last executing test programs: 8.586967109s ago: executing program 0 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "aa"}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 32) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/125, 0x7d}], 0x1}, 0x2102) (async) sendmsg$alg(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)="fdf5d35ceb220490173b220ecb9227bbf8573fdb7b58b3a0139466bc5cccf181ca8ad120f35abf1c16403ee266b4ee97d10920ef38639e56b779a00813d6917df131e8444177bace046567e1ceea1e0d82108ccb3030150925a4afaf7fc4851813a89cdb15aeb965ce91a9dbe6aef841", 0x70}], 0x1, &(0x7f0000001b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4008001) (async, rerun: 64) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) (rerun: 64) 8.228579534s ago: executing program 0 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c0c0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) syz_emit_ethernet(0x22, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000140000ff840084907803bddd5ab7970bac"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_INFO={0x9, 0x3, "c39ad3160c"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) 8.091809261s ago: executing program 0 (id=1134): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}], 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.970861891s ago: executing program 0 (id=1135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="02"], 0x10) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1f8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:netcontrol_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1f8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:netcontrol_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$nl_xfrm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001007e00000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) sendmmsg$inet(r10, &(0x7f0000001880)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="a9050000000074640000", 0xa}, {&(0x7f0000000380)="9fc5b07966f689434f20108ddbf254020751412be8115c2630c7", 0x1a}], 0x2}}], 0x1, 0x404c800) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r11, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)="31249d", 0x3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02000700000000fe880000000000000000000000000101880000000000000029000000390000003c0e010500000000fc000000000000000000000000000001ff010000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000b80000000000000029000000390000000614010b0000000000000000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000002fe88000000000000000000000000000100000000000000000000ffff00000000fc000000000000000000000000000001fe880000000000000000000000000101fe8000000000000000000000000000aafe8000000000000000000000000000bb1400000000000000290000003e0000000400000000000000500000000000000029000000360000009e06000000000000010900000000000000000001000718000000000409090006000000000000000400000000000000c2040000000305026e1a0000000000000058000000000000002900000039000000110802050000000000000000000000000000ffff0a01010120010000000000000000000000000000fe80000000000000000000000000003e000000000000000000000000ff00000028000000000000002900000004000000020100000000000005020001c2040001000000010000000014000000000000002900000008000000050000000000000014"], 0x280}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000840)="c04dac56", 0x4}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x6, @private1, 0x1ff}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c40)="dd769117", 0x4}], 0x1}}], 0x3, 0x40048d1) setsockopt(r11, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) 7.864317925s ago: executing program 0 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000000)="2b66c7767a0d346b2654370bb3948e557173233903adfc097939f9955c2486adc7ad7bb92a35755ae42720acb61d4385898aa68c27c92e2f5e9ac60c0c9654fc2e8ceafffa46d50dbf9b3374b986b266f7d77b07cefb", 0x0, 0x0, 0x0, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b22, &(0x7f0000000040)) 7.776416739s ago: executing program 0 (id=1139): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2f6db1f7289f345e0551c760cd70b6b8a490f4fddbfa5bdb3018a8e42125ea9dfea06b1e08e79d313ab1f931702b99d903ea7d0479cb46d41f8a4f3b1c2450b52d3f9ab207522cab17a5d5443d255fdc970dea1e5deb5220dc5da1a2821549b14d53d87a883ceb6047681a053db6a19c97a689b9de55877d175aba13c749e5f28989e4af3eeb1382f0f1833cb1915183e26cb8535ebcce298a89c22727395d3657c89357", 0xa4}, {&(0x7f0000000380)="e5e5d0d49c09a6297c2b311a4978f3c9252a1df4a02ab2b9dbf4f8d5d178da28c9eb207fd670127274291c6351a2638b156801ba98c8fc06d052f5fbfef0d201589b05af03da8ca0197593e78271e717f094c212594de9fafc8337b1a9cb3fac6439c40d0586f182ee5909bb46c297fde572a86ad4e0d555c899ddbd54e32657d1ae27eb00c0d9c725cea01f57439532e46e15a4a198a2c3672d9a1d72718ab73fc1f21610bd0f8b0973397ea4573f7fc186e910d453f7fa044ed70f0c8ccd79b5f30d11bb5d0902b3b36cb50c47dc2b28e0a5d3d1dae39d5f5f14c6d7adf49e18051d707e8e6c25cf5e676329dcf70a9d86fb95c4f24f90460e28df4bc14ef7bab4251e88d6e4e9500eafeae1c152e500dda2e055b58a60578e826fa7585b5f5230422b8d910c962519a74412ef10dd37178c88e83770935fe8bd5d3c81634a8d71b1cd578d067ddd03e5daf56f739be790586b296246aad8734630cacedefdb8e64660984a8d2dfb0af008795754f25768cd7a039548964f1cc5a56895bc865052223fa92c3a8e9d5ce8c1beac7fbd60b0f77610bca12f9dee7918bfba84294170f4583f4106f79f9df23ab4e09653ffc0210749752fb3ba772431a6438b9e85124d49dd450aaf9f9443d5eb06e7a8aace9cf232e148a701541f8bbdf4e40d66dadad744fd73bda14add1940a3f3c9bda255598da3de22530ff81a6b7c09a321435c3fd2e9512c2854f8463d37136ed41755c8a19e1f9636a3e729731eadb22d68f8a81e0c5627f7fe173c4efddfd877adea55f3d676ff1faefe5682fd0392cd299bc9397989f475cba110bcf94f8cd51733d8f491eb3dd5a6963da5a4d15980b764f474cf8bc2d60a8d8fa9bd980327d6dbe68b4a046921f3e0c18153801ede77e7a3eb1508bcc06c801748cb21d2ee520dbb07a5320be19358e7b290aed7596560fa509c5cbba431d5fb8aa7d174be03824ea6283c027bd74f9b06f38dfa8cc3ce278e3bf81e0cc4326af33d4170102d7d212ab39ad2487c5297b8115db956d2b99db20ca86d76a17376ce5327c87c7c7e7c6fe6c0daeb3b68508acb5b328ab0b965169c2ee8968d8e9c71abfbca290b543093c9e4567b006304d20ab1c862e1291025aba0d34aa359f3714f49d693d33bc98202aab6860cc5efe9439cf8dd941d69e360fc465d871228327a07a019c9bf60bb890acf029dabecd20af10940fb35bcafd97b3c4b849178fff88ad1362298baa9ff2fe351587a35e7041ceb346901687898e02982c837f2b09231b7366a00d0db5ca867a57dc9bc98ab16ae43a01f65490e23100ec76e4d57252b9568b2d0895c9646352eea62a0ca68a48a5b05641b983355370d6cdfc9f35be5e4635a3ed1bdd6d2473ad1699a00b0c392c3336c264e6442382f313d104337cfbd6a4e48ca59533c465cefba3330537d683971d5bdbe75de6078de761c31211e5af3acb703da4650e95fbabf34e0fc4981dc775531769d7984ebbfd54f0abab35c97fed35cf16d52a127692f17e8555cb0b06eaa7fc6f5c04c0163250592dc0c599b33edab0dc2824f5656a17ea43b1d29e47508914a0db63223fae4e824e679c52195c3d75acf6fb2df33ae0496acabb73a2fcab7c7002626e26994c833c7dd94981fbff53eef9700d8811fb9f0b325fee1d2333a4964501e32468e86b6e738ebc5777914f6344cf8b6a50413f2287eab4dcda64559e8591c40bc7a0b5e636ccb6036ecf0659c9c772bed2d611d737ac35c4afe2ae6c59292b4bae9b2662182b2e4d0ee74cc806f23cc8718efa0f10f2923ca499866b60ee17732eb45da02c83c6cbcbf7be6fb785937c87a7d0fbe1cab1ec1d3453ed2645cad9225b372226d5aae59997fe4116fc2003d568d6167730a2e509c85699adbc9439bdffd6a0f1ed82c2fea1a6686d0ab8769b3b0d0ed0f9709549804483caa18dde4f31229a005463438a69c5b2f63313287ffb7f3d5afdca64aa6e982faa2b95538271f53df823e8a76f84db972b7ac32a7587d0ccfbfbb28b689a3553a36f587eaa95134f8543ec8a032efc4543453bcde336091a8f178e7fb3328ee7270977d471d030c7cf9b5cee688504488ccaa75baf261107b4fa035629f658846c51f4062e0def34e2bb12e5d1ada868f2c38107d77815e7ccfc65304353783ef907eea3ad56f15cc8777dbf454a62fadeb3dccdad2b6ad7e8d2341d1d757ae3c3385c517916dd8f5a37f065d93901c101a9e2e172d266336b4308d1b80e7e427499ff33d4e9ac53125de58761bf5d9a5e038b9fece1051e778574a01eca88f44e64989fd85e4d1ef480343c157734a98250ad39c19d40f7321e2be896a1c39d5b34ff008d70971a63146db7aa69857d59cca23844f0f75b09033ac35f6be4279beb81058adeb5a18295aee16629665d78a8c4b29694d8c512239b4d1327dfc7a86584ea0c657460a6d120eabd28df85d2450cb2c4cb3b0b73333e4999d4f516aafae1309832529ed0fe7bff557dd5420479da05f1cd192184d0d836198643ed7ad5f7f9e032e699668953dcc182c6ccfe84723ef4ec7989377d4448239ae8e88ca2bf946e63019194aee5a2dc13cf34bb35e72f378aee153b8ffca05887956aea3ce5917c99347e6e998017c904d67534a16270c2def8cd45a49a9a10f82abe887586aa443a9131923e413097dd2a4079e1e11037a95a3ee9b67c516079545aff4d39cf94f8cf67dcdcf3c57094f2ea997b38c47963971e5b0609777001032339edf650282ba1e9389bc62974f5c4513244621c3087ed869b033ae861baad310f067713f3b93ed929856725b6d8eac60abb9e04d57b92cf5e7145db59455889a177a89f24ca09333f6beaadce656c20816e2566c878ff5e8a8379e4998ac188b15ce8849b050c9e65715aeb6505cb8732a693db2ff94d65a0f4f9071f5069edd67668f41f25a44924846baccd37e375b333fe6eca8f6ab69ba8051f9934a83b96af4c053d16cfc0d04e75de5df0e0983e7b34cd198271017ac3d9c36b3133df8d23550fc7c42bb134c363dfd473e2f972553323c5bf028a03d65b6eb602c0ed78d6435a371538b466da1c558a723a5604d23ebc91fb2c2aaad5bebbd3eed7677498af1dbe25b6a97c308d6b26cd9b5126b58dd3313d4a297ebd3be4e40dfa02c5cae44a7a8da6d216cf3f405f96642f81ac3038a134b060f7556e0dc78a6635faf9cc1b857c9605e3bc28f044eec2a24643affd901c1502366a3f3a09b29cf80c0263a0457e1a81e42964e00dffe84a31761f8f1973da1eb200ce6e0344dd63fcb780a040a459f446d1dfa63ffee64c32d3293dbf5a31278c62ddf581c24e8e60947496912d1e3ba507975a8d7e76aca560b53dd246384491a8848f54a1de5b6e2665150ff01be78acea09b56220e2253ff6249fc414d633e890b977acd6c7fac31f9a186d750a728f979378275477c2350057ad5153a6444538a64dd2fdd2492fa73ab55d6699ac43afd77b0aa641c18e70971fca6e30c5e06caae53418c23d6bd6fc21dd26edc67cffdc3c21e4e63f4a6eb2be3d4bc80989310afc9b3f1537ccb7bc521609c8d4dfb1ade92ba650fb133ce457f1c8ae10bed23a8f148020c904ca3d81942054dae0c83a42fce13cf4c7e1ea4282304b5851f11c69abb30e750a88a0338485d039429267536fe0ad82f9acc662bd363b8759cad38fb887887c3db724df7b88d608367009c6aede2cffc960b3d1f807ba8bf2efc30e55f0728099de55042eee4adc5ec83f995103911020201951e5d65ccdc83d5cffbc01fd498cce3717f908a61f79a35d8cf5e331fa3aa90b420e18dec4f3e09126c2ab0de2b6f65329194e60ab2ba31e855cdb81bafc7c78d3dc6d7e46e9dfe58b8e479f13f6df6c136185827cfc1e6af22464afe7909d12581105c72a2b32ea3d6830bb74a37f112412c89236aa4e8ab11f419f635bb780dc05d9b4762fca6eecd7a21e99860517c6b35c5f72199585a769ca938b21e2fe505536b740ad9e177a219d0d98a30b89931df052b84b46f715cfedab29390e13b37f8b944590236fe0fad3405d1fba641d2b1e95774ae8ce217be2acedb63c9025a0ccac3cab2910a5ef7e5fec2603640bb2a126fd2140efa20cda938ae191d0ec42d0d96ae944a973e628425c882b252396851bc9ebc2a05bed21c42b7c1faa2cbb0c806c4c59fb7ab0ddca3b4184121d14f2d32e3e6989680e2d7563ed0ad4778d9e987b33739868a3429263204ecc78d59be62a30f39547ab716ddf091b7e302837b96b0db59516c9eb5e72062ab680cd1c7856c2bfaa1291e0f3f174fa2d6277b90cd86e519c5caff28acf0a966cde429f85f725074578931863ac091d24e235e32140dfc47bb9bf2b07ff621e03db7643fd333f8adb395f08dc570756cac6dfe5f9dbea55429254e52578e0f6612abd475f73f73e0c9b864ace5499031255e5da2e54498478e3a29bacb1b7f4be2546f5a68c05e66c0c862b7327ce1146e63bfef977ee3eaa9a551b4f9e1381c45472130a1cfd5198195394aa3c094e8de35ad20c7493be5258e3769d01e2a0ff26b59114b6dc561fa959dcdc939bf5550b24ce7dc61d0177de5880ad0e42420f0266d77bf643730dea6b3552b3843a9fb24f3168ae688df25148a9bbf9ae41337838cf56320e6a418bfafae6991c116dc598abe06c3653e56dbd9ec2aae7c82346b1d865377b8dd7f83830ac864b8369494bc0e56ed70a93d4bf332c5a8c75318667b75f1e5e4ab69f1e6f13979c747615e13d6e286629c7436a1a7c7fd7187adc8f711ba42a740762d3f448803061d2670371bd8f3e662be33da5e35559b1c9c5b1454d47e9cf2be1ad3627cd93b544145bfd35542b1d618eaa94c4163258a463d68db645bee5537a88014489ac263544e006599a3f6d3192ec94f1c9f76d6bb901f049565c62e0cd3b9064543d73c69ff261cec0e0edfb0e28b8c90396ff0007ad4bcb9f060da484b9ec0b8e9f122e52d24042643bede6f412ae92dbdea95e36376afb537008e8e0720cd53719586eee84b93ca38c09e4f169c436271d2f2f81b76cda1fd5bfbcf39b3202afb4bb40b1e5495399ab14f57b3aca94cdd418fc3fe431eb16626c523f452c1235760aa659be21226cd3f4617f8b7ce219c253f54331599430e8113b58235d0bf17a047bf2969b498af5c6d0b7555dc353169c3f14068969e39784dfbffca152ec727d93ffa8d3862c0b6488eb0db53589ec9791ba57583174de0657c09686ebcb6dfc1f8449d069a09b0178a85fae7a247f0e51f28b3f7a50d84c08b8dcbbe88bcc09c251942f4493dbd4468269e7411c48fc980c9598eed3a64dfa823a9be09814dde53b05a7c2baddb1a8fa9f098a1e106467a165dc5c40b5d3063a88bcea9b2a6c8cb80843de8e12c361cc57100eb7d8187e2380997018f9abb33dce4657d11d723b54503432f7204d9e1474494044f2c4bea6886040970cb9fe61b08c7d190774ca4b714de053a354be9ae80126c177a983de29155431d7147f5b7a7116fe2b2f188def12c5ca83cd7ef8f6e507f3b99e4b2ccbfbd3c518cdbe08e701e40fd680e68bd5ecf841ed2a589ff228fbde62a404fbb608f1e576c204a65a204dd2fe62ac72f8c581979ea54ac1db1306c3e4e7d8aef665749314a2634b9ca72faa855175546449cfb9b60430465dbf10423c96cf7497e1772d6207b6f4b991b5d4d28c10f40acaec1af107dba416ffb212f0b840bcc9bcec81a0302b30fce392374545a847a7be769cade6", 0x1000}, {&(0x7f0000001380)="7a86e10895258da8519a3bf1f2919c5cbc644c2b9eb871854e5a5106f5badcf69849eed01d7ae89f1bd43905c5d158017fd7df57211690e6cbc47b85f2ad110f42675cc266aa01b56ca0515c8c3531a7bd384019e598079865b8e03bbb06e81fb099332d5bb1cffac9319b8a3fc11a2bf995bcaffa4f30751e947ed90d48f9d37ccfb927d2c0cbbcc1025aae406a9ecc055e71e908fdc21cd974c4d9d7428f233c3a0f25f3a6decc8cf669a8d9fd6d1ee70580c75fda6f4940f06a59e55ab9a960fb4647c4667cddce2c673d96c3", 0xce}], 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001f80)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006800e97800000000000000000a0000000000040004000c"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x4040040) 2.312722013s ago: executing program 3 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xc4}}, 0x20050800) 2.049214679s ago: executing program 3 (id=1190): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x6a3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000240)=0x1, 0x4) 1.722989294s ago: executing program 4 (id=1192): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_to_hsr\x00', @broadcast}) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth0_to_team\x00', 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0xd, &(0x7f00000001c0)=0x4) (async, rerun: 32) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffff9}, [@generic={0x8, 0x7, 0x9, 0x9, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1f6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x2, 0xa, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x3, 0x5, 0x1, 0x7, 0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x80000000, 0x8, &(0x7f0000000300)=""/8, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2fa06, r1, 0x3, &(0x7f0000000380)=[r0, r0, r0], &(0x7f00000003c0)=[{0x2, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x5, 0xb}, {0x4, 0x4, 0x10, 0x4}], 0x10, 0x1, @void, @value}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x25, 0xec, &(0x7f00000004c0)="5ab12f372b7f8680f2121aa8f2584bb8d61dedd392ffa56212154de06dd5f824aabfce9a14", &(0x7f0000000500)=""/236, 0x8, 0x0, 0xe7, 0x10, &(0x7f0000000600)="bf7d0642cf94a02cff9bb3f0ba54d484c545da36330e30fc0348f52b71c250e0b78426378444bf168746bff46127bf07181878ab5230b129dcfa66c286e39f8de832af61cc113ef2506b9850ef2ab6a349ee06d80a62077f064f34816675aba565823d4ae57f625f1b35bf49b54cd3b5b292f6cf11d0bc2f9a6d6825c088ed99ec078ea33b53bc9f4bcd5f4900f7dc3627f01dae48def1bd355ed7b89a9daa44744a87e2c94da28c474a84062f94e588d716dff827d9502009d9838af5c5a63c60c211535312ebdf847e0657b6de126464669b4850fc104b9f540071fcc6235b1849213d286fdb", &(0x7f0000000700)="e3bd037b67c73ca2888358c95fdf7e62", 0x2, 0x0, 0x9}, 0x50) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x32) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x4, 0x6, 0xd02cd6feebd9c9b8, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000900)=0xfe, 0x4) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r1, 0x4531f000) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000940)=0xffffffff, 0x4) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r1, r0}, 0xc) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) (async, rerun: 32) r3 = socket$inet(0x2, 0x4, 0x80000000) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x100, 0x70bd27, 0x5, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) sendmmsg$alg(r0, &(0x7f0000004240)=[{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="a2d26348086500a72fc11cccd389657d51fb5311d492ac7a669a6b00c103dd87a28d183a48098255b3bdae5b4559c149212901835e96e0f1be6237b7b32242830e306d61fe702ebe4ce4ec4a46d431d96dded919a11c819bb66028a2a4537ae63edee587dfd73f814560e9e0d8862b3b1f3c6dbb9f12965dad96bbf012b87cfb1dc0f35ed45df02fecad1d", 0x8b}, {&(0x7f0000000c00)="5b188355bb41b7a80ab145463f1e9d17d406f1", 0x13}, {&(0x7f0000000c40)="36e279d9e23e1d139f3272b633c5285a9f76d97286781143a8fb1e2028ba8a3aa68e49db08b0eed367508e602e79fd79184974b0dbe6412ac1238ebdce397f653899c0673bb1b4b4e68e084059a0db13d205d172280af26fc8cf67c968a73e2bdb2f7d56e9703127696ec33445d8533f14c8ce9c0ac018270db3439e231bf6a4fd20ebba272745e36a4a869441540a8e4ed0cdd7d29c685185496b1960a6c1d4c751caf0d16910", 0xa7}], 0x3, 0x0, 0x0, 0x20040145}, {0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000d40)="4637840e5378ebe18ebb5b63b3f315e393eb831825a664b32001382f032586e0317a5ae348070af701", 0x29}, {&(0x7f0000000d80)="304ac7e7538fd34c856077df6a8c494fd54c76cd8c8b657adcf4", 0x1a}, {&(0x7f0000000dc0)="88091b08f9d71bae885f07545e5dba5b2e523cf31e8a99f5fa2346d7bba5a4eab761218be42593fa7e92abe0721109c723a0ef5c4539cb2bed94899a3538acc4a0dc18bb9ed4ceb87ad6659322aa1b93e4b4656c2b8efb106bb2a5e4da32d0f8fe36c3458654ac8c384d295b64e224369b61c9107f5765f7781a431d74ff016877dbc7e524f3ed5fd2bc38757f01e385b956c163ca51e30251cbb603cd9bc551b03382a5bdd26c4a5a78e4458de163465f007a8d876c2c", 0xb7}, {&(0x7f0000000e80)="2dbbb2826485e62b14bd6d2455648f40076406369a3cd4141dadd41c1667f181630ae4089b6ad3247ab21155f3422feb88a295ebf6414875", 0x38}, {&(0x7f0000000ec0)="29a000f4ac55e83bc19f810edfc435132a5c546c62a5fb21542c42900f3557273645d64d9bf66502f519ab6ee6ce3811de7df7ca581375c468c3fdc3cbbc3a0f3ae1d4b2269d5d25b85027653b75f54d97527362cf0e637c7456c064d34fcfee64fc2857f1afd7199bbb5e3be0d38594e51835b6fafb80ed8b21a3604fc52474005125a581c1d9374b234ef7beef86deb8d7ca2f11daaa5825b4b54f06e4", 0x9e}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="fcc6a8b132653729ab84accea2379a4568e53b6c4b2ed2709855508400aa4cf9f1d9497ae0e46ecac7e03bab89074f162e3c150a66f56f8bab08e6d688d9fe945c00157ba480928dc53ac721f481f4d9ac094716582866aa4e36027a9c3cb37da67578c263ed96027046ceba2d753a7087f1a61436fc3f17c9a3e2df576c299fee74dbd24e81b3ea6ab95dd263dc0c2dd52c792cd7168c262e96468ae9fb28f5a62b71992fe08d1f5e74564b3c872453f3ce8e33a929826bebb2766e0db39c959712a3aa50c4824361b41efd8c0278ff3c1983cb4d944405d6b7aa0450d034406e61b3e1f737d65898821889f3d40e6e6ebf59995f74e4b7", 0xf8}, {&(0x7f0000002080)="eaddb7c1d8abd776299cc150d503170990be0ff480a5444328fcbf4007e908341d4d817daa57b57ccdfecf66bcda467320739f051e956a15aca0b4ccd17224854610bf841021cc690e380b31bcd1e270276d6eaea20bc807a355232ad0f5c84a7687b5aba77d3b47db7d4bf74eac2d3e7a86c1d8dd117a42eceee42d7b198b442367b3c0bb62d021048e27c5d10da5f7363b7544a1b06921d304564e18458d3197e94141ef6ca6588cf28ad6e41e330fdde1684dc36716b68e9f3f20528648abef1d3034d0b795c8ca30ad513a9da9619ace70e58f1fe8e296c7c7b0ce0513aa61d555fb4be14d1d11b4", 0xea}, {&(0x7f0000002180)="ca122cc9b0321b39a6e6e6fe028b93e3845c2c3db8e74e9154df884ce15e75066eff0a66078bfc5afd01a338e63922ce87b5fb06e991dee4613c08bcadc62160d8ae90e5cfe565d40582c41ac36907a2df18f75ea9b9a6c4c72a8610e085f780bc2cb4e1707525d456339cb3b77e0e9f6f52d0cd556666aa69b37a39088d4cd654a197edae21fa148cb8a8930a50bc90a4fcb13e24d2bac9b65a", 0x9a}, {&(0x7f0000002240)="5caef45c5536ce2bb6caeff778db88f9feb270daf37c800f3a0aa1a2c5e4c65496e414530caf2519dd1aeef9b3bcb1b55935241a20aeac1a95e5f438dfd81a7b364191985403d96557a1bbc25ea9fec770c41add7f88b807f70fd403faba31187ab21a8863e60d3de182d0775a79f42741c9e831119c16c5d828c265188016de8faaf157dba869c5dc3a4160e213327663ca60b9e46d181aa320946ca1acf3fd697d8383a6b3870861911bfee4075551f1ccf81883b3e1b50426d336b863bb5299c1a024f8a1ea32b828148421c3e584", 0xd0}], 0xa, &(0x7f0000002400)=[@assoc={0x18, 0x117, 0x4, 0x4e}], 0x18, 0x40}, {0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002440)="8fdd4ae70befacdc77f9489436df89bfe46e2bcc52c90986a662710d96d6171d24dd2af05034cc0796d79d2e2119e19b478dafc7ecbb618713942bbb83524b1aeaeebedc156aaa683aea7f67d9dd9d8236dac485982a408f3afcada8e152599a346df272f76f7accc6fea9b25a1cdd786a8c2512048ce46238258c41d2c0d5b6c32e4b99c03e25cebe876793f7a8b9fbd04e7fd1ef77cfe76c7efe25e71c40ee7e7e129c90d81ba62055ffe2313a03cac59af9adf2d629ad43dfc79e67091b7e3c89ff333f7c4f3773bbae3883972d0788dc03ac72681bf6bbf80b8c970a454d6314d1", 0xe3}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="62e2320c15c05eeef171bee77ff081823dcf7e46e37484b9fd65e8673347c7ffbbd23f014f1338ef03671869015e9c94f96def0ccbc3e88f8ce6f0b09e6a5f91913dacbc4e975492bb272748a98d8ea7fc7929eddad650e5e0d5bff15463d9d83af1fe09af9b2e9d71c0755eb861d04f4c48c4566e8b12847656b939bfd00026d330c84002d94bbdda12aaf68afb8eb4ed7e8f7c75ccf8303f018c35", 0x9c}], 0x3, 0x0, 0x0, 0x20000040}, {0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003640)="95212db39c327788223f563b2d8f06099af3ec040d6c16855bc6ae5eb89da0ba4b2697cf2adcfd0346eef8ccbc925d2f85c4a73e45378ea1d3a78eb499237055de4a6d9c55f1293da1c18052a0866515ff5e2cd359ff796856fe56a894403dd3fd869843f1fa863e5342ec35aa802b7cbd82223423c7e8e154cbc323573bb08c8a4c121f293e365c37740144e17909b834a84826eb1f4680b7988ae0e7372b585ba6dc088fce2a2a5b501a5a5ecbb1454f3579bdb9fd6732607fa44c4adfab9dfdf39205bb350ce2c3cabeb978ad07c56318ab046dbf676d9c925c5d42acb9", 0xdf}, {&(0x7f0000003740)="a95fc52464774f12df117fe5cb3b4c2fd9f193dbad9d4129a5e6ec2c721b1f8433161d875c2d927393dc84d7b7cbce187f36878b2e13a38870662e91b70dd40e4ede479f78aad1b2710023b8c54bf682e37384fbc78c94d4f60432340319918f9b8b93fbc5113a8123e23e222b25aaa1a718c72e63627da8523467d151858b5cf34d9a98b349ef660d18d3d2903b7f631cbc66a012c12cd0155848481d8c221a931224733c3584c694d9c352d489281e37f1ab513eee1f49d45a87c35562dbf6cdee7fc61227fd0833208d60b8f0f5", 0xcf}], 0x2, &(0x7f0000003880)=[@iv={0x18, 0x117, 0x2, 0x1, '7'}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x90, 0x117, 0x2, 0x7b, "ae16d4035e49b0c713d145ba92c08d750e31d703aebce0c670c6c2b440fddbaf74395f7bece9289d69e5772f3bf103d021c5e66771cca70c13e5dabd81ed0d059a78177a8bc6c2ec6370835d0b500e8665dd2da1314d454c158430e9cf83cf4f85812e9af4dc844bf0cca50e74b27868b9acaafd2fda3663bcd6f2"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7ff}], 0x120, 0x8000}, {0x0, 0x0, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=[@iv={0x58, 0x117, 0x2, 0x3f, "b685a2d4e37fc36edaeb79786000bab11d0f109dc4c5b5748cdb611632469863a459af259dd1eba677a251ca58d84ab3140fdc137a2efc33a8b2d496ba8de3"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x7, "ca26eef82f6925"}, @iv={0xe0, 0x117, 0x2, 0xc8, "60cb34b5768dada373f2b0557a2d515a8a774c471ae774dbc2e36bd079d9f75b99fa3d525fe465e3d0f7eaac82321ce427c698fa180fe9a05f445b670cc33f62231481f910c280be0a1c2d2c71e041c53d7dec5c495e98767e543f651a1c64c46a725fea56038818405cf14a309ce719de540ab02d3034568feb3ceb18de8bdda195cb58bf7604d49816efb7cc8bbb7d15a571b0ebafe3a4730da0cc6da748b953b650e1bcd3a44bc80f067c346c8de8ba6e36d0d9c60edbce79525a0e133a12117a7caefac756a8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x49}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x1d0, 0x40000}, {0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003c00)="32ec55ecd310c44e", 0x8}, {&(0x7f0000003c40)="b950275952547bae82bb47380c8903d40346327263b1b45464bfa2411fcf326b859af007b318924a144486b3dc258f8699a2a7046e61adfa994ffe18f0960eb2baad6d84657096d511340ee50af6578da3a77d2974f0e5fd6867726b586f3fe3cdc3db047763c33bec300c546d4821e98d95c715b19c01599300fa0255391d7aad7432853130109549a5b66a2222334aa4f9a5c5d173e27032323f5f754b93cb75053effb0cfefb2f6d76838b59d34fd882422b9568aa831d0b278a819e4e7320e7b401ac1641adff55a4f75e3aad59eda2e0783bb01c29692ab1effd488a90716965d6b4954083b092108ec0899beb1781ee13796", 0xf5}, {&(0x7f0000003d40)="eabacda3f29afbcc6e04c7265f97612d09c4bed19dfff5e2ac2452e89f2aa9bff9c172cddae06c829872201eebdc12b50f16ddb151bc94f721fa27cc69c94bd9e277e8e06201c26071401a4a5539ba86454c630ef504113dafee562058fb2a23b9e7c3ee96aa92cc6f907fd2ea7bba0cec6096db91ab21074398f7917b051067aedee061ce9b9a7b7304e10e309911dc1c776cca7c2f317814a8b184e51596f465409062ed553e17726a929fdde05c82d0778da66b388af6ee8a87380f724faebc130595a995def93b05117e02b5231faf25f1dec33548ac9d81db2a", 0xdc}], 0x3, &(0x7f0000003e80)=[@iv={0x68, 0x117, 0x2, 0x51, "4b99a68091ef7c2f38b7b1eb3619267de70a17b21486a9ac62b52abf58ddd41f10bfb994553bc61e90912246591450f85b99119ae2b41f2455a8e3323cacf519ca3a060a8dde9c1a5a23c16639858e7314"}, @op={0x18, 0x117, 0x3, 0x1}], 0x80, 0x854}, {0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f00)="2aae53031b4267210e082b92665fff237d428fa65a5511b2a0f4f9cb8ed747a875d4aaaddf011fcf77997f9612a203e3839ed01fcc8fa2b5abc317a7a233a0aaaa0e4f24ac3592bd865e21341e1a095070de94aa2b1b8f5c618be1ec26822c17f57beba82973269a5945e3e2bfef930690c3dec4e943e3e516ab1c58b9ca8efe9bd3ad3bdec86773ddcb7e6c8f021ac31b030fb620aa284717e0b0f620cf060c5a815935d8d5bc6ebbdacb", 0xab}, {&(0x7f0000003fc0)="f40a2a935b694b65dd5d55ab7d898ce8ac12841a714fb43c58c55ded92dd60e9d7", 0x21}], 0x2, &(0x7f0000004040)=[@assoc={0x18, 0x117, 0x4, 0xc0000000}, @iv={0x108, 0x117, 0x2, 0xf1, "305f3e160cfd113107448eaee5dca8670ca39e162583fdcc30ac72e85586f53116f17e372321ee3bdb5e2f7a663285d49a57d351219a8a3ebde9e65abc09d499972e865fbade6f986b1827aeb295d7a6efe1bfe7d31e93a46e52cffab0e41c170933c0eebf9553df35a940f4723fbb39a1c9ff0974f5e7329c9415f5bf49be927439655e892a64d9f68f29856073c991db7ca38513209fa48fec62bc44eb1153723fc27d824bd0cb25801e749137b25ff1b05c0a03ac3a5c1abf29360e7747f17070114b5c2cdf2b2d8c75a5764958c59ed254eb21f176be766838a9c4faf23da07cc1d2ea87152be0d80b4996e0a16c13"}, @iv={0xd0, 0x117, 0x2, 0xbb, "85d4c82e62b9d2015a3ce7cde37168da9c3feb274fb7a764aac6a46a720c8aafdaf930318353de352e77cc2597455b4f015b9d234a18b78a9a6a0c9fde78a7a9f77cfec25bec1ee80fbc6e4cf22ae8f6977aaedb361982f7f49ebef4beecd66a92f78b65b135532eb93f7373c14a05804e0da32118821fabe8ca63b02bf803d9a1f250a921a775b4c8cebb31d55c752ab7c8f8037404b624fdebdb25f2735ce2a118d1be2e0742ca795a3e576823251859becd7fa6aebcd955c382"}], 0x1f0, 0x10}], 0x7, 0x8002) (async, rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) close(r4) (async) syz_emit_ethernet(0x1e, &(0x7f0000004400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@can={0xc, {{}, 0x7, 0x35bfb15b4fae5aca, 0x0, 0x0, "8f3310a6f7c92daf"}}}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000044c0)={{r0, 0xffffffffffffffff}, &(0x7f0000004440), &(0x7f0000004480)=r0}, 0x20) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000004500)=""/134, &(0x7f00000045c0)=0x86) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000004600)=0x7ff, 0x4) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000048c0)={{'\x00', 0x2}, {0xfffffffffffffffe}, 0x80, 0x0, 0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)="a780165f602a044bd9d4ce8b6a7532ddfc7aa2a92f26fa902e2b075122dce64da25688a9ad96c44206b6ec5b5e722dd284735479d317c111b03cd656b6f45f51002e38270bf937ed623bd275a96cbe72db8c57b6", 0x54, 0x0, &(0x7f0000004740)={0x2, 0x7b, {0x0, 0xc, 0x45, "9bbca909f4e2801e939acffc00856e7ba7a13cfa53c1209f71d94bac8dcacd9a70424949fae910fcea50fd6a07b2288b9459477d00fb4ff0f0b1069d6593717f8d374f59a6", 0x29, "0c93ad1768c98f2a6521003b2714ca19e7e14991afbdd62397471d75089d205b988e653bd6a7f2a571"}, 0xe9, "869402384d32085d390df889a5c293700cecd68508ada84610008c972d6cd1b50cb7bd6e7d3f9da4ad43ad36f32c4b3c39c7952c02fbdeaddddc97d6abe6877513afd7873ec572ae6285a26e23ec851505e03f7cdbf2495327a3f8528a182539319854999581709f4410721d3cd06f535311ebc6435f2ae3650e4c76627229847034d3c4c2783ea85906da0f7bbef2219137222206845a9006d52a185348bb4f8577c525b7dc93bd5297f503fa7231cb9f27d679b494fb547a647e4bf9d4dc3abca4885152332103aabb378758d7486eaf0b0024f1c51335cd580801ee39b65870f838fba5bb679ac6"}, 0x170}) (async) shutdown(r4, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004940)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005cc0)={r0, 0x20, &(0x7f0000005c80)={&(0x7f0000005c00)=""/23, 0x17, 0x0, &(0x7f0000005c40)=""/18, 0x12}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005f00)={0x2, 0x2e, &(0x7f00000049c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x0, 0x2, 0xb, 0xfffffffffffffffe, 0x8}, @ldst={0x6, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x71fb, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x1, 0x5, 0x8, 0x1, 0x8, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x11, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004b40)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000004b80)=""/4096, 0x41100, 0x58, '\x00', 0x0, @fallback=0x17, r0, 0x8, &(0x7f0000005b80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000005bc0)={0x2, 0x6, 0x9d1, 0x10001}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000005ec0)=[r0, 0xffffffffffffffff, r5, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x0, 0x10, 0x7f, @void, @value}, 0x94) 1.699306733s ago: executing program 1 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1001, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) openat$tun(0xffffffffffffff9c, 0x0, 0x103581, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi\n', 0x3}], 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000b2a7ddbdb45325aee75805b3"], 0xb8}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 1.584601677s ago: executing program 4 (id=1195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 1.583091173s ago: executing program 3 (id=1196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)}], 0x2}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.399927942s ago: executing program 3 (id=1197): socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.393213363s ago: executing program 1 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x4, 0x7, "f431155307"}]}}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.200259202s ago: executing program 1 (id=1201): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000500)={"8c3ef01be86258108b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x6, 0x5, 0x10, 0x953, 0x3, 0x3, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc) 1.153770404s ago: executing program 2 (id=1202): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32, @ANYBLOB="0000000a0000000018000404e30e6a35cb7d2b45c943485e3136"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffb7, 0x0, 0x0, 0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0xfffffffffffffee5, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0xe, 0x34, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) 1.000668799s ago: executing program 4 (id=1203): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) (fail_nth: 22) 999.951751ms ago: executing program 3 (id=1204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x0, 0x63, 0x0, 0x1, 0xb, 0x0, @void, @value}, 0x28) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) epoll_create(0x401) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x5, @empty, 0x5}, {0xa, 0x4e21, 0x2, @local, 0x3}, 0xffffffffffffffff, {[0x5, 0x7e, 0x7, 0x6, 0x3, 0x4, 0x200000, 0x2]}}, 0x5c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="09000000010000", 0x7) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x84}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x1, @empty}, 0x1c) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x36, 0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 628.694838ms ago: executing program 2 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x36, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 590.487733ms ago: executing program 1 (id=1206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 540.570724ms ago: executing program 2 (id=1207): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)}], 0x2}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 514.387103ms ago: executing program 4 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1001, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) openat$tun(0xffffffffffffff9c, 0x0, 0x103581, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi\n', 0x3}], 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000b2a7ddbdb45325aee75805b3"], 0xb8}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 438.594758ms ago: executing program 1 (id=1209): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18dfffff67000100ebe600000000008000000000000000003efb48a6485cd99281e7ccd2d2450cbd111af374728106e74c44bafb7aa4"], 0x18}}, 0x4004) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x103581, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x9, 0x11, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b96, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000aa01f7ff0000000000000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b00"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0x12d, 0x0, &(0x7f0000000c00)="f784dc043b7d1d8030ef3e956d721cb385ec7b1cbe422d3c803e72df0c27e6b947fea02d178eed9c196bd6813fb41bf1ed9a00556c56a5518fbdde7294fcea2d77b84331686643e17e3fef46a00d785b3083686fd54ff3ff0220eca41592a90b835da4fa6da0919c3b64c686ce43269f058dbfc5e365c2fe3066a7f5eb426aade4c8178dbf7a8cb3cdaaaf641442a3bef6a7698b553f2991ab33722026263dd5b2f7e7cab44dff4f1afda29069f1a4d7f844e053c67a206ca2d4f6d7c2932ead8283972902e314d49b146da58c85563c66eb1db4ef79f9dad55798c5931383a8e5e3f6c8192c3a27d97a0756cbf080e7be397964d6917ed32660c15d9fd6d54175e301d1d1063584f7d73f58e3e29f546b77edba2a21d365adf66d59c695b6894736eb562d5b060a482d305e96", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000000000000000000e7ff0000009a266c6becff7594adee09f4b5476ec742295a1ef03141e1c90ade880a4c2643dd5943516188b9a40d3535edeef269bc77fc44d95342e7161aeaeae56d2839da7d1adbd1bdc775013bba4b4a3433b68e162a8901fd1f098cb6ceb8fd1afee532d00bf1b8558ec7795503f6072334dcfc49067dd82a864b32b6ec935c18e228f0fdfc9ed0e4263f384944c52b11ffb5e10a3405a8ac7e2f051ff7c1e54346048f8c36615dc38e1d167c99d62081241424837c6675c140b91bd0dadc7ab27e640bbb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r9}, 0x38) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000880)=r7) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi\n', 0x3}], 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xb8}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) 380.760373ms ago: executing program 2 (id=1210): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0xfffffffe, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25}, 0x14}}, 0x0) 260.367928ms ago: executing program 2 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f00000059c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000200)='k', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r10, &(0x7f00000059c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000200)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fadbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0c00238005001c"], 0x28}, 0x1, 0x0, 0x0, 0x4c880}, 0x80) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x244, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="f7d8beb255347295954df7610ca9dd4b"}}, @chsw_timing={0x68, 0x4, {0x0, 0x4}}, @tim={0x5, 0x3b, {0x2, 0x87, 0x9, "a84c88bcb9f37711b300fc68e15aadd838082ffafd3a2414fef2f238a998f869813ec09ccfa6e98c18501b18cf9d86257883a64acef3fa91"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}]}, @NL80211_ATTR_IE={0x10f, 0x2a, [@random_vendor={0xdd, 0xe5, "580b486c2d0cf514e6d5c55d977437b4cb9244e2a839302a673c0672b3caf0cdaec775086b86c0639300195e9f7ab332e65b578e70b20f369b0809bd54b63d8d2d2dd039e61676e019a7b71231eefb6ccc26349a74984213975f56d5506797de21f3a3f9f1ce66e9f963e979b840517ab8fb6bd04697418d7d8e008117cccc36f74b1fcf4c9ea7dba861ba73831ffee2d5b8773f80e7e8a03df431c655722a0d75ae5dc3f21efc2475cc7755df7311a5d50f6f94e8548a059e37bac02e9aebb20bdbf643a8e2f8a489872f49c7bb05b0248ff4f424aef4ce4d906f955f40ebe5213b013a41"}, @peer_mgmt={0x75, 0x6, {0x1, 0x8, @void, @val=0xd, @void}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x6, 0x0, {0x5, 0x81, 0x0, 0x6, 0x0, 0x1, 0x1, 0x3}, 0x400, 0x80, 0x1}}]}, @NL80211_ATTR_IE={0x80, 0x2a, [@mic={0x8c, 0x18, {0xb85, "5fe1c68aaf39", @long="aa9ed0a11c2a99c5e1f542d949acf195"}}, @challenge={0x10, 0x1, 0x3a}, @perr={0x84, 0x49, {0x11, 0x5, [{{}, @device_a, 0xc8, @void, 0x34}, {{}, @broadcast, 0xf46, @void, 0x3a}, {{}, @broadcast, 0x4513, @void, 0x33}, {{}, @device_a, 0xffffffc5, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x20000000, @value=@broadcast, 0x8}]}}, @link_id={0x65, 0x12, {@random="0d30353b9064", @device_b, @broadcast}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x244}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)={0x14, 0x22, 0x4, 0x70bd27, 0x25dfdffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048051) 187.751488ms ago: executing program 4 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xc4}}, 0x20050800) 177.120321ms ago: executing program 1 (id=1213): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000010000000000000000100010081120c0000000000950000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269, @void, @value}, 0x94) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002113, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x8}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x0, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4ceff6ba, 0x0, @void, @value}, 0x28) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20088000) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x1f8) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe6d}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4068000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="2f28ee87e259a45e36bf807be93127a58cb1bc1cce5a78e4e313ab22f519b9d0237fd6bf6965b32817ca27c2f031b305d3ba205feedb202b7b089497909cd9af2519fd66b074b41f497ce8cfb512cf2dc62a69993b8717ef72b2b853d2f0be3e66223bcb71b0991fa7a9967602a3cd05dd5a555038b3f88e135ea836cd143f2e9de1e4588efc6c1340074955b909fb8bb31424d9", 0x94, 0x840, &(0x7f00000001c0)={0x11, 0x10, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r9, &(0x7f0000000000), 0x9) socket$vsock_stream(0x28, 0x1, 0x0) 54.368357ms ago: executing program 4 (id=1214): socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 342.359µs ago: executing program 3 (id=1215): socket$packet(0x11, 0x2, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001b0001000000000000000000e00000010000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="00000000000000000f00000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000002000000080000000001000000966ac1d500080008000000000000000000000000000001000004d40000000000000000ffffffff00"/180], 0xfc}, 0x1, 0x0, 0x0, 0x15}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000001000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000012e31974d429741daa14fd3400"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000001000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000012e31974d429741daa14fd3400"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000001811000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500000015000103000000000000000001000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) close(0x3) (async) close(0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x0, 0x0, 0x0, 0x1000000}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) (async) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) write$cgroup_type(r10, &(0x7f0000000000), 0x9) 0s ago: executing program 2 (id=1216): syz_emit_ethernet(0x65, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100460086dd686c6122002b0600ff010000000000000000000000000001fc00000000000000000000000000000100000000000000000502000200000000000000000000004687396bccede5644e44a210336b00000000000000000200004e2000004e230000002d8813f8a45b4a2e4e7e070a2dc4e05f8a8719b3afe1539463"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x12}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x57, &(0x7f0000001200)={&(0x7f0000000400)={0x38, 0x1403, 0x400, 0x0, 0x0, "", [{{0x2, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x4080080) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r10, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048841}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x2000, 0x8040, 0x80, 0x1001}}) kernel console output (not intermixed with test programs): 76.017950][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.044007][ T5146] Bluetooth: hci1: command tx timeout [ 76.060133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.082974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.112690][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.125792][ T5146] Bluetooth: hci0: command tx timeout [ 76.125803][ T5835] Bluetooth: hci2: command tx timeout [ 76.202828][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.204436][ T5146] Bluetooth: hci3: command tx timeout [ 76.216148][ T5835] Bluetooth: hci4: command tx timeout [ 76.222559][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.310336][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.335803][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.373466][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.684822][ T5956] x_tables: duplicate underflow at hook 1 [ 76.710054][ T5956] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11'. [ 76.808791][ T5962] x_tables: duplicate underflow at hook 1 [ 77.119889][ T5970] bridge_slave_0: left allmulticast mode [ 77.147399][ T5970] bridge_slave_0: left promiscuous mode [ 77.153908][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.196083][ T5975] tipc: Failed to remove unknown binding: 66,1,1/0:2719930978/2719930980 [ 77.230074][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 77.274055][ T5975] tipc: Failed to remove unknown binding: 66,1,1/0:2719930978/2719930980 [ 77.296938][ T5970] bridge_slave_1: left allmulticast mode [ 77.307148][ T5970] bridge_slave_1: left promiscuous mode [ 77.317712][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.342854][ T5970] bond0: (slave bond_slave_0): Releasing backup interface [ 77.375102][ T5970] bond0: (slave bond_slave_1): Releasing backup interface [ 77.420792][ T5970] team0: Port device team_slave_0 removed [ 77.434768][ T5970] team0: Port device team_slave_1 removed [ 77.443029][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.451616][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.461971][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.470334][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.795068][ T5976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.024484][ T5976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.124197][ T5835] Bluetooth: hci1: command tx timeout [ 78.205087][ T5835] Bluetooth: hci0: command tx timeout [ 78.214160][ T5835] Bluetooth: hci2: command tx timeout [ 78.230232][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.256159][ T5976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.275952][ T6021] dccp_v4_rcv: dropped packet with invalid checksum [ 78.285529][ T5835] Bluetooth: hci4: command tx timeout [ 78.287436][ T5146] Bluetooth: hci3: command tx timeout [ 78.319306][ T6021] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 78.400525][ T5976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.494021][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 78.510124][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 78.521686][ T6029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28'. [ 78.546844][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 78.563793][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 78.610657][ T6031] Zero length message leads to an empty skb [ 78.648142][ T5976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.746046][ T5976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.799900][ T5976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.869079][ T5976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.265942][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 79.407204][ T6060] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 79.663578][ T6072] syzkaller0: entered allmulticast mode [ 79.694867][ T6069] xt_hashlimit: size too large, truncated to 1048576 [ 79.733678][ T6072] syzkaller0 (unregistering): left allmulticast mode [ 79.789634][ T6069] syz.4.40: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 79.880760][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.927749][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.4.40 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 79.927779][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.927795][ T6069] Call Trace: [ 79.927803][ T6069] [ 79.927811][ T6069] dump_stack_lvl+0x241/0x360 [ 79.927851][ T6069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.927877][ T6069] ? __pfx__printk+0x10/0x10 [ 79.927900][ T6069] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 79.927926][ T6069] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 79.927949][ T6069] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 79.927973][ T6069] warn_alloc+0x27c/0x410 [ 79.927996][ T6069] ? __pfx_warn_alloc+0x10/0x10 [ 79.928020][ T6069] ? htable_create+0x10c/0x890 [ 79.928044][ T6069] ? __get_vm_area_node+0x1c8/0x2d0 [ 79.928071][ T6069] ? __get_vm_area_node+0x25c/0x2d0 [ 79.928104][ T6069] __vmalloc_node_range_noprof+0x634/0x1390 [ 79.928156][ T6069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 79.928187][ T6069] ? __kasan_kmalloc_large+0x1a/0xa0 [ 79.928215][ T6069] ? htable_create+0x10c/0x890 [ 79.928246][ T6069] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 79.928273][ T6069] ? htable_create+0x10c/0x890 [ 79.928296][ T6069] ? htable_create+0x10c/0x890 [ 79.928319][ T6069] ? hashlimit_pernet+0x23/0x240 [ 79.928346][ T6069] htable_create+0x10c/0x890 [ 79.928374][ T6069] hashlimit_mt_check_common+0x763/0xa50 [ 79.928406][ T6069] xt_check_match+0x36a/0xa40 [ 79.928429][ T6069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.928452][ T6069] ? __pfx_xt_check_match+0x10/0x10 [ 79.928483][ T6069] ? xt_find_match+0x1e5/0x240 [ 79.928510][ T6069] translate_table+0x1721/0x24b0 [ 79.928530][ T6069] ? __x64_sys_setsockopt+0x1ee/0x280 [ 79.928556][ T6069] ? do_syscall_64+0xf3/0x230 [ 79.928576][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.928613][ T6069] ? __pfx_translate_table+0x10/0x10 [ 79.928651][ T6069] ? copy_from_sockptr_offset+0x6d/0xb0 [ 79.928674][ T6069] do_ip6t_set_ctl+0xe53/0x1270 [ 79.928699][ T6069] ? __pfx___mutex_trylock_common+0x10/0x10 [ 79.928721][ T6069] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 79.928758][ T6069] ? __mutex_unlock_slowpath+0x229/0x800 [ 79.928787][ T6069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.928814][ T6069] ? futex_wait+0x287/0x370 [ 79.928846][ T6069] nf_setsockopt+0x295/0x2c0 [ 79.928874][ T6069] rawv6_setsockopt+0x2c0/0x6d0 [ 79.928900][ T6069] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 79.928924][ T6069] ? aa_sock_opt_perm+0x79/0x120 [ 79.928951][ T6069] ? sock_common_setsockopt+0x37/0xc0 [ 79.928975][ T6069] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 79.928997][ T6069] do_sock_setsockopt+0x3b1/0x710 [ 79.929027][ T6069] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 79.929052][ T6069] ? __fget_files+0x2a/0x420 [ 79.929084][ T6069] ? __fget_files+0x39d/0x420 [ 79.929111][ T6069] ? __fget_files+0x2a/0x420 [ 79.929145][ T6069] __x64_sys_setsockopt+0x1ee/0x280 [ 79.929176][ T6069] do_syscall_64+0xf3/0x230 [ 79.929196][ T6069] ? clear_bhb_loop+0x45/0xa0 [ 79.929223][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.929249][ T6069] RIP: 0033:0x7f27c558d169 [ 79.929271][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.929287][ T6069] RSP: 002b:00007f27c6467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.929309][ T6069] RAX: ffffffffffffffda RBX: 00007f27c57a6160 RCX: 00007f27c558d169 [ 79.929323][ T6069] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 79.929335][ T6069] RBP: 00007f27c560e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 79.929347][ T6069] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 79.929359][ T6069] R13: 0000000000000000 R14: 00007f27c57a6160 R15: 00007ffd27463518 [ 79.929384][ T6069] [ 80.320759][ T6069] Mem-Info: [ 80.361986][ T6069] active_anon:4683 inactive_anon:0 isolated_anon:0 [ 80.361986][ T6069] active_file:1253 inactive_file:38295 isolated_file:0 [ 80.361986][ T6069] unevictable:768 dirty:1490 writeback:0 [ 80.361986][ T6069] slab_reclaimable:9962 slab_unreclaimable:96546 [ 80.361986][ T6069] mapped:28431 shmem:1426 pagetables:872 [ 80.361986][ T6069] sec_pagetables:0 bounce:0 [ 80.361986][ T6069] kernel_misc_reclaimable:0 [ 80.361986][ T6069] free:1344225 free_pcp:338 free_cma:0 [ 80.411359][ T6069] Node 0 active_anon:18832kB inactive_anon:0kB active_file:5012kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113724kB dirty:5956kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no [ 80.447271][ T6069] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 80.480415][ T6069] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.509353][ T6069] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 80.517188][ T6069] Node 0 DMA32 free:1447728kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18792kB inactive_anon:0kB active_file:5012kB inactive_file:152788kB unevictable:1536kB writepending:5952kB present:3129332kB managed:2550376kB mlocked:0kB bounce:0kB free_pcp:2220kB local_pcp:1144kB free_cma:0kB [ 80.549902][ T6069] lowmem_reserve[]: 0 0 0 0 0 [ 80.555116][ T6069] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 80.582402][ T6069] lowmem_reserve[]: 0 0 0 0 0 [ 80.587556][ T6069] Node 1 Normal free:3912696kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 80.617884][ T6069] lowmem_reserve[]: 0 0 0 0 0 [ 80.623396][ T6069] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.636701][ T6069] Node 0 DMA32: 68*4kB (U) 409*8kB (UE) 210*16kB (UME) 73*32kB (UME) 114*64kB (UME) 36*128kB (UM) 20*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 6*2048kB (UME) 342*4096kB (M) = 1447576kB [ 80.706225][ T6069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.742144][ T6077] dccp_close: ABORT with 32 bytes unread [ 80.754444][ T6069] Node 1 Normal: 196*4kB (UME) 59*8kB (UME) 43*16kB (UME) 237*32kB (UME) 91*64kB (UME) 30*128kB (UME) 15*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3912696kB [ 80.775051][ T6069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.785937][ T6069] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.795687][ T6069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.805534][ T6069] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.817067][ T6069] 40974 total pagecache pages [ 80.821833][ T6069] 0 pages in swap cache [ 80.828165][ T6069] Free swap = 124996kB [ 80.832359][ T6069] Total swap = 124996kB [ 80.837045][ T6069] 2097051 pages RAM [ 80.840878][ T6069] 0 pages HighMem/MovableOnly [ 80.851580][ T6069] 427735 pages reserved [ 80.856142][ T6069] 0 pages cma reserved [ 80.877734][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.994391][ T6097] tipc: Enabling of bearer rejected, failed to enable media [ 81.289559][ T6105] __nla_validate_parse: 1 callbacks suppressed [ 81.289578][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 81.357303][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 81.387419][ T6114] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 81.420117][ T6114] warning: `syz.3.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.565336][ T6125] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.56'. [ 81.582826][ T6125] openvswitch: netlink: Flow actions attr not present in new flow. [ 81.594931][ T6127] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 81.602645][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 81.716382][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 82.204019][ T6144] x_tables: duplicate underflow at hook 1 [ 83.166540][ T6139] IPv6: sit1: Disabled Multicast RS [ 83.176663][ T6153] IPVS: Error connecting to the multicast addr [ 83.276600][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.317291][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.397689][ T6161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.493132][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.561675][ T6170] macvlan2: entered promiscuous mode [ 83.584602][ T6170] bond0: entered promiscuous mode [ 83.619465][ T6170] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.672408][ T6176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70'. [ 83.681642][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 83.860671][ T6189] Bluetooth: MGMT ver 1.23 [ 84.265483][ T6210] bridge1: entered promiscuous mode [ 84.290036][ T6210] bridge1: entered allmulticast mode [ 84.310150][ T6210] team0: Port device bridge1 added [ 84.356945][ T6219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.700023][ T6232] veth1_macvtap: left promiscuous mode [ 84.864603][ T6241] netlink: 'syz.2.88': attribute type 2 has an invalid length. [ 84.904541][ T6241] netlink: 'syz.2.88': attribute type 9 has an invalid length. [ 85.455239][ T6275] syz.4.92 uses old SIOCAX25GETINFO [ 85.738110][ T6280] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.792060][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.800573][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.865593][ T6280] bridge0: entered allmulticast mode [ 85.943176][ T6230] Illegal XDP return value 4294967274 on prog (id 106) dev N/A, expect packet loss! [ 85.997212][ T6230] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 86.341035][ T6298] netlink: 'syz.4.99': attribute type 39 has an invalid length. [ 86.892140][ T1206] cfg80211: failed to load regulatory.db [ 87.345056][ T6301] bridge0: entered promiscuous mode [ 87.351568][ T6301] bridge0: port 3(macsec0) entered blocking state [ 87.359029][ T6301] bridge0: port 3(macsec0) entered disabled state [ 87.370850][ T6301] macsec0: entered allmulticast mode [ 87.376483][ T6301] bridge0: entered allmulticast mode [ 87.383084][ T6301] macsec0: left allmulticast mode [ 87.388542][ T6301] bridge0: left allmulticast mode [ 87.394804][ T6301] bridge0: left promiscuous mode [ 87.618221][ T6311] block nbd4: not configured, cannot reconfigure [ 87.630553][ T6311] netlink: 'syz.4.104': attribute type 11 has an invalid length. [ 87.694923][ T6308] __nla_validate_parse: 12 callbacks suppressed [ 87.694943][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 88.257526][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'. [ 88.668771][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'. [ 89.318779][ T6379] netlink: 71 bytes leftover after parsing attributes in process `syz.0.122'. [ 89.392708][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 89.419584][ T6388] netlink: 'syz.0.122': attribute type 2 has an invalid length. [ 89.431249][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 89.444911][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 89.484720][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 89.508626][ T6383] 8021q: adding VLAN 0 to HW filter on device team1 [ 89.577423][ T6393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 89.663477][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 89.967059][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 89.976706][ T6408] netlink: 'syz.2.129': attribute type 18 has an invalid length. [ 89.992729][ T6408] netlink: 'syz.2.129': attribute type 18 has an invalid length. [ 90.005583][ T6409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.160434][ T6409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.308703][ T6409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.406092][ T6409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.754819][ T6409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805635][ T6409] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899793][ T6409] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.942685][ T6409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.270901][ T6479] Bluetooth: MGMT ver 1.23 [ 91.354418][ T6485] pimreg: entered allmulticast mode [ 91.387343][ T6485] 8021q: VLANs not supported on pimreg [ 91.440616][ T6485] netlink: 'syz.2.146': attribute type 58 has an invalid length. [ 91.627886][ T6499] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 91.684021][ T6485] pimreg: left allmulticast mode [ 92.143484][ T6519] dummy0: entered promiscuous mode [ 92.214829][ T6528] netlink: 'syz.0.155': attribute type 21 has an invalid length. [ 92.269408][ T6518] dummy0: left promiscuous mode [ 92.284466][ T6528] netlink: 'syz.0.155': attribute type 6 has an invalid length. [ 92.310111][ T6532] ip6gre1: entered promiscuous mode [ 92.521014][ T6539] netlink: 'syz.3.158': attribute type 2 has an invalid length. [ 92.598639][ T6543] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 93.014080][ T6547] bond0 (unregistering): left promiscuous mode [ 93.078503][ T6547] bond0 (unregistering): Released all slaves [ 93.142502][ T6539] pim6reg: entered allmulticast mode [ 93.198891][ T6568] __nla_validate_parse: 17 callbacks suppressed [ 93.198908][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 93.233967][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 93.324694][ T5146] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 93.325353][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 93.440467][ T6579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.165'. [ 93.505786][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 93.727271][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 93.738321][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 93.936519][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.170'. [ 93.962654][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 93.962687][ T6602] bridge_slave_1: left allmulticast mode [ 93.962708][ T6602] bridge_slave_1: left promiscuous mode [ 93.985157][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.996546][ T6602] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 93.999812][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 94.422746][ T6622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.176'. [ 94.860589][ T6652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.110365][ T6663] netlink: zone id is out of range [ 95.140369][ T6666] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 95.168967][ T6663] netlink: zone id is out of range [ 95.178889][ T6666] netlink: 224 bytes leftover after parsing attributes in process `syz.2.187'. [ 95.193850][ T6663] netlink: zone id is out of range [ 95.225499][ T6663] netlink: zone id is out of range [ 95.232278][ T6663] netlink: zone id is out of range [ 95.244736][ T6663] netlink: zone id is out of range [ 95.263857][ T6663] netlink: zone id is out of range [ 95.269110][ T6663] netlink: zone id is out of range [ 95.297758][ T6671] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 95.312580][ T6671] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.186'. [ 96.020215][ T6724] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 96.223031][ T6741] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 97.004116][ T6760] Cannot find map_set index 0 as target [ 97.557976][ T6776] vlan2: entered allmulticast mode [ 97.569838][ T6776] batadv0: entered allmulticast mode [ 97.982557][ T6793] x_tables: unsorted underflow at hook 3 [ 98.198195][ T6795] netlink: 'syz.1.223': attribute type 28 has an invalid length. [ 98.223408][ T6811] netlink: 'syz.4.225': attribute type 39 has an invalid length. [ 98.794694][ T6840] __nla_validate_parse: 21 callbacks suppressed [ 98.794715][ T6840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 98.990556][ T6852] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 99.003601][ T6852] netlink: 224 bytes leftover after parsing attributes in process `syz.2.237'. [ 99.047802][ T6852] net_ratelimit: 691 callbacks suppressed [ 99.047820][ T6852] openvswitch: netlink: Key type 8198 is out of range max 32 [ 99.292718][ T6868] netlink: 72 bytes leftover after parsing attributes in process `syz.2.240'. [ 99.377839][ T6871] tipc: Started in network mode [ 99.383534][ T6871] tipc: Node identity 7f000001, cluster identity 4711 [ 99.394654][ T6871] tipc: Enabled bearer , priority 10 [ 99.489320][ T6878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.243'. [ 99.780743][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 99.800250][ T6875] tipc: Started in network mode [ 99.806602][ T6875] tipc: Node identity 7, cluster identity 4711 [ 99.812880][ T6875] tipc: Node number set to 7 [ 99.818501][ T6875] tipc: Cannot configure node identity twice [ 99.899935][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 100.411020][ T6913] netlink: 84 bytes leftover after parsing attributes in process `syz.1.251'. [ 100.517284][ T5945] tipc: Node number set to 2130706433 [ 100.955008][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 101.175312][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 101.187622][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.255'. [ 101.909948][ T6963] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 102.001712][ T6968] vlan2: entered allmulticast mode [ 102.018751][ T6968] bridge0: entered allmulticast mode [ 102.035324][ T6968] bridge0: port 3(vlan2) entered blocking state [ 102.064167][ T6968] bridge0: port 3(vlan2) entered disabled state [ 102.649876][ T7001] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 102.708528][ T7004] gretap1: entered promiscuous mode [ 102.737167][ T7009] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 102.892177][ T7018] syzkaller0: entered promiscuous mode [ 102.914586][ T7018] syzkaller0: entered allmulticast mode [ 103.399824][ T7050] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 103.647551][ T7050] team0: Port device geneve0 added [ 103.826085][ T7053] netlink: 'syz.4.289': attribute type 28 has an invalid length. [ 104.676420][ T7097] netlink: 'syz.0.302': attribute type 12 has an invalid length. [ 104.954590][ T7108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.988906][ T7115] x_tables: duplicate underflow at hook 3 [ 105.110944][ T7108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.156774][ T7120] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 105.211766][ T7124] __nla_validate_parse: 13 callbacks suppressed [ 105.211812][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'. [ 105.315944][ T7120] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.353284][ T7108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.378764][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 105.402916][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 105.442625][ T7120] syzkaller0: entered promiscuous mode [ 105.461149][ T7120] syzkaller0: entered allmulticast mode [ 105.494418][ T7108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.607290][ T7120] syzkaller0: left promiscuous mode [ 105.615573][ T7120] syzkaller0: left allmulticast mode [ 105.801739][ T7153] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.314'. [ 106.031198][ T7125] syz.2.307 (7125) used greatest stack depth: 18760 bytes left [ 106.860981][ T7108] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.915248][ T7108] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.982207][ T7108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.046795][ T7108] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.512616][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.326'. [ 107.903233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024e43400: rx timeout, send abort [ 108.141969][ T7251] batadv_slave_1: entered promiscuous mode [ 108.225587][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'. [ 108.243947][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'. [ 108.359912][ T7251] batadv_slave_1: left promiscuous mode [ 108.406272][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024e43800: rx timeout, send abort [ 108.415018][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024e43400: abort rx timeout. Force session deactivation [ 108.591805][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 108.686847][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 108.794333][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 108.914542][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024e43800: abort rx timeout. Force session deactivation [ 109.468896][ T7312] x_tables: duplicate underflow at hook 3 [ 109.643611][ T7325] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 110.200129][ T7364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.455711][ T7378] __nla_validate_parse: 5 callbacks suppressed [ 110.455731][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 110.932362][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 110.975906][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 111.012301][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 111.087380][ T7416] raw_sendmsg: syz.4.379 forgot to set AF_INET. Fix it! [ 111.287159][ T7423] xt_CT: No such helper "pptp" [ 111.352312][ T7433] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 111.363755][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'. [ 111.373107][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'. [ 111.383675][ T7433] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 111.391497][ T7433] netlink: 236 bytes leftover after parsing attributes in process `syz.3.387'. [ 111.782768][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 111.916293][ T7468] xt_bpf: check failed: parse error [ 112.185239][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 112.214698][ T7482] netlink: 'syz.1.402': attribute type 13 has an invalid length. [ 112.320503][ T7482] gretap0: refused to change device tx_queue_len [ 112.333893][ T7482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.432847][ T7492] bridge_slave_0: left allmulticast mode [ 112.463827][ T7492] bridge_slave_0: left promiscuous mode [ 112.480118][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.509030][ T7492] bridge_slave_1: left allmulticast mode [ 112.527515][ T7492] bridge_slave_1: left promiscuous mode [ 112.539468][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.572983][ T7492] bond0: (slave bond_slave_0): Releasing backup interface [ 112.605544][ T7492] bond0: (slave bond_slave_1): Releasing backup interface [ 112.646419][ T7492] team0: Failed to send options change via netlink (err -105) [ 112.668391][ T7492] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 112.682712][ T7492] team0: Port device team_slave_0 removed [ 112.706629][ T7492] team0: Failed to send options change via netlink (err -105) [ 112.731811][ T7492] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 112.742154][ T7492] team0: Port device team_slave_1 removed [ 112.752468][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.760109][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.773257][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.781103][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.795247][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 112.971455][ T7516] bridge_slave_1: left allmulticast mode [ 112.977720][ T7516] bridge_slave_1: left promiscuous mode [ 112.983582][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.993191][ T7516] bridge_slave_0: left allmulticast mode [ 112.999558][ T7516] bridge_slave_0: left promiscuous mode [ 113.006332][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.496727][ T7535] xt_CT: No such helper "pptp" [ 113.556108][ T7541] team0: entered allmulticast mode [ 113.561504][ T7541] team_slave_0: entered allmulticast mode [ 113.568362][ T7541] team_slave_1: entered allmulticast mode [ 113.796700][ T30] audit: type=1107 audit(1743236437.979:2): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='†QЍØ$é–ËÝÈ”cµêì†Yà’©Øn¶Ÿ [ 114.989246][ T7611] dump_stack_lvl+0x241/0x360 [ 114.989275][ T7611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.989298][ T7611] ? __pfx__printk+0x10/0x10 [ 114.989320][ T7611] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 114.989342][ T7611] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 114.989364][ T7611] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 114.989387][ T7611] warn_alloc+0x27c/0x410 [ 114.989408][ T7611] ? __pfx_warn_alloc+0x10/0x10 [ 114.989429][ T7611] ? xp_create_and_assign_umem+0x17b/0xc60 [ 114.989456][ T7611] ? __get_vm_area_node+0x1c8/0x2d0 [ 114.989482][ T7611] ? __get_vm_area_node+0x25c/0x2d0 [ 114.989512][ T7611] __vmalloc_node_range_noprof+0x634/0x1390 [ 114.989552][ T7611] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 114.989584][ T7611] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.989611][ T7611] ? __kasan_kmalloc_large+0x1a/0xa0 [ 114.989636][ T7611] ? xp_create_and_assign_umem+0x17b/0xc60 [ 114.989663][ T7611] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 114.989689][ T7611] ? xp_create_and_assign_umem+0x17b/0xc60 [ 114.989713][ T7611] ? xp_create_and_assign_umem+0x17b/0xc60 [ 114.989743][ T7611] xp_create_and_assign_umem+0x17b/0xc60 [ 114.989770][ T7611] ? sockfd_lookup+0x7b/0x110 [ 114.989794][ T7611] ? dev_get_by_index+0x23/0x2d0 [ 114.989814][ T7611] xsk_bind+0x97e/0xfb0 [ 114.989841][ T7611] __sys_bind+0x1de/0x290 [ 114.989863][ T7611] ? __pfx___sys_bind+0x10/0x10 [ 114.989898][ T7611] __x64_sys_bind+0x7a/0x90 [ 114.989919][ T7611] do_syscall_64+0xf3/0x230 [ 114.989938][ T7611] ? clear_bhb_loop+0x45/0xa0 [ 114.989958][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.989975][ T7611] RIP: 0033:0x7fc7d558d169 [ 114.989991][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.990006][ T7611] RSP: 002b:00007fc7d644d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 114.990024][ T7611] RAX: ffffffffffffffda RBX: 00007fc7d57a6080 RCX: 00007fc7d558d169 [ 114.990037][ T7611] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 114.990048][ T7611] RBP: 00007fc7d560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.990059][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.990069][ T7611] R13: 0000000000000000 R14: 00007fc7d57a6080 R15: 00007ffd5fcf9fe8 [ 114.990092][ T7611] [ 114.990099][ T7611] Mem-Info: [ 115.283799][ T7611] active_anon:7555 inactive_anon:0 isolated_anon:0 [ 115.283799][ T7611] active_file:1466 inactive_file:38310 isolated_file:0 [ 115.283799][ T7611] unevictable:769 dirty:178 writeback:0 [ 115.283799][ T7611] slab_reclaimable:10431 slab_unreclaimable:97533 [ 115.283799][ T7611] mapped:33130 shmem:4068 pagetables:788 [ 115.283799][ T7611] sec_pagetables:0 bounce:0 [ 115.283799][ T7611] kernel_misc_reclaimable:0 [ 115.283799][ T7611] free:1330641 free_pcp:593 free_cma:0 [ 115.339884][ T7611] Node 0 active_anon:30220kB inactive_anon:0kB active_file:5864kB inactive_file:153168kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:132720kB dirty:708kB writeback:0kB shmem:14936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no [ 115.377998][ T7611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 115.412581][ T7611] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.447611][ T7611] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 115.453620][ T7611] Node 0 DMA32 free:1393292kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:30980kB inactive_anon:0kB active_file:5864kB inactive_file:152848kB unevictable:1540kB writepending:708kB present:3129332kB managed:2550376kB mlocked:4kB bounce:0kB free_pcp:2484kB local_pcp:1552kB free_cma:0kB [ 115.489511][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 115.494452][ T7611] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 115.521554][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 115.526440][ T7611] Node 1 Normal free:3913088kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.556827][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 115.562367][ T7611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.575396][ T7611] Node 0 DMA32: 2*4kB (UE) 6*8kB (ME) 7*16kB (ME) 8*32kB (UME) 4*64kB (E) 28*128kB (UM) 37*256kB (UM) 15*512kB (UM) 9*1024kB (UM) 5*2048kB (UME) 330*4096kB (M) = 1392552kB [ 115.593014][ T7611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.604919][ T7611] Node 1 Normal: 200*4kB (UME) 58*8kB (UME) 43*16kB (UME) 237*32kB (UME) 85*64kB (UME) 30*128kB (UME) 16*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3913088kB [ 115.623916][ T7611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.633481][ T7611] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.642912][ T7611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.652697][ T7611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.662774][ T7611] 44044 total pagecache pages [ 115.668315][ T7611] 0 pages in swap cache [ 115.672497][ T7611] Free swap = 124996kB [ 115.676735][ T7611] Total swap = 124996kB [ 115.680946][ T7611] 2097051 pages RAM [ 115.684955][ T7611] 0 pages HighMem/MovableOnly [ 115.689665][ T7611] 427735 pages reserved [ 115.694019][ T7611] 0 pages cma reserved [ 115.953135][ T7648] batman_adv: batadv0: Adding interface: dummy0 [ 115.960374][ T7648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.986534][ T7648] batman_adv: batadv0: Interface activated: dummy0 [ 115.998528][ T7648] batadv0: mtu less than device minimum [ 116.005842][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.017866][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.029664][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.041460][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.053229][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.065165][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.076977][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.088345][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.099668][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.254104][ T7662] __nla_validate_parse: 7 callbacks suppressed [ 116.254124][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 116.630064][ T30] audit: type=1800 audit(1743236440.819:4): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.450" name="memory.events" dev="tmpfs" ino=478 res=0 errno=0 [ 116.875744][ T7705] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 116.937351][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 116.949707][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 117.074895][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 117.125093][ T7722] netlink: 'syz.1.462': attribute type 74 has an invalid length. [ 117.143347][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 117.162870][ T7726] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 117.189716][ T7722] netlink: 'syz.1.462': attribute type 4 has an invalid length. [ 117.292664][ T7736] netlink: 128 bytes leftover after parsing attributes in process `syz.0.467'. [ 117.558988][ T7753] xt_CT: No such helper "snmp_trap" [ 117.727185][ T7762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 117.739840][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 117.859103][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 117.972685][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 117.983296][ T7773] netlink: 'syz.0.478': attribute type 6 has an invalid length. [ 118.136705][ T7775] syzkaller0: entered promiscuous mode [ 118.142521][ T7775] syzkaller0: entered allmulticast mode [ 118.266799][ T7791] x_tables: duplicate underflow at hook 2 [ 119.006430][ T13] wlan1: Trigger new scan to find an IBSS to join [ 119.684221][ T7814] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 119.818930][ T7842] pimreg: entered allmulticast mode [ 119.840459][ T7843] macvtap1: entered allmulticast mode [ 119.845995][ T7843] veth0_macvtap: entered allmulticast mode [ 119.853393][ T7842] pimreg: left allmulticast mode [ 120.009536][ T7857] bridge0: port 3(vlan3) entered blocking state [ 120.016082][ T7857] bridge0: port 3(vlan3) entered disabled state [ 120.022549][ T7857] vlan3: entered allmulticast mode [ 120.028509][ T7857] bridge0: entered allmulticast mode [ 120.053634][ T7857] vlan3: left allmulticast mode [ 120.139496][ T7857] bridge0: left allmulticast mode [ 121.287193][ T7942] __nla_validate_parse: 6 callbacks suppressed [ 121.287214][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 121.870238][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 122.158211][ T36] wlan1: Trigger new scan to find an IBSS to join [ 122.711475][ T8024] ip6tnl1: entered promiscuous mode [ 122.730097][ T8024] ip6tnl1: entered allmulticast mode [ 122.969192][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 122.980962][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 123.312368][ T8048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.353003][ T8048] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 123.386600][ T8048] netlink: 176 bytes leftover after parsing attributes in process `syz.2.549'. [ 123.396146][ T8048] ip6gretap0: entered promiscuous mode [ 123.402200][ T8048] netlink: 176 bytes leftover after parsing attributes in process `syz.2.549'. [ 123.554018][ T8063] x_tables: duplicate underflow at hook 1 [ 124.041302][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 124.209106][ T5884] IPVS: starting estimator thread 0... [ 124.314915][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 124.334038][ T8099] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.489982][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 124.563626][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 124.763307][ T8090] ip6gre1: left promiscuous mode [ 124.803986][ T8090] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.812942][ T8090] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.845082][ T8090] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.893848][ T8090] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.914196][ T8090] veth0_macvtap: left allmulticast mode [ 124.920156][ T8090] macvtap1: left allmulticast mode [ 124.925944][ T3575] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 125.153954][ T8123] IPVS: starting estimator thread 0... [ 125.256515][ T8136] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.305708][ T8141] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 125.431938][ T8160] x_tables: duplicate underflow at hook 2 [ 125.480641][ T8167] net_ratelimit: 12 callbacks suppressed [ 125.480664][ T8167] openvswitch: netlink: Message has 44053 unknown bytes. [ 125.495673][ T8168] dccp_invalid_packet: P.Data Offset(10) too large [ 125.538035][ T8175] team0: No ports can be present during mode change [ 125.615555][ T8175] bond_slave_0: entered promiscuous mode [ 125.621412][ T8175] bond_slave_1: entered promiscuous mode [ 125.671319][ T8175] vlan3: entered promiscuous mode [ 125.685515][ T8175] bond0: entered promiscuous mode [ 125.942671][ T8198] wireguard0: entered promiscuous mode [ 125.987401][ T8198] wireguard0: entered allmulticast mode [ 126.031919][ T8211] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 126.518380][ T8232] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.538215][ T8232] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 126.795886][ T8245] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.086897][ T8271] netlink: 'syz.4.603': attribute type 5 has an invalid length. [ 127.139373][ T8271] netlink: 'syz.4.603': attribute type 4 has an invalid length. [ 127.278907][ T8288] __nla_validate_parse: 3 callbacks suppressed [ 127.278927][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.608'. [ 127.283896][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 127.508237][ T8303] bridge0: port 1(gretap0) entered blocking state [ 127.516796][ T8303] bridge0: port 1(gretap0) entered disabled state [ 127.526491][ T8303] gretap0: entered allmulticast mode [ 127.537559][ T8303] gretap0: entered promiscuous mode [ 127.572521][ T8306] gretap0: left allmulticast mode [ 127.587249][ T8306] gretap0: left promiscuous mode [ 127.598143][ T8306] bridge0: port 1(gretap0) entered disabled state [ 127.619703][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.614'. [ 127.841174][ T8314] sctp: [Deprecated]: syz.0.617 (pid 8314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.841174][ T8314] Use struct sctp_sack_info instead [ 128.095306][ T8324] FAULT_INJECTION: forcing a failure. [ 128.095306][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.109627][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.1.621 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 128.109654][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.109665][ T8324] Call Trace: [ 128.109677][ T8324] [ 128.109685][ T8324] dump_stack_lvl+0x241/0x360 [ 128.109715][ T8324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.109739][ T8324] ? __pfx__printk+0x10/0x10 [ 128.109770][ T8324] should_fail_ex+0x424/0x570 [ 128.109800][ T8324] _copy_to_user+0x31/0xb0 [ 128.109825][ T8324] simple_read_from_buffer+0xdc/0x170 [ 128.109853][ T8324] proc_fail_nth_read+0x1ef/0x260 [ 128.109872][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.109892][ T8324] ? rw_verify_area+0x246/0x630 [ 128.109910][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.109930][ T8324] vfs_read+0x21f/0xb90 [ 128.109947][ T8324] ? fdget+0x149/0x1e0 [ 128.109974][ T8324] ? map_lookup_elem+0x4ed/0x620 [ 128.110001][ T8324] ? __pfx_vfs_read+0x10/0x10 [ 128.110020][ T8324] ? __sys_bpf+0x46e/0x850 [ 128.110045][ T8324] ? __pfx___sys_bpf+0x10/0x10 [ 128.110078][ T8324] ksys_read+0x19d/0x2d0 [ 128.110098][ T8324] ? __pfx_ksys_read+0x10/0x10 [ 128.110122][ T8324] ? do_syscall_64+0xb6/0x230 [ 128.110145][ T8324] do_syscall_64+0xf3/0x230 [ 128.110164][ T8324] ? clear_bhb_loop+0x45/0xa0 [ 128.110186][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.110203][ T8324] RIP: 0033:0x7f82a758bb7c [ 128.110219][ T8324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.110234][ T8324] RSP: 002b:00007f82a8311030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.110253][ T8324] RAX: ffffffffffffffda RBX: 00007f82a77a5fa0 RCX: 00007f82a758bb7c [ 128.110266][ T8324] RDX: 000000000000000f RSI: 00007f82a83110a0 RDI: 0000000000000003 [ 128.110277][ T8324] RBP: 00007f82a8311090 R08: 0000000000000000 R09: 0000000000000000 [ 128.110288][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.110299][ T8324] R13: 0000000000000000 R14: 00007f82a77a5fa0 R15: 00007ffe940abbe8 [ 128.110323][ T8324] [ 128.397219][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.623'. [ 128.526474][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'. [ 128.535515][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 128.544524][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'. [ 128.553428][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'. [ 128.743520][ T8353] sctp: [Deprecated]: syz.1.629 (pid 8353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.743520][ T8353] Use struct sctp_sack_info instead [ 128.822808][ T8351] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 128.981247][ T8373] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 129.000207][ T8373] netlink: 'syz.0.634': attribute type 2 has an invalid length. [ 129.029577][ T8373] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 129.048602][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 129.070452][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 129.091711][ T8376] bridge0: port 1(syz_tun) entered blocking state [ 129.106949][ T8376] bridge0: port 1(syz_tun) entered disabled state [ 129.120161][ T8376] syz_tun: entered allmulticast mode [ 129.140106][ T8376] syz_tun: entered promiscuous mode [ 130.117469][ T8426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.576749][ T8461] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 130.622518][ T8461] bond0: (slave wlan1): Releasing backup interface [ 130.635960][ T8461] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 130.644435][ T8461] team0: Port device wlan1 added [ 131.051306][ T8436] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 131.503915][ T8526] netlink: 'syz.2.682': attribute type 21 has an invalid length. [ 131.553589][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.561247][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.582757][ T8541] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 131.717976][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.753685][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.926316][ T8521] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.942710][ T8548] netlink: 'syz.0.685': attribute type 7 has an invalid length. [ 131.950544][ T8521] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.950586][ T8521] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.950611][ T8521] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.066030][ T8521] vlan2: left allmulticast mode [ 132.081458][ T8521] batadv0: left allmulticast mode [ 132.099725][ T8521] ip6tnl1: left promiscuous mode [ 132.112079][ T8521] ip6tnl1: left allmulticast mode [ 132.189776][ T8541] bond2: entered promiscuous mode [ 132.222737][ T8563] trusted_key: syz.2.687 sent an empty control message without MSG_MORE. [ 132.235421][ T8541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.285081][ T5835] Bluetooth: hci1: command 0x0401 tx timeout [ 132.468957][ T8572] netlink: 'syz.2.690': attribute type 3 has an invalid length. [ 132.496638][ T8574] __nla_validate_parse: 17 callbacks suppressed [ 132.496674][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 132.614571][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 132.623585][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 132.691059][ T8590] netlink: 'syz.3.696': attribute type 7 has an invalid length. [ 132.699612][ T8590] netlink: 'syz.3.696': attribute type 8 has an invalid length. [ 132.723851][ T8590] netlink: 236 bytes leftover after parsing attributes in process `syz.3.696'. [ 132.771632][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 132.808352][ T8583] vlan2: entered allmulticast mode [ 132.813923][ T8583] ip6gretap0: entered allmulticast mode [ 132.851516][ T8599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.698'. [ 132.863400][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.699'. [ 133.398441][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 133.531543][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 133.662553][ T8658] xt_NFQUEUE: number of total queues is 0 [ 133.681732][ T8659] xt_NFQUEUE: number of total queues is 0 [ 133.870914][ T8675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.889762][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 133.919442][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 133.940322][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.191781][ T8692] netlink: 'syz.1.726': attribute type 1 has an invalid length. [ 134.278460][ T8696] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 134.402949][ T8701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 134.591193][ T5835] Bluetooth: hci4: link tx timeout [ 134.597767][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.607422][ T5146] Bluetooth: hci4: link tx timeout [ 134.612635][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.625071][ T5146] Bluetooth: hci4: link tx timeout [ 134.630294][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.639440][ T5146] Bluetooth: hci4: link tx timeout [ 134.646529][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.654450][ T5146] Bluetooth: hci4: link tx timeout [ 134.659665][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.668152][ T5146] Bluetooth: hci4: link tx timeout [ 134.673326][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.149445][ T8742] netlink: 'syz.3.742': attribute type 3 has an invalid length. [ 135.181404][ T8742] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.189969][ T8742] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.198481][ T8742] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.206773][ T8742] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.450233][ T8758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.505957][ T8758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.539809][ T8758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.559902][ T8758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.568839][ T8758] geneve2: entered promiscuous mode [ 135.580148][ T8758] geneve2: entered allmulticast mode [ 135.625450][ T8758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.657799][ T8758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.685301][ T8758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.694632][ T8758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.831340][ T8787] openvswitch: netlink: IP tunnel TTL not specified. [ 136.585690][ T8827] IPVS: Unknown mcast interface: veth°ñ [ 136.618945][ T8828] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 136.683965][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 136.690254][ T8128] IPVS: starting estimator thread 0... [ 136.795777][ T8841] IPVS: using max 27 ests per chain, 64800 per kthread [ 136.883097][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.920480][ T8854] CÃ: renamed from team_slave_0 [ 136.923830][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.950522][ T8854] netlink: 'syz.0.774': attribute type 3 has an invalid length. [ 136.972891][ T8854] A link change request failed with some changes committed already. Interface Cà may have been left with an inconsistent configuration, please check. [ 137.117917][ T8865] Cannot find add_set index 4 as target [ 137.520201][ T8887] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 137.695983][ T8899] __nla_validate_parse: 15 callbacks suppressed [ 137.696003][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 137.963878][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.969324][ T3575] wlan1: Trigger new scan to find an IBSS to join [ 138.370567][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.389938][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.636056][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 138.743282][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 138.763800][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 138.784391][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 138.836766][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 138.960868][ T8975] netlink: 72 bytes leftover after parsing attributes in process `syz.3.812'. [ 139.003890][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 139.102567][ T8989] nbd: couldn't find a device at index 1255035857 [ 139.163928][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 139.200085][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 139.210453][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 139.220474][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 140.043824][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 140.924090][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 140.926482][ T53] wlan1: Trigger new scan to find an IBSS to join [ 141.016549][ T9106] sock: sock_set_timeout: `syz.2.849' (pid 9106) tries to set negative timeout [ 141.048492][ T9106] batadv0: entered promiscuous mode [ 141.054896][ T9106] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 141.083774][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.085265][ T9106] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 141.144704][ T9106] batadv0: left promiscuous mode [ 141.282909][ T9121] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.293165][ T9121] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.380184][ T9121] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.396319][ T9121] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.474871][ T9121] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.496076][ T9121] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.568723][ T9121] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.594402][ T9121] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.728478][ T9121] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.729564][ T9147] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 141.743169][ T9121] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.778749][ T9121] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.801753][ T9121] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.844853][ T9121] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.855059][ T9121] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.869711][ T9121] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.893805][ T9121] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.123842][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.165442][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.963997][ T12] wlan1: Trigger new scan to find an IBSS to join [ 144.151383][ T9205] netlink: 'syz.4.878': attribute type 29 has an invalid length. [ 144.173804][ T9205] __nla_validate_parse: 19 callbacks suppressed [ 144.173822][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 144.193331][ T9216] netlink: 'syz.0.880': attribute type 27 has an invalid length. [ 144.204415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 144.342196][ T9219] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 144.362820][ T9216] bridge0: left allmulticast mode [ 144.391487][ T9216] batman_adv: batadv0: Interface deactivated: dummy0 [ 144.527848][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.548134][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.619986][ T9216] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.628862][ T9216] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.637377][ T9216] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.645952][ T9216] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.672765][ T9216] gretap1: left promiscuous mode [ 144.705791][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.713187][ T9217] batman_adv: batadv0: Interface activated: dummy0 [ 144.720921][ T9217] batadv0: mtu less than device minimum [ 144.729066][ T9217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.740427][ T9217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.751673][ T9217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.762947][ T9217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.894404][ T53] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 144.924295][ T3575] wlan0: Trigger new scan to find an IBSS to join [ 146.283854][ C1] net_ratelimit: 17 callbacks suppressed [ 146.283874][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.323884][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.974110][ T12] wlan0: Trigger new scan to find an IBSS to join [ 148.363850][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.403893][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 150.444151][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.005127][ T36] wlan0: Trigger new scan to find an IBSS to join [ 151.484103][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.894254][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.523926][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.563872][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.603924][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.643955][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.683875][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.723939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.764037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.804027][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.843891][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.883948][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.923901][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.963901][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.003939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.043889][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.083929][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.124194][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.163944][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.203886][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.243879][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.283831][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.323911][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.363934][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.403968][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.443802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.084049][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 177.483824][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.523901][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.563809][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.603825][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 181.643880][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.683895][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.723881][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.124299][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.763804][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.803893][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.843894][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.883906][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 188.923916][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.963931][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.003917][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.043848][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.083900][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.123865][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.163869][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.203827][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.456348][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 196.461021][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 196.462956][ T5146] Bluetooth: hci1: command 0x0401 tx timeout [ 197.243823][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.283799][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.333799][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.363808][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.403813][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.443805][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.509268][ T9246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 202.542758][ T9241] batadv0: entered promiscuous mode [ 202.561070][ T9241] batadv_slave_0: entered promiscuous mode [ 202.759616][ T9257] netlink: 156 bytes leftover after parsing attributes in process `syz.2.892'. [ 202.813096][ T9257] netlink: 148 bytes leftover after parsing attributes in process `syz.2.892'. [ 203.228190][ T9288] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 203.284314][ T9288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.365969][ T9288] bond3: (slave veth5): Enslaving as an active interface with a down link [ 203.390444][ T9281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.896'. [ 203.483834][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.565231][ T9288] bond3: (slave syz_tun): making interface the new active one [ 203.585253][ T9288] syz_tun: entered promiscuous mode [ 203.590761][ T9288] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 203.675609][ T9302] : renamed from bond_slave_0 [ 203.780151][ T9310] sctp: [Deprecated]: syz.3.900 (pid 9310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.780151][ T9310] Use struct sctp_sack_info instead [ 203.857592][ T9309] netlink: 224 bytes leftover after parsing attributes in process `syz.1.898'. [ 203.986923][ T9316] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 204.008044][ T9317] team0: left allmulticast mode [ 204.014306][ T9317] team_slave_0: left allmulticast mode [ 204.020674][ T9317] team_slave_1: left allmulticast mode [ 204.040032][ T9317] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 204.183241][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.198055][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.322288][ T9317] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.347807][ T9317] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.379143][ T9317] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.403860][ T9317] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.448950][ T9317] bridge1: left promiscuous mode [ 204.454374][ T9317] bridge1: left allmulticast mode [ 204.475174][ T9317] bond2: left promiscuous mode [ 204.488734][ T9317] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.497457][ T9317] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.505871][ T9317] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.514311][ T9317] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.523785][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.758440][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.845587][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 204.930066][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 204.949211][ T9355] netlink: 1112 bytes leftover after parsing attributes in process `syz.2.906'. [ 205.573804][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.617993][ T9373] netlink: 256 bytes leftover after parsing attributes in process `syz.0.911'. [ 205.630377][ T9373] unsupported nlmsg_type 40 [ 205.802554][ T9380] netlink: 17 bytes leftover after parsing attributes in process `syz.4.913'. [ 205.893535][ T9387] IPv6: Can't replace route, no match found [ 206.022593][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 206.613763][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.761879][ T9425] netlink: 'syz.2.926': attribute type 3 has an invalid length. [ 206.874945][ T9429] pim6reg: entered allmulticast mode [ 206.888297][ T9429] team0: entered allmulticast mode [ 207.044091][ T9437] team0: left allmulticast mode [ 207.061173][ T9437] pim6reg: left allmulticast mode [ 207.385390][ T9454] FAULT_INJECTION: forcing a failure. [ 207.385390][ T9454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.398926][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.1.935 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 207.398953][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.398975][ T9454] Call Trace: [ 207.398981][ T9454] [ 207.398988][ T9454] dump_stack_lvl+0x241/0x360 [ 207.399029][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.399051][ T9454] ? __pfx__printk+0x10/0x10 [ 207.399072][ T9454] ? __up_read+0x2c4/0x6b0 [ 207.399097][ T9454] should_fail_ex+0x424/0x570 [ 207.399124][ T9454] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 207.399153][ T9454] ? fault_in_readable+0x169/0x2e0 [ 207.399183][ T9454] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 207.399202][ T9454] ? shmem_write_begin+0x216/0x3a0 [ 207.399224][ T9454] ? __pfx_shmem_write_begin+0x10/0x10 [ 207.399250][ T9454] generic_perform_write+0x687/0xa10 [ 207.399278][ T9454] ? __pfx_generic_perform_write+0x10/0x10 [ 207.399298][ T9454] ? mnt_put_write_access_file+0xbf/0x100 [ 207.399318][ T9454] ? file_update_time+0x3dd/0x450 [ 207.399339][ T9454] shmem_file_write_iter+0xf9/0x120 [ 207.399361][ T9454] vfs_write+0x70f/0xd10 [ 207.399401][ T9454] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 207.399424][ T9454] ? __pfx_vfs_write+0x10/0x10 [ 207.399446][ T9454] ? __fget_files+0x2a/0x420 [ 207.399474][ T9454] ? __fget_files+0x2a/0x420 [ 207.399506][ T9454] ksys_write+0x19d/0x2d0 [ 207.399527][ T9454] ? __pfx_ksys_write+0x10/0x10 [ 207.399551][ T9454] ? do_syscall_64+0xb6/0x230 [ 207.399572][ T9454] do_syscall_64+0xf3/0x230 [ 207.399591][ T9454] ? clear_bhb_loop+0x45/0xa0 [ 207.399612][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.399630][ T9454] RIP: 0033:0x7f82a758d169 [ 207.399650][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.399665][ T9454] RSP: 002b:00007f82a8311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.399688][ T9454] RAX: ffffffffffffffda RBX: 00007f82a77a5fa0 RCX: 00007f82a758d169 [ 207.399701][ T9454] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 207.399713][ T9454] RBP: 00007f82a8311090 R08: 0000000000000000 R09: 0000000000000000 [ 207.399724][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.399734][ T9454] R13: 0000000000000000 R14: 00007f82a77a5fa0 R15: 00007ffe940abbe8 [ 207.399758][ T9454] [ 207.643507][ T9456] __nla_validate_parse: 10 callbacks suppressed [ 207.643526][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 207.650022][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.655482][ T9458] pim6reg: entered allmulticast mode [ 207.681843][ T9456] xt_ecn: cannot match TCP bits for non-tcp packets [ 207.749019][ T9461] pim6reg: left allmulticast mode [ 207.846843][ T9471] tun0: tun_chr_ioctl cmd 1074025675 [ 207.852340][ T9471] tun0: persist enabled [ 207.858326][ T9471] team0: entered promiscuous mode [ 207.863502][ T9471] team_slave_0: entered promiscuous mode [ 207.869485][ T9471] team_slave_1: entered promiscuous mode [ 207.875539][ T9471] bridge1: entered promiscuous mode [ 207.880941][ T9471] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 207.890443][ T9471] netlink: 'syz.3.941': attribute type 21 has an invalid length. [ 207.911355][ T9471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.941'. [ 207.922312][ T9470] team0: left promiscuous mode [ 207.927777][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 207.931034][ T9470] team_slave_0: left promiscuous mode [ 207.954020][ T9470] team_slave_1: left promiscuous mode [ 207.959849][ T9470] bridge1: left promiscuous mode [ 207.965357][ T9470] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 207.978615][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 208.018159][ T9479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.943'. [ 208.039607][ T9481] netlink: 68 bytes leftover after parsing attributes in process `syz.0.943'. [ 208.085424][ T9484] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 208.113579][ T9484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.148327][ T9484] bond4: (slave gretap2): making interface the new active one [ 208.173647][ T9484] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 208.179544][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 208.192170][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 208.289777][ T9489] can: request_module (can-proto-3) failed. [ 208.368885][ T9502] FAULT_INJECTION: forcing a failure. [ 208.368885][ T9502] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 208.380065][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 208.406551][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.0.948 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 208.406578][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.406589][ T9502] Call Trace: [ 208.406596][ T9502] [ 208.406603][ T9502] dump_stack_lvl+0x241/0x360 [ 208.406634][ T9502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.406658][ T9502] ? __pfx__printk+0x10/0x10 [ 208.406688][ T9502] should_fail_ex+0x424/0x570 [ 208.406716][ T9502] prepare_alloc_pages+0x1dd/0x5c0 [ 208.406742][ T9502] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 208.406765][ T9502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 208.406788][ T9502] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 208.406815][ T9502] alloc_pages_mpol+0x339/0x690 [ 208.406841][ T9502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 208.406867][ T9502] ? xas_start+0x3d2/0x7c0 [ 208.406889][ T9502] folio_alloc_mpol_noprof+0x36/0x70 [ 208.406915][ T9502] shmem_alloc_and_add_folio+0x490/0x1070 [ 208.406950][ T9502] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 208.406974][ T9502] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 208.406998][ T9502] shmem_get_folio_gfp+0x655/0x1800 [ 208.407029][ T9502] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 208.407054][ T9502] shmem_write_begin+0x17e/0x3a0 [ 208.407076][ T9502] ? __pfx_shmem_write_begin+0x10/0x10 [ 208.407103][ T9502] generic_perform_write+0x329/0xa10 [ 208.407131][ T9502] ? __pfx_generic_perform_write+0x10/0x10 [ 208.407151][ T9502] ? mnt_put_write_access_file+0xbf/0x100 [ 208.407173][ T9502] ? file_update_time+0x3dd/0x450 [ 208.407196][ T9502] shmem_file_write_iter+0xf9/0x120 [ 208.407220][ T9502] vfs_write+0x70f/0xd10 [ 208.407245][ T9502] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 208.407269][ T9502] ? __pfx_vfs_write+0x10/0x10 [ 208.407299][ T9502] ? __fget_files+0x2a/0x420 [ 208.407327][ T9502] ? __fget_files+0x2a/0x420 [ 208.407358][ T9502] ksys_write+0x19d/0x2d0 [ 208.407378][ T9502] ? __pfx_ksys_write+0x10/0x10 [ 208.407400][ T9502] ? do_syscall_64+0xb6/0x230 [ 208.407423][ T9502] do_syscall_64+0xf3/0x230 [ 208.407441][ T9502] ? clear_bhb_loop+0x45/0xa0 [ 208.407462][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.407480][ T9502] RIP: 0033:0x7f27df98d169 [ 208.407496][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.407510][ T9502] RSP: 002b:00007f27e07cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.407530][ T9502] RAX: ffffffffffffffda RBX: 00007f27dfba5fa0 RCX: 00007f27df98d169 [ 208.407544][ T9502] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 208.407555][ T9502] RBP: 00007f27e07cb090 R08: 0000000000000000 R09: 0000000000000000 [ 208.407566][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.407576][ T9502] R13: 0000000000000000 R14: 00007f27dfba5fa0 R15: 00007fff30d500b8 [ 208.407600][ T9502] [ 208.697738][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.698542][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.750188][ T9508] IPVS: stopping backup sync thread 9510 ... [ 208.751015][ T9510] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 208.891091][ T9518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.953'. [ 208.988151][ T9528] FAULT_INJECTION: forcing a failure. [ 208.988151][ T9528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.011734][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.1.956 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 209.011762][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.011773][ T9528] Call Trace: [ 209.011780][ T9528] [ 209.011787][ T9528] dump_stack_lvl+0x241/0x360 [ 209.011816][ T9528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.011840][ T9528] ? __pfx__printk+0x10/0x10 [ 209.011870][ T9528] should_fail_ex+0x424/0x570 [ 209.011899][ T9528] _copy_from_user+0x2d/0xb0 [ 209.011922][ T9528] move_addr_to_kernel+0x8c/0x170 [ 209.011942][ T9528] __sys_connect+0xb8/0x2d0 [ 209.011963][ T9528] ? __fget_files+0x2a/0x420 [ 209.011988][ T9528] ? __pfx___sys_connect+0x10/0x10 [ 209.012024][ T9528] __x64_sys_connect+0x7a/0x90 [ 209.012046][ T9528] do_syscall_64+0xf3/0x230 [ 209.012064][ T9528] ? clear_bhb_loop+0x45/0xa0 [ 209.012082][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.012108][ T9528] RIP: 0033:0x7f82a758d169 [ 209.012122][ T9528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.012133][ T9528] RSP: 002b:00007f82a53f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 209.012149][ T9528] RAX: ffffffffffffffda RBX: 00007f82a77a6080 RCX: 00007f82a758d169 [ 209.012160][ T9528] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 209.012170][ T9528] RBP: 00007f82a53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.012180][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.012189][ T9528] R13: 0000000000000000 R14: 00007f82a77a6080 R15: 00007ffe940abbe8 [ 209.012209][ T9528] [ 209.186527][ T9519] syzkaller0: entered allmulticast mode [ 209.195121][ T9519] syzkaller0: entered promiscuous mode [ 209.213262][ T9519] syzkaller0 (unregistering): left promiscuous mode [ 209.241082][ T9519] syzkaller0 (unregistering): left allmulticast mode [ 209.290664][ T9534] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 209.397535][ T9534] bond1: (slave gretap1): making interface the new active one [ 209.445664][ T9534] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 209.724761][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.124218][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 210.334334][ T9590] FAULT_INJECTION: forcing a failure. [ 210.334334][ T9590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.372233][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.2.970 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 210.372264][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.372276][ T9590] Call Trace: [ 210.372283][ T9590] [ 210.372291][ T9590] dump_stack_lvl+0x241/0x360 [ 210.372325][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.372351][ T9590] ? __pfx__printk+0x10/0x10 [ 210.372383][ T9590] should_fail_ex+0x424/0x570 [ 210.372415][ T9590] _copy_to_user+0x31/0xb0 [ 210.372442][ T9590] simple_read_from_buffer+0xdc/0x170 [ 210.372472][ T9590] proc_fail_nth_read+0x1ef/0x260 [ 210.372493][ T9590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.372514][ T9590] ? rw_verify_area+0x246/0x630 [ 210.372534][ T9590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.372553][ T9590] vfs_read+0x21f/0xb90 [ 210.372577][ T9590] ? __pfx___mutex_lock+0x10/0x10 [ 210.372598][ T9590] ? __pfx_vfs_read+0x10/0x10 [ 210.372621][ T9590] ? __fget_files+0x2a/0x420 [ 210.372650][ T9590] ? __fget_files+0x39d/0x420 [ 210.372677][ T9590] ? __fget_files+0x2a/0x420 [ 210.372712][ T9590] ksys_read+0x19d/0x2d0 [ 210.372734][ T9590] ? __pfx_ksys_read+0x10/0x10 [ 210.372759][ T9590] ? do_syscall_64+0xb6/0x230 [ 210.372782][ T9590] do_syscall_64+0xf3/0x230 [ 210.372802][ T9590] ? clear_bhb_loop+0x45/0xa0 [ 210.372825][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.372844][ T9590] RIP: 0033:0x7fc7d558bb7c [ 210.372861][ T9590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.372882][ T9590] RSP: 002b:00007fc7d644d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.372903][ T9590] RAX: ffffffffffffffda RBX: 00007fc7d57a6080 RCX: 00007fc7d558bb7c [ 210.372917][ T9590] RDX: 000000000000000f RSI: 00007fc7d644d0a0 RDI: 0000000000000007 [ 210.372929][ T9590] RBP: 00007fc7d644d090 R08: 0000000000000000 R09: 0000000000000000 [ 210.372940][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.372951][ T9590] R13: 0000000000000000 R14: 00007fc7d57a6080 R15: 00007ffd5fcf9fe8 [ 210.372976][ T9590] [ 210.620696][ T9594] xt_l2tp: wrong L2TP version: 0 [ 210.773749][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.808990][ T9610] FAULT_INJECTION: forcing a failure. [ 210.808990][ T9610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.822517][ T9610] CPU: 0 UID: 0 PID: 9610 Comm: syz.0.975 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 210.822544][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.822555][ T9610] Call Trace: [ 210.822561][ T9610] [ 210.822569][ T9610] dump_stack_lvl+0x241/0x360 [ 210.822600][ T9610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.822625][ T9610] ? __pfx__printk+0x10/0x10 [ 210.822649][ T9610] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 210.822675][ T9610] should_fail_ex+0x424/0x570 [ 210.822704][ T9610] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 210.822744][ T9610] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 210.822765][ T9610] ? shmem_write_begin+0x216/0x3a0 [ 210.822788][ T9610] ? __pfx_shmem_write_begin+0x10/0x10 [ 210.822826][ T9610] generic_perform_write+0x687/0xa10 [ 210.822846][ T9610] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 210.822882][ T9610] ? __pfx_generic_perform_write+0x10/0x10 [ 210.822901][ T9610] ? __pfx_generic_write_checks+0x10/0x10 [ 210.822928][ T9610] ? rcu_read_lock_any_held+0xbb/0x160 [ 210.822951][ T9610] ? file_update_time+0x2ab/0x450 [ 210.822974][ T9610] shmem_file_write_iter+0xf9/0x120 [ 210.822998][ T9610] vfs_write+0x70f/0xd10 [ 210.823022][ T9610] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 210.823046][ T9610] ? __pfx_vfs_write+0x10/0x10 [ 210.823068][ T9610] ? __fget_files+0x2a/0x420 [ 210.823097][ T9610] ? __fget_files+0x2a/0x420 [ 210.823130][ T9610] ksys_write+0x19d/0x2d0 [ 210.823151][ T9610] ? __pfx_ksys_write+0x10/0x10 [ 210.823175][ T9610] ? do_syscall_64+0xb6/0x230 [ 210.823197][ T9610] do_syscall_64+0xf3/0x230 [ 210.823216][ T9610] ? clear_bhb_loop+0x45/0xa0 [ 210.823237][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.823255][ T9610] RIP: 0033:0x7f27df98d169 [ 210.823270][ T9610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.823285][ T9610] RSP: 002b:00007f27e07cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.823304][ T9610] RAX: ffffffffffffffda RBX: 00007f27dfba5fa0 RCX: 00007f27df98d169 [ 210.823318][ T9610] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 210.823329][ T9610] RBP: 00007f27e07cb090 R08: 0000000000000000 R09: 0000000000000000 [ 210.823340][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.823351][ T9610] R13: 0000000000000000 R14: 00007f27dfba5fa0 R15: 00007fff30d500b8 [ 210.823374][ T9610] [ 211.249785][ T9630] netlink: 'syz.1.980': attribute type 16 has an invalid length. [ 211.257886][ T9630] netlink: 'syz.1.980': attribute type 17 has an invalid length. [ 211.304327][ T9632] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 211.803798][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.019525][ T9690] macsec0: entered allmulticast mode [ 212.037453][ T9690] veth1_macvtap: entered allmulticast mode [ 212.063814][ T9690] macsec0: left allmulticast mode [ 212.079208][ T9690] veth1_macvtap: left allmulticast mode [ 212.547314][ T9730] xt_TCPMSS: Only works on TCP SYN packets [ 212.560128][ T9730] xt_TCPMSS: Only works on TCP SYN packets [ 212.686517][ T9738] FAULT_INJECTION: forcing a failure. [ 212.686517][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.700036][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.1.1012 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 212.700064][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.700076][ T9738] Call Trace: [ 212.700082][ T9738] [ 212.700089][ T9738] dump_stack_lvl+0x241/0x360 [ 212.700122][ T9738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.700148][ T9738] ? __pfx__printk+0x10/0x10 [ 212.700182][ T9738] should_fail_ex+0x424/0x570 [ 212.700214][ T9738] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 212.700256][ T9738] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 212.700278][ T9738] ? shmem_write_begin+0x216/0x3a0 [ 212.700303][ T9738] ? __pfx_shmem_write_begin+0x10/0x10 [ 212.700333][ T9738] generic_perform_write+0x687/0xa10 [ 212.700365][ T9738] ? __pfx_generic_perform_write+0x10/0x10 [ 212.700387][ T9738] ? mnt_put_write_access_file+0xbf/0x100 [ 212.700409][ T9738] ? file_update_time+0x3dd/0x450 [ 212.700432][ T9738] shmem_file_write_iter+0xf9/0x120 [ 212.700458][ T9738] vfs_write+0x70f/0xd10 [ 212.700483][ T9738] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 212.700508][ T9738] ? __pfx_vfs_write+0x10/0x10 [ 212.700531][ T9738] ? __fget_files+0x2a/0x420 [ 212.700562][ T9738] ? __fget_files+0x2a/0x420 [ 212.700596][ T9738] ksys_write+0x19d/0x2d0 [ 212.700619][ T9738] ? __pfx_ksys_write+0x10/0x10 [ 212.700654][ T9738] ? do_syscall_64+0xb6/0x230 [ 212.700677][ T9738] do_syscall_64+0xf3/0x230 [ 212.700697][ T9738] ? clear_bhb_loop+0x45/0xa0 [ 212.700720][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.700738][ T9738] RIP: 0033:0x7f82a758d169 [ 212.700755][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.700771][ T9738] RSP: 002b:00007f82a8311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.700792][ T9738] RAX: ffffffffffffffda RBX: 00007f82a77a5fa0 RCX: 00007f82a758d169 [ 212.700806][ T9738] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 212.700819][ T9738] RBP: 00007f82a8311090 R08: 0000000000000000 R09: 0000000000000000 [ 212.700831][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.700843][ T9738] R13: 0000000000000000 R14: 00007f82a77a5fa0 R15: 00007ffe940abbe8 [ 212.700868][ T9738] [ 212.863854][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.255237][ T9769] __nla_validate_parse: 15 callbacks suppressed [ 213.255257][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1021'. [ 213.447393][ T9780] netlink: 'syz.4.1023': attribute type 3 has an invalid length. [ 213.701898][ T9792] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1025'. [ 213.883745][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.001736][ T9806] FAULT_INJECTION: forcing a failure. [ 214.001736][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.015060][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.0.1028 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 214.015088][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.015101][ T9806] Call Trace: [ 214.015108][ T9806] [ 214.015116][ T9806] dump_stack_lvl+0x241/0x360 [ 214.015149][ T9806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.015174][ T9806] ? __pfx__printk+0x10/0x10 [ 214.015197][ T9806] ? __up_read+0x2c4/0x6b0 [ 214.015226][ T9806] should_fail_ex+0x424/0x570 [ 214.015257][ T9806] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 214.015290][ T9806] ? fault_in_readable+0x169/0x2e0 [ 214.015325][ T9806] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 214.015345][ T9806] ? shmem_write_begin+0x216/0x3a0 [ 214.015367][ T9806] ? __pfx_shmem_write_begin+0x10/0x10 [ 214.015394][ T9806] generic_perform_write+0x687/0xa10 [ 214.015422][ T9806] ? __pfx_generic_perform_write+0x10/0x10 [ 214.015443][ T9806] ? mnt_put_write_access_file+0xbf/0x100 [ 214.015463][ T9806] ? file_update_time+0x3dd/0x450 [ 214.015485][ T9806] shmem_file_write_iter+0xf9/0x120 [ 214.015507][ T9806] vfs_write+0x70f/0xd10 [ 214.015529][ T9806] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 214.015577][ T9806] ? __pfx_vfs_write+0x10/0x10 [ 214.015599][ T9806] ? __fget_files+0x2a/0x420 [ 214.015628][ T9806] ? __fget_files+0x2a/0x420 [ 214.015661][ T9806] ksys_write+0x19d/0x2d0 [ 214.015682][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 214.015705][ T9806] ? do_syscall_64+0xb6/0x230 [ 214.015728][ T9806] do_syscall_64+0xf3/0x230 [ 214.015747][ T9806] ? clear_bhb_loop+0x45/0xa0 [ 214.015769][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.015787][ T9806] RIP: 0033:0x7f27df98d169 [ 214.015803][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.015820][ T9806] RSP: 002b:00007f27e07cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.015840][ T9806] RAX: ffffffffffffffda RBX: 00007f27dfba5fa0 RCX: 00007f27df98d169 [ 214.015855][ T9806] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 214.015867][ T9806] RBP: 00007f27e07cb090 R08: 0000000000000000 R09: 0000000000000000 [ 214.015879][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.015908][ T9806] R13: 0000000000000000 R14: 00007f27dfba5fa0 R15: 00007fff30d500b8 [ 214.015934][ T9806] [ 214.507248][ T9827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1036'. [ 214.798743][ T9852] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 214.923769][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.161014][ T9881] vlan2: entered promiscuous mode [ 215.174106][ T9881] hsr0: entered promiscuous mode [ 215.288031][ T9890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.297342][ T9890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.306374][ T9890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.315269][ T9890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.340298][ T9890] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 215.407467][ T9898] netlink: 'syz.0.1055': attribute type 16 has an invalid length. [ 215.415561][ T9898] netlink: 'syz.0.1055': attribute type 17 has an invalid length. [ 215.487735][ T9894] tipc: Enabling of bearer rejected, failed to enable media [ 215.502174][ T9898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.581541][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1059'. [ 215.847132][ T9921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1063'. [ 215.856717][ T9921] tipc: Invalid UDP bearer configuration [ 215.856771][ T9921] tipc: Enabling of bearer rejected, failed to enable media [ 215.951878][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 215.972650][ T9932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1067'. [ 215.981779][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.591951][ T9953] FAULT_INJECTION: forcing a failure. [ 216.591951][ T9953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.605247][ T9953] CPU: 1 UID: 0 PID: 9953 Comm: syz.0.1076 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 216.605276][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.605308][ T9953] Call Trace: [ 216.605315][ T9953] [ 216.605322][ T9953] dump_stack_lvl+0x241/0x360 [ 216.605354][ T9953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.605389][ T9953] ? __pfx__printk+0x10/0x10 [ 216.605413][ T9953] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 216.605439][ T9953] should_fail_ex+0x424/0x570 [ 216.605468][ T9953] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 216.605507][ T9953] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 216.605529][ T9953] ? shmem_write_begin+0x216/0x3a0 [ 216.605551][ T9953] ? __pfx_shmem_write_begin+0x10/0x10 [ 216.605579][ T9953] generic_perform_write+0x687/0xa10 [ 216.605609][ T9953] ? __pfx_generic_perform_write+0x10/0x10 [ 216.605630][ T9953] ? mnt_put_write_access_file+0xbf/0x100 [ 216.605652][ T9953] ? file_update_time+0x3dd/0x450 [ 216.605674][ T9953] shmem_file_write_iter+0xf9/0x120 [ 216.605697][ T9953] vfs_write+0x70f/0xd10 [ 216.605721][ T9953] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 216.605745][ T9953] ? __pfx_vfs_write+0x10/0x10 [ 216.605766][ T9953] ? __fget_files+0x2a/0x420 [ 216.605794][ T9953] ? __fget_files+0x2a/0x420 [ 216.605827][ T9953] ksys_write+0x19d/0x2d0 [ 216.605848][ T9953] ? __pfx_ksys_write+0x10/0x10 [ 216.605872][ T9953] ? do_syscall_64+0xb6/0x230 [ 216.605895][ T9953] do_syscall_64+0xf3/0x230 [ 216.605914][ T9953] ? clear_bhb_loop+0x45/0xa0 [ 216.605935][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.605953][ T9953] RIP: 0033:0x7f27df98d169 [ 216.605969][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.605985][ T9953] RSP: 002b:00007f27e07cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.606005][ T9953] RAX: ffffffffffffffda RBX: 00007f27dfba5fa0 RCX: 00007f27df98d169 [ 216.606019][ T9953] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 216.606031][ T9953] RBP: 00007f27e07cb090 R08: 0000000000000000 R09: 0000000000000000 [ 216.606042][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.606053][ T9953] R13: 0000000000000000 R14: 00007f27dfba5fa0 R15: 00007fff30d500b8 [ 216.606076][ T9953] [ 217.003765][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.224948][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 217.234176][ T9969] bridge_slave_1: default FDB implementation only supports local addresses [ 217.456062][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 217.481001][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'. [ 217.586566][ T9996] FAULT_INJECTION: forcing a failure. [ 217.586566][ T9996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.599859][ T9996] CPU: 0 UID: 0 PID: 9996 Comm: syz.4.1090 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 217.599887][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.599899][ T9996] Call Trace: [ 217.599906][ T9996] [ 217.599913][ T9996] dump_stack_lvl+0x241/0x360 [ 217.599945][ T9996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.599970][ T9996] ? __pfx__printk+0x10/0x10 [ 217.599994][ T9996] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 217.600020][ T9996] should_fail_ex+0x424/0x570 [ 217.600051][ T9996] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 217.600091][ T9996] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 217.600112][ T9996] ? shmem_write_begin+0x216/0x3a0 [ 217.600135][ T9996] ? __pfx_shmem_write_begin+0x10/0x10 [ 217.600164][ T9996] generic_perform_write+0x687/0xa10 [ 217.600194][ T9996] ? __pfx_generic_perform_write+0x10/0x10 [ 217.600216][ T9996] ? mnt_put_write_access_file+0xbf/0x100 [ 217.600238][ T9996] ? file_update_time+0x3dd/0x450 [ 217.600260][ T9996] shmem_file_write_iter+0xf9/0x120 [ 217.600284][ T9996] vfs_write+0x70f/0xd10 [ 217.600308][ T9996] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 217.600332][ T9996] ? __pfx_vfs_write+0x10/0x10 [ 217.600354][ T9996] ? __fget_files+0x2a/0x420 [ 217.600383][ T9996] ? __fget_files+0x2a/0x420 [ 217.600416][ T9996] ksys_write+0x19d/0x2d0 [ 217.600438][ T9996] ? __pfx_ksys_write+0x10/0x10 [ 217.600469][ T9996] ? do_syscall_64+0xb6/0x230 [ 217.600491][ T9996] do_syscall_64+0xf3/0x230 [ 217.600510][ T9996] ? clear_bhb_loop+0x45/0xa0 [ 217.600532][ T9996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.600568][ T9996] RIP: 0033:0x7f27c558d169 [ 217.600585][ T9996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.600603][ T9996] RSP: 002b:00007f27c64a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.600624][ T9996] RAX: ffffffffffffffda RBX: 00007f27c57a5fa0 RCX: 00007f27c558d169 [ 217.600639][ T9996] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 217.600651][ T9996] RBP: 00007f27c64a9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.600663][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.600675][ T9996] R13: 0000000000000000 R14: 00007f27c57a5fa0 R15: 00007ffd27463518 [ 217.600701][ T9996] [ 218.043746][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.067117][T10010] batman_adv: batadv0: Interface deactivated: dummy0 [ 218.074673][T10010] batman_adv: batadv0: Removing interface: dummy0 [ 218.181291][T10010] bridge_slave_0: left allmulticast mode [ 218.191325][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.203338][T10010] bond0: (slave bond_slave_0): Releasing backup interface [ 218.219318][T10010] bond0: (slave bond_slave_1): Releasing backup interface [ 218.235660][T10010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.243460][T10010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.609380][T10043] __nla_validate_parse: 1 callbacks suppressed [ 218.609400][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 218.876020][T10053] team0: entered allmulticast mode [ 218.889228][T10053] team_slave_0: entered allmulticast mode [ 218.903775][T10053] team_slave_1: entered allmulticast mode [ 218.917967][T10053] bridge1: entered allmulticast mode [ 218.930287][T10053] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 218.949994][T10053] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.967653][T10057] vlan3: entered allmulticast mode [ 218.972921][T10057] bridge0: entered allmulticast mode [ 219.083766][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.258088][T10072] macsec1: entered promiscuous mode [ 219.266159][T10072] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 219.273438][T10072] macsec1: entered allmulticast mode [ 219.280928][T10072] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 219.435383][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 219.800332][T10113] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1124'. [ 220.123743][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.168717][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.210854][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1132'. [ 220.244211][T10147] vti0: entered promiscuous mode [ 220.556649][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 220.848541][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'. [ 221.163793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.293560][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.305560][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.317371][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.327084][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.343855][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.405338][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 221.420302][T10198] netlink: 'syz.3.1144': attribute type 27 has an invalid length. [ 222.068439][ T9660] bond0 (unregistering): Released all slaves [ 222.203779][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.277181][ T9660] bond1 (unregistering): Released all slaves [ 222.338626][T10215] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 222.427641][ T9660] tipc: Left network mode [ 222.642572][T10225] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1152'. [ 222.651888][T10225] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1152'. [ 222.729768][T10195] chnl_net:caif_netlink_parms(): no params data found [ 222.906116][ T9660] hsr_slave_0: left promiscuous mode [ 222.931361][ T9660] hsr_slave_1: left promiscuous mode [ 223.243853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.417697][ T5146] Bluetooth: hci3: command tx timeout [ 223.671497][T10240] pim6reg: entered allmulticast mode [ 223.682723][T10245] pim6reg: left allmulticast mode [ 223.865087][T10256] FAULT_INJECTION: forcing a failure. [ 223.865087][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.878296][T10256] CPU: 1 UID: 0 PID: 10256 Comm: syz.3.1160 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 223.878324][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.878336][T10256] Call Trace: [ 223.878344][T10256] [ 223.878352][T10256] dump_stack_lvl+0x241/0x360 [ 223.878385][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.878411][T10256] ? __pfx__printk+0x10/0x10 [ 223.878445][T10256] should_fail_ex+0x424/0x570 [ 223.878478][T10256] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 223.878522][T10256] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 223.878544][T10256] ? shmem_write_begin+0x216/0x3a0 [ 223.878570][T10256] ? __pfx_shmem_write_begin+0x10/0x10 [ 223.878600][T10256] generic_perform_write+0x687/0xa10 [ 223.878633][T10256] ? __pfx_generic_perform_write+0x10/0x10 [ 223.878656][T10256] ? mnt_put_write_access_file+0xbf/0x100 [ 223.878679][T10256] ? file_update_time+0x3dd/0x450 [ 223.878704][T10256] shmem_file_write_iter+0xf9/0x120 [ 223.878729][T10256] vfs_write+0x70f/0xd10 [ 223.878755][T10256] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 223.878780][T10256] ? __pfx_vfs_write+0x10/0x10 [ 223.878803][T10256] ? __fget_files+0x2a/0x420 [ 223.878840][T10256] ? __fget_files+0x2a/0x420 [ 223.878875][T10256] ksys_write+0x19d/0x2d0 [ 223.878898][T10256] ? __pfx_ksys_write+0x10/0x10 [ 223.878923][T10256] ? do_syscall_64+0xb6/0x230 [ 223.878946][T10256] do_syscall_64+0xf3/0x230 [ 223.878967][T10256] ? clear_bhb_loop+0x45/0xa0 [ 223.878990][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.879009][T10256] RIP: 0033:0x7f684ad8d169 [ 223.879026][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.879042][T10256] RSP: 002b:00007f684bbb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.879063][T10256] RAX: ffffffffffffffda RBX: 00007f684afa5fa0 RCX: 00007f684ad8d169 [ 223.879078][T10256] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 223.879090][T10256] RBP: 00007f684bbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 223.879103][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.879114][T10256] R13: 0000000000000000 R14: 00007f684afa5fa0 R15: 00007ffe82149838 [ 223.879139][T10256] [ 224.112539][T10258] netlink: 'syz.1.1161': attribute type 3 has an invalid length. [ 224.127104][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.136920][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.147388][T10195] bridge_slave_0: entered allmulticast mode [ 224.155867][T10195] bridge_slave_0: entered promiscuous mode [ 224.254741][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.261958][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.269213][T10195] bridge_slave_1: entered allmulticast mode [ 224.276237][T10195] bridge_slave_1: entered promiscuous mode [ 224.288303][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.357055][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.376035][T10268] netlink: 'syz.1.1165': attribute type 27 has an invalid length. [ 224.377475][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.445146][T10268] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 224.451991][T10268] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 224.467246][T10268] macsec1: left promiscuous mode [ 224.472243][T10268] macsec1: left allmulticast mode [ 224.504958][T10277] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 224.518803][T10274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.526583][T10279] x_tables: duplicate underflow at hook 3 [ 224.538662][T10274] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.551146][T10274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.579264][T10195] team0: Port device team_slave_0 added [ 224.588741][T10195] team0: Port device team_slave_1 added [ 224.757718][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.773753][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.800263][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.814389][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.821556][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.848142][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.982185][T10195] hsr_slave_0: entered promiscuous mode [ 224.996394][T10307] FAULT_INJECTION: forcing a failure. [ 224.996394][T10307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.009767][T10307] CPU: 0 UID: 0 PID: 10307 Comm: syz.1.1174 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 225.009794][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.009806][T10307] Call Trace: [ 225.009818][T10307] [ 225.009825][T10307] dump_stack_lvl+0x241/0x360 [ 225.009856][T10307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.009898][T10307] ? __pfx__printk+0x10/0x10 [ 225.009932][T10307] should_fail_ex+0x424/0x570 [ 225.009964][T10307] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 225.010008][T10307] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 225.010030][T10307] ? shmem_write_begin+0x216/0x3a0 [ 225.010056][T10307] ? __pfx_shmem_write_begin+0x10/0x10 [ 225.010087][T10307] generic_perform_write+0x687/0xa10 [ 225.010107][T10307] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 225.010146][T10307] ? __pfx_generic_perform_write+0x10/0x10 [ 225.010167][T10307] ? __pfx_generic_write_checks+0x10/0x10 [ 225.010195][T10307] ? rcu_read_lock_any_held+0xbb/0x160 [ 225.010220][T10307] ? file_update_time+0x2ab/0x450 [ 225.010245][T10307] shmem_file_write_iter+0xf9/0x120 [ 225.010270][T10307] vfs_write+0x70f/0xd10 [ 225.010295][T10307] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 225.010321][T10307] ? __pfx_vfs_write+0x10/0x10 [ 225.010344][T10307] ? __fget_files+0x2a/0x420 [ 225.010375][T10307] ? __fget_files+0x2a/0x420 [ 225.010411][T10307] ksys_write+0x19d/0x2d0 [ 225.010433][T10307] ? __pfx_ksys_write+0x10/0x10 [ 225.010459][T10307] ? do_syscall_64+0xb6/0x230 [ 225.010483][T10307] do_syscall_64+0xf3/0x230 [ 225.010504][T10307] ? clear_bhb_loop+0x45/0xa0 [ 225.010527][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.010546][T10307] RIP: 0033:0x7f82a758d169 [ 225.010563][T10307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.010580][T10307] RSP: 002b:00007f82a8311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.010601][T10307] RAX: ffffffffffffffda RBX: 00007f82a77a5fa0 RCX: 00007f82a758d169 [ 225.010615][T10307] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 225.010628][T10307] RBP: 00007f82a8311090 R08: 0000000000000000 R09: 0000000000000000 [ 225.010640][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.010651][T10307] R13: 0000000000000000 R14: 00007f82a77a5fa0 R15: 00007ffe940abbe8 [ 225.010677][T10307] [ 225.012330][T10195] hsr_slave_1: entered promiscuous mode [ 225.289278][T10195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.297625][T10195] Cannot create hsr debugfs directory [ 225.333745][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.386895][T10321] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1177'. [ 225.513811][ T5146] Bluetooth: hci3: command tx timeout [ 225.804226][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 225.845278][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1180'. [ 226.024424][T10195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.047757][T10195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.364072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.382181][T10195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.424483][T10195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.506583][T10357] FAULT_INJECTION: forcing a failure. [ 226.506583][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.519794][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.1.1189 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 226.519823][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.519835][T10357] Call Trace: [ 226.519843][T10357] [ 226.519852][T10357] dump_stack_lvl+0x241/0x360 [ 226.519886][T10357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.519914][T10357] ? __pfx__printk+0x10/0x10 [ 226.519938][T10357] ? __up_read+0x2c4/0x6b0 [ 226.519968][T10357] should_fail_ex+0x424/0x570 [ 226.520002][T10357] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 226.520046][T10357] ? fault_in_readable+0x169/0x2e0 [ 226.520074][T10357] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 226.520098][T10357] ? shmem_write_begin+0x216/0x3a0 [ 226.520123][T10357] ? __pfx_shmem_write_begin+0x10/0x10 [ 226.520155][T10357] generic_perform_write+0x687/0xa10 [ 226.520189][T10357] ? __pfx_generic_perform_write+0x10/0x10 [ 226.520214][T10357] ? mnt_put_write_access_file+0xbf/0x100 [ 226.520238][T10357] ? file_update_time+0x3dd/0x450 [ 226.520263][T10357] shmem_file_write_iter+0xf9/0x120 [ 226.520290][T10357] vfs_write+0x70f/0xd10 [ 226.520336][T10357] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 226.520371][T10357] ? __pfx_vfs_write+0x10/0x10 [ 226.520395][T10357] ? __fget_files+0x2a/0x420 [ 226.520427][T10357] ? __fget_files+0x2a/0x420 [ 226.520463][T10357] ksys_write+0x19d/0x2d0 [ 226.520487][T10357] ? __pfx_ksys_write+0x10/0x10 [ 226.520514][T10357] ? do_syscall_64+0xb6/0x230 [ 226.520538][T10357] do_syscall_64+0xf3/0x230 [ 226.520560][T10357] ? clear_bhb_loop+0x45/0xa0 [ 226.520583][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.520603][T10357] RIP: 0033:0x7f82a758d169 [ 226.520621][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.520639][T10357] RSP: 002b:00007f82a8311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.520661][T10357] RAX: ffffffffffffffda RBX: 00007f82a77a5fa0 RCX: 00007f82a758d169 [ 226.520676][T10357] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 226.520690][T10357] RBP: 00007f82a8311090 R08: 0000000000000000 R09: 0000000000000000 [ 226.520703][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.520715][T10357] R13: 0000000000000000 R14: 00007f82a77a5fa0 R15: 00007ffe940abbe8 [ 226.520741][T10357] [ 226.601364][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.867759][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.882002][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.889156][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.911090][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 226.935134][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.942290][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.955374][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 226.957276][T10371] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1193'. [ 227.302307][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.384808][T10195] veth0_vlan: entered promiscuous mode [ 227.412714][T10195] veth1_vlan: entered promiscuous mode [ 227.413773][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.466938][T10403] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 227.486706][T10195] veth0_macvtap: entered promiscuous mode [ 227.509886][T10403] lo: entered promiscuous mode [ 227.516034][T10403] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.531508][T10408] FAULT_INJECTION: forcing a failure. [ 227.531508][T10408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.543042][T10403] bond0: (slave lo): Enslaving as an active interface with an up link [ 227.562787][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.4.1203 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 227.562825][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.562838][T10408] Call Trace: [ 227.562844][T10408] [ 227.562852][T10408] dump_stack_lvl+0x241/0x360 [ 227.562882][T10408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.562905][T10408] ? __pfx__printk+0x10/0x10 [ 227.562934][T10408] should_fail_ex+0x424/0x570 [ 227.562963][T10408] prepare_alloc_pages+0x1dd/0x5c0 [ 227.562988][T10408] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 227.563010][T10408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.563034][T10408] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 227.563061][T10408] alloc_pages_mpol+0x339/0x690 [ 227.563088][T10408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 227.563120][T10408] folio_alloc_mpol_noprof+0x36/0x70 [ 227.563144][T10408] shmem_alloc_and_add_folio+0x490/0x1070 [ 227.563174][T10408] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 227.563199][T10408] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 227.563222][T10408] shmem_get_folio_gfp+0x655/0x1800 [ 227.563252][T10408] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 227.563278][T10408] shmem_write_begin+0x17e/0x3a0 [ 227.563302][T10408] ? __pfx_shmem_write_begin+0x10/0x10 [ 227.563330][T10408] generic_perform_write+0x329/0xa10 [ 227.563348][T10408] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 227.563383][T10408] ? __pfx_generic_perform_write+0x10/0x10 [ 227.563402][T10408] ? __pfx_generic_write_checks+0x10/0x10 [ 227.563427][T10408] ? rcu_read_lock_any_held+0xbb/0x160 [ 227.563450][T10408] ? file_update_time+0x2ab/0x450 [ 227.563473][T10408] shmem_file_write_iter+0xf9/0x120 [ 227.563496][T10408] vfs_write+0x70f/0xd10 [ 227.563525][T10408] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 227.563549][T10408] ? __pfx_vfs_write+0x10/0x10 [ 227.563569][T10408] ? __fget_files+0x2a/0x420 [ 227.563598][T10408] ? __fget_files+0x2a/0x420 [ 227.563629][T10408] ksys_write+0x19d/0x2d0 [ 227.563650][T10408] ? __pfx_ksys_write+0x10/0x10 [ 227.563678][T10408] ? do_syscall_64+0xb6/0x230 [ 227.563700][T10408] do_syscall_64+0xf3/0x230 [ 227.563719][T10408] ? clear_bhb_loop+0x45/0xa0 [ 227.563739][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.563756][T10408] RIP: 0033:0x7f27c558d169 [ 227.563772][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.563788][T10408] RSP: 002b:00007f27c64a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.563807][T10408] RAX: ffffffffffffffda RBX: 00007f27c57a5fa0 RCX: 00007f27c558d169 [ 227.563821][T10408] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 227.563833][T10408] RBP: 00007f27c64a9090 R08: 0000000000000000 R09: 0000000000000000 [ 227.563844][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.563855][T10408] R13: 0000000000000000 R14: 00007f27c57a5fa0 R15: 00007ffd27463518 [ 227.563879][T10408] [ 227.573781][ T5146] Bluetooth: hci3: command tx timeout [ 227.587269][T10195] veth1_macvtap: entered promiscuous mode [ 227.934269][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.947367][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.959671][T10195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.969965][T10195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.987950][T10195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.997179][T10195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.094164][T10423] netlink: 'syz.3.1204': attribute type 13 has an invalid length. [ 228.151130][T10425] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1208'. [ 228.231790][ T9663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.243578][ T9663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.286095][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.315248][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.453830][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.527776][T10296] ------------[ cut here ]------------ [ 228.533430][T10296] refcount_t: underflow; use-after-free. [ 228.539549][T10296] WARNING: CPU: 1 PID: 10296 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 228.549035][T10296] Modules linked in: [ 228.552944][T10296] CPU: 1 UID: 0 PID: 10296 Comm: kbnepd bnep0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 228.564842][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.574916][T10296] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 228.581075][T10296] Code: c0 a9 a0 8c e8 f7 36 86 fc 90 0f 0b 90 90 eb 99 e8 db 12 c7 fc c6 05 7f e4 4a 0b 01 90 48 c7 c7 20 aa a0 8c e8 d7 36 86 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 12 c7 fc c6 05 59 e4 4a 0b 01 90 [ 228.600714][T10296] RSP: 0018:ffffc9000c7c7700 EFLAGS: 00010246 [ 228.607284][T10296] RAX: 8090050556ab6400 RBX: ffff88807e31d878 RCX: ffff88802ce00000 [ 228.615435][T10296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.623404][T10296] RBP: 0000000000000003 R08: ffffffff81829db2 R09: fffffbfff1d7a73c [ 228.631496][T10296] R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: ffff88807e31d860 [ 228.639484][T10296] R13: 1ffff1100fc63b0c R14: ffff88807e31d860 R15: ffffffff86443560 [ 228.647478][T10296] FS: 0000000000000000(0000) GS:ffff88812510f000(0000) knlGS:0000000000000000 [ 228.656526][T10296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.663214][T10296] CR2: 00007f27c57a7bac CR3: 000000003273e000 CR4: 00000000003526f0 [ 228.671234][T10296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.679227][T10296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.687219][T10296] Call Trace: [ 228.690499][T10296] [ 228.693447][T10296] ? __warn+0x165/0x4d0 [ 228.697625][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 228.703175][T10296] ? report_bug+0x2b3/0x500 [ 228.707803][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 228.713510][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 228.719180][T10296] ? refcount_warn_saturate+0x15c/0x1d0 [ 228.724747][T10296] ? handle_bug+0x89/0x170 [ 228.729166][T10296] ? exc_invalid_op+0x1a/0x50 [ 228.733862][T10296] ? asm_exc_invalid_op+0x1a/0x20 [ 228.738881][T10296] ? __pfx_klist_children_put+0x10/0x10 [ 228.744448][T10296] ? __warn_printk+0x2a2/0x360 [ 228.749214][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 228.754820][T10296] klist_dec_and_del+0x3ec/0x3f0 [ 228.759759][T10296] ? __pfx_klist_children_put+0x10/0x10 [ 228.765355][T10296] klist_del+0xa7/0x110 [ 228.769529][T10296] device_del+0x2cb/0x9b0 [ 228.773902][T10296] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 228.779988][T10296] ? __pfx_device_del+0x10/0x10 [ 228.784866][T10296] ? netdev_unregister_kobject+0x36b/0x470 [ 228.790691][T10296] unregister_netdevice_many_notify+0x1f37/0x2510 [ 228.797157][T10296] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 228.804207][T10296] ? trace_contention_end+0x3c/0x120 [ 228.809500][T10296] ? __mutex_lock+0x39b/0x1000 [ 228.814442][T10296] ? __lock_acquire+0xad5/0xd80 [ 228.819298][T10296] ? rtnl_net_dev_lock+0x271/0x320 [ 228.824525][T10296] ? __pfx___mutex_lock+0x10/0x10 [ 228.829552][T10296] unregister_netdevice_queue+0x383/0x400 [ 228.835294][T10296] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 228.841645][T10296] ? rtnl_net_dev_lock+0x37/0x320 [ 228.846674][T10296] ? rtnl_net_dev_lock+0x302/0x320 [ 228.851776][T10296] ? rtnl_net_dev_lock+0x37/0x320 [ 228.856975][T10296] unregister_netdev+0x1f/0x60 [ 228.861747][T10296] bnep_session+0x2e52/0x3050 [ 228.866433][T10296] ? __schedule+0x1b20/0x50e0 [ 228.871113][T10296] ? __lock_acquire+0xad5/0xd80 [ 228.875981][T10296] ? do_raw_spin_lock+0x151/0x370 [ 228.881023][T10296] ? __pfx_bnep_session+0x10/0x10 [ 228.886074][T10296] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 228.891976][T10296] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.898407][T10296] ? __pfx_woken_wake_function+0x10/0x10 [ 228.904136][T10296] ? __kthread_parkme+0x169/0x1d0 [ 228.909159][T10296] ? __pfx_bnep_session+0x10/0x10 [ 228.914345][T10296] kthread+0x7a9/0x920 [ 228.918418][T10296] ? __pfx_bnep_session+0x10/0x10 [ 228.923435][T10296] ? __pfx_kthread+0x10/0x10 [ 228.928138][T10296] ? __pfx_kthread+0x10/0x10 [ 228.932727][T10296] ? __pfx_kthread+0x10/0x10 [ 228.937328][T10296] ? __pfx_kthread+0x10/0x10 [ 228.941909][T10296] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.947123][T10296] ? lockdep_hardirqs_on+0x9d/0x150 [ 228.952310][T10296] ? __pfx_kthread+0x10/0x10 [ 228.957154][T10296] ret_from_fork+0x4b/0x80 [ 228.961569][T10296] ? __pfx_kthread+0x10/0x10 [ 228.966188][T10296] ret_from_fork_asm+0x1a/0x30 [ 228.970960][T10296] [ 228.974002][T10296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.981306][T10296] CPU: 1 UID: 0 PID: 10296 Comm: kbnepd bnep0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 228.993200][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.003247][T10296] Call Trace: [ 229.006516][T10296] [ 229.009437][T10296] dump_stack_lvl+0x241/0x360 [ 229.014135][T10296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.019348][T10296] ? __pfx__printk+0x10/0x10 [ 229.023936][T10296] ? vscnprintf+0x5d/0x90 [ 229.028264][T10296] panic+0x349/0x880 [ 229.032153][T10296] ? __warn+0x174/0x4d0 [ 229.036300][T10296] ? __pfx_panic+0x10/0x10 [ 229.040715][T10296] ? ret_from_fork_asm+0x1a/0x30 [ 229.045651][T10296] __warn+0x344/0x4d0 [ 229.049623][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 229.055167][T10296] report_bug+0x2b3/0x500 [ 229.059486][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 229.065026][T10296] ? refcount_warn_saturate+0x15a/0x1d0 [ 229.070583][T10296] ? refcount_warn_saturate+0x15c/0x1d0 [ 229.076119][T10296] handle_bug+0x89/0x170 [ 229.080356][T10296] exc_invalid_op+0x1a/0x50 [ 229.084858][T10296] asm_exc_invalid_op+0x1a/0x20 [ 229.089700][T10296] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 229.095848][T10296] Code: c0 a9 a0 8c e8 f7 36 86 fc 90 0f 0b 90 90 eb 99 e8 db 12 c7 fc c6 05 7f e4 4a 0b 01 90 48 c7 c7 20 aa a0 8c e8 d7 36 86 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 12 c7 fc c6 05 59 e4 4a 0b 01 90 [ 229.115442][T10296] RSP: 0018:ffffc9000c7c7700 EFLAGS: 00010246 [ 229.121501][T10296] RAX: 8090050556ab6400 RBX: ffff88807e31d878 RCX: ffff88802ce00000 [ 229.129462][T10296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.137421][T10296] RBP: 0000000000000003 R08: ffffffff81829db2 R09: fffffbfff1d7a73c [ 229.145380][T10296] R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: ffff88807e31d860 [ 229.153343][T10296] R13: 1ffff1100fc63b0c R14: ffff88807e31d860 R15: ffffffff86443560 [ 229.161329][T10296] ? __pfx_klist_children_put+0x10/0x10 [ 229.166872][T10296] ? __warn_printk+0x2a2/0x360 [ 229.171632][T10296] klist_dec_and_del+0x3ec/0x3f0 [ 229.176566][T10296] ? __pfx_klist_children_put+0x10/0x10 [ 229.182103][T10296] klist_del+0xa7/0x110 [ 229.186254][T10296] device_del+0x2cb/0x9b0 [ 229.190588][T10296] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 229.196657][T10296] ? __pfx_device_del+0x10/0x10 [ 229.201494][T10296] ? netdev_unregister_kobject+0x36b/0x470 [ 229.207298][T10296] unregister_netdevice_many_notify+0x1f37/0x2510 [ 229.213710][T10296] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 229.220460][T10296] ? trace_contention_end+0x3c/0x120 [ 229.225734][T10296] ? __mutex_lock+0x39b/0x1000 [ 229.230490][T10296] ? __lock_acquire+0xad5/0xd80 [ 229.235355][T10296] ? rtnl_net_dev_lock+0x271/0x320 [ 229.240458][T10296] ? __pfx___mutex_lock+0x10/0x10 [ 229.245476][T10296] unregister_netdevice_queue+0x383/0x400 [ 229.251195][T10296] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 229.257434][T10296] ? rtnl_net_dev_lock+0x37/0x320 [ 229.262456][T10296] ? rtnl_net_dev_lock+0x302/0x320 [ 229.267558][T10296] ? rtnl_net_dev_lock+0x37/0x320 [ 229.272571][T10296] unregister_netdev+0x1f/0x60 [ 229.277316][T10296] bnep_session+0x2e52/0x3050 [ 229.281979][T10296] ? __schedule+0x1b20/0x50e0 [ 229.286649][T10296] ? __lock_acquire+0xad5/0xd80 [ 229.291493][T10296] ? do_raw_spin_lock+0x151/0x370 [ 229.296509][T10296] ? __pfx_bnep_session+0x10/0x10 [ 229.301521][T10296] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 229.307408][T10296] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.313727][T10296] ? __pfx_woken_wake_function+0x10/0x10 [ 229.319356][T10296] ? __kthread_parkme+0x169/0x1d0 [ 229.324373][T10296] ? __pfx_bnep_session+0x10/0x10 [ 229.329389][T10296] kthread+0x7a9/0x920 [ 229.333449][T10296] ? __pfx_bnep_session+0x10/0x10 [ 229.338462][T10296] ? __pfx_kthread+0x10/0x10 [ 229.343041][T10296] ? __pfx_kthread+0x10/0x10 [ 229.347628][T10296] ? __pfx_kthread+0x10/0x10 [ 229.352207][T10296] ? __pfx_kthread+0x10/0x10 [ 229.356786][T10296] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.361981][T10296] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.367187][T10296] ? __pfx_kthread+0x10/0x10 [ 229.371793][T10296] ret_from_fork+0x4b/0x80 [ 229.376213][T10296] ? __pfx_kthread+0x10/0x10 [ 229.380812][T10296] ret_from_fork_asm+0x1a/0x30 [ 229.385611][T10296] [ 230.544202][T10296] Shutting down cpus with NMI [ 230.549352][T10296] Kernel Offset: disabled [ 230.553800][T10296] Rebooting in 86400 seconds..