last executing test programs: 3.306188433s ago: executing program 2 (id=2251): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000001b40)="4f000c19cac3dc2b27d741f160044b56c3c5470fc123748b212d39891068ec46cbfc989d2509620cd0815f085210ee8d50390148f36b6ec1bf48a08ed705263a69f5e4c40b161b515c528abfabcdbfdea99d5364929b0d435bcc6f487f0de289f1", 0x61, 0x20000800, &(0x7f0000000880)={0x2, 0x4e22, @multicast1}, 0x10) close(0x4) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) 3.126451102s ago: executing program 2 (id=2254): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=ANY=[@ANYBLOB="1400000000000000000b0001010000000100000000"], 0x18}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r9}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e0800000b004000000000000000000000200100f1fde75ef2194166d7702b85ee9c819d908927618925e9572cbd92f9a377d4f5688ca29bb32862e578faa419ff815030251e5db311cd47d5d3a5a731ba3c1c874e2084c96c089f802d1ff1496808a3e15fd77622f695f13c6d4ec9e9fe82be8fc9cb4a2cd4c1d79ca375ce58b6900b1b794f07e09294fcea5977125e28d44d0a65551aa1933240c2a4adc9fc7a7869735302dfc820a1b720baf201fa650dab25e7b9359852fbd7f19b5d9a56240c3289cde9f6240251981aefaed0dd2e23285fa987a50d0e7a811816ecfcbd4527e554", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r11, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.363444289s ago: executing program 0 (id=2262): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.279465393s ago: executing program 1 (id=2263): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00', 0x4000}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) close(0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfe7, @mcast1, 0x7ff}}, 0x0, 0x8, 0x0, 0x0, 0xb3550aa4ba878396, 0x882b, 0x4}, 0x9c) 2.093951387s ago: executing program 2 (id=2264): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000001b40)="4f000c19cac3dc2b27d741f160044b56c3c5470fc123748b212d39891068ec46cbfc989d2509620cd0815f085210ee8d50390148f36b6ec1bf48a08ed705263a69f5e4c40b161b515c528abfabcdbfdea99d5364929b0d435bcc6f487f0de289f1", 0x61, 0x20000800, &(0x7f0000000880)={0x2, 0x4e22, @multicast1}, 0x10) close(0x4) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) 1.965824996s ago: executing program 0 (id=2265): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x72}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x645315fd37a34662, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000c80)={0x0, 0xe5, "9d277fa44e78cf96b14a8a41c282e555bcbba70f48e7f68144ad9548c4f62d512a66bd40bef2799dec2d0c9ad4bd947b2544d46b1329a601d5de61548bdf8f46195cd9dbf4efd1e9af367753b9b0ca0e175fd43ea5ab06fff5d648cee6885d545da71fab067df7bfd81c884c1d6eb86f2c9bfa08a8a3e83e4d3e5709d941c2702338d52e47ed719b8354741f3d6814c2c2e3cccb2854dbb7f0804c6c4e3d9f995e7cb48cfbd48dea35ea05b28732a4081fe1a4b48ad9c9997f09b97ca5334e4df55ffffb7706c107d4a3b5ef2ac2cc05926d1ccd875de3cc465f4701c714e89a7d5c5babe8"}, &(0x7f0000000580)=0xed) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5e, 0x9, 0x4d2652b7, 0x0, 0x80, 0x8, 0x7, 0xfffff989]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:chfn_exec_t:s0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xfe, 0x80, '\x00', 0x2c}, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'caif0\x00', 'geneve0\x00', {}, {}, 0x0, 0x4, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.920544269s ago: executing program 1 (id=2267): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.747249255s ago: executing program 2 (id=2269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000001380)="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", 0x1d5}, {&(0x7f0000000180)="1234009951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf3", 0x1d}, {&(0x7f0000000a40)="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", 0x119}, {&(0x7f00000000c0)="34aee9481de8a117754dc842aae478c2dbc4b9ad3ff6e07137505660208a006823c2f01f8bfeac806893", 0x2a}], 0x5}}], 0x1, 0x0) 1.621798221s ago: executing program 0 (id=2270): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x10}, {0xd, 0x9}, {0x9}}}, 0x24}}, 0x40080ca) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0xa0000011}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000080000006e4ff000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRESOCT=r4], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}, 0x4040801) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="363d1ddc7400000000000000000000000000000000000000000000d74b8c795a000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="001000000300000040000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.62061532s ago: executing program 1 (id=2271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x2, 0xfff}, 0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) vmsplice(r2, &(0x7f0000000a00)=[{&(0x7f0000000300)="457048a97457b4bcc00c43979ec7c77fa9f0a50cd6dd1028d8634fe504c760c22a560cadce14ee6969693b5f5f223ba7f99b7c69f03e4d4cb14c5140e4a0dc616d109b6bad863380fddc2400fdeb26e05a49a3392ca024a30ffdf51a4b994e7f711208", 0x63}, {&(0x7f0000000400)="47dfd8bb3f13853c3e7fe1d7da7dd2a4954c427472d84a9f469d8e2588b05bc13deca1b993aed8af69f9cc0fec4dbd480dac3e4770dcb2590fd5db129676ce304cb51600da388b017985216e34e776a247cdac75f49a3cc8e99a8ab86670c88893b31014571986a9e992b3e38a3811a35c5ff69a62c90d3d2bc122d106fd34f9c32898258059d77b06abafc5d7226cfc7ea89a196bd7127a68c9", 0x9a}, {&(0x7f0000000540)="2ffcff98e41ef8edfa4a66993396da651a9b44f50beeaf2c0b7b7a953de71537f174ef6e3d6b0fac516497f2b3a2953e5ae51b49a7a48924a773d85a405104f50b500620bcd5811e6ad5c94a9493a0e8eab0c09e131ecf60d9928480ae630aaad0556e726d24508e0f874eb03d610898fd346c303fcc3e316a5eaf037e4eff9eb9f393d7bcd7ad63c2074c3a14c0020847f3e0bda7bf8b8457b56256abe9ef2ab135ae50af53ceecabb8b4c58b2dda1b4854cf4bc5bc526c06b0ccd8bb7cec2509c4adf453", 0xc5}, {&(0x7f0000000640)="7ea0f8f48a54f6958c453313ba4ca0a34c12ac4584661c6860f166794c99007541ea2250303669a1a5896aea84895088ada6204154ed6ff419932917aaa7a3a102a0907879836d8e055f8fd6783f65da492f0dc7fa3dd1", 0x57}, {&(0x7f00000006c0)="d146aff44124790cf3dab6835949eb9692505d064efad8996c4b26be95bab012c7f5c4e966773cb1229d25ab2fe5db8bb5ade7b095de3147732c9004dc495d42657c5f206266ffa15903299f081680ae66974ad0733592d7e711db946eb5671123d699a9089e908d9a57fc19ca698ff740df880928ed4863e3aea7255c6eb5cd2661ba84e48b8142dc42b0f48c285651595160ad49e938450734369e35db01", 0x9f}, {&(0x7f0000000780)="2380fb65f243ee4cba935669f7ae5af937c8db97a21de69583afdca6f14e8320b473e04f7cfc7ba61194526a26a8ff13b79309dd289bfaf82b43cddf6fd5d6200184638913ae20a663c222566bbcdbf7c3209b3dddcb8a2a0332eade578df242e68d977e61f219a07bdec8092315fc313c49560a31b637b5fc8889577ee45abae98387a7d1549f17faec95b727ac90708fdd553d89b61aebe1d4705fe1db2499ccdf9e902897e1a7c26b6af6e4a2", 0xae}, {&(0x7f0000000840)="0e4d6de27a3697eb3fd7fa8a701ca3035a7cc5992ac99ab471d2c99a835aca7a23ceaf1269e7daa8000fd5b99617fcb4092793c211ae7742470e461f766c3a7f89e4bd1e05c28ba5ba9e5d7ec5c4c675b03b597087f644963f36320f6d12db7b62b266c4a2476c9aba320f", 0x6b}, {&(0x7f00000008c0)="17d1e42c9d9fef58fb5585b7239ad20b2ae040f73705de53268f01be049fd4f8ae678680b596dc608525065f15343f209bdc53f16a39df87dc224fe82b1b19b12e6083781aded6bf147ff9c776248aa0ac8f8630e4910d379e07974728fb898e48ca3cbf98f5530768eb66292ee1e8cfde44390b344ef195f30569e0af4b51c43b17337f57", 0x85}, {&(0x7f0000000200)="936f4f6276be71b19cd931bae7bf365fdce5947ddc96b6e8e765ac33c77ad654ed1a4588c2901dc179aa5154555e06", 0x2f}, {&(0x7f0000000980)="492b83db62781eb3e19a0a6134070d85d7e6eb616e43ffad4ae858da363e3e7c1e916c8885f3cc5be2f0e45e7709ec2aadd11f0be45c0e97e9e5ce315898d1d804f49e", 0x43}], 0xa, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000380)="b96c7c57ff09b1de001a78073c6c2c7740d742f6cab6d5dc36520b9a13e18a05bc2ca0b96bdd26d56a8b2799908ff4f8259c9ad46984d5b955d5ef390adadf211513057547cf9e8b35f1c061b7622c4d49c54d42bf2f4271bc1b2cfe098897c87ebae852754c0177fe10ba29df402f93d7df5a46e15b", 0x76, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2}, 0x1c) listen(r3, 0x100101) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x9) splice(r4, 0x0, r7, 0x0, 0x25, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000500)={0xde}, 0x8) accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) socket$kcm(0x29, 0x2, 0x0) 1.56716713s ago: executing program 4 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r7 = socket(0x28, 0x805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc050}, 0x4080) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, 0x1404, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x10) recvmmsg$unix(r7, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000300)}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/180, 0xfffffe61}, {&(0x7f0000000600)=""/62, 0x3e}], 0x9, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000640)}, {&(0x7f0000003240)=""/144, 0x90}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000002d00)=""/227, 0xe3}, {&(0x7f0000002e00)=""/176, 0xb0}, {&(0x7f0000002ec0)=""/5, 0x5}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)=""/180, 0xb4}], 0x9, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x101, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000d5437f47a8062181fe52bce4b930dfe94284119c999313fb75389b2db241c16fa3d17e97cceb21ae46ed8cc859235c1c4529beff20ad1af11ad7b1a17851e065dc08c8a4edbf9651e4cdae19417bc7dab6a41f575acd4cc59afc0df67189276b20c7027fa1ba3d77c4297847b8befd373bafc5cd8a73"], 0x30, 0x8885}, 0x40041) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xffff, 0x0, 0x7}, 0x8) sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x7e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) 1.466788397s ago: executing program 3 (id=2274): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000f400000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x12) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2a}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="c58e7861af7b2a4afba32e582a0f28e30fff24b3cffe3e1222dd0244aa11f3f0bedee3c4142abe5791b4666ad41f0c3df4f7f5194b231dfbc739cf891c357ca74b7ffd353b0ad3d539966cf311193e377298d24e2049c720a4b9be01c114404ed0dade3ddf4abb2e53801ed0c42395471f3f35a8a1cd5f78666306058c83ee1819aab34f8a412f2be5e27ac442f7124ea8c77729ada5ecdbddeb8eea47", 0x9d}, {&(0x7f0000000540)="64c9d803aa2b73dcd6f2b4ba874dad340e2dbeb7d2804dbd329ace334b1294de1704ef534df6cea7562bdb07d362abdf4474b2fe439a8a5d3c18e002bbe7cefc7abf8edf69381b85e80bb19fbaf0cddcb17a478280d8e2228d1b3372cf2ef99dbce613fbf0ab22457b6e632a2aba0ec2390ee084b0af7d3ec7a26f18b0c725a47d1b300e8b52d275ac9357c23d9d1ce020b0cad5f509", 0x96}, {&(0x7f0000002ac0)="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", 0x1005}, {&(0x7f0000000600)="30ae8a16ae80e5474c4f34329bf6ac5a5bd47dddbc9ff04c9d7f774d00155bf6fc47625c212a95758554bd5e28bdd8c3a5a7cdc4eb9f0869b873a3e2455c51e7bbd2ab0a16e85a78f085511cb24c377af02b4d922758985bb2511e02446b5d7fb17df591dc76d36967103eab298f94625b5c55565c75456017cf5574c23125e719981068643da5a85e7050b1acb310bf", 0x90}, {&(0x7f0000000180)="3530af6db178e62865c5850707dcefe51b82e3d018d0072721b08782301c4e02aac746a6b24e5e72ec624fb250a59fcde019a8bcd637dfb517b18a644409ee74e66057320bdac56c07a8658e24cbeb043d9a6be4aa94297f9e9c21c355fd8d5cd24c55e08e0bdef70651911e2a566d0ae3", 0x71}], 0x3}}], 0x1, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0x2, &(0x7f0000001340)="c10507c2", 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000100000000000000000002000000000064f3000000000800050000000000"], 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.352194718s ago: executing program 3 (id=2275): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}}, 0x20000040) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19a9e5431edb5115e4030000000400000008000000080000373334f0327a3e764dbda9000000000013d01cf7cfd202674f5807f4b9255616c86195a8424f7b5e331bd7114a8ed2fe1082cb5d5f20e89f78a7a4d2027d1810bf492a41712f35a33a47710fb0c3927c6a428aa648f5fbc5ed9f", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x4000000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r6, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2208008a}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20020880) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.153994111s ago: executing program 3 (id=2276): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}}, 0x20000040) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19a9e5431edb5115e4030000000400000008000000080000373334f0327a3e764dbda9000000000013d01cf7cfd202674f5807f4b9255616c86195a8424f7b5e331bd7114a8ed2fe1082cb5d5f20e89f78a7a4d2027d1810bf492a41712f35a33a47710fb0c3927c6a428aa648f5fbc5ed9f", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x4000000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r6, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2208008a}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20020880) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.040675662s ago: executing program 4 (id=2277): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 931.820188ms ago: executing program 3 (id=2278): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000e000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="01af122f732948be24"], 0x50) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0xffffffffffffff42, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/net\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a000000c8000000040000000300000000000000", @ANYRES32=r0, @ANYBLOB="0700000000000000000000000000000000ade3e845d4ff0526c2c2f7400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="565daaaaaaaaaa9faaaaaaaa86dd60d07f5de9abd03a9765347ad5cef85be72dc60849c508aa8cc55c050ac10a594e136073f5c5ac451846e924a5ff1bf418af3915679badfae414167b46241afdfdb7b2d4c004c65cac3895e261374aed58"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001200010000000000000000000a0002004e244e22ffffffff0600"/56, @ANYRES32=0x0, @ANYBLOB="fffff2ff030050e0735b00100040000008000300cec3"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) setsockopt$inet_tcp_buf(r7, 0x6, 0x8, &(0x7f0000001740)="7e836b0b", 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x8, 0x0, &(0x7f0000001b80)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb712000008000000b703000001000000850000002d000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r9}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xc, 0x4000010, r10, 0x0) 862.842538ms ago: executing program 4 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000006006600c78800001a00330098"], 0x50}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)={0x1594, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1a4, 0x2a, [@random={0x7f, 0x74, "ff8c0495b31b5b1412d0a91e9783f2c2d39a61c9b5c4d4bddb255d43446084eab370f1bd38d513f50b4d0700308bdf42edaff994dae2a64a8d1f50e448b279772eafe79262a389c501a79202575f7ac1a047a138611d2848da4f8a612dd5b1e4fd615911b6a0576d6bdd5ff6ddcde2a6fcd64a22"}, @measure_req={0x26, 0xee, {0x5, 0xe9, 0x4, "d465a729d04d762e98d63753e39f4b6d66d0850cb40efe1a435838a5fd9920291ee9e4e5e534c60fa98631f86f5b119f58e0674b55047741d3e98b7532169461c0fd6ee4e2562be4a2259c34d538cad0552b685fb52ebed48e92363adc2878785acd0842661aa0ac5f204d22d70881a9a6dee9c44bbb594288df3ed60d9f787bfecc724c03a2838285bb76577bc943b5e9fb0f0d4e7435bacf54c65e3aa3ef9646ab0c0b0be4a500db3f1bf8887873d8f9216cf39358fa4472c458ee4498a862eeb2962c4dc8b3d134cf48aa91c425f0ce9e6202834332bd147901551cf95ff8fc43331a8424c67a722038"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x56, 0x68}}, @dsss={0x3, 0x1, 0xa9}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x10, {0xc71, "05a96ea42cfe", @short="9c7fb9acc1c993ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0x1e, 0xfa, "e6dd54c6084bdafe1f920df31fe6c8cc46daec80f00249da7bf0"}, @NL80211_ATTR_FILS_ERP_RRK={0x2a, 0xfc, "735e6af331049e9368cbbfaba97f47e181c1d6e2954d68328ceb87fdd97c941d7ba680f86bc8"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_IE={0x242, 0x2a, [@erp={0x2a, 0x1}, @cf={0x4, 0x6, {0x5, 0xb8, 0x401, 0xc13f}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x61}}, @random_vendor={0xdd, 0xcc, "d37ec6c1723ec41282717c369793893b0d86eb93e27328b2a6f026008627aa54d7f4bf23ae9d64fe580bf7f53f2d13d0066172f14fe4930dcd8c5bdcee4864cf9f45ae85d16d41e72d03bf288c19e12b10a936e6761f2c01f96846134712b583977403b8a679f087b620364eff92d30fa2e94105a0d5888055e95d83c98f3fb584512f290fef808a9ace08ce2eba41c4ca08cfa6e9cf471b9266c22d84415411a40657721d4921be712da76b2f19db681a2f475c94c1720a04691faf37353811621657189dd4667af11e4936"}, @preq={0x82, 0x8e, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x6, 0x9, @device_a, 0x0, @value=@broadcast, 0x415, 0x2, 0xa, [{{0x1, 0x0, 0x1}, @device_a, 0x7ff}, {{}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0xff}, {{0x0, 0x0, 0x1}, @broadcast, 0x3d26}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffc}, {{0x1}, @device_b, 0xfffffff3}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x9, 0x4}, 0x1, 0x3}}, @random_vendor={0xdd, 0x8f, "b8ab9cf234082256f58a367c82595fd3c66f6c1c98efa84c49837ec3be9a9314d793ae74274c1d7410f74f1005ecacff4af761ef54183a35ff9f992956b26cfe1291fc9a0d6eb9b37a4c10d7bf1f979003c79768be4794e9fb5a636d056db6e98bf510550c45a54b54ae90deb4ae25edfac1818378408992ad962e432d36fc58aef9b47d0f8b98f6d2ed9111dc0f42"}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x7, 0x0, {0x2, 0x8, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x3, 0xf6}}]}, @NL80211_ATTR_IE={0x12e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x7, 0xd8}}, @prep={0x83, 0x1f, {{}, 0xc0, 0x1, @device_b, 0xdd, @void, 0x97c, 0x2, @device_a, 0x7ff}}, @cf={0x4, 0x6, {0x4, 0x81, 0x7ff, 0x6e}}, @ibss={0x6, 0x2, 0x1000}, @measure_req={0x26, 0xd4, {0x91, 0x3, 0x8, "db587bfa72d1296607733b25f677f7b37facf14795cafd9334d862619721f2a00bf949434245482fbd84c67d173a9df21c593ea9299a2174323fd23aba9232cf5ad231b32bd7399e5b8e76ca77da5932b60f1bb87590ecca458c419e64fbcfdfa615474f59f1d75a87dd3689cf0a14b5fe9dcaf2dc518830e1435ce83bcc1aab0d77c4c7f6701169e0d9c9ad0275f58789f5bdbfb3a76e2aa702290f97c2af6f0041aafc9d004bb8ec7c2277901f9ac809ad66bf11c7b694f3243ca577fbb85c83c567535a7a23eaca289e2e8beca6e0c4"}}, @prep={0x83, 0x1f, {{}, 0x8, 0x3, @device_a, 0x3, @void, 0x1, 0x9, @broadcast, 0xff}}]}]}, 0x1594}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x9403, 0x3002, 0x300, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x48, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x8, 0x3, 0x8001, '\x00', 'syz1\x00', {0x73c1}}}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xff000000, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100280f7009000000001000000008000300", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0xc5149aae0af4b1cf}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c844}, 0x20048890) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x25019f28231cd87e) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r13}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="09000000130a010300000000000000000200"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 738.759692ms ago: executing program 2 (id=2280): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x72}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x645315fd37a34662, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x5}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5e, 0x9, 0x4d2652b7, 0x0, 0x80, 0x8, 0x7, 0xfffff989]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:chfn_exec_t:s0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xfe, 0x80, '\x00', 0x2c}, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'caif0\x00', 'geneve0\x00', {}, {}, 0x0, 0x4, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 730.650532ms ago: executing program 3 (id=2281): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x818) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) 687.082059ms ago: executing program 0 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030426bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800b0001006d616373656300002000028005000600030000000c00010001000000000000000500070005"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 640.162838ms ago: executing program 4 (id=2283): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000069"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f6"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 612.394796ms ago: executing program 1 (id=2284): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 534.634939ms ago: executing program 2 (id=2285): r0 = socket(0x2b, 0x80801, 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x6, 0x0}, 0x8) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r2, &(0x7f00000007c0)="65c0c15440154ddc592e96c36a9d031e35969885746a12541bb726179e78c3c6cd79599c1ddfea64ecb438fc24ef9497e0b291ce9233cd1d0430b82a1fa7a268084f150d785dedabb4ddd945a4352905d23d6444a015730ecff8473c5aa4f89880a6f36cabebce8c7e0c335b1227f9d5ce7da294ab3477b4a2c06204394cf9dc64fe10e8c18f8d647b8a4fc2142bed446e4b06dd8dca79acfb1e5183b4cad2c017855ec12dd06896eec58120e68e0a1085889880fd36074ed1e4e5b7c1b24bb079d75083e31b39a000949c2f139bbb6e2a6bc6d43c2ca93d578acc7f852c72732c2ee5b7b97bc58b91de2e"}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x400001, 0x18}, 0xc) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'ipvlan1\x00', @random}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) unshare(0x62040200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000300)={&(0x7f00000009c0)=@newtaction={0xd8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xc4}]}, 0xd8}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00)) sendmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6c}}], 0x1, 0x4004010) socket$netlink(0x10, 0x3, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r6, 0x0, 0x20000000}, 0x20) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x40002021, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0xd0, 0x0, 0x168, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="928091451ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x23, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xff, 0x1, 0xa}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0x33f1ed9a02318a7b}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 479.200153ms ago: executing program 0 (id=2286): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}}, 0x20000040) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19a9e5431edb5115e4030000000400000008000000080000373334f0327a3e764dbda9000000000013d01cf7cfd202674f5807f4b9255616c86195a8424f7b5e331bd7114a8ed2fe1082cb5d5f20e89f78a7a4d2027d1810bf492a41712f35a33a47710fb0c3927c6a428aa648f5fbc5ed9f", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x4000000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r6, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2208008a}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20020880) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 415.424353ms ago: executing program 3 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r7 = socket(0x28, 0x805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc050}, 0x4080) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, 0x1404, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x10) recvmmsg$unix(r7, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000300)}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/180, 0xfffffe61}, {&(0x7f0000000600)=""/62, 0x3e}], 0x9, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000640)}, {&(0x7f0000003240)=""/144, 0x90}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000002d00)=""/227, 0xe3}, {&(0x7f0000002e00)=""/176, 0xb0}, {&(0x7f0000002ec0)=""/5, 0x5}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)=""/180, 0xb4}], 0x9, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x101, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000d5437f47a8062181fe52bce4b930dfe94284119c999313fb75389b2db241c16fa3d17e97cceb21ae46ed8cc859235c1c4529beff20ad1af11ad7b1a17851e065dc08c8a4edbf9651e4cdae19417bc7dab6a41f575acd4cc59afc0df67189276b20c7027fa1ba3d77c4297847b8befd373bafc5cd8a73"], 0x30, 0x8885}, 0x40041) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xffff, 0x0, 0x7}, 0x8) sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x7e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) 395.254399ms ago: executing program 1 (id=2288): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000], [], 'netpci0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x230, 0x278, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x9, 0xcaa, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) 291.210776ms ago: executing program 4 (id=2289): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 204.535965ms ago: executing program 0 (id=2290): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000001380)="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", 0x1d5}, {&(0x7f0000000180)="1234009951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf3", 0x1d}, {&(0x7f0000000a40)="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", 0x119}, {&(0x7f00000000c0)="34aee9481de8a117754dc842aae478c2dbc4b9ad3ff6e07137505660208a006823c2f01f8bfeac806893", 0x2a}], 0x5}}], 0x1, 0x0) 1.028781ms ago: executing program 1 (id=2291): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x22020600) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xd) (fail_nth: 2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 0s ago: executing program 4 (id=2292): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x320, 0x4, 0x0, 0x1, [{0x31c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x308, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0x1f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "79531ab0420aa8aa0bd30592c19661e8f6bf722be7a8b513f8084af4bec163c90ee0eb7efd6f00018e6f5de881db1ed8d4b97ef6bd4136c41a9c1be6ea19ad150dce752cbabbf72095bfb668c5d245d9eb4ce2ee3c278e9c1dd1a7dffbafb95958258476078ccb4761"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "cc39962c3772610990ac00311d58f67e332f50fea25ea7bb4654be96843a8607875093fdf76e51d2bc95ae2bed6d99c4b07870fe2e4738acaf8ed2fe6ce4715b46242e442f0c6831140b784b49f537fb5bcc78c83cf3bc0f32c294abc5fda657212173633135e057f6b64bae86c57651fe7c2b92b7dca32dae06b201a343dfc66fa46424a6b6174f6b3c6c45e5c3d56230774ab9c78c6e8a6acb31ba0c2451042f20da347ef53800f7e854722e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "35cdd75a3062a450798f652d4cb0d5619f43df4c6a95387f7c9844a911b6954e4f3a0d4f8a8e6ee99da29fdf0f81e85681dfe025b603eaa408c51486ec50c2c414ae898382eb5f1ed1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "83537ea00535d41e8681967e91256ab753708f2c404fe516edbb0d7a9a56fb7f1898222f75c9d1145182496bb7aa9442e37e71cc68a50a10672eef3046796dfa6547455f65d696587c03b22026592b602426b5cf4fe651cd06"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}]}}}]}]}], {0x14}}, 0x374}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c01ab, &(0x7f0000000080)=[{&(0x7f0000000980)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 'syz.0.773': attribute type 1 has an invalid length. [ 197.864785][ T9277] xt_recent: Unsupported userspace flags (00000048) [ 197.894774][ T9279] netlink: 'syz.4.779': attribute type 21 has an invalid length. [ 197.953132][ T9279] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 198.374814][ T9305] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 198.780478][ T9323] netlink: 'syz.4.793': attribute type 21 has an invalid length. [ 198.898343][ T9327] xt_recent: Unsupported userspace flags (00000048) [ 198.949441][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 199.078547][ T9334] nbd: nbd64 already in use [ 199.400747][ T9355] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 199.706063][ T9372] netlink: 'syz.3.807': attribute type 11 has an invalid length. [ 200.410121][ T9406] __nla_validate_parse: 8 callbacks suppressed [ 200.410141][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 200.470751][ T9406] xt_recent: Unsupported userspace flags (00000048) [ 200.501298][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 200.600329][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 200.677633][ T9409] nbd: device at index 64 is going down [ 200.698622][ T9417] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 200.927826][ T9434] validate_nla: 5 callbacks suppressed [ 200.927844][ T9434] netlink: 'syz.3.822': attribute type 21 has an invalid length. [ 201.120672][ T9436] syzkaller0: entered promiscuous mode [ 201.139029][ T9436] syzkaller0: entered allmulticast mode [ 201.158048][ T9434] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 201.320260][ T9449] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 201.380997][ T9453] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 201.389291][ T9453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'. [ 201.436264][ T9458] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 201.714540][ T9472] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 201.847386][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 201.945359][ T9483] xt_recent: Unsupported userspace flags (00000048) [ 201.968656][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 202.035001][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 202.052375][ T9487] nbd: device at index 64 is going down [ 202.075270][ T9483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.837'. [ 202.456256][ T9505] netlink: 'syz.2.842': attribute type 21 has an invalid length. [ 202.554273][ T9508] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 202.922127][ T9518] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 203.595669][ T9505] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 203.885748][ T9533] netlink: 'syz.4.853': attribute type 11 has an invalid length. [ 203.933969][ T9533] netlink: 224 bytes leftover after parsing attributes in process `syz.4.853'. [ 203.953663][ T9541] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 203.965587][ T9543] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 204.296763][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 204.339381][ T9557] xt_recent: Unsupported userspace flags (00000048) [ 204.359615][ T9563] netlink: 'syz.2.861': attribute type 21 has an invalid length. [ 204.371469][ T9564] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 204.420709][ T9557] nbd: device at index 64 is going down [ 205.303403][ T9601] xt_recent: Unsupported userspace flags (00000048) [ 205.382155][ T9604] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 205.463255][ T9607] netlink: 'syz.2.878': attribute type 11 has an invalid length. [ 205.471033][ T9607] __nla_validate_parse: 6 callbacks suppressed [ 205.471046][ T9607] netlink: 224 bytes leftover after parsing attributes in process `syz.2.878'. [ 205.541099][ T9619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.880'. [ 205.898958][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.876'. [ 206.285587][ T9649] validate_nla: 5 callbacks suppressed [ 206.285605][ T9649] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 206.499350][ T9656] netlink: 'syz.1.888': attribute type 21 has an invalid length. [ 206.539969][ T9663] netlink: 96 bytes leftover after parsing attributes in process `syz.2.892'. [ 206.541123][ T9656] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 206.572269][ T9665] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 206.883816][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 206.919219][ T9678] xt_recent: Unsupported userspace flags (00000048) [ 206.956376][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 207.058251][ T9691] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 207.086689][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 207.117973][ T9678] nbd: nbd64 already in use [ 207.131087][ T9678] netlink: 64 bytes leftover after parsing attributes in process `syz.4.896'. [ 207.217741][ T9694] netlink: 'syz.0.902': attribute type 11 has an invalid length. [ 207.225662][ T9694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.902'. [ 207.293930][ T9704] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 207.386382][ T9707] netlink: 96 bytes leftover after parsing attributes in process `syz.4.904'. [ 207.646076][ T9718] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 207.679000][ T9724] netlink: 'syz.3.907': attribute type 21 has an invalid length. [ 207.722861][ T9724] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 208.197588][ T9742] xt_recent: Unsupported userspace flags (00000048) [ 208.552464][ T9761] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 208.572818][ T9762] netlink: 'syz.4.921': attribute type 21 has an invalid length. [ 208.608069][ T9762] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 209.149001][ T9786] netlink: 'syz.1.929': attribute type 11 has an invalid length. [ 209.216932][ T9792] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 209.392164][ T9802] xt_recent: Unsupported userspace flags (00000048) [ 209.604407][ T9805] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 210.155679][ T9825] bond1: entered promiscuous mode [ 210.161139][ T9825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.447907][ T9825] bond1 (unregistering): Released all slaves [ 210.644289][ T9832] syzkaller0: entered promiscuous mode [ 210.659014][ T9832] syzkaller0: entered allmulticast mode [ 210.896912][ T9865] __nla_validate_parse: 13 callbacks suppressed [ 210.896928][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 210.917132][ T9862] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 211.009342][ T9872] xt_recent: Unsupported userspace flags (00000048) [ 211.070308][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 211.282120][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 212.062798][ T9908] validate_nla: 4 callbacks suppressed [ 212.062816][ T9908] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 212.199727][ T9910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.960'. [ 212.207941][ T9912] netlink: 'syz.3.961': attribute type 21 has an invalid length. [ 212.273057][ T9913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.961'. [ 212.903485][ T9912] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 213.380859][ T9934] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 213.458325][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 213.497130][ T9945] xt_recent: Unsupported userspace flags (00000048) [ 213.541764][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 213.554066][ T9947] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 213.590766][ T9955] netlink: 96 bytes leftover after parsing attributes in process `syz.0.975'. [ 213.605745][ T9954] netlink: 'syz.2.976': attribute type 21 has an invalid length. [ 213.653975][ T9954] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 213.674661][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 213.734181][ T9954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.976'. [ 213.773085][ T9956] nbd: device at index 64 is going down [ 213.876665][ T9958] syzkaller0: entered promiscuous mode [ 213.920454][ T9958] syzkaller0: entered allmulticast mode [ 214.397728][ T9987] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 214.432229][ T9989] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 214.529489][ T9991] netlink: 'syz.3.988': attribute type 11 has an invalid length. [ 214.587990][ T9993] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 215.733452][T10003] netlink: 'syz.1.990': attribute type 21 has an invalid length. [ 215.789271][T10003] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 216.276911][T10033] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 216.286617][T10031] syzkaller0: entered promiscuous mode [ 216.292740][T10031] syzkaller0: entered allmulticast mode [ 216.441464][T10045] netlink: 'syz.0.1004': attribute type 11 has an invalid length. [ 216.454028][T10045] __nla_validate_parse: 4 callbacks suppressed [ 216.454043][T10045] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1004'. [ 216.769584][T10055] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1005'. [ 217.701536][T10042] syzkaller0: entered promiscuous mode [ 217.707249][T10042] syzkaller0: entered allmulticast mode [ 217.844381][T10059] validate_nla: 2 callbacks suppressed [ 217.844400][T10059] netlink: 'syz.2.1006': attribute type 21 has an invalid length. [ 217.949145][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 218.015144][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 219.215346][T10059] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 219.248629][T10068] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 219.509077][T10093] netlink: 'syz.3.1012': attribute type 1 has an invalid length. [ 219.535573][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 219.589840][T10098] xt_recent: Unsupported userspace flags (00000048) [ 219.638083][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1015'. [ 219.707573][T10101] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 219.756320][T10105] syzkaller0: entered promiscuous mode [ 219.761847][T10105] syzkaller0: entered allmulticast mode [ 219.777724][T10107] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1019'. [ 219.781324][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1015'. [ 219.822576][T10098] nbd: device at index 64 is going down [ 219.859782][T10112] netlink: 'syz.3.1020': attribute type 11 has an invalid length. [ 219.869650][T10112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1020'. [ 219.918389][T10119] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 219.927686][T10094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1015'. [ 221.480258][T10135] netlink: 'syz.2.1021': attribute type 21 has an invalid length. [ 221.500805][T10135] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 221.535228][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 221.557078][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1023'. [ 221.654283][T10139] bond1: entered promiscuous mode [ 221.673455][T10139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.759816][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 221.832921][T10150] syzkaller0: entered promiscuous mode [ 221.841309][T10156] xt_recent: Unsupported userspace flags (00000048) [ 221.889410][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 221.915049][T10150] syzkaller0: entered allmulticast mode [ 221.977420][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 222.048491][T10165] nbd: device at index 64 is going down [ 222.058688][T10174] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 222.323918][T10181] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 222.358938][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 222.416818][T10187] netlink: 'syz.4.1035': attribute type 11 has an invalid length. [ 222.429213][T10187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1035'. [ 222.441761][T10190] xt_recent: Unsupported userspace flags (00000048) [ 222.443361][T10189] netlink: 'syz.3.1036': attribute type 21 has an invalid length. [ 222.469387][T10192] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 222.502316][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 223.599289][T10189] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 223.914141][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'. [ 224.027899][T10218] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 224.051822][T10209] bond1: entered promiscuous mode [ 224.068394][T10209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.356893][T10239] netlink: 'syz.2.1050': attribute type 21 has an invalid length. [ 224.381681][T10234] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 224.413981][T10240] netlink: 'syz.1.1051': attribute type 11 has an invalid length. [ 224.432170][T10240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1051'. [ 224.474136][T10246] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 224.486507][T10231] syzkaller0: entered promiscuous mode [ 224.492883][T10231] syzkaller0: entered allmulticast mode [ 224.512519][T10239] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 224.723308][T10255] xt_recent: Unsupported userspace flags (00000048) [ 224.792300][T10255] nbd: device at index 64 is going down [ 225.058983][T10269] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 227.259973][T10279] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 227.420340][T10302] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 227.430820][T10306] netlink: 'syz.3.1065': attribute type 21 has an invalid length. [ 227.483649][T10306] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 227.550782][T10306] __nla_validate_parse: 7 callbacks suppressed [ 227.550798][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 227.638660][T10315] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 227.654345][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 227.677305][T10316] xt_recent: Unsupported userspace flags (00000048) [ 227.724451][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 227.878887][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 227.953161][T10320] nbd: device at index 64 is going down [ 228.265143][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 228.291414][T10345] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 228.300160][T10345] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1077'. [ 228.347611][T10351] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 228.353047][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1075'. [ 228.473240][T10352] syzkaller0: entered promiscuous mode [ 228.485946][T10352] syzkaller0: entered allmulticast mode [ 228.637311][T10342] bond1: entered promiscuous mode [ 228.697580][T10342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.713330][T10361] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 228.764946][T10363] netlink: 'syz.3.1081': attribute type 21 has an invalid length. [ 228.820545][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 229.009373][T10371] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 229.190039][T10375] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1085'. [ 230.111058][T10363] netlink: 'syz.3.1081': attribute type 1 has an invalid length. [ 230.295222][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 230.324668][T10380] xt_recent: Unsupported userspace flags (00000048) [ 230.418831][T10391] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 230.477051][T10394] nbd: device at index 64 is going down [ 230.490563][T10391] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 230.770210][T10408] bond1: entered promiscuous mode [ 230.811385][T10408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.894993][T10418] tipc: Enabled bearer , priority 0 [ 230.957523][T10421] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 231.021337][T10418] syzkaller0: entered promiscuous mode [ 231.030407][T10418] syzkaller0: entered allmulticast mode [ 231.041216][T10418] tipc: Resetting bearer [ 231.104858][T10428] netlink: 'syz.3.1097': attribute type 21 has an invalid length. [ 231.226706][T10433] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 232.404287][T10428] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 232.432649][ T3480] tipc: Resetting bearer [ 232.610027][T10440] syzkaller0: entered promiscuous mode [ 232.625911][T10440] syzkaller0: entered allmulticast mode [ 232.650196][T10455] __nla_validate_parse: 7 callbacks suppressed [ 232.650214][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.732240][T10459] xt_recent: Unsupported userspace flags (00000048) [ 232.745844][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.798583][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.811865][T10459] nbd: nbd64 already in use [ 232.839163][T10459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1104'. [ 234.022609][T10417] tipc: Resetting bearer [ 234.042588][T10417] tipc: Disabling bearer [ 234.259200][T10480] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 234.287625][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 234.313422][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1106'. [ 234.425052][T10483] bond2: entered promiscuous mode [ 234.444989][T10483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.476661][T10495] netlink: 'syz.3.1111': attribute type 21 has an invalid length. [ 234.498473][T10491] netlink: 'syz.1.1110': attribute type 11 has an invalid length. [ 234.529974][T10495] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 234.536453][T10491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1110'. [ 234.630617][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 234.647461][T10501] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 234.799532][T10504] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1112'. [ 235.620304][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 235.641313][T10522] syzkaller0: entered promiscuous mode [ 235.651984][T10522] syzkaller0: entered allmulticast mode [ 235.686567][T10530] xt_recent: Unsupported userspace flags (00000048) [ 237.175627][T10531] tipc: Enabled bearer , priority 0 [ 237.261672][T10538] syzkaller0: entered promiscuous mode [ 237.301097][T10538] syzkaller0: entered allmulticast mode [ 237.317230][T10538] tipc: Resetting bearer [ 237.329858][T10572] netlink: 'syz.0.1124': attribute type 21 has an invalid length. [ 237.448241][T10577] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 238.578279][ T12] tipc: Resetting bearer [ 238.585105][T10528] tipc: Resetting bearer [ 238.598848][T10528] tipc: Disabling bearer [ 238.610012][T10570] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 238.610289][T10572] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 238.877132][T10601] __nla_validate_parse: 3 callbacks suppressed [ 238.877149][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 238.951774][T10601] xt_recent: Unsupported userspace flags (00000048) [ 238.987943][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 239.066756][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 239.134322][T10611] nbd: device at index 64 is going down [ 239.205369][T10601] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 239.324486][T10622] netlink: 'syz.1.1138': attribute type 11 has an invalid length. [ 239.333838][T10613] syzkaller0: entered promiscuous mode [ 239.339345][T10613] syzkaller0: entered allmulticast mode [ 239.373060][T10622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1138'. [ 239.428113][T10630] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 239.609491][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 239.653249][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1140'. [ 240.899863][T10635] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 241.131813][T10644] tipc: Enabled bearer , priority 0 [ 241.153205][T10657] netlink: 'syz.2.1144': attribute type 21 has an invalid length. [ 241.197162][T10657] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 241.325375][T10663] syzkaller0: entered promiscuous mode [ 241.330894][T10663] syzkaller0: entered allmulticast mode [ 241.342096][T10663] tipc: Resetting bearer [ 241.524889][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 241.580272][T10677] xt_recent: Unsupported userspace flags (00000048) [ 241.603496][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1151'. [ 241.644885][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 241.686005][T10681] nbd: device at index 64 is going down [ 242.316839][T10687] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 242.880376][T10680] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 242.892153][ T407] tipc: Resetting bearer [ 242.977885][T10643] tipc: Resetting bearer [ 243.040314][T10643] tipc: Disabling bearer [ 243.208535][T10705] netlink: 'syz.4.1159': attribute type 21 has an invalid length. [ 243.228534][T10699] syzkaller0: entered promiscuous mode [ 243.234121][T10699] syzkaller0: entered allmulticast mode [ 243.241261][T10705] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 243.407992][T10714] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 244.381159][T10735] xt_recent: Unsupported userspace flags (00000048) [ 244.846022][T10722] tipc: Enabling of bearer rejected, failed to enable media [ 244.890620][T10728] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 245.161566][T10749] tipc: Enabled bearer , priority 0 [ 245.251650][T10756] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 245.260381][T10758] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 245.318633][T10755] syzkaller0: entered promiscuous mode [ 245.327504][T10755] syzkaller0: entered allmulticast mode [ 245.345766][T10755] tipc: Resetting bearer [ 245.363194][T10756] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 245.478587][T10769] __nla_validate_parse: 3 callbacks suppressed [ 245.478608][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 246.667285][T10770] tipc: Enabled bearer , priority 0 [ 246.674636][T10769] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 246.731761][T10773] syzkaller0: entered promiscuous mode [ 246.761264][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 246.775541][T10773] syzkaller0: entered allmulticast mode [ 246.781631][T10773] tipc: Resetting bearer [ 246.819050][T10788] xt_recent: Unsupported userspace flags (00000048) [ 246.847012][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 246.927044][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 246.960428][T10792] nbd: device at index 64 is going down [ 246.975442][T10788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1182'. [ 248.371230][ T53] tipc: Resetting bearer [ 248.379542][ T53] tipc: Resetting bearer [ 248.388632][T10760] tipc: Resetting bearer [ 248.401998][T10760] tipc: Disabling bearer [ 248.416680][T10746] tipc: Resetting bearer [ 248.483865][T10746] tipc: Disabling bearer [ 248.590680][T10811] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 248.771824][T10818] netlink: 'syz.3.1190': attribute type 21 has an invalid length. [ 248.801011][T10818] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 248.916339][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1194'. [ 248.966980][T10829] bond3: entered promiscuous mode [ 249.049791][T10829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.218588][T10845] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 249.609179][T10861] tipc: Enabled bearer , priority 0 [ 249.660803][T10863] netlink: 'syz.3.1203': attribute type 11 has an invalid length. [ 249.713307][T10863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1203'. [ 249.857536][T10861] syzkaller0: entered promiscuous mode [ 249.899230][T10861] syzkaller0: entered allmulticast mode [ 249.926590][T10861] tipc: Resetting bearer [ 250.077889][T10866] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 250.500463][T10876] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 251.865659][ T12] tipc: Resetting bearer [ 251.885010][T10859] tipc: Resetting bearer [ 251.974449][T10859] tipc: Disabling bearer [ 252.019917][T10882] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 252.332030][T10891] syzkaller0: entered promiscuous mode [ 252.346542][T10891] syzkaller0: entered allmulticast mode [ 253.539107][T10922] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 254.819587][T10931] netlink: 'syz.1.1219': attribute type 11 has an invalid length. [ 254.827623][T10931] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1219'. [ 254.882607][T10936] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 254.926912][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1221'. [ 255.069183][T10934] bond1: entered promiscuous mode [ 255.074706][T10934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.082330][T10938] tipc: Enabled bearer , priority 0 [ 255.292915][T10948] netlink: 'syz.0.1223': attribute type 11 has an invalid length. [ 255.314349][T10945] syzkaller0: entered promiscuous mode [ 255.319958][T10945] syzkaller0: entered allmulticast mode [ 255.326617][T10945] tipc: Resetting bearer [ 255.341111][T10948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1223'. [ 255.751609][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758647][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.852101][T10973] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 257.514927][ T53] tipc: Resetting bearer [ 257.526536][T10935] tipc: Resetting bearer [ 257.539689][T10935] tipc: Disabling bearer [ 257.581125][T10972] netlink: 'syz.1.1225': attribute type 11 has an invalid length. [ 257.606923][T10972] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1225'. [ 258.011401][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 258.022822][T10997] netlink: 'syz.0.1232': attribute type 11 has an invalid length. [ 258.028545][T11002] xt_recent: Unsupported userspace flags (00000048) [ 258.053055][T10997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1232'. [ 258.100626][T11004] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 258.219666][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 258.254972][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 258.319801][T11015] bond2: entered promiscuous mode [ 258.325435][T11015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.544478][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 258.609178][T11023] syzkaller0: entered promiscuous mode [ 258.633016][T11023] syzkaller0: entered allmulticast mode [ 258.642296][T11031] xt_recent: Unsupported userspace flags (00000048) [ 258.660059][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 258.752633][T11025] nbd: nbd64 already in use [ 259.991115][T11029] tipc: Enabled bearer , priority 0 [ 260.093229][T11034] syzkaller0: entered promiscuous mode [ 260.098832][T11034] syzkaller0: entered allmulticast mode [ 260.108972][T11034] tipc: Resetting bearer [ 260.125547][T11013] lo speed is unknown, defaulting to 1000 [ 261.607262][T11027] tipc: Resetting bearer [ 261.624331][T11027] tipc: Disabling bearer [ 261.658463][T11053] tipc: Enabling of bearer rejected, failed to enable media [ 261.767784][T11054] syzkaller0: entered promiscuous mode [ 261.773233][T11085] netlink: 'syz.4.1249': attribute type 21 has an invalid length. [ 261.788548][T11054] syzkaller0: entered allmulticast mode [ 262.929999][T11085] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 263.002471][T11091] dvmrp0: entered allmulticast mode [ 263.057558][T11092] dvmrp0: left allmulticast mode [ 263.113632][T11096] __nla_validate_parse: 1 callbacks suppressed [ 263.113650][T11096] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1253'. [ 263.329469][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 263.334572][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 263.368901][T11110] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 263.376877][T11110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 263.405841][T11106] xt_recent: Unsupported userspace flags (00000048) [ 263.425107][T11108] xt_recent: Unsupported userspace flags (00000048) [ 263.436304][T11113] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 263.456478][T11113] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 263.815881][T11115] syzkaller0: entered promiscuous mode [ 263.821551][T11115] syzkaller0: entered allmulticast mode [ 264.422460][T11147] delete_channel: no stack [ 265.594604][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 265.644710][T11168] xt_recent: Unsupported userspace flags (00000048) [ 265.686892][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1271'. [ 265.869565][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1271'. [ 265.920193][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 265.974261][T11180] nbd: device at index 64 is going down [ 265.989512][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 266.033923][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 266.205759][T11203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.257998][T11197] syzkaller0: entered promiscuous mode [ 266.289075][T11197] syzkaller0: entered allmulticast mode [ 268.206400][T11240] FAULT_INJECTION: forcing a failure. [ 268.206400][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 268.293951][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.1.1289 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 268.294000][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.294033][T11240] Call Trace: [ 268.294040][T11240] [ 268.294049][T11240] dump_stack_lvl+0x189/0x250 [ 268.294081][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.294104][T11240] ? __pfx__printk+0x10/0x10 [ 268.294134][T11240] should_fail_ex+0x414/0x560 [ 268.294164][T11240] _copy_to_user+0x31/0xb0 [ 268.294187][T11240] simple_read_from_buffer+0xe1/0x170 [ 268.294213][T11240] proc_fail_nth_read+0x1df/0x250 [ 268.294238][T11240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.294263][T11240] ? rw_verify_area+0x258/0x650 [ 268.294279][T11240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.294303][T11240] vfs_read+0x1fd/0x980 [ 268.294327][T11240] ? __pfx___mutex_lock+0x10/0x10 [ 268.294348][T11240] ? __pfx_vfs_read+0x10/0x10 [ 268.294367][T11240] ? __fget_files+0x2a/0x420 [ 268.294392][T11240] ? __fget_files+0x3a0/0x420 [ 268.294410][T11240] ? __fget_files+0x2a/0x420 [ 268.294439][T11240] ksys_read+0x145/0x250 [ 268.294459][T11240] ? __pfx_ksys_read+0x10/0x10 [ 268.294480][T11240] ? do_syscall_64+0xba/0x210 [ 268.294505][T11240] do_syscall_64+0xf6/0x210 [ 268.294525][T11240] ? clear_bhb_loop+0x45/0xa0 [ 268.294546][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.294561][T11240] RIP: 0033:0x7f9b4f78d37c [ 268.294576][T11240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.294590][T11240] RSP: 002b:00007f9b505cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.294608][T11240] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78d37c [ 268.294621][T11240] RDX: 000000000000000f RSI: 00007f9b505cb0a0 RDI: 0000000000000003 [ 268.294631][T11240] RBP: 00007f9b505cb090 R08: 0000000000000000 R09: 0000000000000000 [ 268.294642][T11240] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.294652][T11240] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 268.294680][T11240] [ 268.646009][T11213] lo speed is unknown, defaulting to 1000 [ 268.957305][T11266] __nla_validate_parse: 32 callbacks suppressed [ 268.957325][T11266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1299'. [ 269.250866][T11280] netlink: 'syz.4.1304': attribute type 11 has an invalid length. [ 269.290784][T11280] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1304'. [ 269.300888][T11282] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 269.314591][T11283] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 269.722086][T11298] netlink: 'syz.3.1307': attribute type 11 has an invalid length. [ 269.763611][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1307'. [ 269.791302][T11301] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 270.487997][T11315] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1314'. [ 270.789461][T11331] netlink: 'syz.0.1320': attribute type 11 has an invalid length. [ 270.823690][T11331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1320'. [ 270.871232][T11337] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 270.933233][T11342] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 270.943237][T11337] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 271.102931][T11349] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 271.376119][T11357] tipc: Enabled bearer , priority 0 [ 271.646170][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 271.678687][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1329'. [ 271.798717][T11357] syzkaller0: entered promiscuous mode [ 271.834390][T11357] syzkaller0: entered allmulticast mode [ 271.855148][T11357] tipc: Resetting bearer [ 273.087006][T11362] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 273.101404][T11348] lo speed is unknown, defaulting to 1000 [ 273.148188][T11356] tipc: Resetting bearer [ 273.241317][T11356] tipc: Disabling bearer [ 273.313526][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 273.775736][T11404] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 273.910775][T11387] syzkaller0: entered promiscuous mode [ 273.929521][T11387] syzkaller0: entered allmulticast mode [ 274.049012][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 274.138434][T11417] xt_recent: Unsupported userspace flags (00000048) [ 274.162050][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 274.259367][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'. [ 274.286615][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1344'. [ 275.909960][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 275.931469][T11423] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 275.959721][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 275.998637][T11450] syz_tun: entered allmulticast mode [ 276.025018][T11446] tipc: Enabled bearer , priority 0 [ 276.173920][T11456] netlink: 'syz.0.1349': attribute type 1 has an invalid length. [ 276.251476][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 276.261047][T11446] syzkaller0: entered promiscuous mode [ 276.269997][T11446] syzkaller0: entered allmulticast mode [ 276.282528][T11446] tipc: Resetting bearer [ 276.337897][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 278.325330][T11442] syz_tun: left allmulticast mode [ 278.347069][ T6616] tipc: Resetting bearer [ 278.358419][T11444] tipc: Resetting bearer [ 278.390086][T11444] tipc: Disabling bearer [ 278.744022][T11489] netlink: 'syz.4.1355': attribute type 11 has an invalid length. [ 278.761466][T11487] syzkaller0: entered promiscuous mode [ 278.768908][T11489] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1355'. [ 278.780021][T11487] syzkaller0: entered allmulticast mode [ 278.795768][T11495] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 278.817573][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'. [ 278.868237][T11490] syzkaller0: entered promiscuous mode [ 278.874707][T11490] syzkaller0: entered allmulticast mode [ 280.296114][T11494] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 281.796983][T11514] syzkaller0: entered promiscuous mode [ 281.826788][T11514] syzkaller0: entered allmulticast mode [ 281.923353][T11521] tipc: Enabled bearer , priority 0 [ 282.036990][T11521] syzkaller0: entered promiscuous mode [ 282.044749][T11521] syzkaller0: entered allmulticast mode [ 282.051074][T11521] tipc: Resetting bearer [ 282.077070][T11532] __nla_validate_parse: 1 callbacks suppressed [ 282.077088][T11532] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1369'. [ 283.540759][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1370'. [ 283.553297][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1370'. [ 284.765203][ T53] tipc: Resetting bearer [ 284.789264][T11520] tipc: Resetting bearer [ 284.846632][T11520] tipc: Disabling bearer [ 284.859089][T11569] netlink: 'syz.3.1374': attribute type 11 has an invalid length. [ 284.878203][T11569] netlink: 'syz.3.1374': attribute type 11 has an invalid length. [ 284.894066][T11549] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 284.902922][T11569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1374'. [ 285.119315][T11584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1374'. [ 285.163413][T11569] xt_CT: No such helper "pptp" [ 285.502365][T11596] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 285.610682][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 285.795946][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'. [ 285.808715][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1385'. [ 285.856775][T11609] bond2: entered promiscuous mode [ 285.862374][T11609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.867606][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 285.984211][T11615] xt_recent: Unsupported userspace flags (00000048) [ 286.051285][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 286.152169][T11623] nbd: nbd64 already in use [ 286.495084][T11648] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 287.004970][T11678] netlink: 'syz.2.1405': attribute type 11 has an invalid length. [ 287.061509][T11681] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 287.200333][T11690] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 287.269900][T11685] netlink: 'syz.3.1406': attribute type 11 has an invalid length. [ 287.343802][T11685] __nla_validate_parse: 4 callbacks suppressed [ 287.343819][T11685] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1406'. [ 287.405412][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 287.512144][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 287.551877][T11694] FAULT_INJECTION: forcing a failure. [ 287.551877][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 287.633056][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.4.1408 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 287.633083][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.633094][T11694] Call Trace: [ 287.633101][T11694] [ 287.633110][T11694] dump_stack_lvl+0x189/0x250 [ 287.633142][T11694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.633164][T11694] ? __pfx__printk+0x10/0x10 [ 287.633184][T11694] ? __pfx___might_resched+0x10/0x10 [ 287.633200][T11694] ? fs_reclaim_acquire+0x7d/0x100 [ 287.633228][T11694] should_fail_ex+0x414/0x560 [ 287.633264][T11694] should_failslab+0xa8/0x100 [ 287.633287][T11694] __kmalloc_cache_noprof+0x70/0x3d0 [ 287.633307][T11694] ? alloc_netdev_mqs+0xc36/0x11e0 [ 287.633333][T11694] alloc_netdev_mqs+0xc36/0x11e0 [ 287.633361][T11694] rtnl_create_link+0x31f/0xd10 [ 287.633389][T11694] rtnl_newlink_create+0x25c/0xb00 [ 287.633412][T11694] ? __pfx_aa_get_newest_label+0x10/0x10 [ 287.633434][T11694] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 287.633448][T11694] ? rtnl_newlink+0x8db/0x1c70 [ 287.633473][T11694] ? __pfx___mutex_lock+0x10/0x10 [ 287.633504][T11694] ? ns_capable+0x8a/0xf0 [ 287.633524][T11694] rtnl_newlink+0x16d6/0x1c70 [ 287.633548][T11694] ? __kasan_slab_free+0x62/0x70 [ 287.633579][T11694] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.633633][T11694] ? kasan_quarantine_put+0xdd/0x220 [ 287.633651][T11694] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.633678][T11694] ? nlmon_xmit+0xb0/0x100 [ 287.633696][T11694] ? kmem_cache_free+0x192/0x3f0 [ 287.633723][T11694] ? __local_bh_enable_ip+0x12d/0x1c0 [ 287.633747][T11694] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.633767][T11694] ? __local_bh_enable_ip+0x12d/0x1c0 [ 287.633790][T11694] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.633823][T11694] ? aa_get_newest_label+0xf7/0x5d0 [ 287.633843][T11694] ? __lock_acquire+0xaac/0xd20 [ 287.633894][T11694] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.633916][T11694] rtnetlink_rcv_msg+0x7cc/0xb70 [ 287.633943][T11694] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 287.633965][T11694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.633993][T11694] ? ref_tracker_free+0x63a/0x7d0 [ 287.634007][T11694] ? __copy_skb_header+0xa7/0x550 [ 287.634036][T11694] netlink_rcv_skb+0x219/0x490 [ 287.634062][T11694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.634086][T11694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.634131][T11694] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.634154][T11694] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.634183][T11694] netlink_unicast+0x758/0x8d0 [ 287.634217][T11694] netlink_sendmsg+0x805/0xb30 [ 287.634249][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.634269][T11694] ? aa_sock_msg_perm+0x94/0x160 [ 287.634287][T11694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.634305][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.634322][T11694] __sock_sendmsg+0x219/0x270 [ 287.634347][T11694] ____sys_sendmsg+0x505/0x830 [ 287.634373][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.634401][T11694] ? import_iovec+0x74/0xa0 [ 287.634426][T11694] ___sys_sendmsg+0x21f/0x2a0 [ 287.634447][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.634505][T11694] ? __fget_files+0x2a/0x420 [ 287.634525][T11694] ? __fget_files+0x3a0/0x420 [ 287.634556][T11694] __x64_sys_sendmsg+0x19b/0x260 [ 287.634577][T11694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.634614][T11694] ? do_syscall_64+0xba/0x210 [ 287.634639][T11694] do_syscall_64+0xf6/0x210 [ 287.634661][T11694] ? clear_bhb_loop+0x45/0xa0 [ 287.634682][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.634698][T11694] RIP: 0033:0x7f457f58e969 [ 287.634714][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.634729][T11694] RSP: 002b:00007f45804bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.634747][T11694] RAX: ffffffffffffffda RBX: 00007f457f7b5fa0 RCX: 00007f457f58e969 [ 287.634760][T11694] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 287.634770][T11694] RBP: 00007f45804bb090 R08: 0000000000000000 R09: 0000000000000000 [ 287.634780][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.634790][T11694] R13: 0000000000000000 R14: 00007f457f7b5fa0 R15: 00007ffe3ae635b8 [ 287.634819][T11694] [ 288.345319][T11713] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 288.742333][T11736] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 288.914141][T11744] netlink: 'syz.2.1421': attribute type 11 has an invalid length. [ 288.939298][T11744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1421'. [ 288.970051][T11750] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 289.110672][T11752] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 289.490248][T11771] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 289.599002][T11769] syzkaller0: entered promiscuous mode [ 289.623796][T11769] syzkaller0: entered allmulticast mode [ 289.665169][T11787] Bluetooth: MGMT ver 1.23 [ 289.670981][T11778] tipc: Enabled bearer , priority 10 [ 289.680171][T11786] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1431'. [ 291.335512][T11814] FAULT_INJECTION: forcing a failure. [ 291.335512][T11814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.365265][T11814] CPU: 0 UID: 0 PID: 11814 Comm: syz.4.1436 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 291.365291][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.365299][T11814] Call Trace: [ 291.365305][T11814] [ 291.365312][T11814] dump_stack_lvl+0x189/0x250 [ 291.365336][T11814] ? __lock_acquire+0xaac/0xd20 [ 291.365358][T11814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.365378][T11814] ? __pfx__printk+0x10/0x10 [ 291.365393][T11814] ? __might_fault+0xb0/0x130 [ 291.365419][T11814] should_fail_ex+0x414/0x560 [ 291.365445][T11814] _copy_from_user+0x2d/0xb0 [ 291.365465][T11814] do_replace+0xe8/0x430 [ 291.365481][T11814] ? __pfx_aa_get_newest_label+0x10/0x10 [ 291.365498][T11814] ? __pfx_do_replace+0x10/0x10 [ 291.365524][T11814] ? bpf_lsm_capable+0x9/0x20 [ 291.365544][T11814] ? security_capable+0x7e/0x2e0 [ 291.365567][T11814] do_ebt_set_ctl+0x1e3/0xb60 [ 291.365590][T11814] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 291.365609][T11814] ? rcu_is_watching+0x15/0xb0 [ 291.365641][T11814] ? nf_setsockopt+0x221/0x290 [ 291.365662][T11814] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 291.365686][T11814] ? __pfx___mutex_lock+0x10/0x10 [ 291.365705][T11814] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.365724][T11814] ? aa_sk_perm+0x81e/0x950 [ 291.365747][T11814] ? vfs_write+0x8d8/0xa90 [ 291.365764][T11814] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.365784][T11814] ? kasan_quarantine_put+0xdd/0x220 [ 291.365801][T11814] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.365823][T11814] nf_setsockopt+0x26c/0x290 [ 291.365840][T11814] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 291.365871][T11814] do_sock_setsockopt+0x257/0x3e0 [ 291.365891][T11814] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 291.365914][T11814] ? ksys_write+0x1e1/0x250 [ 291.365937][T11814] __x64_sys_setsockopt+0x18b/0x220 [ 291.365960][T11814] do_syscall_64+0xf6/0x210 [ 291.365981][T11814] ? clear_bhb_loop+0x45/0xa0 [ 291.366000][T11814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.366015][T11814] RIP: 0033:0x7f457f58e969 [ 291.366030][T11814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.366044][T11814] RSP: 002b:00007f45804bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.366062][T11814] RAX: ffffffffffffffda RBX: 00007f457f7b5fa0 RCX: 00007f457f58e969 [ 291.366074][T11814] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000009 [ 291.366083][T11814] RBP: 00007f45804bb090 R08: 0000000000000108 R09: 0000000000000000 [ 291.366093][T11814] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 291.366103][T11814] R13: 0000000000000000 R14: 00007f457f7b5fa0 R15: 00007ffe3ae635b8 [ 291.366128][T11814] [ 291.858031][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1441'. [ 291.999226][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 292.010359][T11842] netlink: 'syz.2.1443': attribute type 11 has an invalid length. [ 292.018266][T11842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1443'. [ 292.099584][T11850] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 292.139370][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 292.150274][T11853] FAULT_INJECTION: forcing a failure. [ 292.150274][T11853] name failslab, interval 1, probability 0, space 0, times 0 [ 292.170204][T11853] CPU: 1 UID: 0 PID: 11853 Comm: syz.4.1448 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 292.170230][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 292.170241][T11853] Call Trace: [ 292.170247][T11853] [ 292.170254][T11853] dump_stack_lvl+0x189/0x250 [ 292.170285][T11853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.170307][T11853] ? __pfx__printk+0x10/0x10 [ 292.170329][T11853] ? __pfx___might_resched+0x10/0x10 [ 292.170350][T11853] should_fail_ex+0x414/0x560 [ 292.170379][T11853] should_failslab+0xa8/0x100 [ 292.170402][T11853] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 292.170423][T11853] ? __alloc_skb+0x112/0x2d0 [ 292.170443][T11853] __alloc_skb+0x112/0x2d0 [ 292.170463][T11853] netlink_sendmsg+0x5c6/0xb30 [ 292.170488][T11853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.170507][T11853] ? aa_sock_msg_perm+0x94/0x160 [ 292.170526][T11853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.170543][T11853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.170559][T11853] __sock_sendmsg+0x219/0x270 [ 292.170584][T11853] sock_write_iter+0x258/0x330 [ 292.170606][T11853] ? __pfx_sock_write_iter+0x10/0x10 [ 292.170637][T11853] ? bpf_lsm_file_permission+0x9/0x20 [ 292.170655][T11853] ? security_file_permission+0x75/0x290 [ 292.170686][T11853] vfs_write+0x548/0xa90 [ 292.170708][T11853] ? __pfx_sock_write_iter+0x10/0x10 [ 292.170729][T11853] ? __pfx_vfs_write+0x10/0x10 [ 292.170757][T11853] ? __fget_files+0x2a/0x420 [ 292.170793][T11853] ksys_write+0x145/0x250 [ 292.170810][T11853] ? rcu_is_watching+0x15/0xb0 [ 292.170834][T11853] ? __pfx_ksys_write+0x10/0x10 [ 292.170855][T11853] ? do_syscall_64+0xba/0x210 [ 292.170884][T11853] do_syscall_64+0xf6/0x210 [ 292.170906][T11853] ? clear_bhb_loop+0x45/0xa0 [ 292.170927][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.170942][T11853] RIP: 0033:0x7f457f58e969 [ 292.170958][T11853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.170972][T11853] RSP: 002b:00007f45804bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.170990][T11853] RAX: ffffffffffffffda RBX: 00007f457f7b5fa0 RCX: 00007f457f58e969 [ 292.171002][T11853] RDX: 0000000000000029 RSI: 0000200000000080 RDI: 0000000000000004 [ 292.171012][T11853] RBP: 00007f45804bb090 R08: 0000000000000000 R09: 0000000000000000 [ 292.171023][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.171032][T11853] R13: 0000000000000000 R14: 00007f457f7b5fa0 R15: 00007ffe3ae635b8 [ 292.171059][T11853] [ 292.748979][T11864] bridge2: entered promiscuous mode [ 292.767598][T11864] bridge2: entered allmulticast mode [ 292.809414][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 292.826982][T11864] team0: Device bridge2 is up. Set it down before adding it as a team port [ 292.863559][T11876] xt_recent: Unsupported userspace flags (00000048) [ 292.877988][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 292.965822][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 293.046027][T11880] nbd: device at index 64 is going down [ 293.105962][T11870] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1451'. [ 293.167404][T11868] syzkaller0: entered promiscuous mode [ 293.197821][T11868] syzkaller0: entered allmulticast mode [ 293.386927][T11903] raw_sendmsg: syz.4.1456 forgot to set AF_INET. Fix it! [ 294.516382][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 294.697129][T11910] netlink: 'syz.0.1462': attribute type 11 has an invalid length. [ 294.709245][T11910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1462'. [ 294.749895][T11913] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 294.798814][T11913] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 294.809275][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 294.827988][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 294.880694][T11921] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.900781][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 294.989350][T11919] netlink: 160452 bytes leftover after parsing attributes in process `syz.2.1465'. [ 295.329713][T11937] FAULT_INJECTION: forcing a failure. [ 295.329713][T11937] name failslab, interval 1, probability 0, space 0, times 0 [ 295.342395][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.2.1472 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 295.342417][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 295.342426][T11937] Call Trace: [ 295.342434][T11937] [ 295.342442][T11937] dump_stack_lvl+0x189/0x250 [ 295.342470][T11937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.342490][T11937] ? __pfx__printk+0x10/0x10 [ 295.342516][T11937] should_fail_ex+0x414/0x560 [ 295.342543][T11937] should_failslab+0xa8/0x100 [ 295.342562][T11937] kmem_cache_alloc_noprof+0x73/0x3c0 [ 295.342579][T11937] ? skb_clone+0x212/0x3a0 [ 295.342598][T11937] skb_clone+0x212/0x3a0 [ 295.342618][T11937] bpf_clone_redirect+0xad/0x3d0 [ 295.342646][T11937] bpf_prog_4a8c2353fb668905+0x65/0x6d [ 295.342668][T11937] ? ktime_get+0x3e/0x1f0 [ 295.342688][T11937] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 295.342705][T11937] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.342723][T11937] ? ktime_get+0x3e/0x1f0 [ 295.342737][T11937] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 295.342762][T11937] ? __local_bh_disable_ip+0xf1/0x190 [ 295.342785][T11937] ? __pfx___cant_migrate+0x10/0x10 [ 295.342799][T11937] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.342821][T11937] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.342848][T11937] ? bpf_test_timer_continue+0x136/0x350 [ 295.342868][T11937] bpf_test_run+0x38b/0x830 [ 295.342899][T11937] ? bpf_test_run+0x205/0x830 [ 295.342926][T11937] ? __pfx_bpf_test_run+0x10/0x10 [ 295.342972][T11937] ? slab_build_skb+0x273/0x3e0 [ 295.342987][T11937] ? convert___skb_to_skb+0x3d/0x590 [ 295.343009][T11937] bpf_prog_test_run_skb+0xb30/0x1560 [ 295.343043][T11937] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 295.343065][T11937] bpf_prog_test_run+0x2a9/0x340 [ 295.343088][T11937] __sys_bpf+0x4a4/0x860 [ 295.343108][T11937] ? __pfx___sys_bpf+0x10/0x10 [ 295.343139][T11937] ? ksys_write+0x1f0/0x250 [ 295.343154][T11937] ? rcu_is_watching+0x15/0xb0 [ 295.343187][T11937] __x64_sys_bpf+0x7c/0x90 [ 295.343206][T11937] do_syscall_64+0xf6/0x210 [ 295.343235][T11937] ? clear_bhb_loop+0x45/0xa0 [ 295.343256][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.343272][T11937] RIP: 0033:0x7f6e5258e969 [ 295.343286][T11937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.343301][T11937] RSP: 002b:00007f6e534a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.343319][T11937] RAX: ffffffffffffffda RBX: 00007f6e527b5fa0 RCX: 00007f6e5258e969 [ 295.343331][T11937] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 295.343341][T11937] RBP: 00007f6e534a2090 R08: 0000000000000000 R09: 0000000000000000 [ 295.343351][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.343361][T11937] R13: 0000000000000000 R14: 00007f6e527b5fa0 R15: 00007ffc9059ba78 [ 295.343390][T11937] [ 295.989367][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 296.007924][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.025181][T11944] dummy0: entered promiscuous mode [ 296.031994][T11944] team0: entered promiscuous mode [ 296.040812][T11944] team_slave_0: entered promiscuous mode [ 296.047064][T11944] team_slave_1: entered promiscuous mode [ 296.350158][T11960] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 296.398258][T11963] netlink: 'syz.2.1484': attribute type 11 has an invalid length. [ 296.454764][T11974] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 296.806723][T11981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.159167][T11999] Cannot find add_set index 4 as target [ 297.440762][T12005] netlink: 'syz.1.1499': attribute type 1 has an invalid length. [ 297.914873][T12024] netlink: 'syz.2.1505': attribute type 11 has an invalid length. [ 297.943108][T12024] __nla_validate_parse: 4 callbacks suppressed [ 297.943125][T12024] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1505'. [ 298.024083][T12030] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 298.158037][T12038] FAULT_INJECTION: forcing a failure. [ 298.158037][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 298.193140][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.1.1509 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 298.193166][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 298.193176][T12038] Call Trace: [ 298.193182][T12038] [ 298.193190][T12038] dump_stack_lvl+0x189/0x250 [ 298.193221][T12038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.193244][T12038] ? __pfx__printk+0x10/0x10 [ 298.193268][T12038] ? ref_tracker_alloc+0x318/0x460 [ 298.193289][T12038] should_fail_ex+0x414/0x560 [ 298.193318][T12038] should_failslab+0xa8/0x100 [ 298.193341][T12038] kmem_cache_alloc_noprof+0x73/0x3c0 [ 298.193361][T12038] ? skb_clone+0x212/0x3a0 [ 298.193384][T12038] skb_clone+0x212/0x3a0 [ 298.193407][T12038] __netlink_deliver_tap+0x404/0x850 [ 298.193445][T12038] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.193471][T12038] netlink_deliver_tap+0x19c/0x1b0 [ 298.193500][T12038] netlink_unicast+0x72f/0x8d0 [ 298.193534][T12038] netlink_sendmsg+0x805/0xb30 [ 298.193560][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.193579][T12038] ? aa_sock_msg_perm+0x94/0x160 [ 298.193599][T12038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.193616][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.193633][T12038] __sock_sendmsg+0x219/0x270 [ 298.193658][T12038] ____sys_sendmsg+0x505/0x830 [ 298.193680][T12038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.193707][T12038] ? import_iovec+0x74/0xa0 [ 298.193732][T12038] ___sys_sendmsg+0x21f/0x2a0 [ 298.193752][T12038] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.193809][T12038] ? __fget_files+0x2a/0x420 [ 298.193829][T12038] ? __fget_files+0x3a0/0x420 [ 298.193858][T12038] __x64_sys_sendmsg+0x19b/0x260 [ 298.193885][T12038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.193921][T12038] ? do_syscall_64+0xba/0x210 [ 298.193947][T12038] do_syscall_64+0xf6/0x210 [ 298.193969][T12038] ? clear_bhb_loop+0x45/0xa0 [ 298.193990][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.194006][T12038] RIP: 0033:0x7f9b4f78e969 [ 298.194021][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.194036][T12038] RSP: 002b:00007f9b505aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.194054][T12038] RAX: ffffffffffffffda RBX: 00007f9b4f9b6080 RCX: 00007f9b4f78e969 [ 298.194067][T12038] RDX: 0000000004004010 RSI: 0000200000000540 RDI: 0000000000000003 [ 298.194078][T12038] RBP: 00007f9b505aa090 R08: 0000000000000000 R09: 0000000000000000 [ 298.194088][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.194098][T12038] R13: 0000000000000000 R14: 00007f9b4f9b6080 R15: 00007fffc7375bd8 [ 298.194126][T12038] [ 298.920648][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 299.019444][T12044] bridge_slave_1: left allmulticast mode [ 299.027118][T12044] bridge_slave_1: left promiscuous mode [ 299.043908][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.070717][T12044] bridge_slave_0: left allmulticast mode [ 299.085498][T12044] bridge_slave_0: left promiscuous mode [ 299.097474][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.402468][T12056] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 299.508294][T12059] syzkaller0: entered promiscuous mode [ 299.517380][T12059] syzkaller0: entered allmulticast mode [ 299.541869][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 299.565046][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1522'. [ 300.857040][T12072] tipc: Enabled bearer , priority 0 [ 300.864873][T12071] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 300.976730][T12088] FAULT_INJECTION: forcing a failure. [ 300.976730][T12088] name failslab, interval 1, probability 0, space 0, times 0 [ 301.016019][T12088] CPU: 0 UID: 0 PID: 12088 Comm: syz.1.1526 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 301.016044][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.016053][T12088] Call Trace: [ 301.016059][T12088] [ 301.016066][T12088] dump_stack_lvl+0x189/0x250 [ 301.016082][T12061] syzkaller0: entered promiscuous mode [ 301.016095][T12088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.016116][T12088] ? __pfx__printk+0x10/0x10 [ 301.016130][T12088] ? __pfx___might_resched+0x10/0x10 [ 301.016143][T12088] ? fs_reclaim_acquire+0x7d/0x100 [ 301.016168][T12088] should_fail_ex+0x414/0x560 [ 301.016197][T12088] should_failslab+0xa8/0x100 [ 301.016219][T12088] __kmalloc_noprof+0xcb/0x4f0 [ 301.016237][T12088] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 301.016260][T12088] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 301.016286][T12088] genl_family_rcv_msg_doit+0xb8/0x300 [ 301.016312][T12088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.016333][T12088] ? rcu_is_watching+0x15/0xb0 [ 301.016358][T12088] ? apparmor_capable+0x137/0x1b0 [ 301.016381][T12088] ? bpf_lsm_capable+0x9/0x20 [ 301.016400][T12088] ? security_capable+0x7e/0x2e0 [ 301.016423][T12088] genl_rcv_msg+0x60e/0x790 [ 301.016448][T12088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.016465][T12088] ? __pfx_batadv_pre_doit+0x10/0x10 [ 301.016479][T12088] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 301.016494][T12088] ? __pfx_batadv_post_doit+0x10/0x10 [ 301.016511][T12088] ? ref_tracker_free+0x63a/0x7d0 [ 301.016524][T12088] ? __copy_skb_header+0xa7/0x550 [ 301.016550][T12088] netlink_rcv_skb+0x219/0x490 [ 301.016575][T12088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.016594][T12088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.016640][T12088] ? down_read+0x1ad/0x2e0 [ 301.016663][T12088] genl_rcv+0x28/0x40 [ 301.016679][T12088] netlink_unicast+0x758/0x8d0 [ 301.016711][T12088] netlink_sendmsg+0x805/0xb30 [ 301.016735][T12088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.016755][T12088] ? aa_sock_msg_perm+0x94/0x160 [ 301.016772][T12088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.016788][T12088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.016805][T12088] __sock_sendmsg+0x219/0x270 [ 301.016829][T12088] ____sys_sendmsg+0x505/0x830 [ 301.016860][T12088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.016886][T12088] ? import_iovec+0x74/0xa0 [ 301.016910][T12088] ___sys_sendmsg+0x21f/0x2a0 [ 301.016929][T12088] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.016982][T12088] ? __fget_files+0x2a/0x420 [ 301.017002][T12088] ? __fget_files+0x3a0/0x420 [ 301.017030][T12088] __x64_sys_sendmsg+0x19b/0x260 [ 301.017050][T12088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.017085][T12088] ? do_syscall_64+0xba/0x210 [ 301.017109][T12088] do_syscall_64+0xf6/0x210 [ 301.017129][T12088] ? clear_bhb_loop+0x45/0xa0 [ 301.017148][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.017163][T12088] RIP: 0033:0x7f9b4f78e969 [ 301.017179][T12088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.017193][T12088] RSP: 002b:00007f9b505cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.017210][T12088] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78e969 [ 301.017221][T12088] RDX: 0000000004004010 RSI: 0000200000000540 RDI: 0000000000000003 [ 301.017231][T12088] RBP: 00007f9b505cb090 R08: 0000000000000000 R09: 0000000000000000 [ 301.017241][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.017250][T12088] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 301.017278][T12088] [ 301.268192][T12093] ieee802154 phy0 wpan0: encryption failed: -90 [ 301.268740][T12061] syzkaller0: entered allmulticast mode [ 301.382934][T12061] tipc: Resetting bearer [ 302.598090][T12060] tipc: Resetting bearer [ 302.613878][T12060] tipc: Disabling bearer [ 302.846834][T12106] netlink: 'syz.3.1533': attribute type 1 has an invalid length. [ 303.240104][T12129] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 303.412657][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 303.434833][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1543'. [ 303.485078][T12140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1547'. [ 303.520498][T12135] bond4: entered promiscuous mode [ 303.529808][T12135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.536986][T12143] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1546'. [ 303.551843][T12140] vti0: entered promiscuous mode [ 303.563912][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 303.598470][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1546'. [ 303.624378][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 303.755929][T12146] netlink: 'syz.4.1548': attribute type 1 has an invalid length. [ 303.941868][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 303.958196][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 304.042711][T12162] xt_recent: Unsupported userspace flags (00000048) [ 304.076065][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 304.104581][T12154] syzkaller0: entered promiscuous mode [ 304.118388][T12154] syzkaller0: entered allmulticast mode [ 305.692511][T12178] bond2: entered promiscuous mode [ 305.698278][T12178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.764471][T12224] syzkaller0: entered promiscuous mode [ 306.770015][T12224] syzkaller0: entered allmulticast mode [ 306.784377][T12185] lo speed is unknown, defaulting to 1000 [ 306.860044][T12234] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 308.190640][T12239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 308.419001][T12246] __nla_validate_parse: 8 callbacks suppressed [ 308.419019][T12246] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1577'. [ 308.521648][T12244] bond3: entered promiscuous mode [ 308.527387][T12244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.660144][T12233] lo speed is unknown, defaulting to 1000 [ 308.715409][T12255] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 309.341731][T12275] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 310.055272][T12304] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 310.174141][T12307] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 310.633403][T12328] netpci0: tun_chr_ioctl cmd 1074025672 [ 310.640029][T12328] netpci0: ignored: set checksum disabled [ 311.646869][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 311.802242][T12378] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 311.839529][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 312.201545][T12396] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 312.229323][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 312.243088][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 312.277946][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 312.292624][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.030324][T12425] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1627'. [ 313.164344][T12432] x_tables: duplicate underflow at hook 2 [ 313.232891][T12429] syzkaller0: entered promiscuous mode [ 313.258194][T12429] syzkaller0: entered allmulticast mode [ 315.279134][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 315.326535][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 315.419227][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 315.860387][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 315.901038][T12515] block nbd2: not configured, cannot reconfigure [ 315.927520][T12518] xt_hashlimit: size too large, truncated to 1048576 [ 316.117615][T12527] sctp: [Deprecated]: syz.3.1655 (pid 12527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.117615][T12527] Use struct sctp_sack_info instead [ 316.304454][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 316.419968][T12517] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 316.893444][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 316.917484][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.126581][T12581] atomic_op ffff888026ebb198 conn xmit_atomic 0000000000000000 [ 317.142793][T12580] netlink: 'syz.4.1668': attribute type 11 has an invalid length. [ 317.146117][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1669'. [ 317.171297][T12580] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1668'. [ 317.189350][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204353][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221700][T12585] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 317.257370][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 317.456180][T12591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1672'. [ 317.485277][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1672'. [ 317.957045][T12618] 8021q: VLANs not supported on sit0 [ 318.338099][T12638] vlan0: entered promiscuous mode [ 318.487085][T12609] lo speed is unknown, defaulting to 1000 [ 318.662362][T12650] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 318.683364][T12650] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 318.698098][T12654] No such timeout policy "syz1" [ 318.939521][T12664] FAULT_INJECTION: forcing a failure. [ 318.939521][T12664] name failslab, interval 1, probability 0, space 0, times 0 [ 318.957642][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.0.1689 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 318.957668][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 318.957682][T12664] Call Trace: [ 318.957692][T12664] [ 318.957700][T12664] dump_stack_lvl+0x189/0x250 [ 318.957730][T12664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.957753][T12664] ? __pfx__printk+0x10/0x10 [ 318.957775][T12664] ? __pfx___might_resched+0x10/0x10 [ 318.957795][T12664] should_fail_ex+0x414/0x560 [ 318.957825][T12664] should_failslab+0xa8/0x100 [ 318.957848][T12664] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 318.957868][T12664] ? __alloc_skb+0x112/0x2d0 [ 318.957888][T12664] __alloc_skb+0x112/0x2d0 [ 318.957912][T12664] netlink_sendmsg+0x5c6/0xb30 [ 318.957938][T12664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.957955][T12664] ? aa_sock_msg_perm+0x94/0x160 [ 318.957975][T12664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.957992][T12664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.958008][T12664] __sock_sendmsg+0x219/0x270 [ 318.958033][T12664] ____sys_sendmsg+0x505/0x830 [ 318.958055][T12664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.958080][T12664] ? import_iovec+0x74/0xa0 [ 318.958103][T12664] ___sys_sendmsg+0x21f/0x2a0 [ 318.958120][T12664] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.958162][T12664] ? __fget_files+0x2a/0x420 [ 318.958176][T12664] ? __fget_files+0x3a0/0x420 [ 318.958199][T12664] __x64_sys_sendmsg+0x19b/0x260 [ 318.958214][T12664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.958241][T12664] ? do_syscall_64+0xba/0x210 [ 318.958261][T12664] do_syscall_64+0xf6/0x210 [ 318.958276][T12664] ? clear_bhb_loop+0x45/0xa0 [ 318.958292][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.958305][T12664] RIP: 0033:0x7f95f9b8e969 [ 318.958317][T12664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.958327][T12664] RSP: 002b:00007f95fa9d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.958341][T12664] RAX: ffffffffffffffda RBX: 00007f95f9db5fa0 RCX: 00007f95f9b8e969 [ 318.958350][T12664] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 318.958358][T12664] RBP: 00007f95fa9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 318.958366][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.958373][T12664] R13: 0000000000000000 R14: 00007f95f9db5fa0 R15: 00007ffe22322b98 [ 318.958395][T12664] [ 319.602496][T12677] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 320.151906][T12702] FAULT_INJECTION: forcing a failure. [ 320.151906][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.184296][T12702] CPU: 1 UID: 0 PID: 12702 Comm: syz.3.1701 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 320.184323][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.184333][T12702] Call Trace: [ 320.184341][T12702] [ 320.184348][T12702] dump_stack_lvl+0x189/0x250 [ 320.184374][T12702] ? __lock_acquire+0xaac/0xd20 [ 320.184399][T12702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.184421][T12702] ? __pfx__printk+0x10/0x10 [ 320.184439][T12702] ? __might_fault+0xb0/0x130 [ 320.184471][T12702] should_fail_ex+0x414/0x560 [ 320.184501][T12702] _copy_from_iter+0x1db/0x15a0 [ 320.184544][T12702] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 320.184562][T12702] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 320.184582][T12702] ? __pfx__copy_from_iter+0x10/0x10 [ 320.184600][T12702] ? __build_skb_around+0x257/0x3e0 [ 320.184618][T12702] ? netlink_sendmsg+0x642/0xb30 [ 320.184632][T12702] ? skb_put+0x11b/0x210 [ 320.184650][T12702] netlink_sendmsg+0x6b2/0xb30 [ 320.184674][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.184692][T12702] ? aa_sock_msg_perm+0x94/0x160 [ 320.184711][T12702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.184728][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.184744][T12702] __sock_sendmsg+0x219/0x270 [ 320.184769][T12702] ____sys_sendmsg+0x505/0x830 [ 320.184792][T12702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.184819][T12702] ? import_iovec+0x74/0xa0 [ 320.184847][T12702] ___sys_sendmsg+0x21f/0x2a0 [ 320.184868][T12702] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.184920][T12702] ? __fget_files+0x2a/0x420 [ 320.184940][T12702] ? __fget_files+0x3a0/0x420 [ 320.184969][T12702] __x64_sys_sendmsg+0x19b/0x260 [ 320.184988][T12702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.185023][T12702] ? do_syscall_64+0xba/0x210 [ 320.185047][T12702] do_syscall_64+0xf6/0x210 [ 320.185068][T12702] ? clear_bhb_loop+0x45/0xa0 [ 320.185088][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.185104][T12702] RIP: 0033:0x7fef31d8e969 [ 320.185119][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.185134][T12702] RSP: 002b:00007fef32b71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.185151][T12702] RAX: ffffffffffffffda RBX: 00007fef31fb5fa0 RCX: 00007fef31d8e969 [ 320.185163][T12702] RDX: 0000000000004000 RSI: 0000200000000500 RDI: 0000000000000004 [ 320.185174][T12702] RBP: 00007fef32b71090 R08: 0000000000000000 R09: 0000000000000000 [ 320.185184][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.185193][T12702] R13: 0000000000000000 R14: 00007fef31fb5fa0 R15: 00007ffca3092638 [ 320.185220][T12702] [ 320.557086][ T30] audit: type=1107 audit(1745957512.795:2): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 320.599907][T12706] siw: device registration error -23 [ 320.752307][T12719] netlink: 'syz.0.1706': attribute type 11 has an invalid length. [ 320.760952][T12719] __nla_validate_parse: 3 callbacks suppressed [ 320.760966][T12719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1706'. [ 320.821623][T12723] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 320.844352][T12723] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 321.244790][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 321.330504][T12746] FAULT_INJECTION: forcing a failure. [ 321.330504][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 321.346933][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.2.1713 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 321.346959][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 321.346968][T12746] Call Trace: [ 321.346974][T12746] [ 321.346982][T12746] dump_stack_lvl+0x189/0x250 [ 321.347011][T12746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.347033][T12746] ? __pfx__printk+0x10/0x10 [ 321.347055][T12746] ? __pfx___might_resched+0x10/0x10 [ 321.347068][T12746] ? fs_reclaim_acquire+0x7d/0x100 [ 321.347095][T12746] should_fail_ex+0x414/0x560 [ 321.347126][T12746] should_failslab+0xa8/0x100 [ 321.347148][T12746] __kmalloc_noprof+0xcb/0x4f0 [ 321.347167][T12746] ? sock_kmalloc+0xd6/0x160 [ 321.347184][T12746] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 321.347212][T12746] sock_kmalloc+0xd6/0x160 [ 321.347233][T12746] hash_recvmsg+0x1c8/0x750 [ 321.347254][T12746] ? __pfx_hash_recvmsg+0x10/0x10 [ 321.347270][T12746] sock_recvmsg_nosec+0x183/0x1c0 [ 321.347295][T12746] ____sys_recvmsg+0x3aa/0x460 [ 321.347324][T12746] ? __pfx_____sys_recvmsg+0x10/0x10 [ 321.347357][T12746] ? import_iovec+0x74/0xa0 [ 321.347381][T12746] ___sys_recvmsg+0x1b5/0x510 [ 321.347406][T12746] ? __pfx____sys_recvmsg+0x10/0x10 [ 321.347466][T12746] ? __might_fault+0xb0/0x130 [ 321.347491][T12746] do_recvmmsg+0x307/0x760 [ 321.347518][T12746] ? __pfx_do_recvmmsg+0x10/0x10 [ 321.347549][T12746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.347590][T12746] __x64_sys_recvmmsg+0x190/0x240 [ 321.347608][T12746] ? rcu_is_watching+0x15/0xb0 [ 321.347631][T12746] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 321.347654][T12746] ? do_syscall_64+0xba/0x210 [ 321.347679][T12746] do_syscall_64+0xf6/0x210 [ 321.347703][T12746] ? clear_bhb_loop+0x45/0xa0 [ 321.347724][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.347740][T12746] RIP: 0033:0x7f6e5258e969 [ 321.347756][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.347770][T12746] RSP: 002b:00007f6e534a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 321.347788][T12746] RAX: ffffffffffffffda RBX: 00007f6e527b5fa0 RCX: 00007f6e5258e969 [ 321.347800][T12746] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 321.347811][T12746] RBP: 00007f6e534a2090 R08: 0000000000000000 R09: 0000000000000000 [ 321.347821][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.347831][T12746] R13: 0000000000000000 R14: 00007f6e527b5fa0 R15: 00007ffc9059ba78 [ 321.347860][T12746] [ 321.893553][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1717'. [ 321.932608][T12762] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 321.997408][T12765] FAULT_INJECTION: forcing a failure. [ 321.997408][T12765] name failslab, interval 1, probability 0, space 0, times 0 [ 322.051014][T12765] CPU: 0 UID: 0 PID: 12765 Comm: syz.2.1718 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 322.051041][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 322.051051][T12765] Call Trace: [ 322.051058][T12765] [ 322.051065][T12765] dump_stack_lvl+0x189/0x250 [ 322.051096][T12765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.051120][T12765] ? __pfx__printk+0x10/0x10 [ 322.051143][T12765] ? ref_tracker_alloc+0x318/0x460 [ 322.051164][T12765] should_fail_ex+0x414/0x560 [ 322.051193][T12765] should_failslab+0xa8/0x100 [ 322.051217][T12765] kmem_cache_alloc_noprof+0x73/0x3c0 [ 322.051236][T12765] ? skb_clone+0x212/0x3a0 [ 322.051260][T12765] skb_clone+0x212/0x3a0 [ 322.051282][T12765] __netlink_deliver_tap+0x404/0x850 [ 322.051320][T12765] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.051345][T12765] netlink_deliver_tap+0x19c/0x1b0 [ 322.051369][T12765] netlink_unicast+0x72f/0x8d0 [ 322.051403][T12765] netlink_sendmsg+0x805/0xb30 [ 322.051429][T12765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.051449][T12765] ? aa_sock_msg_perm+0x94/0x160 [ 322.051467][T12765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.051486][T12765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.051503][T12765] __sock_sendmsg+0x219/0x270 [ 322.051527][T12765] ____sys_sendmsg+0x505/0x830 [ 322.051549][T12765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.051573][T12765] ? import_iovec+0x74/0xa0 [ 322.051597][T12765] ___sys_sendmsg+0x21f/0x2a0 [ 322.051623][T12765] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.051675][T12765] ? __fget_files+0x2a/0x420 [ 322.051694][T12765] ? __fget_files+0x3a0/0x420 [ 322.051723][T12765] __x64_sys_sendmsg+0x19b/0x260 [ 322.051744][T12765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.051780][T12765] ? do_syscall_64+0xba/0x210 [ 322.051805][T12765] do_syscall_64+0xf6/0x210 [ 322.051826][T12765] ? clear_bhb_loop+0x45/0xa0 [ 322.051846][T12765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.051862][T12765] RIP: 0033:0x7f6e5258e969 [ 322.051878][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.051893][T12765] RSP: 002b:00007f6e534a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.051910][T12765] RAX: ffffffffffffffda RBX: 00007f6e527b5fa0 RCX: 00007f6e5258e969 [ 322.051923][T12765] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 322.051933][T12765] RBP: 00007f6e534a2090 R08: 0000000000000000 R09: 0000000000000000 [ 322.051943][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.051953][T12765] R13: 0000000000000000 R14: 00007f6e527b5fa0 R15: 00007ffc9059ba78 [ 322.051982][T12765] [ 322.319671][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 322.453857][T12773] netlink: 'syz.1.1720': attribute type 9 has an invalid length. [ 322.461756][T12773] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1720'. [ 322.481576][T12773] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 322.656160][T12776] unsupported nla_type 52263 [ 323.087969][T12795] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 323.091864][T12797] FAULT_INJECTION: forcing a failure. [ 323.091864][T12797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.095905][T12795] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 323.095926][T12795] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1729'. [ 323.161712][T12797] CPU: 0 UID: 0 PID: 12797 Comm: syz.1.1730 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 323.161739][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 323.161749][T12797] Call Trace: [ 323.161755][T12797] [ 323.161763][T12797] dump_stack_lvl+0x189/0x250 [ 323.161789][T12797] ? __lock_acquire+0xaac/0xd20 [ 323.161812][T12797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.161834][T12797] ? __pfx__printk+0x10/0x10 [ 323.161851][T12797] ? __might_fault+0xb0/0x130 [ 323.161881][T12797] should_fail_ex+0x414/0x560 [ 323.161910][T12797] _copy_from_user+0x2d/0xb0 [ 323.161932][T12797] ___sys_recvmsg+0x12e/0x510 [ 323.161957][T12797] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.161999][T12797] ? __fget_files+0x3a0/0x420 [ 323.162030][T12797] __x64_sys_recvmsg+0x198/0x260 [ 323.162051][T12797] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 323.162085][T12797] ? do_syscall_64+0xba/0x210 [ 323.162110][T12797] do_syscall_64+0xf6/0x210 [ 323.162131][T12797] ? clear_bhb_loop+0x45/0xa0 [ 323.162151][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.162166][T12797] RIP: 0033:0x7f9b4f78e969 [ 323.162181][T12797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.162195][T12797] RSP: 002b:00007f9b505cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 323.162213][T12797] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78e969 [ 323.162224][T12797] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 323.162234][T12797] RBP: 00007f9b505cb090 R08: 0000000000000000 R09: 0000000000000000 [ 323.162244][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.162253][T12797] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 323.162280][T12797] [ 323.395799][T12810] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 323.428576][T12802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1729'. [ 323.462870][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 323.534533][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.549553][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.818547][T12828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1733'. [ 324.089178][T12835] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 324.135601][T12832] IPVS: length: 78 != 8 [ 324.144663][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'. [ 324.234057][T12843] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 324.290623][T12848] tipc: Trying to set illegal importance in message [ 325.029243][T12870] tipc: Enabled bearer , priority 10 [ 325.280844][T12884] bridge0: entered promiscuous mode [ 325.294823][T12884] bridge0: port 3(macvlan2) entered blocking state [ 325.330049][T12884] bridge0: port 3(macvlan2) entered disabled state [ 325.346731][T12884] macvlan2: entered allmulticast mode [ 325.359697][T12884] bridge0: entered allmulticast mode [ 325.388443][T12884] macvlan2: left allmulticast mode [ 325.396481][T12884] bridge0: left allmulticast mode [ 325.408996][T12884] bridge0: left promiscuous mode [ 325.652776][T12900] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 326.186672][T12920] tipc: Enabled bearer , priority 0 [ 326.193335][T12926] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 326.238541][T12925] __nla_validate_parse: 5 callbacks suppressed [ 326.238560][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 326.320899][T12920] syzkaller0: entered promiscuous mode [ 326.347050][T12920] syzkaller0: entered allmulticast mode [ 326.364904][T12920] tipc: Resetting bearer [ 328.255889][ T407] tipc: Resetting bearer [ 328.377126][T12919] tipc: Resetting bearer [ 328.401451][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 328.496898][T12919] tipc: Disabling bearer [ 328.660190][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 328.686649][T12974] xt_recent: Unsupported userspace flags (00000048) [ 328.707543][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'. [ 328.806116][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'. [ 328.878167][T12979] nbd: device at index 64 is going down [ 328.922525][T12974] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1766'. [ 329.270516][T13006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1776'. [ 329.283404][T13007] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 329.359589][T13006] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 329.392917][T13006] macsec1: entered allmulticast mode [ 329.410637][T13006] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 329.444948][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 329.454990][T13006] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 329.473054][T13006] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 329.722492][T13029] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 329.740882][T13029] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 329.848482][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 330.063640][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 330.116989][T13041] xt_recent: Unsupported userspace flags (00000048) [ 330.207714][T13052] nbd: device at index 64 is going down [ 330.800996][T13081] FAULT_INJECTION: forcing a failure. [ 330.800996][T13081] name failslab, interval 1, probability 0, space 0, times 0 [ 330.875570][T13081] CPU: 0 UID: 0 PID: 13081 Comm: syz.4.1797 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 330.875596][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 330.875607][T13081] Call Trace: [ 330.875614][T13081] [ 330.875622][T13081] dump_stack_lvl+0x189/0x250 [ 330.875652][T13081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.875680][T13081] ? __pfx__printk+0x10/0x10 [ 330.875703][T13081] ? __pfx___might_resched+0x10/0x10 [ 330.875723][T13081] should_fail_ex+0x414/0x560 [ 330.875753][T13081] should_failslab+0xa8/0x100 [ 330.875776][T13081] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 330.875797][T13081] ? __alloc_skb+0x112/0x2d0 [ 330.875817][T13081] __alloc_skb+0x112/0x2d0 [ 330.875838][T13081] netlink_sendmsg+0x5c6/0xb30 [ 330.875863][T13081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.875883][T13081] ? aa_sock_msg_perm+0x94/0x160 [ 330.875901][T13081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.875919][T13081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.875936][T13081] __sock_sendmsg+0x219/0x270 [ 330.875961][T13081] ____sys_sendmsg+0x505/0x830 [ 330.875985][T13081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.876012][T13081] ? import_iovec+0x74/0xa0 [ 330.876036][T13081] ___sys_sendmsg+0x21f/0x2a0 [ 330.876057][T13081] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.876111][T13081] ? __fget_files+0x2a/0x420 [ 330.876131][T13081] ? __fget_files+0x3a0/0x420 [ 330.876161][T13081] __x64_sys_sendmsg+0x19b/0x260 [ 330.876182][T13081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.876217][T13081] ? do_syscall_64+0xba/0x210 [ 330.876242][T13081] do_syscall_64+0xf6/0x210 [ 330.876263][T13081] ? clear_bhb_loop+0x45/0xa0 [ 330.876284][T13081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.876300][T13081] RIP: 0033:0x7f457f58e969 [ 330.876314][T13081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.876328][T13081] RSP: 002b:00007f45804bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.876346][T13081] RAX: ffffffffffffffda RBX: 00007f457f7b5fa0 RCX: 00007f457f58e969 [ 330.876358][T13081] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 330.876369][T13081] RBP: 00007f45804bb090 R08: 0000000000000000 R09: 0000000000000000 [ 330.876380][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.876389][T13081] R13: 0000000000000000 R14: 00007f457f7b5fa0 R15: 00007ffe3ae635b8 [ 330.876416][T13081] [ 330.876940][T13079] tipc: Enabling of bearer rejected, failed to enable media [ 330.957440][T13095] netlink: 'syz.1.1799': attribute type 12 has an invalid length. [ 331.047677][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024257800: rx timeout, send abort [ 331.548724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024257400: rx timeout, send abort [ 331.551939][T13120] __nla_validate_parse: 9 callbacks suppressed [ 331.551956][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 331.651034][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024257800: abort rx timeout. Force session deactivation [ 331.717690][T13128] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 331.746558][T13128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1807'. [ 332.057003][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024257400: abort rx timeout. Force session deactivation [ 332.769295][T13178] netlink: 'syz.2.1819': attribute type 11 has an invalid length. [ 332.801515][T13178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1819'. [ 332.827098][T13189] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 332.831611][T13175] syzkaller0: entered promiscuous mode [ 332.842031][T13175] syzkaller0: entered allmulticast mode [ 332.852763][T13181] xt_CT: No such helper "pptp" [ 334.726593][T13215] netlink: 'syz.3.1830': attribute type 11 has an invalid length. [ 334.759471][T13215] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1830'. [ 334.761690][T13222] netlink: 'syz.1.1832': attribute type 2 has an invalid length. [ 334.825602][T13225] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 335.053244][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 335.097993][T13238] xt_recent: Unsupported userspace flags (00000048) [ 335.149860][T13238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 335.359030][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 335.417900][T13246] nbd: device at index 64 is going down [ 335.476841][T13238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1837'. [ 335.670139][T13269] pim6reg1: entered promiscuous mode [ 335.685640][T13269] pim6reg1: entered allmulticast mode [ 335.977702][T13277] pim6reg1: entered promiscuous mode [ 335.988345][T13277] pim6reg1: entered allmulticast mode [ 336.083683][T13289] pim6reg1: entered promiscuous mode [ 336.095280][T13289] pim6reg1: entered allmulticast mode [ 337.266921][T13359] pim6reg1: entered promiscuous mode [ 337.272282][T13359] pim6reg1: entered allmulticast mode [ 342.830245][T13494] pim6reg1: entered promiscuous mode [ 342.835954][T13494] pim6reg1: entered allmulticast mode [ 345.379989][T13604] pim6reg1: entered promiscuous mode [ 345.401092][T13604] pim6reg1: entered allmulticast mode [ 346.007710][T13643] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 346.259256][T13647] netlink: 'syz.1.1964': attribute type 11 has an invalid length. [ 346.267467][T13647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1964'. [ 346.333364][T13651] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 346.341555][T13651] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 346.519078][T13657] syzkaller0: entered promiscuous mode [ 346.525954][T13657] syzkaller0: entered allmulticast mode [ 348.208971][T13671] tipc: Enabling of bearer rejected, already enabled [ 348.494842][T13694] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.533531][T13687] tipc: Enabled bearer , priority 0 [ 348.590618][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 348.612617][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 348.630697][T13690] syzkaller0: entered promiscuous mode [ 348.642882][T13690] syzkaller0: entered allmulticast mode [ 350.305707][T13687] syzkaller0: entered promiscuous mode [ 350.311194][T13687] syzkaller0: entered allmulticast mode [ 350.317534][T13687] tipc: Resetting bearer [ 351.537845][T13678] lo speed is unknown, defaulting to 1000 [ 351.576742][T13684] tipc: Resetting bearer [ 351.672950][T13684] tipc: Disabling bearer [ 351.756795][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 351.935043][T13729] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 352.035113][T13734] netlink: 'syz.0.1980': attribute type 11 has an invalid length. [ 352.090393][T13729] bond3: entered promiscuous mode [ 352.090809][T13734] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1980'. [ 352.112949][T13729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.152409][T13742] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 352.216816][T13742] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 352.285057][T13691] lo speed is unknown, defaulting to 1000 [ 352.376048][T13735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.386662][T13735] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 352.425655][T13735] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 352.489191][T13735] bond3: (slave ip6gre1): making interface the new active one [ 352.526125][T13735] ip6gre1: entered promiscuous mode [ 352.534059][T13735] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 352.943752][T13757] tipc: Enabling of bearer rejected, already enabled [ 353.141466][T13761] syzkaller0: entered promiscuous mode [ 353.151224][T13761] syzkaller0: entered allmulticast mode [ 353.720798][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1986'. [ 354.874013][T13783] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 355.081388][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 355.696316][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 355.772832][T13808] team0 (unregistering): left promiscuous mode [ 355.791437][T13808] team_slave_0: left promiscuous mode [ 355.797913][T13808] team_slave_1: left promiscuous mode [ 355.812119][T13808] team0 (unregistering): Port device team_slave_0 removed [ 355.827480][T13808] team0 (unregistering): Port device team_slave_1 removed [ 355.859142][T13773] lo speed is unknown, defaulting to 1000 [ 356.453971][T13842] netlink: 'syz.1.1999': attribute type 11 has an invalid length. [ 356.461831][T13842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1999'. [ 356.505030][T13849] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 356.538563][T13849] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 357.048571][T13869] x_tables: duplicate underflow at hook 2 [ 357.417458][T13882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 357.479907][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 357.554448][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 357.645109][T13893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2014'. [ 357.679684][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 357.685071][T13893] xt_recent: Unsupported userspace flags (00000048) [ 357.727750][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2014'. [ 357.775988][T13903] batman_adv: batadv0: Adding interface: dummy0 [ 357.782381][T13903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.815352][T13903] batman_adv: batadv0: Interface activated: dummy0 [ 357.824382][T13907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2014'. [ 357.849801][T13907] nbd: device at index 64 is going down [ 358.155695][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.632589][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 358.668858][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 358.779761][T13955] FAULT_INJECTION: forcing a failure. [ 358.779761][T13955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.816753][T13955] CPU: 0 UID: 0 PID: 13955 Comm: syz.3.2031 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 358.816780][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.816790][T13955] Call Trace: [ 358.816797][T13955] [ 358.816804][T13955] dump_stack_lvl+0x189/0x250 [ 358.816831][T13955] ? __lock_acquire+0xaac/0xd20 [ 358.816854][T13955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.816874][T13955] ? __pfx__printk+0x10/0x10 [ 358.816888][T13955] ? __might_fault+0xb0/0x130 [ 358.816916][T13955] should_fail_ex+0x414/0x560 [ 358.816946][T13955] _copy_from_user+0x2d/0xb0 [ 358.816967][T13955] __sys_bpf+0x1ed/0x860 [ 358.816991][T13955] ? __pfx___sys_bpf+0x10/0x10 [ 358.817023][T13955] ? ksys_write+0x1f0/0x250 [ 358.817040][T13955] ? rcu_is_watching+0x15/0xb0 [ 358.817074][T13955] __x64_sys_bpf+0x7c/0x90 [ 358.817093][T13955] do_syscall_64+0xf6/0x210 [ 358.817115][T13955] ? clear_bhb_loop+0x45/0xa0 [ 358.817135][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.817151][T13955] RIP: 0033:0x7fef31d8e969 [ 358.817167][T13955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.817181][T13955] RSP: 002b:00007fef32b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.817199][T13955] RAX: ffffffffffffffda RBX: 00007fef31fb5fa0 RCX: 00007fef31d8e969 [ 358.817211][T13955] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 358.817221][T13955] RBP: 00007fef32b71090 R08: 0000000000000000 R09: 0000000000000000 [ 358.817232][T13955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.817241][T13955] R13: 0000000000000000 R14: 00007fef31fb5fa0 R15: 00007ffca3092638 [ 358.817269][T13955] [ 359.173280][T13968] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 359.323182][T13949] team0 (unregistering): Port device team_slave_0 removed [ 359.358586][T13949] team0 (unregistering): Port device team_slave_1 removed [ 359.526264][T13984] FAULT_INJECTION: forcing a failure. [ 359.526264][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.571456][T13984] CPU: 0 UID: 0 PID: 13984 Comm: syz.0.2037 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 359.571482][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 359.571492][T13984] Call Trace: [ 359.571499][T13984] [ 359.571507][T13984] dump_stack_lvl+0x189/0x250 [ 359.571533][T13984] ? __lock_acquire+0xaac/0xd20 [ 359.571558][T13984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.571581][T13984] ? __pfx__printk+0x10/0x10 [ 359.571598][T13984] ? __might_fault+0xb0/0x130 [ 359.571630][T13984] should_fail_ex+0x414/0x560 [ 359.571666][T13984] _copy_from_user+0x2d/0xb0 [ 359.571687][T13984] ___sys_sendmsg+0x158/0x2a0 [ 359.571709][T13984] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.571762][T13984] ? __fget_files+0x2a/0x420 [ 359.571782][T13984] ? __fget_files+0x3a0/0x420 [ 359.571812][T13984] __x64_sys_sendmsg+0x19b/0x260 [ 359.571833][T13984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.571867][T13984] ? do_syscall_64+0xba/0x210 [ 359.571893][T13984] do_syscall_64+0xf6/0x210 [ 359.571913][T13984] ? clear_bhb_loop+0x45/0xa0 [ 359.571934][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.571950][T13984] RIP: 0033:0x7f95f9b8e969 [ 359.571965][T13984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.571980][T13984] RSP: 002b:00007f95fa9d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.571998][T13984] RAX: ffffffffffffffda RBX: 00007f95f9db5fa0 RCX: 00007f95f9b8e969 [ 359.572010][T13984] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000004 [ 359.572021][T13984] RBP: 00007f95fa9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.572031][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.572041][T13984] R13: 0000000000000000 R14: 00007f95f9db5fa0 R15: 00007ffe22322b98 [ 359.572071][T13984] [ 360.041267][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 360.071584][T14002] netlink: 'syz.1.2041': attribute type 11 has an invalid length. [ 360.132183][T14004] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 360.193264][T14004] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 360.282398][T14016] xt_recent: Unsupported userspace flags (00000048) [ 360.358205][T14012] nbd: nbd64 already in use [ 361.101251][T14054] tipc: Enabled bearer , priority 0 [ 361.209373][T14054] syzkaller0: entered promiscuous mode [ 361.221056][T14054] syzkaller0: entered allmulticast mode [ 361.227927][T14054] tipc: Resetting bearer [ 361.235645][T14056] xt_recent: Unsupported userspace flags (00000048) [ 361.328858][T14068] netlink: 'syz.1.2060': attribute type 21 has an invalid length. [ 361.354812][T14066] nbd: device at index 64 is going down [ 362.920088][T14068] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 362.940903][ T407] tipc: Resetting bearer [ 362.980822][T14050] tipc: Resetting bearer [ 363.028443][T14093] netlink: 'syz.1.2062': attribute type 11 has an invalid length. [ 363.036367][T14093] __nla_validate_parse: 10 callbacks suppressed [ 363.036381][T14093] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2062'. [ 363.059104][T14050] tipc: Disabling bearer [ 363.082043][T14098] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 363.091398][T14097] SET target dimension over the limit! [ 363.098143][T14098] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 363.197603][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 363.391528][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 363.628964][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 363.851933][T14144] FAULT_INJECTION: forcing a failure. [ 363.851933][T14144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.904106][T14144] CPU: 0 UID: 0 PID: 14144 Comm: syz.1.2078 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 363.904133][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 363.904143][T14144] Call Trace: [ 363.904150][T14144] [ 363.904157][T14144] dump_stack_lvl+0x189/0x250 [ 363.904183][T14144] ? __lock_acquire+0xaac/0xd20 [ 363.904214][T14144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.904236][T14144] ? __pfx__printk+0x10/0x10 [ 363.904253][T14144] ? __might_fault+0xb0/0x130 [ 363.904283][T14144] should_fail_ex+0x414/0x560 [ 363.904312][T14144] _copy_from_user+0x2d/0xb0 [ 363.904333][T14144] ___sys_sendmsg+0x158/0x2a0 [ 363.904355][T14144] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.904408][T14144] ? __fget_files+0x2a/0x420 [ 363.904427][T14144] ? __fget_files+0x3a0/0x420 [ 363.904457][T14144] __x64_sys_sendmsg+0x19b/0x260 [ 363.904478][T14144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.904512][T14144] ? do_syscall_64+0xba/0x210 [ 363.904536][T14144] do_syscall_64+0xf6/0x210 [ 363.904557][T14144] ? clear_bhb_loop+0x45/0xa0 [ 363.904577][T14144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.904593][T14144] RIP: 0033:0x7f9b4f78e969 [ 363.904607][T14144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.904622][T14144] RSP: 002b:00007f9b505cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.904640][T14144] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78e969 [ 363.904652][T14144] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 363.904662][T14144] RBP: 00007f9b505cb090 R08: 0000000000000000 R09: 0000000000000000 [ 363.904672][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.904681][T14144] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 363.904708][T14144] [ 364.133895][T14147] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 364.388776][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 364.538904][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2084'. [ 364.778928][T14183] netlink: 'syz.0.2089': attribute type 11 has an invalid length. [ 364.820345][T14183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2089'. [ 364.856725][T14190] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 364.887562][T14190] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 365.621678][T14213] veth0_to_bridge: entered promiscuous mode [ 365.934903][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 365.966910][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 366.203755][T14170] veth0_to_bridge: left promiscuous mode [ 366.212469][T14244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2101'. [ 366.653319][T14252] xt_recent: Unsupported userspace flags (00000048) [ 367.365497][T14282] tipc: Enabled bearer , priority 10 [ 368.085603][T14319] __nla_validate_parse: 7 callbacks suppressed [ 368.085622][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 368.148533][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 368.329641][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 368.392950][T14328] xt_recent: Unsupported userspace flags (00000048) [ 368.428424][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2120'. [ 368.518399][T14335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2120'. [ 368.587170][T14335] nbd: device at index 64 is going down [ 368.619193][T14328] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2120'. [ 368.631962][T14340] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 368.918419][T14355] netlink: 'syz.3.2124': attribute type 11 has an invalid length. [ 368.937025][T14355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2124'. [ 368.970030][T14358] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 369.518872][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 369.622422][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 370.022696][T14397] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 370.041948][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 370.091762][T14400] xt_recent: Unsupported userspace flags (00000048) [ 370.207637][T14407] nbd: device at index 64 is going down [ 370.707250][T14429] netlink: 'syz.3.2140': attribute type 11 has an invalid length. [ 370.759784][T14435] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 371.314041][T14461] xt_recent: Unsupported userspace flags (00000048) [ 371.422901][T14469] nbd: device at index 64 is going down [ 372.079310][T14505] netlink: 'syz.2.2158': attribute type 11 has an invalid length. [ 372.132338][T14511] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 372.919606][T14539] xt_recent: Unsupported userspace flags (00000048) [ 373.052819][T14533] nbd: nbd64 already in use [ 373.111388][T14533] __nla_validate_parse: 14 callbacks suppressed [ 373.111406][T14533] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2163'. [ 373.163677][T14552] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 373.671200][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 373.990782][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 374.329188][T14600] tipc: Enabling of bearer rejected, already enabled [ 374.616694][T14611] tipc: Enabled bearer , priority 0 [ 374.678896][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 374.716395][T14621] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 374.760849][T14622] xt_recent: Unsupported userspace flags (00000048) [ 374.768037][T14611] syzkaller0: entered promiscuous mode [ 374.768060][T14611] syzkaller0: entered allmulticast mode [ 374.785123][T14611] tipc: Resetting bearer [ 374.819612][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'. [ 374.929103][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'. [ 375.003268][T14622] nbd: device at index 64 is going down [ 375.046546][T14615] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2185'. [ 376.454340][ T6411] tipc: Resetting bearer [ 376.497943][T14610] tipc: Resetting bearer [ 376.584872][T14610] tipc: Disabling bearer [ 377.411182][T14677] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 377.699656][T14688] netlink: 'syz.4.2209': attribute type 11 has an invalid length. [ 377.729663][T14688] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2209'. [ 377.781494][T14690] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 378.221809][T14706] tipc: Enabling of bearer rejected, already enabled [ 378.635924][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.762794][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 378.903920][T14733] tipc: Enabling of bearer rejected, already enabled [ 379.084345][T14743] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 379.586557][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 379.669689][T14758] xt_connbytes: Forcing CT accounting to be enabled [ 379.943972][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 380.416610][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 380.601050][T14815] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 380.687099][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 380.701221][T14818] FAULT_INJECTION: forcing a failure. [ 380.701221][T14818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.742725][T14818] CPU: 1 UID: 0 PID: 14818 Comm: syz.1.2255 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 380.742779][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 380.742802][T14818] Call Trace: [ 380.742818][T14818] [ 380.742834][T14818] dump_stack_lvl+0x189/0x250 [ 380.742868][T14818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.742892][T14818] ? __pfx__printk+0x10/0x10 [ 380.742923][T14818] should_fail_ex+0x414/0x560 [ 380.742954][T14818] _copy_from_user+0x2d/0xb0 [ 380.742977][T14818] sctp_setsockopt+0x19f/0x1200 [ 380.742992][T14818] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.743017][T14818] do_sock_setsockopt+0x257/0x3e0 [ 380.743038][T14818] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 380.743051][T14818] ? __fget_files+0x2a/0x420 [ 380.743075][T14818] ? __fget_files+0x3a0/0x420 [ 380.743093][T14818] ? __fget_files+0x2a/0x420 [ 380.743121][T14818] __x64_sys_setsockopt+0x18b/0x220 [ 380.743145][T14818] do_syscall_64+0xf6/0x210 [ 380.743169][T14818] ? clear_bhb_loop+0x45/0xa0 [ 380.743196][T14818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.743211][T14818] RIP: 0033:0x7f9b4f78e969 [ 380.743226][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.743240][T14818] RSP: 002b:00007f9b505cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.743258][T14818] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78e969 [ 380.743271][T14818] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 380.743281][T14818] RBP: 00007f9b505cb090 R08: 000000000000000c R09: 0000000000000000 [ 380.743292][T14818] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 380.743303][T14818] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 380.743333][T14818] [ 381.322814][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2259'. [ 381.339253][T14835] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 381.367925][T14832] xt_recent: Unsupported userspace flags (00000048) [ 381.399741][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2259'. [ 381.525152][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2259'. [ 381.634615][T14844] nbd: device at index 64 is going down [ 381.715421][T14832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2259'. [ 382.142262][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 382.152057][T14881] netlink: 'syz.4.2273': attribute type 11 has an invalid length. [ 382.209527][T14887] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 382.359410][T14897] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 382.569113][T14904] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 382.796912][T14917] xt_recent: Unsupported userspace flags (00000048) [ 382.840264][T14915] xt_CT: No such helper "pptp" [ 382.897606][T14917] nbd: device at index 64 is going down [ 383.225443][T14938] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 383.363101][T14946] netlink: 'syz.3.2287': attribute type 11 has an invalid length. [ 383.402310][T14948] xt_cluster: node mask cannot exceed total number of nodes [ 383.418334][T14951] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 383.676861][T14961] FAULT_INJECTION: forcing a failure. [ 383.676861][T14961] name failslab, interval 1, probability 0, space 0, times 0 [ 383.709097][T14961] CPU: 1 UID: 0 PID: 14961 Comm: syz.1.2291 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 383.709130][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 383.709140][T14961] Call Trace: [ 383.709147][T14961] [ 383.709154][T14961] dump_stack_lvl+0x189/0x250 [ 383.709184][T14961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.709208][T14961] ? __pfx__printk+0x10/0x10 [ 383.709227][T14961] ? __pfx___might_resched+0x10/0x10 [ 383.709243][T14961] ? fs_reclaim_acquire+0x7d/0x100 [ 383.709271][T14961] should_fail_ex+0x414/0x560 [ 383.709301][T14961] should_failslab+0xa8/0x100 [ 383.709323][T14961] __kmalloc_noprof+0xcb/0x4f0 [ 383.709342][T14961] ? tomoyo_encode+0x28b/0x550 [ 383.709365][T14961] tomoyo_encode+0x28b/0x550 [ 383.709389][T14961] tomoyo_realpath_from_path+0x58d/0x5d0 [ 383.709419][T14961] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 383.709444][T14961] tomoyo_path_number_perm+0x1e8/0x5a0 [ 383.709470][T14961] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.709498][T14961] ? sb_end_write+0xe9/0x1c0 [ 383.709520][T14961] ? vfs_write+0x8d8/0xa90 [ 383.709574][T14961] ? ksys_write+0x1e1/0x250 [ 383.709590][T14961] ? rcu_is_watching+0x15/0xb0 [ 383.709618][T14961] security_file_ioctl+0xcb/0x2d0 [ 383.709642][T14961] __se_sys_ioctl+0x47/0x170 [ 383.709661][T14961] do_syscall_64+0xf6/0x210 [ 383.709684][T14961] ? clear_bhb_loop+0x45/0xa0 [ 383.709703][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.709719][T14961] RIP: 0033:0x7f9b4f78e969 [ 383.709734][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.709747][T14961] RSP: 002b:00007f9b505cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.709765][T14961] RAX: ffffffffffffffda RBX: 00007f9b4f9b5fa0 RCX: 00007f9b4f78e969 [ 383.709777][T14961] RDX: 0000200000000080 RSI: 0000000040047440 RDI: 0000000000000003 [ 383.709787][T14961] RBP: 00007f9b505cb090 R08: 0000000000000000 R09: 0000000000000000 [ 383.709796][T14961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.709804][T14961] R13: 0000000000000000 R14: 00007f9b4f9b5fa0 R15: 00007fffc7375bd8 [ 383.709831][T14961] [ 383.709850][T14961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.937936][ T407] wlan1: Trigger new scan to find an IBSS to join [ 383.953359][ T407] ------------[ cut here ]------------ [ 383.958862][ T407] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 383.994453][ T407] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 384.021055][ T407] CPU: 1 UID: 0 PID: 407 Comm: kworker/u8:5 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 384.021088][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 384.021099][ T407] Workqueue: events_unbound cfg80211_wiphy_work [ 384.021126][ T407] Call Trace: [ 384.021133][ T407] [ 384.021139][ T407] dump_stack_lvl+0x189/0x250 [ 384.021167][ T407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.021188][ T407] ? __pfx__printk+0x10/0x10 [ 384.021216][ T407] ubsan_epilogue+0xa/0x40 [ 384.021232][ T407] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 384.021258][ T407] ieee80211_request_ibss_scan+0x600/0x8b0 [ 384.021292][ T407] ieee80211_ibss_work+0xde7/0x1060 [ 384.021321][ T407] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 384.021351][ T407] ? ieee80211_iface_work+0xf39/0xfe0 [ 384.021372][ T407] ? rcu_is_watching+0x15/0xb0 [ 384.021399][ T407] cfg80211_wiphy_work+0x2dc/0x460 [ 384.021422][ T407] ? process_scheduled_works+0x9ec/0x17a0 [ 384.021447][ T407] process_scheduled_works+0xadb/0x17a0 [ 384.021494][ T407] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.021529][ T407] worker_thread+0x8a0/0xda0 [ 384.021549][ T407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.021577][ T407] ? __kthread_parkme+0x7b/0x200 [ 384.021602][ T407] kthread+0x70e/0x8a0 [ 384.021620][ T407] ? __pfx_worker_thread+0x10/0x10 [ 384.021635][ T407] ? __pfx_kthread+0x10/0x10 [ 384.021653][ T407] ? __pfx_kthread+0x10/0x10 [ 384.021670][ T407] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.021687][ T407] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.021706][ T407] ? __pfx_kthread+0x10/0x10 [ 384.021723][ T407] ret_from_fork+0x4b/0x80 [ 384.021739][ T407] ? __pfx_kthread+0x10/0x10 [ 384.021756][ T407] ret_from_fork_asm+0x1a/0x30 [ 384.021789][ T407] [ 384.021795][ T407] ---[ end trace ]--- [ 384.216706][ T407] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 384.223950][ T407] CPU: 1 UID: 0 PID: 407 Comm: kworker/u8:5 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 384.236032][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 384.246117][ T407] Workqueue: events_unbound cfg80211_wiphy_work [ 384.252406][ T407] Call Trace: [ 384.255699][ T407] [ 384.258643][ T407] dump_stack_lvl+0x99/0x250 [ 384.263259][ T407] ? __asan_memcpy+0x40/0x70 [ 384.267866][ T407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.273100][ T407] ? __pfx__printk+0x10/0x10 [ 384.277712][ T407] panic+0x2db/0x790 [ 384.281616][ T407] ? __pfx_panic+0x10/0x10 [ 384.286030][ T407] ? _printk+0xcf/0x120 [ 384.290187][ T407] ? __pfx__printk+0x10/0x10 [ 384.294774][ T407] check_panic_on_warn+0x89/0xb0 [ 384.299707][ T407] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 384.305432][ T407] ieee80211_request_ibss_scan+0x600/0x8b0 [ 384.311246][ T407] ieee80211_ibss_work+0xde7/0x1060 [ 384.316529][ T407] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 384.322173][ T407] ? ieee80211_iface_work+0xf39/0xfe0 [ 384.327575][ T407] ? rcu_is_watching+0x15/0xb0 [ 384.332344][ T407] cfg80211_wiphy_work+0x2dc/0x460 [ 384.337448][ T407] ? process_scheduled_works+0x9ec/0x17a0 [ 384.343163][ T407] process_scheduled_works+0xadb/0x17a0 [ 384.348725][ T407] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.354713][ T407] worker_thread+0x8a0/0xda0 [ 384.359300][ T407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.365712][ T407] ? __kthread_parkme+0x7b/0x200 [ 384.370650][ T407] kthread+0x70e/0x8a0 [ 384.374713][ T407] ? __pfx_worker_thread+0x10/0x10 [ 384.379812][ T407] ? __pfx_kthread+0x10/0x10 [ 384.384392][ T407] ? __pfx_kthread+0x10/0x10 [ 384.388971][ T407] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.394159][ T407] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.399353][ T407] ? __pfx_kthread+0x10/0x10 [ 384.403933][ T407] ret_from_fork+0x4b/0x80 [ 384.408335][ T407] ? __pfx_kthread+0x10/0x10 [ 384.412914][ T407] ret_from_fork_asm+0x1a/0x30 [ 384.417678][ T407] [ 384.420973][ T407] Kernel Offset: disabled [ 384.425343][ T407] Rebooting in 86400 seconds..