 242.232893][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1104'. [ 242.746639][ T9853] netlink: 'syz.0.1113': attribute type 11 has an invalid length. [ 242.826286][ T9855] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1115'. [ 242.967752][ T9858] netlink: 'syz.0.1116': attribute type 8 has an invalid length. [ 243.290945][ T9869] xt_l2tp: unknown flags: 10 [ 243.764728][ T9881] vlan2: entered allmulticast mode [ 243.778619][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 243.789890][ T9881] : entered allmulticast mode [ 243.806543][ T9886] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 243.808744][ T9881] !: entered allmulticast mode [ 243.845577][ T9881] bond_slave_1: entered allmulticast mode [ 243.855681][ T9881] bond1: entered allmulticast mode [ 243.874251][ T9881] : left allmulticast mode [ 243.882151][ T9881] !: left allmulticast mode [ 243.892236][ T9881] bond_slave_1: left allmulticast mode [ 243.902340][ T9881] bond1: left allmulticast mode [ 243.937037][ T9891] xt_hashlimit: size too large, truncated to 1048576 [ 244.055961][ T9867] lo speed is unknown, defaulting to 1000 [ 245.163911][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.185504][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.522681][ T9937] xt_hashlimit: max too large, truncated to 1048576 [ 245.909239][ T9951] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1146'. [ 246.061980][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 246.676621][ T9969] lo speed is unknown, defaulting to 1000 [ 247.267339][ T9983] lo speed is unknown, defaulting to 1000 [ 247.359339][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.394827][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.465065][ T9990] gretap1: entered promiscuous mode [ 247.747710][T10004] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.074360][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 248.249824][T10022] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 248.284162][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 248.334208][T10026] bond4: entered promiscuous mode [ 248.371133][T10026] bond4: entered allmulticast mode [ 248.386188][T10029] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 248.394226][T10029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.402016][T10026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.502079][T10022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 248.510559][T10022] batadv1: entered promiscuous mode [ 248.516161][T10022] batadv1: entered allmulticast mode [ 248.522292][T10022] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 248.693975][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1171'. [ 248.739200][ T67] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 248.747151][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 248.932699][ T1138] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 249.386507][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 249.406449][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 250.775459][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 250.978643][T10085] netlink: 'syz.1.1186': attribute type 6 has an invalid length. [ 250.999177][T10085] netlink: 'syz.1.1186': attribute type 5 has an invalid length. [ 251.025894][T10085] ip6erspan0: entered promiscuous mode [ 251.264895][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 251.502411][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 251.534108][T10095] team_slave_0: entered promiscuous mode [ 251.540334][T10095] team_slave_1: entered promiscuous mode [ 251.546245][T10095] geneve0: entered promiscuous mode [ 251.592998][T10095] macvtap1: entered promiscuous mode [ 251.615675][T10095] team0: entered promiscuous mode [ 251.626430][T10095] macvtap1: entered allmulticast mode [ 251.674501][T10095] team0: entered allmulticast mode [ 251.681538][T10095] team_slave_0: entered allmulticast mode [ 251.687847][T10095] team_slave_1: entered allmulticast mode [ 251.693787][T10095] geneve0: entered allmulticast mode [ 251.701731][T10095] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 251.741405][T10102] team0: left allmulticast mode [ 251.764098][T10102] team_slave_0: left allmulticast mode [ 251.781565][T10102] team_slave_1: left allmulticast mode [ 251.801455][T10102] geneve0: left allmulticast mode [ 251.807457][T10102] team0: left promiscuous mode [ 251.823273][T10102] team_slave_0: left promiscuous mode [ 251.829183][T10102] team_slave_1: left promiscuous mode [ 251.834975][T10102] geneve0: left promiscuous mode [ 252.008250][T10117] netlink: 'syz.3.1195': attribute type 29 has an invalid length. [ 252.020739][T10117] lo speed is unknown, defaulting to 1000 [ 252.916189][T10133] __nla_validate_parse: 7 callbacks suppressed [ 252.916211][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 253.311080][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 253.459817][T10154] bridge0: port 3(vlan2) entered disabled state [ 253.466362][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.473870][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.613909][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 253.924846][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 253.948947][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 254.070940][T10171] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 254.416747][T10183] bond_slave_1: entered promiscuous mode [ 254.454212][T10183] macsec2: entered promiscuous mode [ 254.485648][T10183] bond0: entered promiscuous mode [ 254.500738][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 254.520340][T10183] bond0: left promiscuous mode [ 254.526438][T10183] bond_slave_1: left promiscuous mode [ 254.853254][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 254.951639][T10210] lo speed is unknown, defaulting to 1000 [ 254.984597][T10212] lo speed is unknown, defaulting to 1000 [ 255.028153][T10219] sctp: [Deprecated]: syz.2.1233 (pid 10219) Use of int in maxseg socket option. [ 255.028153][T10219] Use struct sctp_assoc_value instead [ 255.483526][T10212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1231'. [ 255.578573][T10239] x_tables: duplicate underflow at hook 1 [ 255.761973][T10242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1237'. [ 255.800674][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 255.840459][T10242] bond0: option miimon: invalid value (18446744073537628286) [ 255.862891][T10242] bond0: option miimon: allowed values 0 - 2147483647 [ 256.241876][T10242] batadv_slave_0: left promiscuous mode [ 256.252211][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.324245][T10242] veth1_macvtap: left allmulticast mode [ 256.339034][T10242] macsec0: left allmulticast mode [ 256.344209][T10242] macsec0: left promiscuous mode [ 256.368460][T10242] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.377068][T10242] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.385917][T10242] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.394401][T10242] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.436416][T10242] gtp0: left promiscuous mode [ 256.441534][T10242] gtp0: left allmulticast mode [ 256.450941][T10242] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 256.458391][T10242] macsec1: left promiscuous mode [ 256.463467][T10242] macsec1: left allmulticast mode [ 256.471110][T10242] veth3: left promiscuous mode [ 256.478413][T10242] bond2: left promiscuous mode [ 256.483313][T10242] bond2: left allmulticast mode [ 256.490286][T10242] macvtap1: left promiscuous mode [ 256.495717][T10242] macvtap1: left allmulticast mode [ 256.507074][T10250] veth0_virt_wifi: entered promiscuous mode [ 256.524702][T10250] veth0_virt_wifi: entered allmulticast mode [ 256.539894][T10259] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 256.543817][T10251] team0: entered promiscuous mode [ 256.568119][T10257] netlink: 'syz.1.1240': attribute type 3 has an invalid length. [ 256.786092][T10260] batadv1: entered allmulticast mode [ 256.802883][T10259] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 256.806181][T10245] team0: left promiscuous mode [ 256.938423][T10276] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 256.955627][T10276] veth0_vlan: left promiscuous mode [ 256.980538][T10276] veth0_vlan: entered promiscuous mode [ 257.051346][T10276] team0: Device veth0_vlan failed to register rx_handler [ 257.256515][T10291] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 257.343008][T10291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.430486][T10298] bond4: (slave veth5): Enslaving as an active interface with a down link [ 257.462532][T10291] ip6erspan0: entered promiscuous mode [ 257.474569][T10291] bond4: (slave ip6erspan0): making interface the new active one [ 257.485794][T10291] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 257.567878][T10303] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 257.599535][T10307] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 257.989772][T10330] lo speed is unknown, defaulting to 1000 [ 258.149843][T10339] __nla_validate_parse: 12 callbacks suppressed [ 258.149864][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'. [ 258.232708][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 258.383354][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1266'. [ 258.578972][T10354] bond0: (slave macvlan2): Error -95 calling set_mac_address [ 258.752471][T10360] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 258.832213][T10360] bond1: entered promiscuous mode [ 258.846012][T10360] bond1: entered allmulticast mode [ 258.854357][T10360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.222714][T10380] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 259.457621][T10391] ipt_ECN: cannot use operation on non-tcp rule [ 259.512056][T10391] vlan2: entered promiscuous mode [ 259.584760][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 259.605449][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 259.712539][T10403] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 259.813616][T10412] bond5: entered promiscuous mode [ 259.819693][T10412] bond5: entered allmulticast mode [ 259.826024][T10412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.007231][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 260.072866][T10418] vlan2: entered allmulticast mode [ 260.078193][T10418] hsr0: entered allmulticast mode [ 260.083256][T10418] hsr_slave_0: entered allmulticast mode [ 260.100303][T10418] hsr_slave_1: entered allmulticast mode [ 260.110283][T10418] hsr0: left allmulticast mode [ 260.115119][T10418] hsr_slave_0: left allmulticast mode [ 260.122768][T10418] hsr_slave_1: left allmulticast mode [ 260.207159][T10428] netlink: 'syz.4.1293': attribute type 12 has an invalid length. [ 260.225838][T10428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1293'. [ 260.237013][T10418] netlink: 'syz.4.1293': attribute type 12 has an invalid length. [ 260.256012][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1293'. [ 260.339005][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 260.446413][T10437] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1301'. [ 260.524724][T10435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.586783][T10424] lo speed is unknown, defaulting to 1000 [ 260.827927][T10463] netlink: 'syz.0.1309': attribute type 1 has an invalid length. [ 262.152548][T10532] validate_nla: 1 callbacks suppressed [ 262.152569][T10532] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 262.225565][T10532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.123681][T10563] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 263.155850][T10564] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 263.203970][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.273917][T10563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.316089][T10562] __nla_validate_parse: 10 callbacks suppressed [ 263.316110][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 263.677533][T10578] netlink: 'syz.0.1342': attribute type 21 has an invalid length. [ 263.686296][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1342'. [ 263.698801][T10578] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 263.739006][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 264.100110][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 264.135465][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 264.153087][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 264.314194][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1349'. [ 264.353938][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1349'. [ 264.385484][T10597] netlink: 'syz.2.1349': attribute type 4 has an invalid length. [ 264.450775][T10602] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1351'. [ 264.670162][T10608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.772069][T10615] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 264.892164][T10610] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.905628][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1358'. [ 264.917224][T10610] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.935915][T10610] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.959558][T10610] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.977829][T10610] geneve2: entered promiscuous mode [ 265.012992][T10610] geneve2: entered allmulticast mode [ 265.056872][T10610] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.080290][T10610] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.115446][T10610] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.124035][T10610] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.427690][T10637] lo speed is unknown, defaulting to 1000 [ 267.900935][T10675] lo: entered allmulticast mode [ 267.910601][T10675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.022079][T10680] lo speed is unknown, defaulting to 1000 [ 268.317988][T10680] x_tables: duplicate entry at hook 2 [ 268.369522][T10687] lo speed is unknown, defaulting to 1000 [ 268.420861][T10690] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 268.574550][T10690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.618580][T10693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.654112][T10693] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 268.680872][T10693] bond5: (slave vcan1): Error -95 calling set_mac_address [ 268.899001][T10697] __nla_validate_parse: 9 callbacks suppressed [ 268.899022][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 269.359429][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1381'. [ 269.692485][T10732] lo speed is unknown, defaulting to 1000 [ 269.733985][T10736] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.912079][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1389'. [ 270.223537][T10752] lo speed is unknown, defaulting to 1000 [ 270.583970][T10760] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 270.729292][T10760] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.814721][T10768] bond9: (slave ip6gretap2): making interface the new active one [ 270.858522][T10768] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 271.543219][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 271.596509][T10805] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 271.619337][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 271.637063][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 271.725485][T10814] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 271.745543][T10809] tipc: Started in network mode [ 271.769897][T10809] tipc: Node identity @, cluster identity 4711 [ 271.805698][T10809] tipc: Enabling of bearer rejected, failed to enable media [ 271.999052][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1415'. [ 272.254676][T10830] sctp: [Deprecated]: syz.3.1419 (pid 10830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.254676][T10830] Use struct sctp_sack_info instead [ 272.357532][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 272.499797][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 273.247837][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 273.568028][T10890] raw_sendmsg: syz.1.1440 forgot to set AF_INET. Fix it! [ 274.087066][T10930] FAULT_INJECTION: forcing a failure. [ 274.087066][T10930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.116408][T10930] CPU: 0 UID: 0 PID: 10930 Comm: syz.0.1450 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 274.116440][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.116452][T10930] Call Trace: [ 274.116460][T10930] [ 274.116489][T10930] dump_stack_lvl+0x241/0x360 [ 274.116522][T10930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.116545][T10930] ? __pfx__printk+0x10/0x10 [ 274.116566][T10930] ? rcu_is_watching+0x15/0xb0 [ 274.116589][T10930] ? __pfx_lock_release+0x10/0x10 [ 274.116619][T10930] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 274.116654][T10930] should_fail_ex+0x40a/0x550 [ 274.116690][T10930] _copy_from_iter+0x1df/0x1c40 [ 274.116732][T10930] ? __pfx__copy_from_iter+0x10/0x10 [ 274.116758][T10930] ? tun_get_user+0x838/0x45b0 [ 274.116788][T10930] ? set_page_refcounted+0xa1/0x1e0 [ 274.116819][T10930] ? alloc_pages_noprof+0x136/0x190 [ 274.116846][T10930] ? page_copy_sane+0x46/0x260 [ 274.116880][T10930] copy_page_from_iter+0x7a/0x100 [ 274.116910][T10930] tun_get_user+0x1ed6/0x45b0 [ 274.116940][T10930] ? tun_get_user+0x838/0x45b0 [ 274.116975][T10930] ? __lock_acquire+0x1397/0x2100 [ 274.117014][T10930] ? __pfx_tun_get_user+0x10/0x10 [ 274.117058][T10930] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 274.117081][T10930] ? tun_get+0x1e/0x2f0 [ 274.117106][T10930] ? __pfx_lock_release+0x10/0x10 [ 274.117150][T10930] ? tun_get+0x1e/0x2f0 [ 274.117174][T10930] ? tun_get+0x27d/0x2f0 [ 274.117201][T10930] tun_chr_write_iter+0x10d/0x1f0 [ 274.117230][T10930] vfs_write+0xacf/0xd10 [ 274.117262][T10930] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 274.117290][T10930] ? __pfx_vfs_write+0x10/0x10 [ 274.117310][T10930] ? do_sys_openat2+0x17a/0x1d0 [ 274.117344][T10930] ? __fget_files+0x2a/0x410 [ 274.117378][T10930] ? __fget_files+0x2a/0x410 [ 274.117418][T10930] ksys_write+0x18f/0x2b0 [ 274.117444][T10930] ? __pfx_ksys_write+0x10/0x10 [ 274.117468][T10930] ? do_syscall_64+0x100/0x230 [ 274.117500][T10930] ? do_syscall_64+0xb6/0x230 [ 274.117531][T10930] do_syscall_64+0xf3/0x230 [ 274.117559][T10930] ? clear_bhb_loop+0x35/0x90 [ 274.117593][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.117622][T10930] RIP: 0033:0x7fd9b0f8bc1f [ 274.117641][T10930] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 274.117659][T10930] RSP: 002b:00007fd9b1dca000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 274.117681][T10930] RAX: ffffffffffffffda RBX: 00007fd9b11a5fa0 RCX: 00007fd9b0f8bc1f [ 274.117696][T10930] RDX: 000000000000007a RSI: 0000400000000140 RDI: 00000000000000c8 [ 274.117710][T10930] RBP: 00007fd9b1dca090 R08: 0000000000000000 R09: 0000000000000000 [ 274.117723][T10930] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 274.117736][T10930] R13: 0000000000000000 R14: 00007fd9b11a5fa0 R15: 00007ffcfc56c7b8 [ 274.117766][T10930] [ 274.447143][T10932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.624929][T10937] lo speed is unknown, defaulting to 1000 [ 274.677767][T10927] __nla_validate_parse: 1 callbacks suppressed [ 274.677787][T10927] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1449'. [ 274.694728][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'. [ 274.703840][T10927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1449'. [ 274.713236][T10927] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1449'. [ 275.223584][T10962] can: request_module (can-proto-3) failed. [ 275.393616][T10975] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 275.422553][T10974] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 276.042193][T10987] lo speed is unknown, defaulting to 1000 [ 276.056956][T10989] lo speed is unknown, defaulting to 1000 [ 276.755858][T11006] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 276.773828][T11006] team0: Port device bridge0 added [ 277.137464][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 277.192662][T11019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1479'. [ 277.198656][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 277.301707][T11027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1482'. [ 277.311504][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 277.480767][T11035] vlan3: entered promiscuous mode [ 277.570819][T11032] lo speed is unknown, defaulting to 1000 [ 277.646371][T11034] lo speed is unknown, defaulting to 1000 [ 277.671847][T11042] pimreg3: entered allmulticast mode [ 277.871551][T11050] ax25_connect(): syz.0.1489 uses autobind, please contact jreuter@yaina.de [ 278.343572][T11063] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1493'. [ 279.004391][T11057] wg1: left promiscuous mode [ 279.012717][T11057] wg1: left allmulticast mode [ 279.387093][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.307380][T11057] bond1: left promiscuous mode [ 280.326565][T11057] batadv1: left promiscuous mode [ 280.342007][T11057] batadv1: left allmulticast mode [ 280.365441][T11057] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.390322][T11057] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.408937][T11057] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.423212][T11057] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.446206][T11057] bond2: left promiscuous mode [ 280.451065][T11057] bond2: left allmulticast mode [ 280.471749][T11057] bond3: left promiscuous mode [ 280.476808][T11057] bond3: left allmulticast mode [ 280.486599][T11057] bond4: left promiscuous mode [ 280.492638][T11057] bond4: left allmulticast mode [ 280.509836][T11057] bond5: left promiscuous mode [ 280.517795][T11057] bond5: left allmulticast mode [ 280.530247][T11057] ip6erspan0: left promiscuous mode [ 280.571617][T11057] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 280.579878][T11057] macsec1: left promiscuous mode [ 280.584885][T11057] macsec1: left allmulticast mode [ 281.043725][T11083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.173063][T11085] team0: Port device dummy0 removed [ 281.191751][T11085] bridge_slave_0: left allmulticast mode [ 281.202511][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 281.225840][T11085] bridge_slave_0: left promiscuous mode [ 281.231738][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.250444][T11085] bridge_slave_1: left allmulticast mode [ 281.272179][T11085] bridge_slave_1: left promiscuous mode [ 281.286457][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.320449][T11085] bond0: (slave bond_slave_1): Releasing backup interface [ 281.361429][T11085] team0: Port device team_slave_0 removed [ 281.400836][T11085] team0: Port device team_slave_1 removed [ 281.421815][T11085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.466766][T11085] team0: Port device wlan1 removed [ 281.490742][T11085] bond1: (slave batadv1): Releasing active interface [ 281.512055][T11085] bond6: left allmulticast mode [ 281.527337][T11085] bond6: left promiscuous mode [ 281.535509][T11085] bridge0: port 3(bond6) entered disabled state [ 281.561173][T11085] bond0: (slave bond7): Releasing backup interface [ 281.582381][T11085] bond8: (slave gretap1): Releasing active interface [ 281.593651][T11085] bond9: (slave ip6gretap2): Releasing active interface [ 281.629378][T11090] macvtap1: entered promiscuous mode [ 281.634843][T11090] dummy0: entered promiscuous mode [ 281.640431][T11090] macvtap1: entered allmulticast mode [ 281.645945][T11090] dummy0: entered allmulticast mode [ 281.659113][T11094] dummy0: left allmulticast mode [ 281.664131][T11094] dummy0: left promiscuous mode [ 281.680582][T11105] lo speed is unknown, defaulting to 1000 [ 281.853065][T11111] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1507'. [ 281.884497][T11114] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1508'. [ 281.915141][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 282.047472][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1508'. [ 282.216712][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 282.229564][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 282.257929][T11125] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1511'. [ 282.495994][T11141] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 282.568469][T11141] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.597242][T11141] team0: entered promiscuous mode [ 282.605077][T11141] bridge0: entered promiscuous mode [ 282.676361][T11156] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 282.704559][T11156] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1520'. [ 282.748946][T11156] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 282.834915][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 282.929527][T11171] netlink: 'syz.4.1524': attribute type 4 has an invalid length. [ 282.951482][T11167] netlink: 'syz.4.1524': attribute type 4 has an invalid length. [ 282.969949][T11175] netlink: 'syz.2.1525': attribute type 11 has an invalid length. [ 283.047687][T11164] delete_channel: no stack [ 283.166512][T11181] netem: incorrect gi model size [ 283.177803][T11181] netem: change failed [ 283.563525][T11208] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 283.701315][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.786574][T11216] bond0: (slave ip6gretap3): making interface the new active one [ 283.816499][T11216] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 283.834892][T11216] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 283.852793][T11216] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 283.869897][T11213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.983612][T11225] lo speed is unknown, defaulting to 1000 [ 283.999858][ T67] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 284.058191][ T5884] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 284.484201][T11245] netlink: 'syz.1.1548': attribute type 27 has an invalid length. [ 284.745944][ T67] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 284.927829][ T67] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 284.964674][T11273] lo speed is unknown, defaulting to 1000 [ 285.056443][ T5884] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 285.138932][T11277] lo speed is unknown, defaulting to 1000 [ 285.332379][T11285] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 285.351512][T11285] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 285.482860][T11296] netlink: 'syz.2.1560': attribute type 10 has an invalid length. [ 285.526890][T11291] +: renamed from syzkaller0 [ 285.781545][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 285.809838][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 286.008333][ T5884] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 286.659360][T11335] __nla_validate_parse: 11 callbacks suppressed [ 286.659380][T11335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1571'. [ 286.702920][T11335] team0: entered allmulticast mode [ 286.709426][T11337] ax25_connect(): syz.4.1570 uses autobind, please contact jreuter@yaina.de [ 286.736422][T11335] team_slave_0: entered allmulticast mode [ 286.742338][T11335] team_slave_1: entered allmulticast mode [ 286.757494][T11335] bridge1: entered allmulticast mode [ 286.762957][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 286.762982][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 287.012001][T11351] FAULT_INJECTION: forcing a failure. [ 287.012001][T11351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.028436][T11353] FAULT_INJECTION: forcing a failure. [ 287.028436][T11353] name failslab, interval 1, probability 0, space 0, times 0 [ 287.052284][T11353] CPU: 0 UID: 0 PID: 11353 Comm: syz.0.1576 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 287.052316][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.052330][T11353] Call Trace: [ 287.052339][T11353] [ 287.052347][T11353] dump_stack_lvl+0x241/0x360 [ 287.052379][T11353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.052404][T11353] ? __pfx__printk+0x10/0x10 [ 287.052428][T11353] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 287.052461][T11353] ? __pfx___might_resched+0x10/0x10 [ 287.052494][T11353] should_fail_ex+0x40a/0x550 [ 287.052531][T11353] should_failslab+0xac/0x100 [ 287.052562][T11353] kmem_cache_alloc_node_noprof+0x77/0x380 [ 287.052599][T11353] ? __alloc_skb+0x1c3/0x440 [ 287.052625][T11353] __alloc_skb+0x1c3/0x440 [ 287.052653][T11353] ? __pfx___alloc_skb+0x10/0x10 [ 287.052678][T11353] ? netlink_autobind+0xd6/0x2f0 [ 287.052698][T11353] ? netlink_autobind+0x2b0/0x2f0 [ 287.052723][T11353] netlink_sendmsg+0x634/0xcb0 [ 287.052768][T11353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.052806][T11353] ? aa_sock_msg_perm+0x91/0x160 [ 287.052844][T11353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.052875][T11353] __sock_sendmsg+0x221/0x270 [ 287.052910][T11353] ____sys_sendmsg+0x53a/0x860 [ 287.052948][T11353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.052972][T11353] ? __fget_files+0x2a/0x410 [ 287.053006][T11353] ? __fget_files+0x2a/0x410 [ 287.053046][T11353] __sys_sendmsg+0x269/0x350 [ 287.053077][T11353] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.053145][T11353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.053180][T11353] ? do_syscall_64+0x100/0x230 [ 287.053213][T11353] ? do_syscall_64+0xb6/0x230 [ 287.053244][T11353] do_syscall_64+0xf3/0x230 [ 287.053272][T11353] ? clear_bhb_loop+0x35/0x90 [ 287.053305][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.053334][T11353] RIP: 0033:0x7fd9b0f8d169 [ 287.053353][T11353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.053371][T11353] RSP: 002b:00007fd9b1dca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.053393][T11353] RAX: ffffffffffffffda RBX: 00007fd9b11a5fa0 RCX: 00007fd9b0f8d169 [ 287.053409][T11353] RDX: 0000000000008000 RSI: 0000400000000340 RDI: 0000000000000003 [ 287.053423][T11353] RBP: 00007fd9b1dca090 R08: 0000000000000000 R09: 0000000000000000 [ 287.053436][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.053448][T11353] R13: 0000000000000000 R14: 00007fd9b11a5fa0 R15: 00007ffcfc56c7b8 [ 287.053478][T11353] [ 287.060717][T11347] lo speed is unknown, defaulting to 1000 [ 287.155850][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.2.1577 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 287.155885][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.155899][T11351] Call Trace: [ 287.155908][T11351] [ 287.155918][T11351] dump_stack_lvl+0x241/0x360 [ 287.155953][T11351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.155978][T11351] ? __pfx__printk+0x10/0x10 [ 287.156007][T11351] ? snprintf+0xda/0x120 [ 287.156033][T11351] should_fail_ex+0x40a/0x550 [ 287.156073][T11351] _copy_to_user+0x31/0xb0 [ 287.156108][T11351] simple_read_from_buffer+0xca/0x150 [ 287.156142][T11351] proc_fail_nth_read+0x1e9/0x250 [ 287.156182][T11351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.156218][T11351] ? rw_verify_area+0x243/0x630 [ 287.156241][T11351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.156275][T11351] vfs_read+0x1f8/0xb40 [ 287.156310][T11351] ? do_sock_setsockopt+0x3e2/0x720 [ 287.156345][T11351] ? do_sock_setsockopt+0x3e2/0x720 [ 287.156372][T11351] ? __pfx_vfs_read+0x10/0x10 [ 287.156409][T11351] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 287.156442][T11351] ? do_sock_setsockopt+0x3e2/0x720 [ 287.156472][T11351] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 287.156504][T11351] ksys_read+0x18f/0x2b0 [ 287.156530][T11351] ? __pfx_ksys_read+0x10/0x10 [ 287.156554][T11351] ? do_syscall_64+0x100/0x230 [ 287.156586][T11351] ? do_syscall_64+0xb6/0x230 [ 287.156623][T11351] do_syscall_64+0xf3/0x230 [ 287.156651][T11351] ? clear_bhb_loop+0x35/0x90 [ 287.156685][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.156714][T11351] RIP: 0033:0x7f3aa1f8bb7c [ 287.156735][T11351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.156754][T11351] RSP: 002b:00007f3aa2e94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.156778][T11351] RAX: ffffffffffffffda RBX: 00007f3aa21a5fa0 RCX: 00007f3aa1f8bb7c [ 287.156795][T11351] RDX: 000000000000000f RSI: 00007f3aa2e940a0 RDI: 0000000000000004 [ 287.156809][T11351] RBP: 00007f3aa2e94090 R08: 0000000000000000 R09: 0000000000000000 [ 287.156823][T11351] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001 [ 287.156836][T11351] R13: 0000000000000000 R14: 00007f3aa21a5fa0 R15: 00007ffcd002aab8 [ 287.156867][T11351] [ 287.562820][T11361] tipc: Enabled bearer , priority 10 [ 287.968604][T11376] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 288.074847][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.084402][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.099833][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.205521][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.215057][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.234118][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1588'. [ 288.236112][T11378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.259950][T11378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.323050][T11378] veth1_vlan: left promiscuous mode [ 288.346429][T11378] veth0_vlan: left promiscuous mode [ 288.363348][T11378] veth0_vlan: entered promiscuous mode [ 288.410716][T11378] veth1_vlan: entered promiscuous mode [ 288.443983][T11378] veth1_macvtap: left promiscuous mode [ 288.451697][T11378] veth0_macvtap: left promiscuous mode [ 288.458623][T11378] veth0_macvtap: entered promiscuous mode [ 288.467006][T11378] veth1_macvtap: entered promiscuous mode [ 288.473857][T11378] macsec0: entered allmulticast mode [ 288.505503][T11378] veth1_macvtap: entered allmulticast mode [ 288.511688][T11378] macsec0: entered promiscuous mode [ 288.519625][T11378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.528262][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 288.545541][T11378] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.553953][T11386] validate_nla: 1 callbacks suppressed [ 288.553970][T11386] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 288.567813][ T5842] tipc: Node number set to 4278255617 [ 288.583922][T11378] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.602599][T11378] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.630421][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 288.693983][T11378] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 288.763247][T11378] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 288.874299][T11378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.920139][T11378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.931083][T11378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.975753][T11378] team_slave_0: entered promiscuous mode [ 288.978102][ T1102] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.981513][T11378] team_slave_1: entered promiscuous mode [ 288.997517][T11378] geneve0: entered promiscuous mode [ 289.020665][T11378] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 289.043422][T11378] ip6erspan0: left promiscuous mode [ 289.168325][T11378] bond5: left promiscuous mode [ 289.178936][T11378] bond5: left allmulticast mode [ 289.212540][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.219795][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.352480][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.360967][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.447219][ T1138] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 289.447242][ T1138] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 289.473985][ T67] bridge0: port 3(vlan2) entered blocking state [ 289.480423][ T67] bridge0: port 3(vlan2) entered forwarding state [ 289.535475][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 289.625632][T11411] team0: left allmulticast mode [ 289.655942][T11411] team_slave_0: left allmulticast mode [ 289.661492][T11411] team_slave_1: left allmulticast mode [ 289.685577][T11411] bridge1: left allmulticast mode [ 289.856075][T11411] ip6erspan0: left promiscuous mode [ 289.960010][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'. [ 289.977121][T11426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1600'. [ 290.024954][ T1138] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 290.049069][ T1138] bond1: active interface up! [ 290.068947][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1600'. [ 290.149002][ T12] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 290.295695][T11436] openvswitch: netlink: IP tunnel dst address not specified [ 290.413418][T11442] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 290.474131][T11446] x_tables: duplicate underflow at hook 2 [ 290.690847][T11452] lo speed is unknown, defaulting to 1000 [ 290.698620][T11452] lo speed is unknown, defaulting to 1000 [ 290.707056][T11452] lo speed is unknown, defaulting to 1000 [ 290.763416][T11452] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 290.821234][T11452] lo speed is unknown, defaulting to 1000 [ 290.840163][T11452] lo speed is unknown, defaulting to 1000 [ 290.856980][T11452] lo speed is unknown, defaulting to 1000 [ 290.878279][T11452] lo speed is unknown, defaulting to 1000 [ 290.888385][T11452] lo speed is unknown, defaulting to 1000 [ 291.282982][T11470] x_tables: duplicate underflow at hook 3 [ 291.500497][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 291.949663][T11505] __nla_validate_parse: 64 callbacks suppressed [ 291.949685][T11505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1629'. [ 291.994370][T11505] vti0: entered promiscuous mode [ 292.032027][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 292.208303][T11515] @: renamed from veth0_vlan [ 292.223485][T11521] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1635'. [ 292.234200][T11522] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1635'. [ 292.284570][T11526] FAULT_INJECTION: forcing a failure. [ 292.284570][T11526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.309490][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.3.1636 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 292.309523][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.309538][T11526] Call Trace: [ 292.309547][T11526] [ 292.309557][T11526] dump_stack_lvl+0x241/0x360 [ 292.309591][T11526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.309616][T11526] ? __pfx__printk+0x10/0x10 [ 292.309644][T11526] ? snprintf+0xda/0x120 [ 292.309668][T11526] should_fail_ex+0x40a/0x550 [ 292.309704][T11526] _copy_to_user+0x31/0xb0 [ 292.309735][T11526] simple_read_from_buffer+0xca/0x150 [ 292.309767][T11526] proc_fail_nth_read+0x1e9/0x250 [ 292.309800][T11526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.309841][T11526] ? rw_verify_area+0x243/0x630 [ 292.309862][T11526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.309893][T11526] vfs_read+0x1f8/0xb40 [ 292.309916][T11526] ? fdget_pos+0x254/0x320 [ 292.309948][T11526] ? __pfx___mutex_lock+0x10/0x10 [ 292.309975][T11526] ? __pfx_vfs_read+0x10/0x10 [ 292.309995][T11526] ? do_sys_openat2+0x17a/0x1d0 [ 292.310028][T11526] ? __fget_files+0x2a/0x410 [ 292.310060][T11526] ? __fget_files+0x395/0x410 [ 292.310088][T11526] ? __fget_files+0x2a/0x410 [ 292.310128][T11526] ksys_read+0x18f/0x2b0 [ 292.310153][T11526] ? __pfx_ksys_read+0x10/0x10 [ 292.310176][T11526] ? do_syscall_64+0x100/0x230 [ 292.310206][T11526] ? do_syscall_64+0xb6/0x230 [ 292.310247][T11526] do_syscall_64+0xf3/0x230 [ 292.310273][T11526] ? clear_bhb_loop+0x35/0x90 [ 292.310303][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.310329][T11526] RIP: 0033:0x7f671938bb7c [ 292.310346][T11526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 292.310364][T11526] RSP: 002b:00007f671a23f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.310385][T11526] RAX: ffffffffffffffda RBX: 00007f67195a5fa0 RCX: 00007f671938bb7c [ 292.310399][T11526] RDX: 000000000000000f RSI: 00007f671a23f0a0 RDI: 0000000000000004 [ 292.310411][T11526] RBP: 00007f671a23f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.310423][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.310435][T11526] R13: 0000000000000000 R14: 00007f67195a5fa0 R15: 00007ffe92c7e1e8 [ 292.310465][T11526] [ 292.740924][T11533] netlink: 'syz.3.1639': attribute type 2 has an invalid length. [ 292.749789][T11533] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 292.760918][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 292.805179][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1640'. [ 292.876024][T11537] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan0, syncid = 2, id = 0 [ 292.937269][T11538] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1638'. [ 293.129187][T11550] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 293.151834][T11550] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 293.186549][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 293.386661][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 293.838460][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 294.034774][T11582] netlink: 'syz.3.1652': attribute type 16 has an invalid length. [ 294.039566][T11578] No such timeout policy "syz0" [ 294.043825][T11582] netlink: 'syz.3.1652': attribute type 17 has an invalid length. [ 294.139896][T11582] 8021q: adding VLAN 0 to HW filter on device  [ 294.171933][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.222985][T11582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.292356][T11584] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.492777][T11590] openvswitch: netlink: Multiple metadata blocks provided [ 294.519582][T11602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.699034][T11604] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 294.700467][T11607] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 294.782693][T11613] syz.0.1661: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.833145][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.0.1661 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 294.833181][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.833195][T11613] Call Trace: [ 294.833203][T11613] [ 294.833212][T11613] dump_stack_lvl+0x241/0x360 [ 294.833245][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.833269][T11613] ? __pfx__printk+0x10/0x10 [ 294.833296][T11613] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 294.833325][T11613] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 294.833356][T11613] warn_alloc+0x278/0x410 [ 294.833381][T11613] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 294.833405][T11613] ? __pfx_warn_alloc+0x10/0x10 [ 294.833428][T11613] ? kasan_save_track+0x3f/0x80 [ 294.833450][T11613] ? __kasan_kmalloc+0x98/0xb0 [ 294.833476][T11613] ? xsk_setsockopt+0x4aa/0x810 [ 294.833494][T11613] ? do_sock_setsockopt+0x3af/0x720 [ 294.833517][T11613] ? __x64_sys_setsockopt+0x1ee/0x280 [ 294.833539][T11613] ? do_syscall_64+0xf3/0x230 [ 294.833565][T11613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.833605][T11613] __vmalloc_node_range_noprof+0x126/0x1380 [ 294.833665][T11613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.833693][T11613] ? __kasan_kmalloc+0x98/0xb0 [ 294.833724][T11613] vmalloc_user_noprof+0x74/0x80 [ 294.833747][T11613] ? xskq_create+0xb6/0x170 [ 294.833767][T11613] xskq_create+0xb6/0x170 [ 294.833791][T11613] xsk_init_queue+0xa1/0x100 [ 294.833816][T11613] xsk_setsockopt+0x4aa/0x810 [ 294.833839][T11613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.833860][T11613] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.833895][T11613] ? aa_sock_opt_perm+0x79/0x120 [ 294.833933][T11613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.833952][T11613] do_sock_setsockopt+0x3af/0x720 [ 294.833983][T11613] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 294.834013][T11613] ? __fget_files+0x395/0x410 [ 294.834043][T11613] ? __fget_files+0x2a/0x410 [ 294.834084][T11613] __x64_sys_setsockopt+0x1ee/0x280 [ 294.834115][T11613] do_syscall_64+0xf3/0x230 [ 294.834144][T11613] ? clear_bhb_loop+0x35/0x90 [ 294.834176][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.834203][T11613] RIP: 0033:0x7fd9b0f8d169 [ 294.834222][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.834239][T11613] RSP: 002b:00007fd9b1da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.834273][T11613] RAX: ffffffffffffffda RBX: 00007fd9b11a6080 RCX: 00007fd9b0f8d169 [ 294.834288][T11613] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 294.834301][T11613] RBP: 00007fd9b100e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 294.834313][T11613] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.834326][T11613] R13: 0000000000000000 R14: 00007fd9b11a6080 R15: 00007ffcfc56c7b8 [ 294.834357][T11613] [ 295.117018][T11613] Mem-Info: [ 295.139160][T11613] active_anon:6118 inactive_anon:0 isolated_anon:0 [ 295.139160][T11613] active_file:1651 inactive_file:38382 isolated_file:0 [ 295.139160][T11613] unevictable:768 dirty:87 writeback:0 [ 295.139160][T11613] slab_reclaimable:11193 slab_unreclaimable:102672 [ 295.139160][T11613] mapped:28650 shmem:1453 pagetables:801 [ 295.139160][T11613] sec_pagetables:0 bounce:0 [ 295.139160][T11613] kernel_misc_reclaimable:0 [ 295.139160][T11613] free:1330215 free_pcp:389 free_cma:0 [ 295.203933][T11613] Node 0 active_anon:24272kB inactive_anon:0kB active_file:6604kB inactive_file:153452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118700kB dirty:348kB writeback:0kB shmem:4276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11892kB pagetables:3204kB sec_pagetables:0kB all_unreclaimable? no [ 295.238835][T11613] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 295.273113][T11613] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.336560][T11613] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 295.357545][T11613] Node 0 DMA32 free:1319108kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:24444kB inactive_anon:0kB active_file:6604kB inactive_file:153140kB unevictable:1536kB writepending:420kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:1944kB local_pcp:960kB free_cma:0kB [ 295.396928][T11613] lowmem_reserve[]: 0 0 0 0 0 [ 295.401902][T11613] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 295.444941][T11613] lowmem_reserve[]: 0 0 0 0 0 [ 295.451075][T11613] Node 1 Normal free:3909720kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 295.544467][T11613] lowmem_reserve[]: 0 0 0 0 0 [ 295.553920][T11613] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.595951][T11613] Node 0 DMA32: 282*4kB (UM) 382*8kB (UME) 252*16kB (UME) 153*32kB (ME) 62*64kB (UME) 30*128kB (ME) 17*256kB (UM) 13*512kB (UME) 16*1024kB (UM) 10*2048kB (UME) 301*4096kB (UM) = 1301688kB [ 295.630113][T11613] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 295.642898][T11613] Node 1 Normal: 190*4kB (UE) 52*8kB (UME) 42*16kB (UME) 185*32kB (UME) 98*64kB (UME) 31*128kB (UME) 14*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 6*2048kB (UE) 944*4096kB (M) = 3909720kB [ 295.662360][T11613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.673710][T11636] IPVS: persistence engine module ip_vs_pe_ not found [ 295.682421][T11613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.755525][T11613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.771503][T11613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.782292][T11613] 41471 total pagecache pages [ 295.801664][T11613] 0 pages in swap cache [ 295.821420][T11613] Free swap = 124996kB [ 295.835686][T11613] Total swap = 124996kB [ 295.842281][T11613] 2097051 pages RAM [ 295.866511][T11613] 0 pages HighMem/MovableOnly [ 295.871487][T11613] 427902 pages reserved [ 295.881669][T11613] 0 pages cma reserved [ 296.139041][T11662] lo speed is unknown, defaulting to 1000 [ 296.146830][T11666] netlink: 'syz.0.1671': attribute type 3 has an invalid length. [ 296.158178][T11666] unsupported nla_type 52263 [ 296.205667][T11662] lo speed is unknown, defaulting to 1000 [ 296.253832][T11667] pimreg0: tun_chr_ioctl cmd 1074025677 [ 296.287971][T11667] pimreg0: linktype set to 65534 [ 296.412743][T11677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.876563][T11697] tun0: tun_chr_ioctl cmd 1074025677 [ 296.893349][T11697] tun0: linktype set to 769 [ 296.908078][T11692] lo speed is unknown, defaulting to 1000 [ 296.931868][T11699] macsec1: entered promiscuous mode [ 296.955485][T11699] veth0: entered promiscuous mode [ 296.989356][T11699] veth0: left promiscuous mode [ 297.030912][T11692] lo speed is unknown, defaulting to 1000 [ 297.040400][T11697] tun0: tun_chr_ioctl cmd 1074025677 [ 297.051372][T11697] tun0: linktype set to 769 [ 297.056617][T11693] lo speed is unknown, defaulting to 1000 [ 297.075721][T11704] tun0: tun_chr_ioctl cmd 1074025673 [ 297.099799][T11700] veth0_to_batadv: entered promiscuous mode [ 297.124267][T11700] bond0: (slave macvlan4): Enslaving as an active interface with a down link [ 297.148624][T11693] lo speed is unknown, defaulting to 1000 [ 297.494217][T11712] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.593936][T11716] __nla_validate_parse: 9 callbacks suppressed [ 297.593960][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 297.722760][T11722] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1690'. [ 297.751828][T11718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1689'. [ 297.754307][T11722] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 298.078221][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 298.102074][T11744] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 298.174268][T11749] xt_cgroup: path and classid specified [ 298.203511][T11749] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 298.228510][T11749] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1699'. [ 298.616425][T11766] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.989469][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 299.037893][T11780] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 299.099884][T11780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.238010][T11780] bond6: (slave ip6gretap2): making interface the new active one [ 299.248365][T11780] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 299.261972][T11786] lo speed is unknown, defaulting to 1000 [ 299.284855][T11780] vlan3: entered promiscuous mode [ 299.290732][T11780] bond6: entered promiscuous mode [ 299.296217][T11780] ip6gretap2: entered promiscuous mode [ 299.302260][T11780] vlan3: entered allmulticast mode [ 299.307604][T11780] bond6: entered allmulticast mode [ 299.313056][T11780] ip6gretap2: entered allmulticast mode [ 299.390062][T11786] lo speed is unknown, defaulting to 1000 [ 299.487894][T11783] syzkaller1: entered promiscuous mode [ 299.500643][T11783] syzkaller1: entered allmulticast mode [ 299.661003][T11802] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1714'. [ 299.671043][T11794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1713'. [ 299.888596][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 299.913914][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 300.364193][T11835] syzkaller1: tun_chr_ioctl cmd 21731 [ 300.889218][T11851] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 300.961386][T11849] lo speed is unknown, defaulting to 1000 [ 300.994525][T11849] lo speed is unknown, defaulting to 1000 [ 301.124149][T11846] lo speed is unknown, defaulting to 1000 [ 301.243463][T11859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.292014][T11846] lo speed is unknown, defaulting to 1000 [ 301.877283][T11885] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 301.983820][T11885] lo speed is unknown, defaulting to 1000 [ 302.014525][T11885] lo speed is unknown, defaulting to 1000 [ 302.100922][T11897] netlink: 'syz.3.1747': attribute type 5 has an invalid length. [ 302.113975][T11897] netlink: 'syz.3.1747': attribute type 5 has an invalid length. [ 302.265960][T11901] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 302.584673][T11910] lo speed is unknown, defaulting to 1000 [ 302.608406][T11910] lo speed is unknown, defaulting to 1000 [ 302.637093][T11913] lo speed is unknown, defaulting to 1000 [ 302.662572][T11913] lo speed is unknown, defaulting to 1000 [ 303.192420][T11944] __nla_validate_parse: 5 callbacks suppressed [ 303.192438][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 303.310068][T11949] lo speed is unknown, defaulting to 1000 [ 303.317472][T11949] lo speed is unknown, defaulting to 1000 [ 303.475006][T11956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.530852][T11957] bond0: entered promiscuous mode [ 303.536586][T11957] ip6gretap3: entered promiscuous mode [ 303.543455][T11957] batadv0: entered promiscuous mode [ 303.550530][T11957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.560749][T11957] Cannot create hsr debugfs directory [ 303.567374][T11957] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 303.581538][T11957] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 303.627382][T11957] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 303.645031][T11957] bond0: left promiscuous mode [ 303.653791][T11957] ip6gretap3: left promiscuous mode [ 303.670693][T11957] batadv0: left promiscuous mode [ 303.724606][T11968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1768'. [ 303.744188][T11959] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 304.087471][T11978] tipc: Started in network mode [ 304.102675][T11978] tipc: Node identity 20010000000000000000000000000002, cluster identity 4711 [ 304.135540][T11978] tipc: Enabling of bearer rejected, failed to enable media [ 306.453806][T12001] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 306.487410][T12000] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1778'. [ 306.497841][T12007] netlink: 'syz.0.1777': attribute type 27 has an invalid length. [ 306.537679][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 306.934220][T12027] tipc: Cannot configure node identity twice [ 307.014488][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1788'. [ 307.027892][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1787'. [ 307.048163][T12034] veth1_macvtap: left promiscuous mode [ 307.079076][T12034] macsec0: entered allmulticast mode [ 307.621230][T12017] delete_channel: no stack [ 307.650238][T12057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.118372][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 308.157519][T12072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.512537][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 308.527360][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 308.536884][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1802'. [ 309.014435][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 309.033698][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1809'. [ 309.121260][T12112] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 309.306745][T12131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1815'. [ 309.405798][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 309.550222][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.562634][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.578044][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.608261][T12153] netlink: 'syz.0.1816': attribute type 16 has an invalid length. [ 309.625328][T12153] netlink: 'syz.0.1816': attribute type 17 has an invalid length. [ 309.759452][T12138] bond0: left promiscuous mode [ 309.788888][T12138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.803376][T12138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.812721][T12138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.822302][T12138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.915021][T12151] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.937722][T12151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.031072][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.050149][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.064916][T12153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.151260][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1822'. [ 310.162867][ T10] lo speed is unknown, defaulting to 1000 [ 310.419677][T12169] lo speed is unknown, defaulting to 1000 [ 310.440995][T12169] lo speed is unknown, defaulting to 1000 [ 310.502201][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1827'. [ 311.029753][T12203] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1834'. [ 311.152559][T12169] lo speed is unknown, defaulting to 1000 [ 311.184785][T12169] lo speed is unknown, defaulting to 1000 [ 311.281723][T12210] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 311.348643][T12209] erspan0: entered promiscuous mode [ 311.385082][T12209] macvtap2: entered promiscuous mode [ 311.405945][T12209] macvtap2: entered allmulticast mode [ 311.411412][T12209] erspan0: entered allmulticast mode [ 311.607290][T12219] lo speed is unknown, defaulting to 1000 [ 311.614240][T12219] lo speed is unknown, defaulting to 1000 [ 312.250572][T12250] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 312.669702][T12266] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 312.677893][T12265] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 312.705987][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.728346][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.949305][T12271] openvswitch: netlink: Missing valid actions attribute. [ 312.965706][T12271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.048483][T12281] sctp: [Deprecated]: syz.3.1856 (pid 12281) Use of int in max_burst socket option. [ 313.048483][T12281] Use struct sctp_assoc_value instead [ 313.078724][T12281] SET target dimension over the limit! [ 313.100023][ T30] audit: type=1800 audit(1742346078.567:3): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1859" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1727 res=0 errno=0 [ 313.154199][T12286] netlink: 'syz.4.1859': attribute type 2 has an invalid length. [ 313.180543][T12286] netlink: 'syz.4.1859': attribute type 4 has an invalid length. [ 313.200262][T12287] netlink: 'syz.2.1858': attribute type 12 has an invalid length. [ 313.233448][ T30] audit: type=1800 audit(1742346078.697:4): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1859" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1727 res=0 errno=0 [ 313.357127][T12297] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 313.545033][T12310] __nla_validate_parse: 18 callbacks suppressed [ 313.545055][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1864'. [ 313.906328][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 313.986841][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1870'. [ 314.425992][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1879'. [ 314.527231][T12363] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1882'. [ 314.577717][T12359] netlink: 'syz.4.1881': attribute type 4 has an invalid length. [ 314.585738][T12359] netlink: 'syz.4.1881': attribute type 11 has an invalid length. [ 314.593623][T12359] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1881'. [ 314.628454][T12368] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 315.024414][T12383] RDS: rds_bind could not find a transport for ::4000:0:40:0, load rds_tcp or rds_rdma? [ 315.089269][T12368] bond0 (unregistering): Released all slaves [ 315.135737][T12370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.243792][T12390] lo speed is unknown, defaulting to 1000 [ 315.252049][T12390] lo speed is unknown, defaulting to 1000 [ 315.667227][T12405] IPVS: set_ctl: invalid protocol: 60 172.20.20.65:4096 [ 316.338396][T12433] netlink: 'syz.3.1905': attribute type 11 has an invalid length. [ 316.388620][T12433] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 316.478242][T12436] nftables ruleset with unbound set [ 316.552125][T12441] syzkaller1: entered promiscuous mode [ 316.563800][T12441] syzkaller1: entered allmulticast mode [ 316.867497][T12457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 316.952829][T12457] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.014838][T12458] lo speed is unknown, defaulting to 1000 [ 317.030770][T12458] lo speed is unknown, defaulting to 1000 [ 317.681467][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'. [ 317.745496][T12455] lo: left allmulticast mode [ 317.876251][T12455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.517802][T12488] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 318.557972][T12489] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.631285][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 318.793934][T12491] lo speed is unknown, defaulting to 1000 [ 318.841829][T12491] lo speed is unknown, defaulting to 1000 [ 319.272652][T12503] macsec1: entered promiscuous mode [ 319.292292][T12503] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 319.303775][T12503] macsec1: entered allmulticast mode [ 319.319583][T12503] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 319.453677][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 319.471137][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1928'. [ 319.604124][T12517] veth1_to_bond: entered allmulticast mode [ 319.612850][T12517] veth1_to_bond: entered promiscuous mode [ 319.633781][T12517] veth1_to_bond: left promiscuous mode [ 319.645724][T12517] veth1_to_bond: left allmulticast mode [ 319.665997][T12519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1932'. [ 319.829808][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1933'. [ 319.843393][T12523] lo: entered allmulticast mode [ 319.883728][T12523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.895615][T12527] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.900017][T12528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1933'. [ 319.921858][T12528] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 319.935803][T12528] CPU: 0 UID: 0 PID: 12528 Comm: syz.1.1933 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 319.935830][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.935856][T12528] Call Trace: [ 319.935863][T12528] [ 319.935872][T12528] dump_stack_lvl+0x241/0x360 [ 319.935902][T12528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.935924][T12528] ? __pfx__printk+0x10/0x10 [ 319.935950][T12528] ? __kmalloc_cache_noprof+0x243/0x390 [ 319.935977][T12528] ? sysfs_warn_dup+0x51/0xa0 [ 319.936005][T12528] sysfs_warn_dup+0x8e/0xa0 [ 319.936029][T12528] sysfs_do_create_link_sd+0xbe/0x110 [ 319.936057][T12528] device_add_class_symlinks+0x1c5/0x250 [ 319.936080][T12528] device_add+0x553/0xbf0 [ 319.936106][T12528] wiphy_register+0x1922/0x2650 [ 319.936148][T12528] ? __pfx_wiphy_register+0x10/0x10 [ 319.936173][T12528] ? minstrel_ht_alloc+0x84b/0x940 [ 319.936210][T12528] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 319.936247][T12528] ieee80211_register_hw+0x35d9/0x42e0 [ 319.936281][T12528] ? ieee80211_register_hw+0x1681/0x42e0 [ 319.936309][T12528] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 319.936340][T12528] ? __asan_memset+0x23/0x50 [ 319.936361][T12528] ? __hrtimer_init+0x170/0x250 [ 319.936386][T12528] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 319.936452][T12528] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 319.936496][T12528] ? trace_kmalloc+0x1f/0xd0 [ 319.936522][T12528] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 319.936553][T12528] ? kstrndup+0xbb/0x150 [ 319.936596][T12528] hwsim_new_radio_nl+0xece/0x2290 [ 319.936640][T12528] ? __pfx___nla_validate_parse+0x10/0x10 [ 319.936668][T12528] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.936734][T12528] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 319.936770][T12528] genl_rcv_msg+0xb1f/0xec0 [ 319.936805][T12528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.936863][T12528] ? __pfx_lock_acquire+0x10/0x10 [ 319.936894][T12528] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.936924][T12528] ? __pfx___might_resched+0x10/0x10 [ 319.936964][T12528] netlink_rcv_skb+0x206/0x480 [ 319.937015][T12528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.937043][T12528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.937112][T12528] genl_rcv+0x28/0x40 [ 319.937134][T12528] netlink_unicast+0x7f6/0x990 [ 319.937173][T12528] ? __pfx_netlink_unicast+0x10/0x10 [ 319.937200][T12528] ? __virt_addr_valid+0x45f/0x530 [ 319.937239][T12528] ? __phys_addr_symbol+0x2f/0x70 [ 319.937258][T12528] ? __check_object_size+0x47a/0x730 [ 319.937294][T12528] netlink_sendmsg+0x8de/0xcb0 [ 319.937342][T12528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.937381][T12528] ? aa_sock_msg_perm+0x91/0x160 [ 319.937422][T12528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.937458][T12528] __sock_sendmsg+0x221/0x270 [ 319.937493][T12528] ____sys_sendmsg+0x53a/0x860 [ 319.937529][T12528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.937553][T12528] ? __fget_files+0x2a/0x410 [ 319.937589][T12528] ? __fget_files+0x2a/0x410 [ 319.937631][T12528] __sys_sendmsg+0x269/0x350 [ 319.937664][T12528] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.937744][T12528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.937778][T12528] ? do_syscall_64+0x100/0x230 [ 319.937811][T12528] ? do_syscall_64+0xb6/0x230 [ 319.937843][T12528] do_syscall_64+0xf3/0x230 [ 319.937872][T12528] ? clear_bhb_loop+0x35/0x90 [ 319.937905][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.937945][T12528] RIP: 0033:0x7f290158d169 [ 319.937964][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.937982][T12528] RSP: 002b:00007f2902481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.938004][T12528] RAX: ffffffffffffffda RBX: 00007f29017a6080 RCX: 00007f290158d169 [ 319.938020][T12528] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000a [ 319.938034][T12528] RBP: 00007f290160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.938047][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.938060][T12528] R13: 0000000000000000 R14: 00007f29017a6080 R15: 00007ffe6d4b4708 [ 319.938094][T12528] [ 319.943265][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 320.397709][T12525] vlan2: entered promiscuous mode [ 320.403596][T12525] bond0: entered promiscuous mode [ 321.180279][T12561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1945'. [ 321.226231][T12562] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1945'. [ 324.728836][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 324.753992][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 325.244009][T12610] lo speed is unknown, defaulting to 1000 [ 325.273624][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 325.336799][T12610] lo speed is unknown, defaulting to 1000 [ 325.342431][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1958'. [ 325.396158][T12611] lo speed is unknown, defaulting to 1000 [ 325.532309][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1958'. [ 325.849849][T12635] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1969'. [ 326.112320][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1970'. [ 326.189569][T12647] tipc: Enabling of bearer rejected, failed to enable media [ 326.215603][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 326.276282][T12604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.287512][T12651] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1973'. [ 326.335925][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1973'. [ 327.308505][T12682] lo speed is unknown, defaulting to 1000 [ 327.335559][T12682] lo speed is unknown, defaulting to 1000 [ 327.588134][T12704] xt_HMARK: spi-set and port-set can't be combined [ 327.653593][T12699] syz_tun: entered allmulticast mode [ 327.768853][T12698] syz_tun: left allmulticast mode [ 327.862674][T12710] lo speed is unknown, defaulting to 1000 [ 327.915629][T12710] lo speed is unknown, defaulting to 1000 [ 327.943899][T12714] FAULT_INJECTION: forcing a failure. [ 327.943899][T12714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.984117][T12714] CPU: 1 UID: 0 PID: 12714 Comm: syz.1.1991 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 327.984149][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.984163][T12714] Call Trace: [ 327.984171][T12714] [ 327.984180][T12714] dump_stack_lvl+0x241/0x360 [ 327.984225][T12714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.984248][T12714] ? __pfx__printk+0x10/0x10 [ 327.984276][T12714] ? snprintf+0xda/0x120 [ 327.984316][T12714] should_fail_ex+0x40a/0x550 [ 327.984350][T12714] _copy_to_user+0x31/0xb0 [ 327.984379][T12714] simple_read_from_buffer+0xca/0x150 [ 327.984410][T12714] proc_fail_nth_read+0x1e9/0x250 [ 327.984440][T12714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.984471][T12714] ? rw_verify_area+0x243/0x630 [ 327.984491][T12714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.984521][T12714] vfs_read+0x1f8/0xb40 [ 327.984542][T12714] ? fdget_pos+0x254/0x320 [ 327.984571][T12714] ? __pfx___mutex_lock+0x10/0x10 [ 327.984604][T12714] ? __pfx_vfs_read+0x10/0x10 [ 327.984628][T12714] ? __fget_files+0x2a/0x410 [ 327.984678][T12714] ? __fget_files+0x395/0x410 [ 327.984706][T12714] ? __fget_files+0x2a/0x410 [ 327.984755][T12714] ksys_read+0x18f/0x2b0 [ 327.984778][T12714] ? __pfx_ksys_read+0x10/0x10 [ 327.984800][T12714] ? do_syscall_64+0x100/0x230 [ 327.984828][T12714] ? do_syscall_64+0xb6/0x230 [ 327.984857][T12714] do_syscall_64+0xf3/0x230 [ 327.984882][T12714] ? clear_bhb_loop+0x35/0x90 [ 327.984912][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.984938][T12714] RIP: 0033:0x7f290158bb7c [ 327.984955][T12714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.984971][T12714] RSP: 002b:00007f29024a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.985010][T12714] RAX: ffffffffffffffda RBX: 00007f29017a5fa0 RCX: 00007f290158bb7c [ 327.985024][T12714] RDX: 000000000000000f RSI: 00007f29024a20a0 RDI: 0000000000000005 [ 327.985037][T12714] RBP: 00007f29024a2090 R08: 0000000000000000 R09: 0000000000000000 [ 327.985049][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.985060][T12714] R13: 0000000000000000 R14: 00007f29017a5fa0 R15: 00007ffe6d4b4708 [ 327.985091][T12714] [ 328.263265][T12710] lo speed is unknown, defaulting to 1000 [ 328.271127][T12716] netlink: 'syz.2.1992': attribute type 4 has an invalid length. [ 328.326108][T12716] netlink: 'syz.2.1992': attribute type 4 has an invalid length. [ 328.403140][T12710] lo speed is unknown, defaulting to 1000 [ 328.528259][T12721] tap0: tun_chr_ioctl cmd 1074025677 [ 328.534284][T12721] tap0: linktype set to 805 [ 329.432475][T12757] lo speed is unknown, defaulting to 1000 [ 329.455449][T12757] lo speed is unknown, defaulting to 1000 [ 329.662500][T12768] sctp: [Deprecated]: syz.4.2010 (pid 12768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.662500][T12768] Use struct sctp_sack_info instead [ 330.060122][T12788] netlink: 'syz.1.2015': attribute type 32 has an invalid length. [ 330.196197][T12791] __nla_validate_parse: 8 callbacks suppressed [ 330.196216][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 330.350152][T12799] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 330.440486][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.662380][T12812] lo speed is unknown, defaulting to 1000 [ 330.674750][T12812] lo speed is unknown, defaulting to 1000 [ 330.875572][T12820] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 331.134387][T12836] netlink: 'syz.0.2023': attribute type 160 has an invalid length. [ 331.614991][T12858] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 331.646896][T12858] netlink: 'syz.3.2035': attribute type 2 has an invalid length. [ 331.657865][T12856] lo speed is unknown, defaulting to 1000 [ 331.664826][T12856] lo speed is unknown, defaulting to 1000 [ 331.680005][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 331.695421][T12858] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 331.713788][T12858] netlink: 'syz.3.2035': attribute type 2 has an invalid length. [ 331.779467][T12858] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 331.811894][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 331.905412][T12858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.069452][T12869] lo speed is unknown, defaulting to 1000 [ 332.110008][T12869] lo speed is unknown, defaulting to 1000 [ 332.213794][T12878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.375857][T12877] lo speed is unknown, defaulting to 1000 [ 332.432777][T12877] lo speed is unknown, defaulting to 1000 [ 332.636600][T12893] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2042'. [ 332.768292][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2034'. [ 334.214516][T12951] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 334.263772][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 334.294957][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 334.304582][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 334.896983][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 334.927835][T12980] x_tables: duplicate entry at hook 2 [ 335.215763][T12992] ================================================================== [ 335.223889][T12992] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 335.232697][T12992] Write of size 8 at addr ffff8880257454b0 by task syz.3.2070/12992 [ 335.240714][T12992] [ 335.243073][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.3.2070 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 335.243101][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.243115][T12992] Call Trace: [ 335.243123][T12992] [ 335.243131][T12992] dump_stack_lvl+0x241/0x360 [ 335.243161][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.243185][T12992] ? __pfx__printk+0x10/0x10 [ 335.243206][T12992] ? _printk+0xd5/0x120 [ 335.243225][T12992] ? __virt_addr_valid+0x183/0x530 [ 335.243245][T12992] ? __virt_addr_valid+0x183/0x530 [ 335.243266][T12992] print_report+0x16e/0x5b0 [ 335.243291][T12992] ? __virt_addr_valid+0x183/0x530 [ 335.243311][T12992] ? __virt_addr_valid+0x183/0x530 [ 335.243329][T12992] ? __virt_addr_valid+0x45f/0x530 [ 335.243348][T12992] ? __phys_addr+0xba/0x170 [ 335.243367][T12992] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 335.243391][T12992] kasan_report+0x143/0x180 [ 335.243418][T12992] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 335.243445][T12992] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 335.243471][T12992] rxrpc_lookup_local+0xea5/0x1890 [ 335.243501][T12992] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 335.243525][T12992] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 335.243545][T12992] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 335.243570][T12992] ? __local_bh_enable_ip+0x168/0x200 [ 335.243607][T12992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.243631][T12992] ? rxrpc_bind+0x93/0x430 [ 335.243664][T12992] ? rxrpc_bind+0x156/0x430 [ 335.243697][T12992] rxrpc_bind+0x181/0x430 [ 335.243731][T12992] __sys_bind+0x1e4/0x290 [ 335.243753][T12992] ? __pfx___sys_bind+0x10/0x10 [ 335.243778][T12992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.243811][T12992] ? do_syscall_64+0x100/0x230 [ 335.243842][T12992] __x64_sys_bind+0x7a/0x90 [ 335.243862][T12992] do_syscall_64+0xf3/0x230 [ 335.243889][T12992] ? clear_bhb_loop+0x35/0x90 [ 335.243920][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.243949][T12992] RIP: 0033:0x7f671938d169 [ 335.243967][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.243985][T12992] RSP: 002b:00007f671a23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 335.244008][T12992] RAX: ffffffffffffffda RBX: 00007f67195a5fa0 RCX: 00007f671938d169 [ 335.244024][T12992] RDX: 0000000000000024 RSI: 0000400000000200 RDI: 0000000000000004 [ 335.244037][T12992] RBP: 00007f671940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.244051][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.244064][T12992] R13: 0000000000000000 R14: 00007f67195a5fa0 R15: 00007ffe92c7e1e8 [ 335.244085][T12992] [ 335.244093][T12992] [ 335.509286][T12992] Allocated by task 12405: [ 335.513703][T12992] kasan_save_track+0x3f/0x80 [ 335.518387][T12992] __kasan_slab_alloc+0x66/0x80 [ 335.523236][T12992] kmem_cache_alloc_noprof+0x1d9/0x380 [ 335.528701][T12992] sk_prot_alloc+0x58/0x210 [ 335.533209][T12992] sk_alloc+0x3e/0x370 [ 335.537278][T12992] inet_create+0x648/0xea0 [ 335.541694][T12992] __sock_create+0x4c0/0xa30 [ 335.546289][T12992] __sys_socket+0x150/0x3c0 [ 335.550800][T12992] __x64_sys_socket+0x7a/0x90 [ 335.555483][T12992] do_syscall_64+0xf3/0x230 [ 335.559986][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.565885][T12992] [ 335.568201][T12992] Freed by task 12404: [ 335.572262][T12992] kasan_save_track+0x3f/0x80 [ 335.576942][T12992] kasan_save_free_info+0x40/0x50 [ 335.581972][T12992] __kasan_slab_free+0x59/0x70 [ 335.586732][T12992] kmem_cache_free+0x195/0x410 [ 335.591498][T12992] __sk_destruct+0x4fd/0x690 [ 335.596091][T12992] inet_release+0x17d/0x200 [ 335.600682][T12992] sock_close+0xbc/0x240 [ 335.604925][T12992] __fput+0x3e9/0x9f0 [ 335.608901][T12992] task_work_run+0x24f/0x310 [ 335.613492][T12992] syscall_exit_to_user_mode+0x13f/0x340 [ 335.619130][T12992] do_syscall_64+0x100/0x230 [ 335.623730][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.629635][T12992] [ 335.631955][T12992] The buggy address belongs to the object at ffff888025744d80 [ 335.631955][T12992] which belongs to the cache UDP of size 1856 [ 335.645394][T12992] The buggy address is located 1840 bytes inside of [ 335.645394][T12992] freed 1856-byte region [ffff888025744d80, ffff8880257454c0) [ 335.659360][T12992] [ 335.661676][T12992] The buggy address belongs to the physical page: [ 335.668089][T12992] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25740 [ 335.676864][T12992] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 335.685361][T12992] memcg:ffff8880343c4701 [ 335.689600][T12992] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 335.697142][T12992] page_type: f5(slab) [ 335.701122][T12992] raw: 00fff00000000040 ffff888022efe500 ffffea0005343200 0000000000000002 [ 335.709704][T12992] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff8880343c4701 [ 335.718288][T12992] head: 00fff00000000040 ffff888022efe500 ffffea0005343200 0000000000000002 [ 335.726957][T12992] head: 0000000000000000 0000000080100010 00000000f5000000 ffff8880343c4701 [ 335.735631][T12992] head: 00fff00000000003 ffffea000095d001 ffffffffffffffff 0000000000000000 [ 335.744298][T12992] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 335.752966][T12992] page dumped because: kasan: bad access detected [ 335.759385][T12992] page_owner tracks the page as allocated [ 335.765099][T12992] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6141, tgid 6138 (syz.1.50), ts 89020229188, free_ts 88948751390 [ 335.786112][T12992] post_alloc_hook+0x1f4/0x240 [ 335.790889][T12992] get_page_from_freelist+0x365c/0x37a0 [ 335.796434][T12992] __alloc_frozen_pages_noprof+0x292/0x710 [ 335.802240][T12992] alloc_pages_mpol+0x311/0x660 [ 335.807094][T12992] allocate_slab+0x8f/0x3a0 [ 335.811592][T12992] ___slab_alloc+0xc27/0x14a0 [ 335.816262][T12992] __slab_alloc+0x58/0xa0 [ 335.820590][T12992] kmem_cache_alloc_noprof+0x268/0x380 [ 335.826055][T12992] sk_prot_alloc+0x58/0x210 [ 335.830566][T12992] sk_alloc+0x3e/0x370 [ 335.834649][T12992] inet_create+0x648/0xea0 [ 335.839068][T12992] __sock_create+0x4c0/0xa30 [ 335.843668][T12992] inet_ctl_sock_create+0xc2/0x250 [ 335.848779][T12992] igmp_net_init+0xbb/0x150 [ 335.853276][T12992] ops_init+0x349/0x5b0 [ 335.857437][T12992] setup_net+0x287/0x9e0 [ 335.861682][T12992] page last free pid 5832 tgid 5832 stack trace: [ 335.868004][T12992] free_frozen_pages+0xe0d/0x10e0 [ 335.873142][T12992] __put_partials+0x160/0x1c0 [ 335.877821][T12992] put_cpu_partial+0x17c/0x250 [ 335.882598][T12992] __slab_free+0x290/0x380 [ 335.887035][T12992] qlist_free_all+0x9a/0x140 [ 335.891625][T12992] kasan_quarantine_reduce+0x14f/0x170 [ 335.897083][T12992] __kasan_slab_alloc+0x23/0x80 [ 335.901931][T12992] kmem_cache_alloc_noprof+0x1d9/0x380 [ 335.907387][T12992] ptlock_alloc+0x20/0x70 [ 335.911710][T12992] pte_alloc_one+0x73/0x160 [ 335.916217][T12992] __pte_alloc+0x79/0x220 [ 335.920543][T12992] copy_pmd_range+0x6fc8/0x77b0 [ 335.925429][T12992] copy_page_range+0x99f/0xe90 [ 335.930197][T12992] copy_mm+0x1269/0x2160 [ 335.934442][T12992] copy_process+0x17d1/0x3cf0 [ 335.939115][T12992] kernel_clone+0x226/0x8e0 [ 335.943623][T12992] [ 335.945941][T12992] Memory state around the buggy address: [ 335.951580][T12992] ffff888025745380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.959647][T12992] ffff888025745400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.967704][T12992] >ffff888025745480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 335.975760][T12992] ^ [ 335.981381][T12992] ffff888025745500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 335.989432][T12992] ffff888025745580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.997487][T12992] ================================================================== [ 336.006674][T12992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.013903][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.3.2070 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 336.024665][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.034717][T12992] Call Trace: [ 336.038014][T12992] [ 336.040942][T12992] dump_stack_lvl+0x241/0x360 [ 336.045634][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.050828][T12992] ? __pfx__printk+0x10/0x10 [ 336.055416][T12992] ? vscnprintf+0x5d/0x90 [ 336.059742][T12992] panic+0x349/0x880 [ 336.063637][T12992] ? check_panic_on_warn+0x21/0xb0 [ 336.068774][T12992] ? __pfx_panic+0x10/0x10 [ 336.073189][T12992] ? mark_lock+0x9a/0x360 [ 336.077520][T12992] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 336.083420][T12992] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 336.089320][T12992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.095650][T12992] ? print_report+0x519/0x5b0 [ 336.100336][T12992] check_panic_on_warn+0x86/0xb0 [ 336.105281][T12992] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 336.111263][T12992] end_report+0x77/0x160 [ 336.115515][T12992] kasan_report+0x154/0x180 [ 336.120045][T12992] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 336.126036][T12992] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 336.131847][T12992] rxrpc_lookup_local+0xea5/0x1890 [ 336.136966][T12992] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 336.142515][T12992] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 336.147811][T12992] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 336.153464][T12992] ? __local_bh_enable_ip+0x168/0x200 [ 336.158858][T12992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.164665][T12992] ? rxrpc_bind+0x93/0x430 [ 336.169096][T12992] ? rxrpc_bind+0x156/0x430 [ 336.173615][T12992] rxrpc_bind+0x181/0x430 [ 336.177957][T12992] __sys_bind+0x1e4/0x290 [ 336.182288][T12992] ? __pfx___sys_bind+0x10/0x10 [ 336.187140][T12992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.193477][T12992] ? do_syscall_64+0x100/0x230 [ 336.198272][T12992] __x64_sys_bind+0x7a/0x90 [ 336.202778][T12992] do_syscall_64+0xf3/0x230 [ 336.207288][T12992] ? clear_bhb_loop+0x35/0x90 [ 336.211975][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.217875][T12992] RIP: 0033:0x7f671938d169 [ 336.222295][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.241903][T12992] RSP: 002b:00007f671a23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 336.250324][T12992] RAX: ffffffffffffffda RBX: 00007f67195a5fa0 RCX: 00007f671938d169 [ 336.258312][T12992] RDX: 0000000000000024 RSI: 0000400000000200 RDI: 0000000000000004 [ 336.266291][T12992] RBP: 00007f671940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 336.274262][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.282230][T12992] R13: 0000000000000000 R14: 00007f67195a5fa0 R15: 00007ffe92c7e1e8 [ 336.290208][T12992] [ 336.293492][T12992] Kernel Offset: disabled [ 336.297824][T12992] Rebooting in 86400 seconds..