last executing test programs: 2m34.403136567s ago: executing program 2 (id=7627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0xa4, 0xb, 0x0, 0x0) 2m33.879862012s ago: executing program 2 (id=7633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="45b73c4ba500c8cd9c356f55ae03ddfc50ea8ce819349c95697baddb532cbab02e6083cb6cb66647d1213c67143123f1d91cc634521401456517f8b469a8b880581a4eefa61ee779a99c0d68083ecd0554d9269f87fe63a4f0bcb87d946119487745a4c514968d16c2e610ff3069f704f8384a1d2d2edff3df792b491768dfac7c23391af7094c188fa4a3cdde10d611e065b0145a2faf1f20796388e769e3e964fe889c1225cc256dea269b0552b48cef99cfe32e1a0e46cba30ef4a7499787f9d3a9053ee6ad9e0020e57daefbdbac719eeb0f8dcd5191e4eb631c9e9c0cbfa17531eece3bfd0f", 0xe8}, {&(0x7f0000000200)="d89ab2ac8d2d828122bdbcc6aeaf8a2acfa1219901f8f32c9d739fb54209bf6a96b55eb0217a62b6cba7e05a1505e1118b23d7cc4aceddf50350a4a04f240f8e5bb0f1ff75290acd98d76129496d46eb449c3fc60ecc2ad0f390bd78ef8a4ca663daf5f85c0893b9bdc159f139abe071de3ce0d847cd2256f23c9c88c04fadbf9001322091287671b49ea376b1b4ca559ea156b39bf6c1cf83d07855028882e699a3e692e941339b10da1728a5ef12753794ad10bd995aea6738c543", 0xbc}, {&(0x7f00000002c0)="e96c802cf0345b954f3b1b80d98483d987e317217e7b08afb1ed0a4424a39e1c0a5fd88dd7180637e678e47c7ab73e0266f50ab26b3907b03b6056b6df8e168a176f22af058b10d4372612d0e72207659145141f61a6f9747cbd2053faf80e6b2b9e130af0794cfeab051a5b41cff2d4c2a7bf7180041f1276ab90277d04e1db0177a6dbc8632c32309de0b763bc62723358ed4c4368e478e92fa9fa518bbced5721a49abb5cc4f248b36dd9fd2aa0ba84a79f60dd3e1444de5ebe89268d6e1b351fe11adc2831590a6f27d831f23cfc8812bdbbe34ff1", 0xd7}, {&(0x7f00000004c0)="6b04eb48d3f03269d0c4478cb8bdf62197d2bdba1980364f425c66eb039022412ec191d242fc7a7d7562b26496bffa72669b6a3491e3547dce99756779005a63d1a8969b6b93d8b74c0f2576b352cdde1ce937041dc96521c7b839533c4051de8231950a5ce2d04506e1c34b9fb8c5968f06d6ff087913fed80599698a9971494bdef6550c2d019798c9ab5140c957aad82f9ac59c1c60d3e7aa92ea4df503e9ecc7fa42efd85271a29b1ef1a30b210378e1b861ef44f79f14b29b6ad85e20fed9ddc6185f1e4ace0b99d970ea659ba6eb70a90115e6bcf8433e9cb34ff0", 0xde}, {&(0x7f0000000040)="221b06e90b5139054f8158a0ca10863f189e2c6e7fa659f7ad64aa06275d5a14c7285501cb583904bc300c59be43193f954e598fbf35cea996d214b789b087df0fc14807c0e411453bb86f7fbd4ee49a20fa3c", 0x53}, {&(0x7f00000005c0)="b75e4daa8086ecb2360eee5cbae1507456b0ee2b9ddeeab5f807485a4b65c032790d00aa1b3883d59e5671ecbf86036209075aa17b86d7502bf5aad6841cd21965f3169e5da58920fd5cd3da02d6f1e6942bc93af4ffd9d48cca2463792e931119b81644b401f1b761eefcd238e2a77c3860bec39821336ee866667f384456cd5d230ed425a1df6b78ba576fcfec07b31a4e1a3eac3e0f8432cfc000ce7ef1645fee6c40d3e56622bbfae568b76d4184cf0334b8e9b1fbf6aa1795f20edaacb210aa8654a16a1776a1adbc1d80086ff74c35c01091dd36c53d1277", 0xdb}, {&(0x7f00000006c0)="352345864725158542eded1391200a46e6e0da6964f39707ff3d1e60dc3a62028b6783712279cdb45e1b0c6dc1ad6857e9d3bcd23a76dcda915cda0e40e099b66a633111933e1c4920c820fdf3912d3c9829023d558d63d92fa56d71142c0640bd52a4656e46a50ca9187fec867d1881974f8ec8a67b351ca0fb8699c7076be62b6fb42ea131b3f4593da63561bfce0d064b5d28dd8cf806ced0d34b2600f00147c843f09a12ffd97311f019fc70dc1a159cd43ee75974de6776fb7e91577849ff058c20e784c8", 0xc7}], 0x7, &(0x7f00000007c0)="11c5150cfb7f88fc289abe809c3d11fbea95ab05d3cd156c79951f05deb5e4e27211d7e2e62d1d55abc977f7ad8b1aef83661e0cc4ff0e0bffd02ae9effd349e1bd990e4a812032fdf5fb80f7a20e9d95dbd9236f003df24180618428897bb90417ce2246e54c56dd3f37b1a97c4e45a250cee1be8fe43cb6a36e57c0438ec70a13696e2640fa368ee42a097da8d3908b54b4c20ec7166d398106a44ec8ab6847c335c33c624ce98df1eddc5635a8db39fe7c331cc5c4faddc72260222cfd60a75f681e9bc5a8120a3593e109daa52", 0xcf, 0x4840}, 0x5) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2m33.705384067s ago: executing program 2 (id=7635): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x15, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}]}, @end, @noop, @cipso={0x86, 0x11, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m33.562652996s ago: executing program 2 (id=7638): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x17, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0x2}]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m33.384694096s ago: executing program 2 (id=7640): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xb9de}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}}, 0x40) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x40ff, 0x8, 0xbecf}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r8, 0x0, 0x0) 2m32.436718112s ago: executing program 2 (id=7657): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x8000000d, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='pim6reg\x00') r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2e, 0x0, 0x5, 0x46, @local, @local, 0x700, 0x1, 0x6, 0x6}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000700)=""/236, 0xec, 0x0, &(0x7f0000000480)=""/38, 0x26}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r9, 0x20, &(0x7f0000000a40)={&(0x7f0000000980)=""/161, 0xa1, 0x0, &(0x7f0000000b40)=""/218, 0xda}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000009000000a4630800010000000537ff0f0000000018130000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000cad013d53f7fe37a4648f6e52344458f87c454e87bf4350fb280c7a4190875e75e960254ce1a5c7da6f097be60eec9af0fe3fca4598255c4fab1c5dcda33a5e7be9fd4cd64ed91ec34c3f587acda0c0b301bd61358dacf43596cb4e96f81a4407a31444b8b945f06ddcda360d2e3bcfb133254c892dab1802d5d5a7180973881f402c88e9b4fd7fdb87073b96f63920c8b2cfa64b3c25ef2f7893878678249b34de6f60cb71ad15875629baa886948c995f48d9bd73e6f1d763c4c99b0069d5a3b17c7e56d5eae1914f4cb6dbdc7c98f388df4b0b2ed235b4b97c8bcb67abe99c9a18d7190abfcd31e54faccbb83d5ee6a2dde6bcf8ab2e12babb3f781837a9eb7cf1035e8e868d82e800014a61364f6bae93b650fd9298b192f0e0ca1fa193958dab9a531a8fc97734b8a4ba6451929aba404c98e4c0e860b9cb154cd6ff1063daf07b3a47393559c652f1146aa24063ced315cf43cd5812aed983250cf4b589c61194582da78480c2801202219ac3d4bacc1c6ec014a4438ff5dbfb12270bea463ca284dffb47cf178f0b876189aee448f97d5cfe96a456fa7873d6411b0a4f61c4693569eeb7802b688c6da1773bb2ee8fd24182cce93db8913101a76df7d9018dc87f9e58d8cee79e12040a9a61a3724ec2ea614897dc72a1defa3299f1b65ec8d00"/511], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', r8, @fallback=0x2e, r9, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0x8, 0x7fffffff}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r7, r7, r7, r7], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x1070bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000140), 0x0) 2m17.195034724s ago: executing program 32 (id=7657): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x8000000d, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='pim6reg\x00') r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2e, 0x0, 0x5, 0x46, @local, @local, 0x700, 0x1, 0x6, 0x6}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000700)=""/236, 0xec, 0x0, &(0x7f0000000480)=""/38, 0x26}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r9, 0x20, &(0x7f0000000a40)={&(0x7f0000000980)=""/161, 0xa1, 0x0, &(0x7f0000000b40)=""/218, 0xda}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000009000000a4630800010000000537ff0f0000000018130000", @ANYRES32=r7, @ANYBLOB="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"/511], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', r8, @fallback=0x2e, r9, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0x8, 0x7fffffff}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r7, r7, r7, r7], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x1070bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000140), 0x0) 1m56.653707211s ago: executing program 1 (id=8077): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x17, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0x2}]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m56.163729301s ago: executing program 1 (id=8079): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) unshare(0x4020400) accept(0xffffffffffffffff, 0x0, 0x0) 1m56.007052435s ago: executing program 1 (id=8081): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@mcast2, 0x4e24, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x0, 0x438}, {}, {0x2}, 0x70bd2b, 0x0, 0xa}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000080)=0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 1m55.802969931s ago: executing program 1 (id=8084): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x15, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}]}, @end, @noop, @cipso={0x86, 0x11, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m55.599954622s ago: executing program 1 (id=8088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000050400aa1b94d0000054ecf60000000021", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000000000005000100040000000500160022"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m55.40752632s ago: executing program 1 (id=8090): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000b00fffffc70e6e7a3ad08f775508aaa08ffae658fe66a1b0000000c02080002009aab1512320086f1a651739b3bba43d9374c2d4eb03a90998aa70bbf28da1aa985d3d432aa0ba4c7c49f930acda9aa3e28210743cfa3ff08790714756e7d02aecf9bc337772c1f3d05aca96f86da3d40baef583baac60a0db13298793efec6e04bd57be1d74a2f507ffe5bc5480dffd233367c93c97fdf2938a5efc3b19a204eac652463a4c37026e2471d5ab2f6f9c0d89f101433497b8b"], 0x20}, 0x1, 0x0, 0x0, 0x10002834}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x6e6bb7, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58a658c2", @ANYRES16=r7, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000800e000000205000400010000000400050014000900"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x50, r5, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) 1m52.033582669s ago: executing program 0 (id=8115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000004f80)={0x3c, r3, 0x1, 0x20, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x99}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'syz0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5206}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c4}, 0x40000) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000001f80)=""/4108, 0x0, 0x100c, 0x1, 0x80, 0x0, @void, @value}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x80, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000057}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x80}}, 0x0) 1m51.83456195s ago: executing program 0 (id=8118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = socket(0x10, 0x3, 0x400000) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000000200)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7fff, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x28, '\x00', r2, 0x0, r0, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0x9, 0x590, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000014c0)=[r0, r0, r0, r0], &(0x7f0000001500)=[{0x3, 0x2, 0x0, 0x1}, {0x2, 0x5, 0x6, 0xb}, {0x4, 0x4, 0xe, 0x6}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x3, 0x2, 0xa}, {0x5, 0x5, 0xf, 0x7}, {0x2, 0x1, 0x8}, {0x2, 0x5, 0xa, 0xa}, {0x3, 0x2, 0xa, 0x6}, {0x5, 0x3, 0x6, 0x1}], 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000000240)='mm_page_alloc_extfrag\x00', r4, 0x0, 0x88}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x9, 0x9, 0x50, r0, 0xffffff01, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xc, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002000000000000000e00110018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m51.742719599s ago: executing program 0 (id=8120): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000480)="91bb", 0x2) (async) getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xfffffffffffffdd4, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 1m51.623917636s ago: executing program 0 (id=8122): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1a, 0x4, 0x0, 0x37, 0x68, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m51.299800218s ago: executing program 0 (id=8127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m50.890320128s ago: executing program 0 (id=8128): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') unshare(0x6a040000) socket(0x8, 0x1, 0xffffffff) 1m40.379646886s ago: executing program 33 (id=8090): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000b00fffffc70e6e7a3ad08f775508aaa08ffae658fe66a1b0000000c02080002009aab1512320086f1a651739b3bba43d9374c2d4eb03a90998aa70bbf28da1aa985d3d432aa0ba4c7c49f930acda9aa3e28210743cfa3ff08790714756e7d02aecf9bc337772c1f3d05aca96f86da3d40baef583baac60a0db13298793efec6e04bd57be1d74a2f507ffe5bc5480dffd233367c93c97fdf2938a5efc3b19a204eac652463a4c37026e2471d5ab2f6f9c0d89f101433497b8b"], 0x20}, 0x1, 0x0, 0x0, 0x10002834}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x6e6bb7, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58a658c2", @ANYRES16=r7, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000800e000000205000400010000000400050014000900"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x50, r5, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) 1m36.160615984s ago: executing program 34 (id=8128): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') unshare(0x6a040000) socket(0x8, 0x1, 0xffffffff) 1m16.255041799s ago: executing program 5 (id=8532): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x15, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}]}, @end, @noop, @cipso={0x86, 0x11, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 1m16.115578602s ago: executing program 5 (id=8534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000df9400000000000000cde4243bf686afd733d93e62a41160e106f2f2de492b251c488ca757a3d5ca4a147aa3dbb2b43127765d53ff98354b24b26e4bf2ebcd40aecf0ff62cb5664d68e499d9c0edec60024bd4d06b78a011a82c0802000000000000000842c7037290"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x20, r7, 0x809, 0x70bd28, 0x2, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20004044) sendto(r0, &(0x7f0000002300)='u\f', 0x2, 0x24040081, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59dd", 0x15}, {0x0}], 0x2}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m15.960249325s ago: executing program 5 (id=8538): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) 1m15.831586219s ago: executing program 5 (id=8539): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) unshare(0x10000) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x3, 0x8000000000000001}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) epoll_create1(0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) write(r0, &(0x7f0000000500)="e439d04438935152e2be2651735575ca800ff5461a2b905779bed40cc036dca41b5176cb69bff4bfbd43fb9881f505711852b487dde59b520eafefaa17a23dd50754315cc923e0cc42fe7baa477726d38212eac6a07efe9db271db7d6d984a729a8389733a547f5c078cebc4260ac2f615e0e385c7eb957ca1c3d0a7dbf1df7bf0252beaf9d29eefffbf0d77542b97ec0f97c192c3b2d2e5d8d40ba2e9bc374b4fbed0c278ab3c20b41edbffb8ba64838e9a7606cf4a67a95099089bd14405b73c2f74", 0xc3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="03000000000000896628d49bdabb0900"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m15.331894994s ago: executing program 5 (id=8543): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x3f000000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x59, 0xff, 0x4, 0x7, 0x0, 0x8d7651735d51b07}) 1m15.320348818s ago: executing program 5 (id=8544): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='afs_call\x00', r0}, 0x18) unshare(0x62040200) 1m0.050494979s ago: executing program 35 (id=8544): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='afs_call\x00', r0}, 0x18) unshare(0x62040200) 55.123104576s ago: executing program 4 (id=8780): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="e5", 0x1}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000380)="a7", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000008400000002000000fe804100000000009200000000000000f47e58597d8dd1ac1778327540d324e67932c956e530a9414dcff0c12eb11123fd7b6d5a0e79b864133d90d647dc4b9e6e65211d75d02a67c925"], 0x20}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="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"], 0x2ac}}, 0x0) 54.182857619s ago: executing program 4 (id=8787): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (fail_nth: 4) 53.807443223s ago: executing program 4 (id=8790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="45b73c4ba500c8cd9c356f55ae03ddfc50ea8ce819349c95697baddb532cbab02e6083cb6cb66647d1213c67143123f1d91cc634521401456517f8b469a8b880581a4eefa61ee779a99c0d68083ecd0554d9269f87fe63a4f0bcb87d946119487745a4c514968d16c2e610ff3069f704f8384a1d2d2edff3df792b491768dfac7c23391af7094c188fa4a3cdde10d611e065b0145a2faf1f20796388e769e3e964fe889c1225cc256dea269b0552b48cef99cfe32e1a0e46cba30ef4a7499787f9d3a9053ee6ad9e0020e57daefbdbac719eeb0f8dcd5191e4eb631c9e9c0cbfa17531eece3bfd0f", 0xe8}, {&(0x7f0000000200)="d89ab2ac8d2d828122bdbcc6aeaf8a2acfa1219901f8f32c9d739fb54209bf6a96b55eb0217a62b6cba7e05a1505e1118b23d7cc4aceddf50350a4a04f240f8e5bb0f1ff75290acd98d76129496d46eb449c3fc60ecc2ad0f390bd78ef8a4ca663daf5f85c0893b9bdc159f139abe071de3ce0d847cd2256f23c9c88c04fadbf9001322091287671b49ea376b1b4ca559ea156b39bf6c1cf83d07855028882e699a3e692e941339b10da1728a5ef12753794ad10bd995aea6738c543", 0xbc}, {&(0x7f00000002c0)="e96c802cf0345b954f3b1b80d98483d987e317217e7b08afb1ed0a4424a39e1c0a5fd88dd7180637e678e47c7ab73e0266f50ab26b3907b03b6056b6df8e168a176f22af058b10d4372612d0e72207659145141f61a6f9747cbd2053faf80e6b2b9e130af0794cfeab051a5b41cff2d4c2a7bf7180041f1276ab90277d04e1db0177a6dbc8632c32309de0b763bc62723358ed4c4368e478e92fa9fa518bbced5721a49abb5cc4f248b36dd9fd2aa0ba84a79f60dd3e1444de5ebe89268d6e1b351fe11adc2831590a6f27d831f23cfc8812bdbbe34ff1", 0xd7}, {&(0x7f00000004c0)="6b04eb48d3f03269d0c4478cb8bdf62197d2bdba1980364f425c66eb039022412ec191d242fc7a7d7562b26496bffa72669b6a3491e3547dce99756779005a63d1a8969b6b93d8b74c0f2576b352cdde1ce937041dc96521c7b839533c4051de8231950a5ce2d04506e1c34b9fb8c5968f06d6ff087913fed80599698a9971494bdef6550c2d019798c9ab5140c957aad82f9ac59c1c60d3e7aa92ea4df503e9ecc7fa42efd85271a29b1ef1a30b210378e1b861ef44f79f14b29b6ad85e20fed9ddc6185f1e4ace0b99d970ea659ba6eb70a90115e6bcf8433e9cb34ff0", 0xde}, {&(0x7f0000000040)="221b06e90b5139054f8158a0ca10863f189e2c6e7fa659f7ad64aa06275d5a14c7285501cb583904bc300c59be43193f954e598fbf35cea996d214b789b087df0fc14807c0e411453bb86f7fbd4ee49a20fa3c", 0x53}, {&(0x7f00000005c0)="b75e4daa8086ecb2360eee5cbae1507456b0ee2b9ddeeab5f807485a4b65c032790d00aa1b3883d59e5671ecbf86036209075aa17b86d7502bf5aad6841cd21965f3169e5da58920fd5cd3da02d6f1e6942bc93af4ffd9d48cca2463792e931119b81644b401f1b761eefcd238e2a77c3860bec39821336ee866667f384456cd5d230ed425a1df6b78ba576fcfec07b31a4e1a3eac3e0f8432cfc000ce7ef1645fee6c40d3", 0xa5}, {&(0x7f00000006c0)="352345864725158542eded1391200a46e6e0da6964f39707ff3d1e60dc3a62028b6783712279cdb45e1b0c6dc1ad6857e9d3bcd23a76dcda915cda0e40e099b66a633111933e1c4920c820fdf3912d3c9829023d558d63d92fa56d71142c0640bd52a4656e46a50ca9187fec867d1881974f8ec8a67b351ca0fb8699c7076be62b6fb42ea131b3f4593da63561bfce0d064b5d28dd8cf806ced0d34b2600f00147c843f09a12ffd97311f019fc70dc1a159cd43ee75974de6776fb7e91577849ff058c20e784c8", 0xc7}], 0x7, &(0x7f00000007c0)="11c5150cfb7f88fc289abe809c3d11fbea95ab05d3cd156c79951f05deb5e4e27211d7e2e62d1d55abc977f7ad8b1aef83661e0cc4ff0e0bffd02ae9effd349e1bd990e4a812032fdf5fb80f7a20e9d95dbd9236f003df24180618428897bb90417ce2246e54c56dd3f37b1a97c4e45a250cee1be8fe43cb6a36e57c0438ec70a13696e2640fa368ee42a097da8d3908b54b4c20ec7166d398106a44ec8ab6847c335c33c624ce98df1eddc5635a8db39fe7c331cc5c4faddc72260222cfd60a75f681e9bc5a8120a3593e109daa52", 0xcf, 0x4840}, 0x5) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 53.548989203s ago: executing program 4 (id=8792): socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}, @alu={0x4, 0x0, 0x9, 0x4, 0x3, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x97, &(0x7f00000006c0)=""/151, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 53.305751336s ago: executing program 4 (id=8796): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x60}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x7, 0x0, 0x70bd28, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x38}}, 0x0) 53.137360616s ago: executing program 4 (id=8798): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'netpci0\x00', 0x8000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) 38.091536732s ago: executing program 36 (id=8798): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'netpci0\x00', 0x8000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) 2.634327029s ago: executing program 7 (id=9474): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x20000000) 2.498038125s ago: executing program 7 (id=9478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0xf5ffffff, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}}, 0x0) 2.247532492s ago: executing program 7 (id=9482): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) 2.129502952s ago: executing program 7 (id=9484): unshare(0x22000400) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x6e, 0x40000) recvfrom$unix(r0, &(0x7f0000000440)=""/174, 0xae, 0x10000, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0104000000000000000002000000200004801c0001800900010068617368000000000c00028008000740000400010900010073797a3000000000090002"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r4, 0x496}, &(0x7f0000000080)=0x33) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r8, 0xa72704fd2dfb5147, 0x4, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}}, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r6, &(0x7f0000000140), 0xfffffdef) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={0x3, @bcast}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f0000000140)) listen(r10, 0xfff) accept$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000073c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x81, 0x4e26, 0xac16, 0x0, 0xc0, 0xe0, 0x3a, 0x0, r11}, {0x31b0a80000000000, 0x2, 0xd961, 0x6, 0x7, 0x8, 0x407, 0xffffffffffff8001}, {0x4, 0x6, 0xfffffffffffffff9, 0x5}, 0x5, 0x6e6bbf, 0x1, 0x1, 0x34cafd5c6e8e44f4, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x3, 0x1, 0xe, 0x3, 0x8001, 0x40}}, 0xe8) 2.043422271s ago: executing program 8 (id=9487): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1d, 0x4, 0x0, 0x37, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0x14, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.771931794s ago: executing program 8 (id=9490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) 1.71876839s ago: executing program 9 (id=9492): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x44}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.553564126s ago: executing program 8 (id=9495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000580)=""/84, 0x54}, {0x0}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f060100180004000000000018000000fe4bc40d000500000000060000000500ff030000000000305f615f2e"], 0x0, 0x39, 0x0, 0x1, 0xfffffff8, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="a132", 0x2}, {&(0x7f0000000380)="5724977655e49698d25371083d0dcb9c56c896d8474e26cda15f6a72d5", 0x1d}, {&(0x7f0000000a40)="1b01ebafe19fa749fda142812a69b97b91fdf3a17395186045165bde730e5e905076f070398880aea8e498152136d8f52060731693a23978608609f0a9951a060e28f60c0938409359d2eefe448c4a7b7a6f3d60de084d9193e39980f9af3488af69c0c90c885ced8bc387d4041116ce604106044bb023924afccfd3facb9dbf80d82872e276663753", 0x89}], 0x3}}], 0x1, 0x1) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)='o', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1234", 0x2}], 0x1}}], 0x2, 0x4c190) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0xce, 0x1, 0x0}, &(0x7f0000000540)=0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socketpair(0x2, 0x2, 0x9, &(0x7f00000000c0)) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000b9e4d81a0e4785000000000000000000", @ANYRES16=r3, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="180050800400050008000880040002000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 1.487751388s ago: executing program 9 (id=9497): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280600000000000001000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20012020) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x53) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @qdisc_kind_options=@q_pfifo_fast={0xfffffffffffffe0c}]}, 0x3c}}, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x85, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x2, 0xae, 0xf, 0x80, 0x8, 0x7}, &(0x7f00000002c0)=0x9c) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES32], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1.170588752s ago: executing program 3 (id=9500): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1d, 0x4, 0x0, 0x37, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0x14, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.169739324s ago: executing program 9 (id=9502): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x20000000) 991.833843ms ago: executing program 9 (id=9503): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1c, 0x4, 0x0, 0x37, 0x70, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 989.890873ms ago: executing program 3 (id=9504): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x890b, 0x0) 973.78021ms ago: executing program 7 (id=9505): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830338843"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x18, 0x4, 0x0, 0x37, 0x60, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x22, 0x3, [{0x2, 0x7, "804d275e5e"}, {0x7, 0x6, "02bb43f8"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @noop, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 918.112292ms ago: executing program 6 (id=9506): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x0) 867.863818ms ago: executing program 9 (id=9507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x24, 0x0, 0x10}, 0x0) 818.389609ms ago: executing program 6 (id=9508): socket(0x10, 0x803, 0x5479) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x401, 0x7, 0x3, 0xfffffffc}, {0x5, 0x9, 0xf9, 0x8}, {0xcd, 0x5, 0x7, 0x1}, {0x7, 0x6, 0x2e, 0x6}]}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x81, 0x9, 0x0, 0x8, 0xee9c]}, &(0x7f0000000100)=0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 785.237938ms ago: executing program 3 (id=9509): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f748303388"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1d, 0x4, 0x0, 0x37, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @cipso={0x86, 0x13, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x3, 'Q'}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}]}]}}}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 727.689265ms ago: executing program 7 (id=9510): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lli}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_REMOVE(r3, 0x0, 0x4000000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@newchain={0x64, 0x64, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x10, 0xfff1}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x3}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x2}]}}, @TCA_CHAIN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x7, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e23, 0x4e22, 0xfac, 0x0, @gue={{0x2, 0x1, 0x2, 0xe, 0x0, @val=0x80}, "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"}}}}, 0xfce) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r9 = epoll_create1(0x80000) epoll_wait(r9, &(0x7f0000000200), 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 657.855163ms ago: executing program 3 (id=9511): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d58"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1b, 0x4, 0x0, 0x37, 0x6c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x17, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0x2}]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 605.398939ms ago: executing program 9 (id=9512): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="0f", 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'wg2\x00', {0x8}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xff], 0x6, 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a66f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/199, 0xc7}], 0x1}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="f850c25f", 0x4}], 0x1) shutdown(r8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016000100000a000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000"/163], 0x34c}}, 0x44) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"623b5806dc725f00007559c38d00", "951b0c4d673e28b18bcf08ed0b7e3a12"}}}}}}}, 0x0) 519.778702ms ago: executing program 8 (id=9513): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa00000000000071102d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000000000001400000008000f00fc00000018"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000ffdbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a801800018014000300000001000a00050081000900ff7f01002a118358d82b2e916aebf257b46a9edcedee7de3e00133e048f705af10503916ec9f5ef524b0a92eb5e816558bfd50407abfbe66216f20eb686f624575cf18c52d59934c9ce7ec48614b"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 519.330785ms ago: executing program 6 (id=9514): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1d, 0x4, 0x0, 0x37, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0x14, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 410.473744ms ago: executing program 3 (id=9515): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) 351.32953ms ago: executing program 6 (id=9516): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1f, 0x4, 0x0, 0x37, 0x7c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0x13, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x4, '\bY'}]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 279.816748ms ago: executing program 8 (id=9517): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1c, 0x4, 0x0, 0x37, 0x70, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@loopback, 0x5}, {@remote, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 275.798027ms ago: executing program 3 (id=9518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="200000ed21aaedd7499c8c81e7c461a890596cdccfa4310008002abd7000", @ANYRES32=0x0, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x48840}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r5) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x44040014}, 0x4000000) 140.274804ms ago: executing program 6 (id=9519): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x1d, 0x2, 0x6) (async) socket(0x2a, 0x2, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket(0x18, 0x80804, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="07effffbffffff00000000001600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) unshare(0x20000400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000047733757000000000000000085000000ba00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000), 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="eead6730a0d049c9fe8b2c9769ba45cf14000000", @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) 95.400371ms ago: executing program 8 (id=9520): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f748303388"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x10, 0x4, 0x0, 0x37, 0x40, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0xf, 0x3, [{0x7, 0x7, "02bb43f806"}, {0x1, 0x2}]}, @end, @noop, @noop, @cipso={0x86, 0x14, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x4, "51bb"}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x4, 0x37, 0x3, 0x8}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast2, 0x2, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 6 (id=9521): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f748303388"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x1d, 0x4, 0x0, 0x37, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x8, "804d275e5e31"}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @end, @noop, @cipso={0x86, 0x13, 0x1, [{0x34399f4e3c5241bc, 0x5, "ec9d38"}, {0x1, 0x3, 'Q'}, {0x2, 0x5, "0859ef"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x8, [{@private=0xa010102, 0x8}, {@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x5}]}]}}}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): rm+0x10/0x10 [ 589.104755][T24998] ? __pfx___might_resched+0x10/0x10 [ 589.104782][T24998] ? rcu_read_lock_any_held+0xb3/0x120 [ 589.104805][T24998] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 589.104842][T24998] ipv6_setsockopt+0x59/0x170 [ 589.104869][T24998] rawv6_setsockopt+0x23b/0x5b0 [ 589.104896][T24998] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 589.104920][T24998] ? aa_sock_opt_perm+0x74/0x110 [ 589.104947][T24998] ? sock_common_setsockopt+0x36/0xc0 [ 589.104973][T24998] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 589.105003][T24998] do_sock_setsockopt+0x25a/0x3e0 [ 589.105037][T24998] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 589.105065][T24998] ? __fget_files+0x2a/0x420 [ 589.105100][T24998] ? __fget_files+0x3a0/0x420 [ 589.105129][T24998] ? __fget_files+0x2a/0x420 [ 589.105168][T24998] __x64_sys_setsockopt+0x18b/0x220 [ 589.105207][T24998] do_syscall_64+0xf6/0x210 [ 589.105235][T24998] ? clear_bhb_loop+0x60/0xb0 [ 589.105263][T24998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.105284][T24998] RIP: 0033:0x7f7ad5b8e969 [ 589.105304][T24998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.105331][T24998] RSP: 002b:00007f7ad6a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.105356][T24998] RAX: ffffffffffffffda RBX: 00007f7ad5db5fa0 RCX: 00007f7ad5b8e969 [ 589.105372][T24998] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000006 [ 589.105386][T24998] RBP: 00007f7ad6a05090 R08: 0000000000000004 R09: 0000000000000000 [ 589.105400][T24998] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001 [ 589.105414][T24998] R13: 0000000000000000 R14: 00007f7ad5db5fa0 R15: 00007ffc75b17668 [ 589.105450][T24998] [ 589.466721][T24994] syzkaller1: entered promiscuous mode [ 589.472678][T24994] syzkaller1: entered allmulticast mode [ 589.513428][T24939] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 589.573448][T24939] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 589.586448][T24939] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 589.601611][T24939] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.748733][T25004] : entered promiscuous mode [ 589.828834][T25004] hsr0 speed is unknown, defaulting to 1000 [ 590.032951][T24939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.150905][T24939] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.177857][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.185124][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.203786][T25013] bond0: option mode: unable to set because the bond device has slaves [ 590.226298][T24326] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.233619][T24326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.358191][T25002] FAULT_INJECTION: forcing a failure. [ 590.358191][T25002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.380479][T25002] CPU: 0 UID: 0 PID: 25002 Comm: syz.4.8326 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 590.380515][T25002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.380529][T25002] Call Trace: [ 590.380539][T25002] [ 590.380549][T25002] dump_stack_lvl+0x189/0x250 [ 590.380585][T25002] ? __lock_acquire+0xaac/0xd20 [ 590.380621][T25002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.380654][T25002] ? __pfx__printk+0x10/0x10 [ 590.380677][T25002] ? __might_fault+0xb0/0x130 [ 590.380721][T25002] should_fail_ex+0x414/0x560 [ 590.380751][T25002] set_fd_set+0x3a/0xa0 [ 590.380778][T25002] core_sys_select+0x731/0x990 [ 590.380820][T25002] ? __pfx_core_sys_select+0x10/0x10 [ 590.380877][T25002] ? __pfx_set_user_sigmask+0x10/0x10 [ 590.380913][T25002] __se_sys_pselect6+0x27a/0x300 [ 590.380948][T25002] ? __pfx___se_sys_pselect6+0x10/0x10 [ 590.380986][T25002] ? __x64_sys_pselect6+0x21/0xf0 [ 590.381018][T25002] do_syscall_64+0xf6/0x210 [ 590.381046][T25002] ? clear_bhb_loop+0x60/0xb0 [ 590.381073][T25002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.381096][T25002] RIP: 0033:0x7f7ad5b8e969 [ 590.381116][T25002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.381143][T25002] RSP: 002b:00007f7ad69e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 590.381166][T25002] RAX: ffffffffffffffda RBX: 00007f7ad5db6080 RCX: 00007f7ad5b8e969 [ 590.381186][T25002] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 590.381200][T25002] RBP: 00007f7ad69e4090 R08: 0000000000000000 R09: 0000000000000000 [ 590.381214][T25002] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 590.381228][T25002] R13: 0000000000000001 R14: 00007f7ad5db6080 R15: 00007ffc75b17668 [ 590.381262][T25002] [ 590.582907][T23984] Bluetooth: hci6: command tx timeout [ 590.658531][T25023] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8334'. [ 590.718979][ T55] Bluetooth: hci7: command tx timeout [ 590.867301][T25029] hsr0 speed is unknown, defaulting to 1000 [ 590.903385][T25034] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8338'. [ 591.031114][T24939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.295561][T25043] : entered promiscuous mode [ 591.551805][T25055] hsr0 speed is unknown, defaulting to 1000 [ 591.946475][T25070] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8346'. [ 592.122863][T24939] veth0_vlan: entered promiscuous mode [ 592.192610][T24939] veth1_vlan: entered promiscuous mode [ 592.342854][T24939] veth0_macvtap: entered promiscuous mode [ 592.410675][T24939] veth1_macvtap: entered promiscuous mode [ 592.508919][T25087] hsr0 speed is unknown, defaulting to 1000 [ 592.532799][T24939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.587354][T24939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.623800][T25091] hsr0 speed is unknown, defaulting to 1000 [ 592.684721][T24939] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.705256][T24939] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.715687][T24939] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.741705][T24939] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.798169][ T55] Bluetooth: hci7: command tx timeout [ 593.081239][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.139934][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.217377][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.256442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.318729][T25100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8355'. [ 593.484704][T25100] team0: Port device team_slave_0 removed [ 593.535444][T25104] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8358'. [ 593.558758][T25106] veth0: entered promiscuous mode [ 593.579142][T25104] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.587029][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.642385][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8354'. [ 593.731277][T25109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8359'. [ 593.779866][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8359'. [ 593.824203][T25117] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 593.857047][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8361'. [ 593.885084][T25122] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8361'. [ 594.149839][T25132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8364'. [ 594.433175][T25148] bridge2: entered promiscuous mode [ 594.464279][T25148] bridge2: entered allmulticast mode [ 594.535098][T25148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8372'. [ 594.570855][T25148] syzkaller1: entered promiscuous mode [ 594.576510][T25148] syzkaller1: entered allmulticast mode [ 594.625392][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8374'. [ 594.625537][T25160] netlink: 'syz.7.8375': attribute type 1 has an invalid length. [ 594.644873][T25160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8375'. [ 594.878429][ T55] Bluetooth: hci7: command tx timeout [ 595.014346][T25178] netlink: 'syz.6.8381': attribute type 29 has an invalid length. [ 595.022478][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8381'. [ 595.366582][T25194] hsr0 speed is unknown, defaulting to 1000 [ 596.528398][T25243] gretap0: entered promiscuous mode [ 597.088560][T25266] netlink: 'syz.7.8416': attribute type 1 has an invalid length. [ 597.695186][T25279] netlink: 'syz.3.8422': attribute type 72 has an invalid length. [ 598.296114][T25303] FAULT_INJECTION: forcing a failure. [ 598.296114][T25303] name failslab, interval 1, probability 0, space 0, times 0 [ 598.337057][T25303] CPU: 0 UID: 0 PID: 25303 Comm: syz.7.8434 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 598.337093][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.337106][T25303] Call Trace: [ 598.337116][T25303] [ 598.337126][T25303] dump_stack_lvl+0x189/0x250 [ 598.337169][T25303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.337202][T25303] ? __pfx__printk+0x10/0x10 [ 598.337222][T25303] ? __lock_acquire+0xaac/0xd20 [ 598.337272][T25303] should_fail_ex+0x414/0x560 [ 598.337303][T25303] should_failslab+0xa8/0x100 [ 598.337336][T25303] kmem_cache_alloc_noprof+0x73/0x3c0 [ 598.337364][T25303] ? skb_clone+0x212/0x3a0 [ 598.337391][T25303] skb_clone+0x212/0x3a0 [ 598.337416][T25303] __netlink_deliver_tap+0x404/0x850 [ 598.337463][T25303] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.337497][T25303] netlink_deliver_tap+0x19c/0x1b0 [ 598.337530][T25303] netlink_sendskb+0x68/0x140 [ 598.337561][T25303] netlink_rcv_skb+0x28c/0x470 [ 598.337589][T25303] ? __lock_acquire+0xaac/0xd20 [ 598.337621][T25303] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.337647][T25303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.337698][T25303] ? down_read+0x1ad/0x2e0 [ 598.337738][T25303] genl_rcv+0x28/0x40 [ 598.337759][T25303] netlink_unicast+0x758/0x8d0 [ 598.337800][T25303] netlink_sendmsg+0x805/0xb30 [ 598.337843][T25303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.337879][T25303] ? aa_sock_msg_perm+0x94/0x160 [ 598.337910][T25303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.337936][T25303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.337968][T25303] __sock_sendmsg+0x21c/0x270 [ 598.337996][T25303] ____sys_sendmsg+0x505/0x830 [ 598.338035][T25303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.338078][T25303] ? import_iovec+0x74/0xa0 [ 598.338115][T25303] ___sys_sendmsg+0x21f/0x2a0 [ 598.338151][T25303] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.338227][T25303] ? __fget_files+0x2a/0x420 [ 598.338257][T25303] ? __fget_files+0x3a0/0x420 [ 598.338301][T25303] __x64_sys_sendmsg+0x19b/0x260 [ 598.338338][T25303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.338391][T25303] ? do_syscall_64+0xba/0x210 [ 598.338423][T25303] do_syscall_64+0xf6/0x210 [ 598.338450][T25303] ? clear_bhb_loop+0x60/0xb0 [ 598.338479][T25303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.338500][T25303] RIP: 0033:0x7f0e1718e969 [ 598.338518][T25303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.338535][T25303] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.338555][T25303] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 598.338569][T25303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 598.338581][T25303] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 598.338592][T25303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.338602][T25303] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 598.338630][T25303] [ 598.849015][T25318] FAULT_INJECTION: forcing a failure. [ 598.849015][T25318] name failslab, interval 1, probability 0, space 0, times 0 [ 598.861837][T25318] CPU: 0 UID: 0 PID: 25318 Comm: syz.7.8439 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 598.861869][T25318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.861883][T25318] Call Trace: [ 598.861893][T25318] [ 598.861903][T25318] dump_stack_lvl+0x189/0x250 [ 598.861940][T25318] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.861967][T25318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.862000][T25318] ? __pfx__printk+0x10/0x10 [ 598.862038][T25318] should_fail_ex+0x414/0x560 [ 598.862069][T25318] should_failslab+0xa8/0x100 [ 598.862104][T25318] kmem_cache_alloc_noprof+0x73/0x3c0 [ 598.862132][T25318] ? skb_clone+0x212/0x3a0 [ 598.862158][T25318] skb_clone+0x212/0x3a0 [ 598.862183][T25318] __netlink_deliver_tap+0x404/0x850 [ 598.862229][T25318] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.862263][T25318] netlink_deliver_tap+0x19c/0x1b0 [ 598.862296][T25318] netlink_dump+0x8e4/0xe20 [ 598.862340][T25318] ? __pfx_netlink_dump+0x10/0x10 [ 598.862385][T25318] ? genl_start+0x499/0x6c0 [ 598.862417][T25318] __netlink_dump_start+0x5cb/0x7e0 [ 598.862457][T25318] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 598.862497][T25318] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 598.862528][T25318] ? rcu_is_watching+0x15/0xb0 [ 598.862549][T25318] ? __pfx_genl_start+0x10/0x10 [ 598.862569][T25318] ? __pfx_genl_dumpit+0x10/0x10 [ 598.862589][T25318] ? __pfx_genl_done+0x10/0x10 [ 598.862617][T25318] ? bpf_lsm_capable+0x9/0x20 [ 598.862649][T25318] ? security_capable+0x7e/0x2e0 [ 598.862682][T25318] genl_rcv_msg+0x5da/0x790 [ 598.862714][T25318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.862735][T25318] ? ref_tracker_free+0x63a/0x7d0 [ 598.862759][T25318] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 598.862797][T25318] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.862836][T25318] netlink_rcv_skb+0x205/0x470 [ 598.862865][T25318] ? __lock_acquire+0xaac/0xd20 [ 598.862898][T25318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.862924][T25318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.862976][T25318] ? down_read+0x1ad/0x2e0 [ 598.863007][T25318] genl_rcv+0x28/0x40 [ 598.863028][T25318] netlink_unicast+0x758/0x8d0 [ 598.863069][T25318] netlink_sendmsg+0x805/0xb30 [ 598.863112][T25318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.863148][T25318] ? aa_sock_msg_perm+0x94/0x160 [ 598.863177][T25318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.863203][T25318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.863236][T25318] __sock_sendmsg+0x21c/0x270 [ 598.863265][T25318] ____sys_sendmsg+0x505/0x830 [ 598.863305][T25318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.863350][T25318] ? import_iovec+0x74/0xa0 [ 598.863387][T25318] ___sys_sendmsg+0x21f/0x2a0 [ 598.863423][T25318] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.863506][T25318] ? __fget_files+0x2a/0x420 [ 598.863536][T25318] ? __fget_files+0x3a0/0x420 [ 598.863580][T25318] __x64_sys_sendmsg+0x19b/0x260 [ 598.863616][T25318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.863670][T25318] ? do_syscall_64+0xba/0x210 [ 598.863701][T25318] do_syscall_64+0xf6/0x210 [ 598.863729][T25318] ? clear_bhb_loop+0x60/0xb0 [ 598.863757][T25318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.863780][T25318] RIP: 0033:0x7f0e1718e969 [ 598.863800][T25318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.863821][T25318] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.863844][T25318] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 598.863861][T25318] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 598.863875][T25318] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 598.863889][T25318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.863902][T25318] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 598.863938][T25318] [ 599.387593][T25326] __nla_validate_parse: 7 callbacks suppressed [ 599.387615][T25326] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.8443'. [ 599.472378][T25329] Bluetooth: MGMT ver 1.23 [ 599.568476][T25331] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8445'. [ 599.968145][T25347] hsr0 speed is unknown, defaulting to 1000 [ 599.991544][T25350] netlink: 'syz.5.8455': attribute type 72 has an invalid length. [ 600.253929][T25365] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8460'. [ 600.496324][T25376] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8465'. [ 600.624189][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8469'. [ 600.650283][T25390] FAULT_INJECTION: forcing a failure. [ 600.650283][T25390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.670606][T25386] netlink: 292 bytes leftover after parsing attributes in process `syz.6.8469'. [ 600.698257][T25390] CPU: 0 UID: 0 PID: 25390 Comm: syz.3.8470 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 600.698301][T25390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.698314][T25390] Call Trace: [ 600.698324][T25390] [ 600.698334][T25390] dump_stack_lvl+0x189/0x250 [ 600.698375][T25390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.698408][T25390] ? __pfx__printk+0x10/0x10 [ 600.698446][T25390] should_fail_ex+0x414/0x560 [ 600.698477][T25390] _copy_to_user+0x31/0xb0 [ 600.698513][T25390] simple_read_from_buffer+0xe1/0x170 [ 600.698548][T25390] proc_fail_nth_read+0x1df/0x250 [ 600.698585][T25390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.698622][T25390] ? rw_verify_area+0x258/0x650 [ 600.698647][T25390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.698682][T25390] vfs_read+0x1fd/0x980 [ 600.698714][T25390] ? __pfx___mutex_lock+0x10/0x10 [ 600.698741][T25390] ? __pfx_vfs_read+0x10/0x10 [ 600.698769][T25390] ? __fget_files+0x2a/0x420 [ 600.698804][T25390] ? __fget_files+0x3a0/0x420 [ 600.698832][T25390] ? __fget_files+0x2a/0x420 [ 600.698881][T25390] ksys_read+0x145/0x250 [ 600.698911][T25390] ? __pfx_ksys_read+0x10/0x10 [ 600.698941][T25390] ? do_syscall_64+0xba/0x210 [ 600.698972][T25390] do_syscall_64+0xf6/0x210 [ 600.698998][T25390] ? clear_bhb_loop+0x60/0xb0 [ 600.699025][T25390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.699046][T25390] RIP: 0033:0x7fcbe098d37c [ 600.699067][T25390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 600.699087][T25390] RSP: 002b:00007fcbe17ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 600.699111][T25390] RAX: ffffffffffffffda RBX: 00007fcbe0bb5fa0 RCX: 00007fcbe098d37c [ 600.699127][T25390] RDX: 000000000000000f RSI: 00007fcbe17ea0a0 RDI: 0000000000000004 [ 600.699141][T25390] RBP: 00007fcbe17ea090 R08: 0000000000000000 R09: 0000000000000000 [ 600.699154][T25390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.699167][T25390] R13: 0000000000000000 R14: 00007fcbe0bb5fa0 R15: 00007ffc2aa447c8 [ 600.699202][T25390] [ 601.003700][T25386] pimreg3: entered allmulticast mode [ 601.067260][T25394] SET target dimension over the limit! [ 601.105721][T25394] netlink: 'syz.3.8472': attribute type 23 has an invalid length. [ 601.413647][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8472'. [ 601.467861][T25409] hsr0 speed is unknown, defaulting to 1000 [ 601.529776][T25413] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8480'. [ 602.422794][T25441] hsr0 speed is unknown, defaulting to 1000 [ 602.511553][T25444] FAULT_INJECTION: forcing a failure. [ 602.511553][T25444] name failslab, interval 1, probability 0, space 0, times 0 [ 602.578193][T25444] CPU: 0 UID: 0 PID: 25444 Comm: syz.3.8495 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 602.578227][T25444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 602.578242][T25444] Call Trace: [ 602.578251][T25444] [ 602.578261][T25444] dump_stack_lvl+0x189/0x250 [ 602.578303][T25444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.578345][T25444] ? __pfx__printk+0x10/0x10 [ 602.578371][T25444] ? __pfx___might_resched+0x10/0x10 [ 602.578393][T25444] ? fs_reclaim_acquire+0x7d/0x100 [ 602.578435][T25444] should_fail_ex+0x414/0x560 [ 602.578464][T25444] should_failslab+0xa8/0x100 [ 602.578496][T25444] __kmalloc_noprof+0xcb/0x4f0 [ 602.578525][T25444] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 602.578558][T25444] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 602.578591][T25444] genl_family_rcv_msg_doit+0xb8/0x300 [ 602.578623][T25444] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.578650][T25444] ? rcu_is_watching+0x15/0xb0 [ 602.578674][T25444] ? apparmor_capable+0x137/0x1b0 [ 602.578709][T25444] ? bpf_lsm_capable+0x9/0x20 [ 602.578742][T25444] ? security_capable+0x7e/0x2e0 [ 602.578775][T25444] genl_rcv_msg+0x60e/0x790 [ 602.578806][T25444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.578827][T25444] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 602.578848][T25444] ? __pfx_nl80211_start_ap+0x10/0x10 [ 602.578871][T25444] ? __pfx_nl80211_post_doit+0x10/0x10 [ 602.578912][T25444] netlink_rcv_skb+0x205/0x470 [ 602.578940][T25444] ? __lock_acquire+0xaac/0xd20 [ 602.578972][T25444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.578997][T25444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.579047][T25444] ? down_read+0x1ad/0x2e0 [ 602.579079][T25444] genl_rcv+0x28/0x40 [ 602.579100][T25444] netlink_unicast+0x758/0x8d0 [ 602.579141][T25444] netlink_sendmsg+0x805/0xb30 [ 602.579184][T25444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.579219][T25444] ? aa_sock_msg_perm+0x94/0x160 [ 602.579247][T25444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.579273][T25444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.579307][T25444] __sock_sendmsg+0x21c/0x270 [ 602.579345][T25444] ____sys_sendmsg+0x505/0x830 [ 602.579384][T25444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.579427][T25444] ? import_iovec+0x74/0xa0 [ 602.579464][T25444] ___sys_sendmsg+0x21f/0x2a0 [ 602.579500][T25444] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.579575][T25444] ? __fget_files+0x2a/0x420 [ 602.579604][T25444] ? __fget_files+0x3a0/0x420 [ 602.579647][T25444] __x64_sys_sendmsg+0x19b/0x260 [ 602.579683][T25444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.579735][T25444] ? do_syscall_64+0xba/0x210 [ 602.579766][T25444] do_syscall_64+0xf6/0x210 [ 602.579792][T25444] ? clear_bhb_loop+0x60/0xb0 [ 602.579820][T25444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.579841][T25444] RIP: 0033:0x7fcbe098e969 [ 602.579862][T25444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.579880][T25444] RSP: 002b:00007fcbe17ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.579904][T25444] RAX: ffffffffffffffda RBX: 00007fcbe0bb5fa0 RCX: 00007fcbe098e969 [ 602.579920][T25444] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 602.579935][T25444] RBP: 00007fcbe17ea090 R08: 0000000000000000 R09: 0000000000000000 [ 602.579947][T25444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.579959][T25444] R13: 0000000000000000 R14: 00007fcbe0bb5fa0 R15: 00007ffc2aa447c8 [ 602.579988][T25444] [ 603.107176][T25456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.110065][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8497'. [ 603.233459][T25456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8497'. [ 603.306372][T25456] netlink: 'syz.6.8497': attribute type 6 has an invalid length. [ 603.359538][T25458] 0·: renamed from hsr_slave_1 (while UP) [ 603.395240][T25458] 0·: entered allmulticast mode [ 603.401480][T25458] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 604.067419][T25485] netlink: 'syz.7.8511': attribute type 11 has an invalid length. [ 604.304402][T25493] bridge1: entered promiscuous mode [ 604.310285][T25493] bridge1: entered allmulticast mode [ 604.355748][T25493] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 604.416391][T25493] syzkaller1: entered promiscuous mode [ 604.442189][T25493] syzkaller1: entered allmulticast mode [ 604.623527][T25503] __nla_validate_parse: 6 callbacks suppressed [ 604.623548][T25503] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8520'. [ 604.818579][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8522'. [ 604.923465][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.932607][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.940423][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.948356][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.958441][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.965786][T25517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.997493][T25510] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.005156][T25510] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.129071][T25510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.149636][T25510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.249017][T25510] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.258037][T25510] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.267006][T25510] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.276543][T25510] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.635505][T25528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8529'. [ 606.096437][T25555] FAULT_INJECTION: forcing a failure. [ 606.096437][T25555] name failslab, interval 1, probability 0, space 0, times 0 [ 606.150118][T25555] CPU: 1 UID: 0 PID: 25555 Comm: syz.7.8536 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 606.150152][T25555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.150167][T25555] Call Trace: [ 606.150176][T25555] [ 606.150186][T25555] dump_stack_lvl+0x189/0x250 [ 606.150227][T25555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.150259][T25555] ? __pfx__printk+0x10/0x10 [ 606.150288][T25555] ? __pfx___might_resched+0x10/0x10 [ 606.150309][T25555] ? fs_reclaim_acquire+0x7d/0x100 [ 606.150350][T25555] should_fail_ex+0x414/0x560 [ 606.150384][T25555] should_failslab+0xa8/0x100 [ 606.150416][T25555] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 606.150446][T25555] ? __alloc_skb+0x112/0x2d0 [ 606.150480][T25555] __alloc_skb+0x112/0x2d0 [ 606.150514][T25555] netlink_ack+0x146/0xa50 [ 606.150564][T25555] netlink_rcv_skb+0x28c/0x470 [ 606.150595][T25555] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 606.150622][T25555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.150664][T25555] ? bpf_lsm_capable+0x9/0x20 [ 606.150696][T25555] ? security_capable+0x7e/0x2e0 [ 606.150729][T25555] nfnetlink_rcv+0x26a/0x2520 [ 606.150755][T25555] ? unwind_get_return_address+0x4d/0x90 [ 606.150782][T25555] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.150808][T25555] ? arch_stack_walk+0xfc/0x150 [ 606.150857][T25555] ? stack_trace_save+0x9c/0xe0 [ 606.150885][T25555] ? stack_depot_save_flags+0x40/0x910 [ 606.150914][T25555] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 606.150939][T25555] ? kasan_save_track+0x4f/0x80 [ 606.150962][T25555] ? kasan_save_track+0x3e/0x80 [ 606.150995][T25555] ? __lock_acquire+0xaac/0xd20 [ 606.151054][T25555] ? __lock_acquire+0xaac/0xd20 [ 606.151095][T25555] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.151133][T25555] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.151162][T25555] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.151199][T25555] netlink_unicast+0x758/0x8d0 [ 606.151239][T25555] netlink_sendmsg+0x805/0xb30 [ 606.151280][T25555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.151316][T25555] ? aa_sock_msg_perm+0x94/0x160 [ 606.151344][T25555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.151369][T25555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.151401][T25555] __sock_sendmsg+0x21c/0x270 [ 606.151429][T25555] ____sys_sendmsg+0x505/0x830 [ 606.151468][T25555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.151511][T25555] ? import_iovec+0x74/0xa0 [ 606.151546][T25555] ___sys_sendmsg+0x21f/0x2a0 [ 606.151581][T25555] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.151654][T25555] ? __fget_files+0x2a/0x420 [ 606.151683][T25555] ? __fget_files+0x3a0/0x420 [ 606.151724][T25555] __x64_sys_sendmsg+0x19b/0x260 [ 606.151760][T25555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.151840][T25555] ? do_syscall_64+0xba/0x210 [ 606.151872][T25555] do_syscall_64+0xf6/0x210 [ 606.151899][T25555] ? clear_bhb_loop+0x60/0xb0 [ 606.151926][T25555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.151947][T25555] RIP: 0033:0x7f0e1718e969 [ 606.151967][T25555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.151986][T25555] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.152010][T25555] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 606.152026][T25555] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 606.152040][T25555] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 606.152054][T25555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.152067][T25555] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 606.152100][T25555] [ 606.800000][T25571] hsr0 speed is unknown, defaulting to 1000 [ 606.855350][T25575] tipc: Started in network mode [ 606.861141][T25575] tipc: Node identity a6c482745a29, cluster identity 4711 [ 606.881301][T25575] tipc: Enabled bearer , priority 0 [ 606.979683][T25585] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8546'. [ 607.021333][T25585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8546'. [ 607.040222][T25575] syzkaller0: entered promiscuous mode [ 607.046110][T25575] syzkaller0: entered allmulticast mode [ 607.056465][T25575] tipc: Resetting bearer [ 607.105919][T25574] tipc: Resetting bearer [ 607.950286][ T5952] tipc: Node number set to 4243423860 [ 609.025288][T25574] tipc: Disabling bearer [ 609.218855][T25608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8558'. [ 609.242434][T25612] tipc: New replicast peer: 255.255.255.255 [ 609.261870][T25612] tipc: Enabled bearer , priority 10 [ 609.280628][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8559'. [ 609.305690][T25612] tipc: Disabling bearer [ 609.317573][T25612] FAULT_INJECTION: forcing a failure. [ 609.317573][T25612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 609.362082][T25612] CPU: 1 UID: 0 PID: 25612 Comm: syz.3.8559 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 609.362117][T25612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.362131][T25612] Call Trace: [ 609.362141][T25612] [ 609.362151][T25612] dump_stack_lvl+0x189/0x250 [ 609.362192][T25612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.362225][T25612] ? __pfx__printk+0x10/0x10 [ 609.362254][T25612] ? fs_reclaim_acquire+0x7d/0x100 [ 609.362298][T25612] should_fail_ex+0x414/0x560 [ 609.362327][T25612] prepare_alloc_pages+0x213/0x610 [ 609.362357][T25612] __alloc_frozen_pages_noprof+0x123/0x370 [ 609.362384][T25612] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.362417][T25612] ? policy_nodemask+0x27c/0x720 [ 609.362454][T25612] alloc_pages_mpol+0x232/0x4a0 [ 609.362490][T25612] alloc_pages_noprof+0xa9/0x190 [ 609.362522][T25612] get_free_pages_noprof+0xc/0x30 [ 609.362542][T25612] kasan_populate_vmalloc_pte+0x3a/0x100 [ 609.362570][T25612] __apply_to_page_range+0x7ce/0xd20 [ 609.362598][T25612] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 609.362627][T25612] ? __pfx___apply_to_page_range+0x10/0x10 [ 609.362656][T25612] ? do_raw_spin_unlock+0x122/0x240 [ 609.362688][T25612] alloc_vmap_area+0x1e09/0x24d0 [ 609.362743][T25612] ? __pfx_alloc_vmap_area+0x10/0x10 [ 609.362773][T25612] ? __kasan_kmalloc+0x93/0xb0 [ 609.362802][T25612] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 609.362858][T25612] ? __get_vm_area_node+0x13f/0x300 [ 609.362888][T25612] ? xsk_map_alloc+0x14b/0x240 [ 609.362913][T25612] __get_vm_area_node+0x1f8/0x300 [ 609.362951][T25612] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 609.362985][T25612] ? xsk_map_alloc+0x14b/0x240 [ 609.363023][T25612] ? aa_get_newest_label+0xf7/0x5d0 [ 609.363051][T25612] ? __pfx_aa_get_newest_label+0x10/0x10 [ 609.363082][T25612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 609.363117][T25612] ? apparmor_capable+0x137/0x1b0 [ 609.363154][T25612] bpf_map_area_alloc+0xf1/0x120 [ 609.363185][T25612] ? xsk_map_alloc+0x14b/0x240 [ 609.363209][T25612] xsk_map_alloc+0x14b/0x240 [ 609.363234][T25612] map_create+0x900/0x1150 [ 609.363269][T25612] ? security_bpf+0x7e/0x300 [ 609.363295][T25612] __sys_bpf+0x67e/0x860 [ 609.363326][T25612] ? __pfx___sys_bpf+0x10/0x10 [ 609.363368][T25612] ? ksys_write+0x1f0/0x250 [ 609.363394][T25612] ? rcu_is_watching+0x15/0xb0 [ 609.363429][T25612] __x64_sys_bpf+0x7c/0x90 [ 609.363456][T25612] do_syscall_64+0xf6/0x210 [ 609.363483][T25612] ? clear_bhb_loop+0x60/0xb0 [ 609.363510][T25612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.363532][T25612] RIP: 0033:0x7fcbe098e969 [ 609.363553][T25612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.363572][T25612] RSP: 002b:00007fcbe17ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.363594][T25612] RAX: ffffffffffffffda RBX: 00007fcbe0bb5fa0 RCX: 00007fcbe098e969 [ 609.363609][T25612] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000000 [ 609.363623][T25612] RBP: 00007fcbe17ea090 R08: 0000000000000000 R09: 0000000000000000 [ 609.363637][T25612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.363649][T25612] R13: 0000000000000000 R14: 00007fcbe0bb5fa0 R15: 00007ffc2aa447c8 [ 609.363681][T25612] [ 609.383747][T25620] netlink: 'syz.4.8562': attribute type 1 has an invalid length. [ 609.714835][T25620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8562'. [ 609.991641][T25631] hsr0 speed is unknown, defaulting to 1000 [ 610.031605][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8567'. [ 610.084272][T25635] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 610.148830][T25640] netlink: 'syz.7.8568': attribute type 1 has an invalid length. [ 610.156631][T25640] netlink: 236 bytes leftover after parsing attributes in process `syz.7.8568'. [ 610.234352][T25640] tipc: New replicast peer: 255.255.255.255 [ 610.242410][T25640] tipc: Enabled bearer , priority 10 [ 610.262020][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8568'. [ 610.273789][T25644] tipc: Disabling bearer [ 610.603290][T25652] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8573'. [ 610.893051][T25666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input13 [ 610.945321][T25669] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8581'. [ 611.145921][T25679] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8585'. [ 611.595555][T25700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8591'. [ 611.606396][T25700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8591'. [ 611.892848][T25712] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8595'. [ 611.910269][T25707] syzkaller0: entered promiscuous mode [ 611.916034][T25707] syzkaller0: entered allmulticast mode [ 613.745040][T25716] netlink: 'syz.4.8596': attribute type 12 has an invalid length. [ 613.966842][T25729] netlink: 'syz.4.8600': attribute type 29 has an invalid length. [ 614.836763][T25764] FAULT_INJECTION: forcing a failure. [ 614.836763][T25764] name failslab, interval 1, probability 0, space 0, times 0 [ 614.858110][T25764] CPU: 0 UID: 0 PID: 25764 Comm: syz.3.8610 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 614.858153][T25764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.858168][T25764] Call Trace: [ 614.858177][T25764] [ 614.858187][T25764] dump_stack_lvl+0x189/0x250 [ 614.858229][T25764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.858262][T25764] ? __pfx__printk+0x10/0x10 [ 614.858292][T25764] ? __pfx___might_resched+0x10/0x10 [ 614.858320][T25764] should_fail_ex+0x414/0x560 [ 614.858350][T25764] should_failslab+0xa8/0x100 [ 614.858383][T25764] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 614.858415][T25764] ? __alloc_skb+0x112/0x2d0 [ 614.858450][T25764] __alloc_skb+0x112/0x2d0 [ 614.858485][T25764] nf_tables_commit+0x7b26/0x8e70 [ 614.858517][T25764] ? do_raw_spin_unlock+0x122/0x240 [ 614.858573][T25764] ? __pfx_nf_tables_commit+0x10/0x10 [ 614.858607][T25764] ? free_large_kmalloc+0xeb/0x200 [ 614.858642][T25764] ? free_large_kmalloc+0x145/0x200 [ 614.858676][T25764] ? nf_tables_newrule+0x23bc/0x2890 [ 614.858728][T25764] ? __pfx_nf_tables_newrule+0x10/0x10 [ 614.858790][T25764] nfnetlink_rcv+0x1a4b/0x2520 [ 614.858851][T25764] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 614.858890][T25764] ? __lock_acquire+0xaac/0xd20 [ 614.858974][T25764] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.859004][T25764] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.859046][T25764] netlink_unicast+0x758/0x8d0 [ 614.859087][T25764] netlink_sendmsg+0x805/0xb30 [ 614.859135][T25764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.859172][T25764] ? aa_sock_msg_perm+0x94/0x160 [ 614.859200][T25764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.859227][T25764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.859259][T25764] __sock_sendmsg+0x21c/0x270 [ 614.859288][T25764] ____sys_sendmsg+0x505/0x830 [ 614.859328][T25764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.859371][T25764] ? import_iovec+0x74/0xa0 [ 614.859408][T25764] ___sys_sendmsg+0x21f/0x2a0 [ 614.859444][T25764] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.859516][T25764] ? __fget_files+0x2a/0x420 [ 614.859548][T25764] ? __fget_files+0x3a0/0x420 [ 614.859590][T25764] __x64_sys_sendmsg+0x19b/0x260 [ 614.859627][T25764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.859680][T25764] ? do_syscall_64+0xba/0x210 [ 614.859712][T25764] do_syscall_64+0xf6/0x210 [ 614.859739][T25764] ? clear_bhb_loop+0x60/0xb0 [ 614.859766][T25764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.859788][T25764] RIP: 0033:0x7fcbe098e969 [ 614.859808][T25764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.859827][T25764] RSP: 002b:00007fcbe17c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.859851][T25764] RAX: ffffffffffffffda RBX: 00007fcbe0bb6080 RCX: 00007fcbe098e969 [ 614.859868][T25764] RDX: 0000000000000098 RSI: 0000200000000000 RDI: 0000000000000005 [ 614.859882][T25764] RBP: 00007fcbe17c9090 R08: 0000000000000000 R09: 0000000000000000 [ 614.859896][T25764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.859909][T25764] R13: 0000000000000000 R14: 00007fcbe0bb6080 R15: 00007ffc2aa447c8 [ 614.859944][T25764] [ 614.866284][T25765] __nla_validate_parse: 4 callbacks suppressed [ 614.866304][T25765] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8612'. [ 615.055371][T25768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8614'. [ 615.146057][T25770] netlink: 'syz.7.8613': attribute type 29 has an invalid length. [ 615.230797][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8613'. [ 615.633674][ T5892] IPVS: starting estimator thread 0... [ 615.696540][T25799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8621'. [ 615.738042][T25798] IPVS: using max 24 ests per chain, 57600 per kthread [ 615.754631][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8621'. [ 615.950297][T25806] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.8626'. [ 616.487491][T25832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8639'. [ 616.729803][T25844] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8645'. [ 616.827707][T25848] netlink: 'syz.4.8646': attribute type 1 has an invalid length. [ 616.843190][T25848] netlink: 'syz.4.8646': attribute type 3 has an invalid length. [ 616.854196][T25848] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8646'. [ 616.871679][T25848] NCSI netlink: No device for ifindex 246 [ 617.237762][T25865] netlink: 'syz.3.8652': attribute type 29 has an invalid length. [ 617.276397][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8652'. [ 617.460183][T25874] FAULT_INJECTION: forcing a failure. [ 617.460183][T25874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.518571][T25874] CPU: 1 UID: 0 PID: 25874 Comm: syz.7.8657 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 617.518605][T25874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.518620][T25874] Call Trace: [ 617.518629][T25874] [ 617.518638][T25874] dump_stack_lvl+0x189/0x250 [ 617.518673][T25874] ? __lock_acquire+0xaac/0xd20 [ 617.518707][T25874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.518737][T25874] ? __pfx__printk+0x10/0x10 [ 617.518756][T25874] ? __might_fault+0xb0/0x130 [ 617.518799][T25874] should_fail_ex+0x414/0x560 [ 617.518828][T25874] _copy_from_user+0x2d/0xb0 [ 617.518866][T25874] ___sys_recvmsg+0x12e/0x510 [ 617.518908][T25874] ? __pfx____sys_recvmsg+0x10/0x10 [ 617.518976][T25874] ? __might_fault+0xb0/0x130 [ 617.519011][T25874] do_recvmmsg+0x307/0x760 [ 617.519054][T25874] ? __pfx_do_recvmmsg+0x10/0x10 [ 617.519102][T25874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.519155][T25874] __x64_sys_recvmmsg+0x190/0x240 [ 617.519188][T25874] ? rcu_is_watching+0x15/0xb0 [ 617.519210][T25874] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 617.519249][T25874] ? do_syscall_64+0xba/0x210 [ 617.519279][T25874] do_syscall_64+0xf6/0x210 [ 617.519306][T25874] ? clear_bhb_loop+0x60/0xb0 [ 617.519333][T25874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.519354][T25874] RIP: 0033:0x7f0e1718e969 [ 617.519375][T25874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.519394][T25874] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 617.519417][T25874] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 617.519433][T25874] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 617.519446][T25874] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 617.519459][T25874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.519472][T25874] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 617.519502][T25874] [ 617.784978][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.869232][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.887135][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.978369][T25870] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.987452][T25870] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.996960][T25870] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.009269][T25870] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.033391][T25870] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 618.043925][T25870] mac80211_hwsim hwsim24 wlan0: left allmulticast mode [ 618.052208][T25870] macvlan2: left allmulticast mode [ 618.061369][T25870] bridge1: left promiscuous mode [ 618.069998][T25870] bridge3: left promiscuous mode [ 618.075113][T25870] bridge3: left allmulticast mode [ 618.762473][T25905] netlink: 'syz.3.8668': attribute type 29 has an invalid length. [ 619.354768][T25936] netlink: 'syz.6.8682': attribute type 29 has an invalid length. [ 619.804814][T25955] netlink: 'syz.6.8690': attribute type 9 has an invalid length. [ 619.815395][T25955] netlink: 'syz.6.8690': attribute type 7 has an invalid length. [ 619.824744][T25955] netlink: 'syz.6.8690': attribute type 8 has an invalid length. [ 619.833614][T25955] FAULT_INJECTION: forcing a failure. [ 619.833614][T25955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.847242][T25955] CPU: 1 UID: 0 PID: 25955 Comm: syz.6.8690 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 619.847273][T25955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.847287][T25955] Call Trace: [ 619.847297][T25955] [ 619.847307][T25955] dump_stack_lvl+0x189/0x250 [ 619.847349][T25955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.847376][T25955] ? __pfx__printk+0x10/0x10 [ 619.847406][T25955] should_fail_ex+0x414/0x560 [ 619.847430][T25955] _copy_to_user+0x31/0xb0 [ 619.847459][T25955] simple_read_from_buffer+0xe1/0x170 [ 619.847488][T25955] proc_fail_nth_read+0x1df/0x250 [ 619.847518][T25955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.847549][T25955] ? rw_verify_area+0x258/0x650 [ 619.847569][T25955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.847598][T25955] vfs_read+0x1fd/0x980 [ 619.847626][T25955] ? __pfx___mutex_lock+0x10/0x10 [ 619.847649][T25955] ? __pfx_vfs_read+0x10/0x10 [ 619.847672][T25955] ? __fget_files+0x2a/0x420 [ 619.847701][T25955] ? __fget_files+0x3a0/0x420 [ 619.847725][T25955] ? __fget_files+0x2a/0x420 [ 619.847758][T25955] ksys_read+0x145/0x250 [ 619.847779][T25955] ? rcu_is_watching+0x15/0xb0 [ 619.847797][T25955] ? __pfx_ksys_read+0x10/0x10 [ 619.847822][T25955] ? do_syscall_64+0xba/0x210 [ 619.847848][T25955] do_syscall_64+0xf6/0x210 [ 619.847884][T25955] ? clear_bhb_loop+0x60/0xb0 [ 619.847911][T25955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.847932][T25955] RIP: 0033:0x7fe96a18d37c [ 619.847952][T25955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 619.847971][T25955] RSP: 002b:00007fe96af2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.847993][T25955] RAX: ffffffffffffffda RBX: 00007fe96a3b5fa0 RCX: 00007fe96a18d37c [ 619.848010][T25955] RDX: 000000000000000f RSI: 00007fe96af2d0a0 RDI: 0000000000000005 [ 619.848023][T25955] RBP: 00007fe96af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 619.848037][T25955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.848050][T25955] R13: 0000000000000000 R14: 00007fe96a3b5fa0 R15: 00007fffff121bf8 [ 619.848085][T25955] [ 620.301511][T25970] netlink: 'syz.6.8695': attribute type 29 has an invalid length. [ 620.310179][T25970] __nla_validate_parse: 4 callbacks suppressed [ 620.310199][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8695'. [ 620.819958][T25985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8702'. [ 620.849887][T25990] FAULT_INJECTION: forcing a failure. [ 620.849887][T25990] name failslab, interval 1, probability 0, space 0, times 0 [ 620.905945][T25990] CPU: 0 UID: 0 PID: 25990 Comm: syz.7.8703 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 620.905978][T25990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.905993][T25990] Call Trace: [ 620.906001][T25990] [ 620.906011][T25990] dump_stack_lvl+0x189/0x250 [ 620.906053][T25990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.906085][T25990] ? __pfx__printk+0x10/0x10 [ 620.906114][T25990] ? __pfx___might_resched+0x10/0x10 [ 620.906141][T25990] should_fail_ex+0x414/0x560 [ 620.906171][T25990] should_failslab+0xa8/0x100 [ 620.906204][T25990] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 620.906235][T25990] ? __alloc_skb+0x112/0x2d0 [ 620.906269][T25990] __alloc_skb+0x112/0x2d0 [ 620.906303][T25990] netlink_sendmsg+0x5c6/0xb30 [ 620.906345][T25990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.906380][T25990] ? aa_sock_msg_perm+0x94/0x160 [ 620.906408][T25990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.906435][T25990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.906467][T25990] __sock_sendmsg+0x21c/0x270 [ 620.906496][T25990] ____sys_sendmsg+0x505/0x830 [ 620.906535][T25990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.906577][T25990] ? import_iovec+0x74/0xa0 [ 620.906646][T25990] ___sys_sendmsg+0x21f/0x2a0 [ 620.906683][T25990] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.906756][T25990] ? __fget_files+0x2a/0x420 [ 620.906786][T25990] ? __fget_files+0x3a0/0x420 [ 620.906827][T25990] __x64_sys_sendmsg+0x19b/0x260 [ 620.906861][T25990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.906910][T25990] ? do_syscall_64+0xba/0x210 [ 620.906942][T25990] do_syscall_64+0xf6/0x210 [ 620.906968][T25990] ? clear_bhb_loop+0x60/0xb0 [ 620.906995][T25990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.907017][T25990] RIP: 0033:0x7f0e1718e969 [ 620.907036][T25990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.907055][T25990] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.907079][T25990] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 620.907096][T25990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 620.907110][T25990] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 620.907125][T25990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.907137][T25990] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 620.907170][T25990] [ 621.310068][T26000] netlink: 'syz.4.8706': attribute type 29 has an invalid length. [ 621.347734][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8706'. [ 621.517023][T26007] FAULT_INJECTION: forcing a failure. [ 621.517023][T26007] name failslab, interval 1, probability 0, space 0, times 0 [ 621.530801][T26007] CPU: 1 UID: 0 PID: 26007 Comm: syz.7.8709 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 621.530833][T26007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.530847][T26007] Call Trace: [ 621.530857][T26007] [ 621.530867][T26007] dump_stack_lvl+0x189/0x250 [ 621.530910][T26007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.530943][T26007] ? __pfx__printk+0x10/0x10 [ 621.530969][T26007] ? __pfx___might_resched+0x10/0x10 [ 621.530992][T26007] ? fs_reclaim_acquire+0x7d/0x100 [ 621.531033][T26007] should_fail_ex+0x414/0x560 [ 621.531063][T26007] should_failslab+0xa8/0x100 [ 621.531097][T26007] __kmalloc_noprof+0xcb/0x4f0 [ 621.531125][T26007] ? tomoyo_encode+0x28b/0x550 [ 621.531160][T26007] tomoyo_encode+0x28b/0x550 [ 621.531196][T26007] tomoyo_realpath_from_path+0x58d/0x5d0 [ 621.531229][T26007] ? tomoyo_domain+0xda/0x130 [ 621.531265][T26007] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 621.531289][T26007] tomoyo_path_number_perm+0x1e8/0x5a0 [ 621.531318][T26007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.531382][T26007] ? __lock_acquire+0xaac/0xd20 [ 621.531437][T26007] ? __fget_files+0x2a/0x420 [ 621.531473][T26007] ? __fget_files+0x3a0/0x420 [ 621.531502][T26007] ? __fget_files+0x2a/0x420 [ 621.531538][T26007] security_file_ioctl+0xcb/0x2d0 [ 621.531563][T26007] __se_sys_ioctl+0x47/0x170 [ 621.531591][T26007] do_syscall_64+0xf6/0x210 [ 621.531626][T26007] ? clear_bhb_loop+0x60/0xb0 [ 621.531655][T26007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.531677][T26007] RIP: 0033:0x7f0e1718e969 [ 621.531697][T26007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.531716][T26007] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.531740][T26007] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 621.531763][T26007] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 621.531777][T26007] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 621.531791][T26007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.531804][T26007] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 621.531839][T26007] [ 621.531876][T26007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.288269][T26017] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8713'. [ 622.650270][T23984] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 622.660095][T23984] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 622.668526][T23984] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 622.677029][T23984] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 622.684940][T23984] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 622.780881][T26026] hsr0 speed is unknown, defaulting to 1000 [ 623.087308][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.097047][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.115840][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.139520][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.154777][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.166614][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 623.371827][T26050] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.380451][T26050] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.401462][T26050] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.450158][T26050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.491841][T26026] chnl_net:caif_netlink_parms(): no params data found [ 623.623854][T26060] netlink: 'syz.6.8732': attribute type 10 has an invalid length. [ 623.695864][T26060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.740193][T26060] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 623.950990][T26026] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.977999][T26026] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.985394][T26026] bridge_slave_0: entered allmulticast mode [ 623.997595][T26026] bridge_slave_0: entered promiscuous mode [ 624.006958][T26026] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.014274][T26026] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.022342][T26026] bridge_slave_1: entered allmulticast mode [ 624.047563][T26026] bridge_slave_1: entered promiscuous mode [ 624.224391][T26026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.243249][T26090] netlink: 'syz.6.8740': attribute type 29 has an invalid length. [ 624.275619][T26092] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 624.284697][T26092] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 624.293573][T26092] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 624.303033][T26092] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 624.331034][T26026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.402872][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.574877][T26026] team0: Port device team_slave_0 added [ 624.610817][T26026] team0: Port device team_slave_1 added [ 624.718354][ T55] Bluetooth: hci8: command tx timeout [ 624.793104][T26026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.811458][T26026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.899631][T26026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.993501][T26026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.000626][T26026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.027704][T26026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.073222][T26120] netlink: 'syz.3.8754': attribute type 29 has an invalid length. [ 625.274956][T26026] hsr_slave_0: entered promiscuous mode [ 625.304437][T26026] hsr_slave_1: entered promiscuous mode [ 625.318993][T26026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.326618][T26026] Cannot create hsr debugfs directory [ 625.357402][T26133] batadv0: entered promiscuous mode [ 625.377015][T26133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.419259][T26133] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 625.616710][T26141] __nla_validate_parse: 78 callbacks suppressed [ 625.616731][T26141] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8762'. [ 625.787210][T26147] siw: device registration error -23 [ 625.804492][T26147] netlink: 'syz.7.8765': attribute type 33 has an invalid length. [ 625.816065][T26147] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8765'. [ 625.873302][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8765'. [ 625.899775][T26153] netlink: 'syz.6.8766': attribute type 29 has an invalid length. [ 625.909057][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8766'. [ 626.244635][T26026] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 626.284039][T26026] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 626.342492][T26026] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 626.395770][T26166] netlink: 'syz.4.8772': attribute type 12 has an invalid length. [ 626.426139][T26166] netlink: 'syz.4.8772': attribute type 29 has an invalid length. [ 626.468049][T26166] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8772'. [ 626.506720][T26166] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8772'. [ 626.526820][T26026] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 626.698224][T26179] bridge2: entered promiscuous mode [ 626.703517][T26179] bridge2: entered allmulticast mode [ 626.749760][T26180] netlink: 'syz.4.8778': attribute type 29 has an invalid length. [ 626.757839][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8778'. [ 626.804363][ T55] Bluetooth: hci8: command tx timeout [ 626.875645][T26181] syzkaller1: entered promiscuous mode [ 626.900883][T26181] syzkaller1: entered allmulticast mode [ 626.975798][T26026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.019637][T26026] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.038749][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.045950][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.070064][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.077349][ T4166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.157052][T26189] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8781'. [ 627.316487][T26193] netpci0: tun_chr_ioctl cmd 1074025681 [ 627.602012][T26026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.820848][T26208] FAULT_INJECTION: forcing a failure. [ 627.820848][T26208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.847704][T26208] CPU: 1 UID: 0 PID: 26208 Comm: syz.4.8787 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 627.847739][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.847752][T26208] Call Trace: [ 627.847761][T26208] [ 627.847770][T26208] dump_stack_lvl+0x189/0x250 [ 627.847810][T26208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.847841][T26208] ? __pfx__printk+0x10/0x10 [ 627.847881][T26208] should_fail_ex+0x414/0x560 [ 627.847909][T26208] _copy_from_user+0x2d/0xb0 [ 627.847943][T26208] copy_from_sockptr_offset+0x66/0xa0 [ 627.847978][T26208] do_ip6t_set_ctl+0x8b7/0xce0 [ 627.848033][T26208] ? rcu_is_watching+0x15/0xb0 [ 627.848054][T26208] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 627.848109][T26208] ? __pfx___mutex_lock+0x10/0x10 [ 627.848135][T26208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.848159][T26208] ? aa_sk_perm+0x81e/0x950 [ 627.848189][T26208] ? __pfx_aa_sk_perm+0x10/0x10 [ 627.848219][T26208] nf_setsockopt+0x26f/0x290 [ 627.848256][T26208] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 627.848286][T26208] do_sock_setsockopt+0x25a/0x3e0 [ 627.848320][T26208] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 627.848348][T26208] ? __fget_files+0x2a/0x420 [ 627.848383][T26208] ? __fget_files+0x3a0/0x420 [ 627.848411][T26208] ? __fget_files+0x2a/0x420 [ 627.848448][T26208] __x64_sys_setsockopt+0x18b/0x220 [ 627.848486][T26208] do_syscall_64+0xf6/0x210 [ 627.848515][T26208] ? clear_bhb_loop+0x60/0xb0 [ 627.848541][T26208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.848562][T26208] RIP: 0033:0x7f7ad5b8e969 [ 627.848582][T26208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.848601][T26208] RSP: 002b:00007f7ad6a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.848625][T26208] RAX: ffffffffffffffda RBX: 00007f7ad5db5fa0 RCX: 00007f7ad5b8e969 [ 627.848641][T26208] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 627.848654][T26208] RBP: 00007f7ad6a05090 R08: 0000000000000418 R09: 0000000000000000 [ 627.848668][T26208] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 627.848682][T26208] R13: 0000000000000000 R14: 00007f7ad5db5fa0 R15: 00007ffc75b17668 [ 627.848715][T26208] [ 628.342775][T26221] netlink: 'syz.7.8789': attribute type 29 has an invalid length. [ 628.386095][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8789'. [ 628.409773][T26218] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8791'. [ 628.514628][T26026] veth0_vlan: entered promiscuous mode [ 628.573945][T26026] veth1_vlan: entered promiscuous mode [ 628.719063][T26232] vlan0: entered promiscuous mode [ 628.725940][T26230] syzkaller1: entered promiscuous mode [ 628.748037][T26230] syzkaller1: entered allmulticast mode [ 628.768559][T26026] veth0_macvtap: entered promiscuous mode [ 628.778643][T26235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.819922][T26026] veth1_macvtap: entered promiscuous mode [ 628.878251][ T55] Bluetooth: hci8: command tx timeout [ 628.921100][T26026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.030307][T26237] hsr0 speed is unknown, defaulting to 1000 [ 629.066851][T26026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.215772][T26026] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.247183][T26026] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.257990][T26026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.277944][T26026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.059442][T26263] netlink: 'syz.3.8804': attribute type 29 has an invalid length. [ 630.381745][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.393496][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.444205][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.453352][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.600705][T26273] netlink: 'syz.7.8809': attribute type 29 has an invalid length. [ 630.816843][T26284] __nla_validate_parse: 5 callbacks suppressed [ 630.816862][T26284] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.8813'. [ 630.898610][T26286] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.8814'. [ 630.959925][ T55] Bluetooth: hci8: command tx timeout [ 631.060834][T26294] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.8818'. [ 631.322181][T26305] netlink: 'syz.8.8821': attribute type 29 has an invalid length. [ 631.336233][T26305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8821'. [ 631.592798][T26316] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.8828'. [ 631.764286][T26322] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.8831'. [ 632.066141][T26332] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.8834'. [ 632.177706][T26342] netlink: 'syz.3.8837': attribute type 29 has an invalid length. [ 632.186851][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8837'. [ 632.369076][T26344] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8839'. [ 632.650660][T26357] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.784297][T26357] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.957611][T26357] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.045611][T26357] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.159904][T26372] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.8849'. [ 633.219120][T26357] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.246425][T26357] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.257845][T26375] netlink: 'syz.3.8850': attribute type 29 has an invalid length. [ 633.371789][T26357] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.434313][T26357] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.035624][T26408] netlink: 'syz.6.8863': attribute type 29 has an invalid length. [ 634.780943][T26443] netlink: 'syz.6.8876': attribute type 29 has an invalid length. [ 636.702957][T26534] netlink: 'syz.7.8916': attribute type 29 has an invalid length. [ 636.716384][T26534] __nla_validate_parse: 4 callbacks suppressed [ 636.716403][T26534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8916'. [ 636.851358][T26538] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8919'. [ 637.461709][T26570] netlink: 'syz.6.8930': attribute type 29 has an invalid length. [ 637.472213][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8930'. [ 637.562731][T26575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8933'. [ 637.711039][T26582] netlink: 'syz.6.8937': attribute type 1 has an invalid length. [ 637.724176][T26582] netlink: 236 bytes leftover after parsing attributes in process `syz.6.8937'. [ 637.747844][T26582] tipc: Started in network mode [ 637.757453][T26582] tipc: Node identity ac14140f, cluster identity 4711 [ 637.764998][T26582] tipc: New replicast peer: 255.255.255.255 [ 637.784867][T26582] tipc: Enabled bearer , priority 10 [ 637.795287][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8937'. [ 637.811534][T26582] tipc: Disabling bearer [ 638.542286][T26608] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.8949'. [ 638.657353][T26612] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8951'. [ 638.929627][T26625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8955'. [ 639.263106][T26641] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.8963'. [ 639.302414][T26642] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.364576][T26642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.406213][T26642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.450817][T26642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.517181][T26649] netlink: 'syz.7.8965': attribute type 29 has an invalid length. [ 639.536076][T26642] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.555119][T26642] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.575295][T26642] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.608484][T26642] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.418322][T26678] netlink: 'syz.8.8976': attribute type 29 has an invalid length. [ 641.134925][T26706] netlink: 'syz.6.8989': attribute type 72 has an invalid length. [ 641.247779][T26710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input14 [ 641.397737][T26715] netlink: 'syz.6.8991': attribute type 29 has an invalid length. [ 641.705350][T26730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.708265][T26730] netlink: 'syz.3.8994': attribute type 6 has an invalid length. [ 641.764612][T26732] __nla_validate_parse: 10 callbacks suppressed [ 641.764628][T26732] netlink: 1516 bytes leftover after parsing attributes in process `syz.6.8998'. [ 641.801985][T26730] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8994'. [ 641.811512][T26734] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.8999'. [ 641.822158][T26730] 0·: renamed from hsr_slave_1 [ 641.831223][T26730] 0·: entered allmulticast mode [ 641.858882][T26730] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 641.975964][T26737] netlink: 'syz.7.9001': attribute type 72 has an invalid length. [ 642.177214][T26742] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.369040][T26742] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.476955][T26742] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.549281][T26742] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.700192][T26742] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.722885][T26742] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.744017][T26742] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.783724][T26742] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.876265][T26767] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.9012'. [ 643.142139][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9016'. [ 644.106540][T26813] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.9032'. [ 644.200063][T26815] netlink: 'syz.6.9033': attribute type 72 has an invalid length. [ 644.262429][T26817] netlink: 'syz.8.9034': attribute type 72 has an invalid length. [ 644.574182][T23984] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 644.584766][T23984] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 644.600298][T23984] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 644.614166][T23984] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 644.622124][T23984] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 644.724170][T26826] hsr0 speed is unknown, defaulting to 1000 [ 644.882242][T26838] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.9043'. [ 645.077738][T26844] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.9045'. [ 645.091739][T26847] netlink: 'syz.7.9044': attribute type 29 has an invalid length. [ 645.099993][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9044'. [ 645.110203][T26826] chnl_net:caif_netlink_parms(): no params data found [ 645.452934][T26826] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.461227][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.469250][T26826] bridge_slave_0: entered allmulticast mode [ 645.477518][T26826] bridge_slave_0: entered promiscuous mode [ 645.486138][T26862] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9050'. [ 645.505162][T26826] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.515045][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.527253][T26826] bridge_slave_1: entered allmulticast mode [ 645.536682][T26826] bridge_slave_1: entered promiscuous mode [ 645.612254][T26826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.643230][T26826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.751819][T26826] team0: Port device team_slave_0 added [ 645.788404][T26826] team0: Port device team_slave_1 added [ 645.885498][T26826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.905135][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.964513][T26826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.073924][T26826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.115812][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.173613][T26826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.384032][T26826] hsr_slave_0: entered promiscuous mode [ 646.406876][T26826] hsr_slave_1: entered promiscuous mode [ 646.420555][T26826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.433019][T26826] Cannot create hsr debugfs directory [ 646.631106][T26903] netlink: 'syz.8.9067': attribute type 72 has an invalid length. [ 646.686841][T26902] bridge3: entered promiscuous mode [ 646.703415][T26902] bridge3: entered allmulticast mode [ 646.719120][T23984] Bluetooth: hci9: command tx timeout [ 646.788718][T26902] syzkaller1: entered promiscuous mode [ 646.794295][T26902] syzkaller1: entered allmulticast mode [ 646.958082][T23984] Bluetooth: hci2: command 0x0406 tx timeout [ 647.212918][T26919] bridge1: entered promiscuous mode [ 647.225707][T26919] bridge1: entered allmulticast mode [ 647.329241][T26924] syzkaller1: entered promiscuous mode [ 647.338337][T26924] syzkaller1: entered allmulticast mode [ 647.356774][T26826] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 647.384052][T26826] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 647.426866][T26826] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 647.517686][T26930] netlink: 'syz.3.9078': attribute type 72 has an invalid length. [ 647.546901][T26826] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 647.628699][T26933] netlink: 'syz.6.9079': attribute type 29 has an invalid length. [ 647.636697][T26933] __nla_validate_parse: 3 callbacks suppressed [ 647.636714][T26933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9079'. [ 647.839716][T26939] bridge2: entered promiscuous mode [ 647.858971][T26939] bridge2: entered allmulticast mode [ 647.908598][T26939] syzkaller1: entered promiscuous mode [ 647.914150][T26939] syzkaller1: entered allmulticast mode [ 647.977238][T26947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9084'. [ 648.123902][T26826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.171974][T26826] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.191862][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.199099][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.225736][T24330] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.233022][T24330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.798422][ T55] Bluetooth: hci9: command tx timeout [ 648.830146][T26826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.983294][T26982] FAULT_INJECTION: forcing a failure. [ 648.983294][T26982] name failslab, interval 1, probability 0, space 0, times 0 [ 649.027150][T26982] CPU: 1 UID: 0 PID: 26982 Comm: syz.8.9098 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 649.027184][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.027199][T26982] Call Trace: [ 649.027209][T26982] [ 649.027219][T26982] dump_stack_lvl+0x189/0x250 [ 649.027260][T26982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.027293][T26982] ? __pfx__printk+0x10/0x10 [ 649.027323][T26982] ? ref_tracker_alloc+0x318/0x460 [ 649.027354][T26982] should_fail_ex+0x414/0x560 [ 649.027383][T26982] should_failslab+0xa8/0x100 [ 649.027416][T26982] kmem_cache_alloc_noprof+0x73/0x3c0 [ 649.027451][T26982] ? skb_clone+0x212/0x3a0 [ 649.027477][T26982] skb_clone+0x212/0x3a0 [ 649.027502][T26982] __netlink_deliver_tap+0x404/0x850 [ 649.027547][T26982] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.027579][T26982] netlink_deliver_tap+0x19c/0x1b0 [ 649.027612][T26982] netlink_unicast+0x72f/0x8d0 [ 649.027652][T26982] netlink_sendmsg+0x805/0xb30 [ 649.027695][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.027730][T26982] ? aa_sock_msg_perm+0x94/0x160 [ 649.027758][T26982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.027784][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.027817][T26982] __sock_sendmsg+0x21c/0x270 [ 649.027845][T26982] ____sys_sendmsg+0x505/0x830 [ 649.027889][T26982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.027931][T26982] ? import_iovec+0x74/0xa0 [ 649.027963][T26982] ___sys_sendmsg+0x21f/0x2a0 [ 649.027999][T26982] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.028073][T26982] ? __fget_files+0x2a/0x420 [ 649.028125][T26982] ? __fget_files+0x3a0/0x420 [ 649.028167][T26982] __x64_sys_sendmsg+0x19b/0x260 [ 649.028204][T26982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.028254][T26982] ? do_syscall_64+0xba/0x210 [ 649.028283][T26982] do_syscall_64+0xf6/0x210 [ 649.028308][T26982] ? clear_bhb_loop+0x60/0xb0 [ 649.028333][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.028354][T26982] RIP: 0033:0x7fbb0b58e969 [ 649.028376][T26982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.028395][T26982] RSP: 002b:00007fbb0c470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.028419][T26982] RAX: ffffffffffffffda RBX: 00007fbb0b7b5fa0 RCX: 00007fbb0b58e969 [ 649.028435][T26982] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 649.028455][T26982] RBP: 00007fbb0c470090 R08: 0000000000000000 R09: 0000000000000000 [ 649.028467][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.028478][T26982] R13: 0000000000000000 R14: 00007fbb0b7b5fa0 R15: 00007ffc74766d38 [ 649.028508][T26982] [ 649.302610][T26986] bridge3: entered promiscuous mode [ 649.316603][T26986] bridge3: entered allmulticast mode [ 649.459576][T26986] syzkaller1: entered promiscuous mode [ 649.465126][T26986] syzkaller1: entered allmulticast mode [ 649.739422][T27000] bridge1: entered promiscuous mode [ 649.744856][T27000] bridge1: entered allmulticast mode [ 649.867077][T27010] netlink: 'syz.8.9105': attribute type 10 has an invalid length. [ 649.905895][T27010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.950754][T27010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 650.086240][T27000] syzkaller1: entered promiscuous mode [ 650.093885][T27000] syzkaller1: entered allmulticast mode [ 650.129566][T26826] veth0_vlan: entered promiscuous mode [ 650.152851][T26826] veth1_vlan: entered promiscuous mode [ 650.193108][T26826] veth0_macvtap: entered promiscuous mode [ 650.206015][T26826] veth1_macvtap: entered promiscuous mode [ 650.247486][T26826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.269387][T26826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.285687][T26826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.296503][T26826] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.306057][T26826] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.325611][T26826] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.519836][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.533689][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.661432][T24324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.676285][T24324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.710288][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9116'. [ 650.839505][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9117'. [ 650.878705][ T55] Bluetooth: hci9: command tx timeout [ 651.188356][T27052] netlink: 'syz.8.9124': attribute type 72 has an invalid length. [ 651.406239][T27062] bridge4: entered promiscuous mode [ 651.427210][T27062] bridge4: entered allmulticast mode [ 651.470368][T27060] bridge3: entered promiscuous mode [ 651.485386][T27060] bridge3: entered allmulticast mode [ 651.572816][T27066] syzkaller1: entered promiscuous mode [ 651.579004][T27066] syzkaller1: entered allmulticast mode [ 651.589480][T27060] syzkaller1: entered promiscuous mode [ 651.595047][T27060] syzkaller1: entered allmulticast mode [ 652.151499][T27085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9135'. [ 652.310808][T27090] netlink: 'syz.6.9137': attribute type 72 has an invalid length. [ 652.817640][T27111] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9147'. [ 652.958372][ T55] Bluetooth: hci9: command tx timeout [ 652.997086][T27116] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.9150'. [ 653.564941][T27142] bridge5: entered promiscuous mode [ 653.579205][T27142] bridge5: entered allmulticast mode [ 653.675136][T27142] syzkaller1: entered promiscuous mode [ 653.689553][T27142] syzkaller1: entered allmulticast mode [ 654.088242][T27149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9162'. [ 654.156402][T27152] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.9164'. [ 654.267593][T27157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9167'. [ 654.326619][T23984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 654.336954][T23984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 654.351038][T23984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 654.362750][T23984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 654.372233][T23984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 654.424777][T27158] hsr0 speed is unknown, defaulting to 1000 [ 654.719366][T27170] bridge4: entered promiscuous mode [ 654.724655][T27170] bridge4: entered allmulticast mode [ 654.775932][T27158] chnl_net:caif_netlink_parms(): no params data found [ 654.900888][T27181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9174'. [ 654.927635][T27179] syzkaller1: entered promiscuous mode [ 654.938467][T27179] syzkaller1: entered allmulticast mode [ 655.233839][T27158] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.250342][T27158] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.266109][T27158] bridge_slave_0: entered allmulticast mode [ 655.277312][T27158] bridge_slave_0: entered promiscuous mode [ 655.287471][T27158] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.295455][T27158] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.303239][T27158] bridge_slave_1: entered allmulticast mode [ 655.311743][T27158] bridge_slave_1: entered promiscuous mode [ 655.436068][T27158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.446708][T27200] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.9181'. [ 655.472373][T27158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.584047][T27158] team0: Port device team_slave_0 added [ 655.611666][T27158] team0: Port device team_slave_1 added [ 655.817247][T27158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.829713][T27158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.889869][T27158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.972369][T27158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.005229][T27158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.078514][T27158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.109981][T27211] syzkaller1: entered promiscuous mode [ 656.115638][T27211] syzkaller1: entered allmulticast mode [ 656.310336][T27230] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.9193'. [ 656.400059][ T55] Bluetooth: hci2: command tx timeout [ 656.509363][T27158] hsr_slave_0: entered promiscuous mode [ 656.516789][T27158] hsr_slave_1: entered promiscuous mode [ 656.523850][T27158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.532184][T27158] Cannot create hsr debugfs directory [ 657.112758][T27252] bridge5: entered promiscuous mode [ 657.119649][T27252] bridge5: entered allmulticast mode [ 657.179037][T27258] netlink: 'syz.8.9205': attribute type 29 has an invalid length. [ 657.191079][T27258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9205'. [ 657.227777][T27261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9206'. [ 657.250470][T27257] syzkaller1: entered promiscuous mode [ 657.269446][T27257] syzkaller1: entered allmulticast mode [ 657.316678][T27158] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.421711][T27265] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.444716][T27158] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.535084][T27268] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.587834][T27265] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.641226][T27158] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.721329][T27268] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.744002][T27265] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.801100][T27158] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.882554][T27268] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.931743][T27265] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.026618][T27268] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.231825][T27293] __nla_validate_parse: 3 callbacks suppressed [ 658.231846][T27293] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9217'. [ 658.294980][T27265] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.310404][T27158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 658.353176][T27158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 658.398771][T27265] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.414107][T27158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 658.444897][T27268] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.466508][T27265] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.479290][T27158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 658.488048][ T55] Bluetooth: hci2: command tx timeout [ 658.503719][T27268] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.526140][T27268] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.536208][T27296] netlink: 'syz.8.9219': attribute type 29 has an invalid length. [ 658.544674][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9219'. [ 658.574266][T27265] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.621912][T27268] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.889746][T27158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.917723][T27158] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.946981][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.954245][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.010925][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.018254][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.050850][T27309] netlink: 'syz.8.9224': attribute type 29 has an invalid length. [ 659.060519][T27309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9224'. [ 659.141351][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9226'. [ 659.453676][T27326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9233'. [ 659.532595][T27329] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9232'. [ 659.558634][T27329] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9232'. [ 659.685103][T27335] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.819690][T27335] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.864001][T27345] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9236'. [ 659.878961][T27158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.890474][T27335] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.953780][T27335] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.052513][T27158] veth0_vlan: entered promiscuous mode [ 660.101719][T27158] veth1_vlan: entered promiscuous mode [ 660.136712][T27335] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.166309][T27335] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.202570][T27335] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.260028][T27335] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.302535][T27158] veth0_macvtap: entered promiscuous mode [ 660.319140][T27158] veth1_macvtap: entered promiscuous mode [ 660.373922][T27158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.393185][T27158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.409733][T27158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.419129][T27158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.428184][T27158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.488387][T27158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.558723][ T55] Bluetooth: hci2: command tx timeout [ 660.642857][T27357] bridge1: entered promiscuous mode [ 660.678112][T27357] bridge1: entered allmulticast mode [ 660.746207][T27357] syzkaller1: entered promiscuous mode [ 660.751993][T27357] syzkaller1: entered allmulticast mode [ 660.954725][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.988898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.100616][T27380] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9250'. [ 661.136128][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.188216][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.266745][T27386] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.321385][T27388] x_tables: duplicate underflow at hook 1 [ 661.455973][T27386] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.609047][T27386] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.717770][T27386] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.857709][T27408] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.9260'. [ 662.131067][T27423] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.222707][T27423] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.313847][T27432] syz_tun: entered allmulticast mode [ 662.338963][T27423] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.381269][T27432] syz_tun (unregistering): left allmulticast mode [ 662.427487][T27423] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.575355][T27423] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.620316][T27423] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.639375][ T55] Bluetooth: hci2: command tx timeout [ 662.683419][T27423] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.720731][T27423] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.940620][T27448] bridge6: entered promiscuous mode [ 662.964574][T27448] bridge6: entered allmulticast mode [ 663.073173][T27448] syzkaller1: entered promiscuous mode [ 663.097220][T27448] syzkaller1: entered allmulticast mode [ 663.651284][T27482] __nla_validate_parse: 2 callbacks suppressed [ 663.651305][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9286'. [ 663.656205][T27483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9288'. [ 663.786981][T27487] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.998076][T27498] No such timeout policy "syz0" [ 664.182565][T27487] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.355874][T27386] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.474413][T27487] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.596301][T27386] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.618315][T27487] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.650646][T27386] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.680073][T27386] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.757785][T27514] netlink: 'syz.9.9297': attribute type 29 has an invalid length. [ 664.766390][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9297'. [ 664.825683][T27516] bridge4: entered promiscuous mode [ 664.836147][T27516] bridge4: entered allmulticast mode [ 664.862983][T27516] syzkaller1: entered promiscuous mode [ 664.869973][T27516] syzkaller1: entered allmulticast mode [ 665.065581][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9301'. [ 665.311101][T27525] syz_tun: entered allmulticast mode [ 665.350276][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9302'. [ 665.410266][T27525] syz_tun (unregistering): left allmulticast mode [ 665.747631][T27543] netlink: 'syz.9.9309': attribute type 29 has an invalid length. [ 665.771278][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9309'. [ 665.901940][T27548] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.9311'. [ 666.086550][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9315'. [ 666.103647][T27555] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9314'. [ 666.135126][T27555] 0ªX¹¦D: renamed from gretap0 (while UP) [ 666.160125][T27555] 0ªX¹¦D: entered allmulticast mode [ 666.171027][T27555] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 666.222541][T27557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9314'. [ 666.375674][T27487] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.397498][T27487] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.432204][T27568] unsupported nlmsg_type 40 [ 666.432950][T27569] IPv6: syztnl1: Disabled Multicast RS [ 666.462391][T27487] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.484082][T27569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.558526][T27487] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.730879][T27575] netlink: 'syz.7.9322': attribute type 72 has an invalid length. [ 666.845260][T27580] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 666.900229][T27584] FAULT_INJECTION: forcing a failure. [ 666.900229][T27584] name failslab, interval 1, probability 0, space 0, times 0 [ 666.954746][T27584] CPU: 1 UID: 0 PID: 27584 Comm: syz.7.9327 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 666.954780][T27584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.954795][T27584] Call Trace: [ 666.954804][T27584] [ 666.954815][T27584] dump_stack_lvl+0x189/0x250 [ 666.954859][T27584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.954891][T27584] ? __pfx__printk+0x10/0x10 [ 666.954919][T27584] ? __pfx___might_resched+0x10/0x10 [ 666.954956][T27584] ? fs_reclaim_acquire+0x7d/0x100 [ 666.954994][T27584] should_fail_ex+0x414/0x560 [ 666.955024][T27584] should_failslab+0xa8/0x100 [ 666.955057][T27584] __kmalloc_cache_noprof+0x70/0x3d0 [ 666.955087][T27584] ? nfnetlink_rcv+0xeff/0x2520 [ 666.955115][T27584] nfnetlink_rcv+0xeff/0x2520 [ 666.955175][T27584] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 666.955215][T27584] ? __lock_acquire+0xaac/0xd20 [ 666.955299][T27584] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.955330][T27584] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.955368][T27584] netlink_unicast+0x758/0x8d0 [ 666.955408][T27584] netlink_sendmsg+0x805/0xb30 [ 666.955448][T27584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.955483][T27584] ? aa_sock_msg_perm+0x94/0x160 [ 666.955510][T27584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.955543][T27584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.955575][T27584] __sock_sendmsg+0x21c/0x270 [ 666.955603][T27584] ____sys_sendmsg+0x505/0x830 [ 666.955641][T27584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.955682][T27584] ? import_iovec+0x74/0xa0 [ 666.955719][T27584] ___sys_sendmsg+0x21f/0x2a0 [ 666.955756][T27584] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.955830][T27584] ? __fget_files+0x2a/0x420 [ 666.955860][T27584] ? __fget_files+0x3a0/0x420 [ 666.955903][T27584] __x64_sys_sendmsg+0x19b/0x260 [ 666.955946][T27584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.955999][T27584] ? do_syscall_64+0xba/0x210 [ 666.956030][T27584] do_syscall_64+0xf6/0x210 [ 666.956056][T27584] ? clear_bhb_loop+0x60/0xb0 [ 666.956082][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.956103][T27584] RIP: 0033:0x7f0e1718e969 [ 666.956122][T27584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.956142][T27584] RSP: 002b:00007f0e18042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.956166][T27584] RAX: ffffffffffffffda RBX: 00007f0e173b5fa0 RCX: 00007f0e1718e969 [ 666.956182][T27584] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 666.956196][T27584] RBP: 00007f0e18042090 R08: 0000000000000000 R09: 0000000000000000 [ 666.956209][T27584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.956221][T27584] R13: 0000000000000000 R14: 00007f0e173b5fa0 R15: 00007ffe6da010f8 [ 666.956254][T27584] [ 667.882581][T27614] netlink: 'syz.3.9337': attribute type 72 has an invalid length. [ 668.096556][T27621] syzkaller0: refused to change device tx_queue_len [ 668.522422][T27641] netlink: 'syz.3.9350': attribute type 3 has an invalid length. [ 668.789547][T27649] bridge1: entered promiscuous mode [ 668.798325][T27649] bridge1: entered allmulticast mode [ 668.880008][T27649] syzkaller1: entered promiscuous mode [ 668.885735][T27649] syzkaller1: entered allmulticast mode [ 669.325102][T27668] __nla_validate_parse: 8 callbacks suppressed [ 669.325123][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9361'. [ 669.377087][T27670] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.9364'. [ 669.473229][T27676] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9363'. [ 669.729252][T27688] FAULT_INJECTION: forcing a failure. [ 669.729252][T27688] name failslab, interval 1, probability 0, space 0, times 0 [ 669.755085][T27688] CPU: 0 UID: 0 PID: 27688 Comm: syz.3.9371 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 669.755120][T27688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.755135][T27688] Call Trace: [ 669.755145][T27688] [ 669.755155][T27688] dump_stack_lvl+0x189/0x250 [ 669.755196][T27688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.755228][T27688] ? __pfx__printk+0x10/0x10 [ 669.755257][T27688] ? __pfx___might_resched+0x10/0x10 [ 669.755279][T27688] ? fs_reclaim_acquire+0x7d/0x100 [ 669.755320][T27688] should_fail_ex+0x414/0x560 [ 669.755350][T27688] should_failslab+0xa8/0x100 [ 669.755383][T27688] kmem_cache_alloc_noprof+0x73/0x3c0 [ 669.755411][T27688] ? skb_clone+0x212/0x3a0 [ 669.755437][T27688] skb_clone+0x212/0x3a0 [ 669.755455][T27688] ? nfnetlink_rcv+0x486/0x2520 [ 669.755482][T27688] nfnetlink_rcv+0x4b4/0x2520 [ 669.755510][T27688] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 669.755554][T27688] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 669.755577][T27688] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.755602][T27688] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 669.755631][T27688] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 669.755654][T27688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 669.755707][T27688] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 669.755748][T27688] ? rcu_is_watching+0x15/0xb0 [ 669.755772][T27688] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 669.755799][T27688] ? skb_clone+0x246/0x3a0 [ 669.755825][T27688] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 669.755852][T27688] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.755896][T27688] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.755935][T27688] netlink_unicast+0x758/0x8d0 [ 669.755975][T27688] netlink_sendmsg+0x805/0xb30 [ 669.756017][T27688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.756053][T27688] ? aa_sock_msg_perm+0x94/0x160 [ 669.756081][T27688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.756107][T27688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.756139][T27688] __sock_sendmsg+0x21c/0x270 [ 669.756169][T27688] ____sys_sendmsg+0x505/0x830 [ 669.756207][T27688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.756252][T27688] ? import_iovec+0x74/0xa0 [ 669.756289][T27688] ___sys_sendmsg+0x21f/0x2a0 [ 669.756324][T27688] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.756398][T27688] ? __fget_files+0x2a/0x420 [ 669.756428][T27688] ? __fget_files+0x3a0/0x420 [ 669.756471][T27688] __x64_sys_sendmsg+0x19b/0x260 [ 669.756506][T27688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.756560][T27688] ? do_syscall_64+0xba/0x210 [ 669.756591][T27688] do_syscall_64+0xf6/0x210 [ 669.756625][T27688] ? clear_bhb_loop+0x60/0xb0 [ 669.756653][T27688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.756675][T27688] RIP: 0033:0x7fc4e998e969 [ 669.756695][T27688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.756714][T27688] RSP: 002b:00007fc4ea848038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.756738][T27688] RAX: ffffffffffffffda RBX: 00007fc4e9bb5fa0 RCX: 00007fc4e998e969 [ 669.756754][T27688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 669.756768][T27688] RBP: 00007fc4ea848090 R08: 0000000000000000 R09: 0000000000000000 [ 669.756783][T27688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.756796][T27688] R13: 0000000000000000 R14: 00007fc4e9bb5fa0 R15: 00007ffff74eeee8 [ 669.756830][T27688] [ 669.757416][T27686] netlink: 'syz.6.9370': attribute type 1 has an invalid length. [ 670.208722][T27692] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 670.416928][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9378'. [ 670.512032][T27706] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.9377'. [ 670.645005][T27713] FAULT_INJECTION: forcing a failure. [ 670.645005][T27713] name failslab, interval 1, probability 0, space 0, times 0 [ 670.702861][T27713] CPU: 0 UID: 0 PID: 27713 Comm: syz.9.9381 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 670.702896][T27713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.702911][T27713] Call Trace: [ 670.702920][T27713] [ 670.702931][T27713] dump_stack_lvl+0x189/0x250 [ 670.702973][T27713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.703006][T27713] ? __pfx__printk+0x10/0x10 [ 670.703032][T27713] ? __pfx___might_resched+0x10/0x10 [ 670.703055][T27713] ? fs_reclaim_acquire+0x7d/0x100 [ 670.703095][T27713] should_fail_ex+0x414/0x560 [ 670.703126][T27713] should_failslab+0xa8/0x100 [ 670.703159][T27713] __kmalloc_noprof+0xcb/0x4f0 [ 670.703187][T27713] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 670.703208][T27713] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 670.703248][T27713] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 670.703282][T27713] genl_family_rcv_msg_doit+0xb8/0x300 [ 670.703315][T27713] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 670.703342][T27713] ? rcu_is_watching+0x15/0xb0 [ 670.703368][T27713] ? apparmor_capable+0x137/0x1b0 [ 670.703402][T27713] ? bpf_lsm_capable+0x9/0x20 [ 670.703434][T27713] ? security_capable+0x7e/0x2e0 [ 670.703467][T27713] genl_rcv_msg+0x60e/0x790 [ 670.703498][T27713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.703519][T27713] ? ref_tracker_free+0x63a/0x7d0 [ 670.703543][T27713] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 670.703564][T27713] ? __pfx_nl80211_connect+0x10/0x10 [ 670.703590][T27713] ? __pfx_nl80211_post_doit+0x10/0x10 [ 670.703614][T27713] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.703652][T27713] netlink_rcv_skb+0x205/0x470 [ 670.703681][T27713] ? __lock_acquire+0xaac/0xd20 [ 670.703714][T27713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.703739][T27713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.703790][T27713] ? down_read+0x1ad/0x2e0 [ 670.703821][T27713] genl_rcv+0x28/0x40 [ 670.703842][T27713] netlink_unicast+0x758/0x8d0 [ 670.703886][T27713] netlink_sendmsg+0x805/0xb30 [ 670.703929][T27713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.703964][T27713] ? aa_sock_msg_perm+0x94/0x160 [ 670.703992][T27713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.704018][T27713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.704063][T27713] __sock_sendmsg+0x21c/0x270 [ 670.704092][T27713] ____sys_sendmsg+0x505/0x830 [ 670.704131][T27713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.704173][T27713] ? import_iovec+0x74/0xa0 [ 670.704209][T27713] ___sys_sendmsg+0x21f/0x2a0 [ 670.704257][T27713] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.704326][T27713] ? __fget_files+0x2a/0x420 [ 670.704355][T27713] ? __fget_files+0x3a0/0x420 [ 670.704395][T27713] __x64_sys_sendmsg+0x19b/0x260 [ 670.704430][T27713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.704482][T27713] ? do_syscall_64+0xba/0x210 [ 670.704512][T27713] do_syscall_64+0xf6/0x210 [ 670.704538][T27713] ? clear_bhb_loop+0x60/0xb0 [ 670.704565][T27713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.704585][T27713] RIP: 0033:0x7f73e7d8e969 [ 670.704604][T27713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.704624][T27713] RSP: 002b:00007f73e5bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.704646][T27713] RAX: ffffffffffffffda RBX: 00007f73e7fb5fa0 RCX: 00007f73e7d8e969 [ 670.704661][T27713] RDX: 0000000000004004 RSI: 0000200000000600 RDI: 0000000000000004 [ 670.704675][T27713] RBP: 00007f73e5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 670.704688][T27713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.704701][T27713] R13: 0000000000000000 R14: 00007f73e7fb5fa0 R15: 00007fff9607db58 [ 670.704733][T27713] [ 671.096148][T27719] FAULT_INJECTION: forcing a failure. [ 671.096148][T27719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.110715][T27719] CPU: 0 UID: 0 PID: 27719 Comm: syz.3.9384 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 671.110745][T27719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.110759][T27719] Call Trace: [ 671.110769][T27719] [ 671.110778][T27719] dump_stack_lvl+0x189/0x250 [ 671.110813][T27719] ? __lock_acquire+0xaac/0xd20 [ 671.110847][T27719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.110880][T27719] ? __pfx__printk+0x10/0x10 [ 671.110902][T27719] ? __might_fault+0xb0/0x130 [ 671.110945][T27719] should_fail_ex+0x414/0x560 [ 671.110974][T27719] _copy_from_iter+0x1db/0x15a0 [ 671.111011][T27719] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 671.111037][T27719] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 671.111069][T27719] ? __pfx__copy_from_iter+0x10/0x10 [ 671.111099][T27719] ? __build_skb_around+0x257/0x3e0 [ 671.111134][T27719] ? netlink_sendmsg+0x642/0xb30 [ 671.111162][T27719] ? skb_put+0x11b/0x210 [ 671.111197][T27719] netlink_sendmsg+0x6b2/0xb30 [ 671.111247][T27719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.111282][T27719] ? aa_sock_msg_perm+0x94/0x160 [ 671.111309][T27719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.111335][T27719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.111368][T27719] __sock_sendmsg+0x21c/0x270 [ 671.111396][T27719] ____sys_sendmsg+0x505/0x830 [ 671.111435][T27719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.111478][T27719] ? import_iovec+0x74/0xa0 [ 671.111514][T27719] ___sys_sendmsg+0x21f/0x2a0 [ 671.111549][T27719] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.111622][T27719] ? __fget_files+0x2a/0x420 [ 671.111651][T27719] ? __fget_files+0x3a0/0x420 [ 671.111692][T27719] __x64_sys_sendmsg+0x19b/0x260 [ 671.111727][T27719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.111779][T27719] ? do_syscall_64+0xba/0x210 [ 671.111809][T27719] do_syscall_64+0xf6/0x210 [ 671.111835][T27719] ? clear_bhb_loop+0x60/0xb0 [ 671.111862][T27719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.111883][T27719] RIP: 0033:0x7fc4e998e969 [ 671.111903][T27719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.111922][T27719] RSP: 002b:00007fc4ea827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.111945][T27719] RAX: ffffffffffffffda RBX: 00007fc4e9bb6080 RCX: 00007fc4e998e969 [ 671.111961][T27719] RDX: 0000000000004000 RSI: 0000200000000500 RDI: 0000000000000004 [ 671.111975][T27719] RBP: 00007fc4ea827090 R08: 0000000000000000 R09: 0000000000000000 [ 671.111988][T27719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.112001][T27719] R13: 0000000000000001 R14: 00007fc4e9bb6080 R15: 00007ffff74eeee8 [ 671.112034][T27719] [ 671.529074][T27728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9386'. [ 671.956572][T27745] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.9393'. [ 671.984404][T27749] netlink: 'syz.3.9394': attribute type 29 has an invalid length. [ 671.999463][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9394'. [ 672.123125][T27752] syzkaller1: entered promiscuous mode [ 672.132207][T27752] syzkaller1: entered allmulticast mode [ 672.488808][T27758] netlink: 'syz.3.9399': attribute type 4 has an invalid length. [ 672.551025][T27758] netlink: 'syz.3.9399': attribute type 4 has an invalid length. [ 672.606476][T27771] bridge6: entered promiscuous mode [ 672.631234][T27771] bridge6: entered allmulticast mode [ 672.694206][T27758] netlink: 'syz.3.9399': attribute type 21 has an invalid length. [ 672.965165][T27771] syzkaller1: entered promiscuous mode [ 672.978013][T27771] syzkaller1: entered allmulticast mode [ 673.217040][T27796] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9412'. [ 673.303257][T27798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9414'. [ 673.551190][T27790] hsr0 speed is unknown, defaulting to 1000 [ 673.859234][T27811] netlink: 'syz.7.9419': attribute type 1 has an invalid length. [ 673.942798][T27814] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 674.350332][T27824] bridge7: entered promiscuous mode [ 674.368089][T27824] bridge7: entered allmulticast mode [ 674.431440][T27824] syzkaller1: entered promiscuous mode [ 674.437001][T27824] syzkaller1: entered allmulticast mode [ 674.872807][T27801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.952800][T27849] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9431'. [ 675.002876][T27852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9434'. [ 675.035219][T27838] pim6reg: entered allmulticast mode [ 675.057063][T27840] pim6reg: left allmulticast mode [ 675.201863][T27801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.223799][T27857] x_tables: duplicate underflow at hook 2 [ 675.422663][T27801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.505039][T27801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.531019][T27860] netlink: 'syz.6.9432': attribute type 10 has an invalid length. [ 675.548256][T27855] netlink: 'syz.6.9432': attribute type 29 has an invalid length. [ 675.565304][T27857] netlink: 'syz.6.9432': attribute type 29 has an invalid length. [ 675.647013][T27860] team0: Device veth1_macvtap failed to register rx_handler [ 675.804651][T27801] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.888159][ T30] audit: type=1800 audit(1747744005.884:30): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9436" name="memory.events" dev="tmpfs" ino=503 res=0 errno=0 [ 675.904403][T27801] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.002698][T27801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.058985][T27871] netlink: 'syz.7.9438': attribute type 4 has an invalid length. [ 676.116422][T27801] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.125077][T27871] netlink: 'syz.7.9438': attribute type 4 has an invalid length. [ 676.243238][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9440'. [ 676.385190][T27877] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.531462][T27877] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.632117][T27877] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.715804][T27877] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.855713][T27877] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.876733][T27877] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.906213][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9448'. [ 676.930366][T27897] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9447'. [ 676.952608][T27877] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.963868][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9449'. [ 677.024793][T27877] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.083266][T27905] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.153318][T27905] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.241393][T27905] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.284245][T27913] validate_nla: 1 callbacks suppressed [ 677.284265][T27913] netlink: 'syz.6.9453': attribute type 4 has an invalid length. [ 677.318367][T27910] netlink: 'syz.6.9453': attribute type 4 has an invalid length. [ 677.335776][T27905] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.427073][T27910] netlink: 'syz.6.9453': attribute type 21 has an invalid length. [ 677.736518][T27922] netlink: 'syz.8.9455': attribute type 10 has an invalid length. [ 677.889809][T27922] hsr0 speed is unknown, defaulting to 1000 [ 677.922401][T27924] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9455'. [ 677.945274][T27924] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9455'. [ 677.961666][T27924] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9455'. [ 677.984874][T27924] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9455'. [ 678.046560][T27930] netlink: 'syz.9.9458': attribute type 29 has an invalid length. [ 678.591478][ T5891] IPVS: starting estimator thread 0... [ 678.614665][T27948] hsr0 speed is unknown, defaulting to 1000 [ 678.691208][T27952] IPVS: using max 27 ests per chain, 64800 per kthread [ 678.708923][T27956] bridge5: entered promiscuous mode [ 678.714189][T27956] bridge5: entered allmulticast mode [ 678.726603][T27958] FAULT_INJECTION: forcing a failure. [ 678.726603][T27958] name failslab, interval 1, probability 0, space 0, times 0 [ 678.739393][T27958] CPU: 0 UID: 0 PID: 27958 Comm: syz.9.9470 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 678.739424][T27958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 678.739438][T27958] Call Trace: [ 678.739447][T27958] [ 678.739457][T27958] dump_stack_lvl+0x189/0x250 [ 678.739498][T27958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.739530][T27958] ? __pfx__printk+0x10/0x10 [ 678.739557][T27958] ? __switch_to+0xd70/0x1600 [ 678.739584][T27958] should_fail_ex+0x414/0x560 [ 678.739615][T27958] should_failslab+0xa8/0x100 [ 678.739647][T27958] __kmalloc_noprof+0xcb/0x4f0 [ 678.739675][T27958] ? switchdev_deferred_enqueue+0x2d/0x240 [ 678.739708][T27958] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 678.739736][T27958] switchdev_deferred_enqueue+0x2d/0x240 [ 678.739768][T27958] br_set_state+0x356/0x710 [ 678.739808][T27958] ? __pfx_br_set_state+0x10/0x10 [ 678.739843][T27958] ? do_raw_spin_lock+0x121/0x290 [ 678.739874][T27958] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 678.739905][T27958] ? br_setlink+0x3e9/0x800 [ 678.739923][T27958] br_setlink+0x625/0x800 [ 678.739944][T27958] ? __pfx_br_setlink+0x10/0x10 [ 678.739958][T27958] ? do_raw_spin_lock+0x121/0x290 [ 678.740006][T27958] ? __mutex_lock+0x51b/0xe80 [ 678.740029][T27958] ? mutex_is_locked+0x17/0x50 [ 678.740048][T27958] rtnl_bridge_setlink+0x5b2/0x7d0 [ 678.740075][T27958] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 678.740102][T27958] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 678.740123][T27958] rtnetlink_rcv_msg+0x779/0xb70 [ 678.740145][T27958] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 678.740164][T27958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.740182][T27958] ? ref_tracker_free+0x63a/0x7d0 [ 678.740199][T27958] ? __copy_skb_header+0xa7/0x550 [ 678.740224][T27958] ? __pfx_ref_tracker_free+0x10/0x10 [ 678.740242][T27958] ? __skb_clone+0x63/0x7a0 [ 678.740272][T27958] netlink_rcv_skb+0x205/0x470 [ 678.740295][T27958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.740316][T27958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.740348][T27958] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.740369][T27958] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.740396][T27958] netlink_unicast+0x758/0x8d0 [ 678.740424][T27958] netlink_sendmsg+0x805/0xb30 [ 678.740454][T27958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.740479][T27958] ? aa_sock_msg_perm+0x94/0x160 [ 678.740500][T27958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.740519][T27958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.740542][T27958] __sock_sendmsg+0x21c/0x270 [ 678.740562][T27958] ____sys_sendmsg+0x52d/0x830 [ 678.740592][T27958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.740623][T27958] ? import_iovec+0x74/0xa0 [ 678.740649][T27958] ___sys_sendmsg+0x21f/0x2a0 [ 678.740674][T27958] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.740726][T27958] ? __fget_files+0x2a/0x420 [ 678.740747][T27958] ? __fget_files+0x3a0/0x420 [ 678.740777][T27958] __sys_sendmmsg+0x227/0x430 [ 678.740819][T27958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 678.740858][T27958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.740893][T27958] ? rcu_is_watching+0x15/0xb0 [ 678.740919][T27958] __x64_sys_sendmmsg+0xa0/0xc0 [ 678.740956][T27958] do_syscall_64+0xf6/0x210 [ 678.740985][T27958] ? clear_bhb_loop+0x60/0xb0 [ 678.741013][T27958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.741030][T27958] RIP: 0033:0x7f73e7d8e969 [ 678.741045][T27958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.741067][T27958] RSP: 002b:00007f73e5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 678.741084][T27958] RAX: ffffffffffffffda RBX: 00007f73e7fb5fa0 RCX: 00007f73e7d8e969 [ 678.741096][T27958] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 678.741107][T27958] RBP: 00007f73e5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 678.741117][T27958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.741125][T27958] R13: 0000000000000000 R14: 00007f73e7fb5fa0 R15: 00007fff9607db58 [ 678.741150][T27958] [ 678.741157][T27958] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 679.945512][T27905] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.965766][T27905] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.979799][T27995] __nla_validate_parse: 5 callbacks suppressed [ 679.979819][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9484'. [ 679.987897][T27905] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.081934][T27905] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.323252][T28011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9493'. [ 680.660153][T28026] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9497'. [ 681.216074][T28049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9508'. [ 681.289199][T28053] syzkaller1: entered promiscuous mode [ 681.294755][T28053] syzkaller1: entered allmulticast mode [ 681.483850][T28061] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9513'. [ 681.630565][T28067] x_tables: duplicate underflow at hook 2 [ 681.646124][T28067] netlink: 'syz.9.9512': attribute type 29 has an invalid length. [ 681.666056][T28067] netlink: 'syz.9.9512': attribute type 29 has an invalid length. [ 681.722696][T28067] netlink: 'syz.9.9512': attribute type 10 has an invalid length. [ 681.807307][T28067] team0: Device veth1_macvtap failed to register rx_handler [ 681.907600][T28074] netlink: 'syz.3.9518': attribute type 29 has an invalid length. [ 681.917823][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9518'. [ 681.957839][T28082] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.9520'. [ 681.998612][ T31] INFO: task kworker/u8:4:63 blocked for more than 143 seconds. [ 682.006322][ T31] Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 [ 682.043482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.079366][ T31] task:kworker/u8:4 state:D stack:21400 pid:63 tgid:63 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 682.101888][ T31] Workqueue: netns cleanup_net [ 682.106850][ T31] Call Trace: [ 682.110452][ T31] [ 682.113429][ T31] __schedule+0x16e2/0x4cd0 [ 682.118431][ T31] ? __lock_acquire+0xaac/0xd20 [ 682.123442][ T31] ? schedule+0x165/0x360 [ 682.127840][ T31] ? __pfx___schedule+0x10/0x10 [ 682.132843][ T31] ? schedule+0x91/0x360 [ 682.137146][ T31] schedule+0x165/0x360 [ 682.141657][ T31] schedule_preempt_disabled+0x13/0x30 [ 682.147165][ T31] __mutex_lock+0x724/0xe80 [ 682.151869][ T31] ? __mutex_lock+0x51b/0xe80 [ 682.156614][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 682.176989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 682.187063][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 682.196785][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 682.207681][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 682.217065][ T31] ? _raw_spin_unlock+0x28/0x50 [ 682.225704][ T31] rdma_dev_change_netns+0x39/0x300 [ 682.234578][ T31] rdma_dev_exit_net+0x203/0x340 [ 682.245954][ T31] ? __pfx___might_resched+0x10/0x10 [ 682.264771][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 682.278113][ T31] ? net_generic+0x1e/0x240 [ 682.287534][ T31] ? mutex_is_locked+0x17/0x50 [ 682.292814][ T31] ? rtnl_is_locked+0x15/0x20 [ 682.297763][ T31] ops_undo_list+0x497/0x990 [ 682.302783][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 682.308144][ T31] cleanup_net+0x4c5/0x8a0 [ 682.312621][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 682.317610][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.323881][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 682.329817][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 682.335677][ T31] process_scheduled_works+0xade/0x17a0 [ 682.341532][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 682.347599][ T31] worker_thread+0x8a0/0xda0 [ 682.352539][ T31] kthread+0x711/0x8a0 [ 682.356765][ T31] ? __pfx_worker_thread+0x10/0x10 [ 682.362194][ T31] ? __pfx_kthread+0x10/0x10 [ 682.366930][ T31] ? __pfx_kthread+0x10/0x10 [ 682.371646][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.376908][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.385381][ T31] ? __pfx_kthread+0x10/0x10 [ 682.411937][ T31] ret_from_fork+0x4b/0x80 [ 682.434218][ T31] ? __pfx_kthread+0x10/0x10 [ 682.439281][ T31] ret_from_fork_asm+0x1a/0x30 [ 682.444119][ T31] [ 682.447300][ T31] INFO: task syz.2.7657:23105 blocked for more than 143 seconds. [ 682.464618][ T31] Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 [ 682.474592][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.483987][ T31] task:syz.2.7657 state:D stack:23848 pid:23105 tgid:23104 ppid:19907 task_flags:0x400140 flags:0x00004004 [ 682.497336][ T31] Call Trace: [ 682.500802][ T31] [ 682.503766][ T31] __schedule+0x16e2/0x4cd0 [ 682.508424][ T31] ? validate_chain+0x897/0x2140 [ 682.513408][ T31] ? schedule+0x165/0x360 [ 682.517798][ T31] ? __pfx___schedule+0x10/0x10 [ 682.524818][ T31] ? schedule+0x91/0x360 [ 682.529285][ T31] schedule+0x165/0x360 [ 682.533485][ T31] schedule_timeout+0x9a/0x270 [ 682.538420][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 682.543859][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.549198][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.554555][ T31] ? wait_for_completion+0x267/0x5d0 [ 682.560048][ T31] wait_for_completion+0x2bf/0x5d0 [ 682.565244][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 682.571083][ T31] ? up_write+0x1c4/0x420 [ 682.575468][ T31] ? remove_client_context+0xc0/0x1e0 [ 682.580949][ T31] disable_device+0x1c6/0x320 [ 682.585681][ T31] ? __pfx_disable_device+0x10/0x10 [ 682.590978][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 682.597229][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 682.603465][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 682.609312][ T31] nldev_dellink+0x2d1/0x320 [ 682.614042][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 682.619388][ T31] ? rcu_is_watching+0x15/0xb0 [ 682.624183][ T31] ? apparmor_capable+0x137/0x1b0 [ 682.629549][ T31] ? bpf_lsm_capable+0x9/0x20 [ 682.634285][ T31] ? security_capable+0x7e/0x2e0 [ 682.639946][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 682.645163][ T31] rdma_nl_rcv+0x6ab/0x980 [ 682.654967][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 682.661000][ T31] ? __lock_acquire+0xaac/0xd20 [ 682.665910][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.677295][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.682881][ T31] netlink_unicast+0x758/0x8d0 [ 682.687693][ T31] netlink_sendmsg+0x805/0xb30 [ 682.692854][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.699178][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 682.704180][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.709789][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.715126][ T31] __sock_sendmsg+0x21c/0x270 [ 682.720217][ T31] ____sys_sendmsg+0x505/0x830 [ 682.725052][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.730437][ T31] ? import_iovec+0x74/0xa0 [ 682.735010][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 682.739876][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.745171][ T31] ? __fget_files+0x2a/0x420 [ 682.749881][ T31] ? __fget_files+0x3a0/0x420 [ 682.754604][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 682.759628][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.765169][ T31] ? do_syscall_64+0xba/0x210 [ 682.770073][ T31] do_syscall_64+0xf6/0x210 [ 682.774620][ T31] ? clear_bhb_loop+0x60/0xb0 [ 682.779407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.785362][ T31] RIP: 0033:0x7f2d3df8e969 [ 682.789968][ T31] RSP: 002b:00007f2d3bdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.799669][ T31] RAX: ffffffffffffffda RBX: 00007f2d3e1b5fa0 RCX: 00007f2d3df8e969 [ 682.807792][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 682.815851][ T31] RBP: 00007f2d3e010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 682.824119][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.832282][ T31] R13: 0000000000000000 R14: 00007f2d3e1b5fa0 R15: 00007ffc47e08d78 [ 682.840460][ T31] [ 682.843611][ T31] [ 682.843611][ T31] Showing all locks held in the system: [ 682.879756][ T31] 3 locks held by kworker/1:0/24: [ 682.884855][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 682.896121][ T31] #1: ffffc900001e7c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 682.909754][ T31] #2: ffff888033823240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 682.920087][ T31] 1 lock held by khungtaskd/31: [ 682.924966][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 682.935137][ T31] 4 locks held by kworker/u8:4/63: [ 682.940329][ T31] #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 682.951573][ T31] #1: ffffc90001557c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 682.977971][ T31] #2: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 682.987401][ T31] #3: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.007936][ T31] 2 locks held by getty/5598: [ 683.012760][ T31] #0: ffff88802f9f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 683.038213][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 683.055174][ T31] 2 locks held by kworker/1:6/5952: [ 683.069238][ T31] #0: ffff8880b893b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 683.087896][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 683.104306][ T31] 2 locks held by syz.2.7657/23105: [ 683.110531][ T31] #0: ffffffff99bdc018 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 683.120775][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 683.132459][ T31] 2 locks held by syz.1.8090/24293: [ 683.137702][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 683.147316][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.158916][ T31] 2 locks held by syz.1.8090/24295: [ 683.164139][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 683.173647][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.185312][ T31] 3 locks held by kworker/u8:10/24326: [ 683.190852][ T31] 2 locks held by syz.0.8128/24429: [ 683.196096][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 683.205605][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.217988][ T31] 2 locks held by syz.5.8544/25571: [ 683.223219][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 683.232935][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.244343][ T31] 2 locks held by syz.4.8798/26237: [ 683.249633][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 683.259170][ T31] #1: ffff8880303d46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 683.270782][ T31] [ 683.273137][ T31] ============================================= [ 683.273137][ T31] [ 683.284431][ T31] NMI backtrace for cpu 0 [ 683.284448][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 683.284469][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.284479][ T31] Call Trace: [ 683.284486][ T31] [ 683.284494][ T31] dump_stack_lvl+0x189/0x250 [ 683.284520][ T31] ? __wake_up_klogd+0xd9/0x110 [ 683.284542][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.284564][ T31] ? __pfx__printk+0x10/0x10 [ 683.284589][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 683.284616][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 683.284637][ T31] ? _printk+0xcf/0x120 [ 683.284655][ T31] ? __pfx__printk+0x10/0x10 [ 683.284673][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 683.284691][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 683.284717][ T31] watchdog+0xfee/0x1030 [ 683.284739][ T31] ? watchdog+0x1de/0x1030 [ 683.284765][ T31] kthread+0x711/0x8a0 [ 683.284786][ T31] ? __pfx_watchdog+0x10/0x10 [ 683.284805][ T31] ? __pfx_kthread+0x10/0x10 [ 683.284824][ T31] ? __pfx_kthread+0x10/0x10 [ 683.284842][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 683.284856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.284880][ T31] ? __pfx_kthread+0x10/0x10 [ 683.284899][ T31] ret_from_fork+0x4b/0x80 [ 683.284915][ T31] ? __pfx_kthread+0x10/0x10 [ 683.284934][ T31] ret_from_fork_asm+0x1a/0x30 [ 683.284960][ T31] [ 683.284966][ T31] Sending NMI from CPU 0 to CPUs 1: [ 683.434772][ C1] NMI backtrace for cpu 1 [ 683.434790][ C1] CPU: 1 UID: 0 PID: 24326 Comm: kworker/u8:10 Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 683.434814][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.434827][ C1] Workqueue: bat_events batadv_nc_worker [ 683.434851][ C1] RIP: 0010:batadv_nc_purge_paths+0x31d/0x3b0 [ 683.434873][ C1] Code: be 03 00 00 00 e8 33 4b 92 f9 e9 8c fe ff ff e8 69 7a 99 f6 eb 05 e8 62 7a 99 f6 48 8b 7c 24 50 e8 f8 43 34 00 48 8b 44 24 48 <42> 0f b6 04 28 84 c0 4c 8b 74 24 40 4c 8b 7c 24 38 75 24 48 8b 54 [ 683.434890][ C1] RSP: 0018:ffffc9000be5fa28 EFLAGS: 00000246 [ 683.434905][ C1] RAX: 1ffff1100a7abd32 RBX: ffffffff8b267840 RCX: 7c3fa9b08e308500 [ 683.434920][ C1] RDX: 0000000000000006 RSI: ffffffff8d754716 RDI: ffffffff8bc1dbe0 [ 683.434934][ C1] RBP: 0000000000000000 R08: ffffffff8f7f7677 R09: 1ffffffff1efeece [ 683.434947][ C1] R10: dffffc0000000000 R11: fffffbfff1efeecf R12: ffff888026e0a350 [ 683.434961][ C1] R13: dffffc0000000000 R14: ffff888053d5e980 R15: ffff888053d5e990 [ 683.434979][ C1] FS: 0000000000000000(0000) GS:ffff8881261b6000(0000) knlGS:0000000000000000 [ 683.434994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.435013][ C1] CR2: 00007f73e7f7fab8 CR3: 000000001198e000 CR4: 00000000003526f0 [ 683.435029][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.435039][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.435050][ C1] Call Trace: [ 683.435059][ C1] [ 683.435076][ C1] batadv_nc_worker+0x328/0x610 [ 683.435094][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 683.435115][ C1] process_scheduled_works+0xade/0x17a0 [ 683.435148][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 683.435175][ C1] worker_thread+0x8a0/0xda0 [ 683.435209][ C1] kthread+0x711/0x8a0 [ 683.435233][ C1] ? __pfx_worker_thread+0x10/0x10 [ 683.435251][ C1] ? __pfx_kthread+0x10/0x10 [ 683.435274][ C1] ? __pfx_kthread+0x10/0x10 [ 683.435295][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 683.435313][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.435334][ C1] ? __pfx_kthread+0x10/0x10 [ 683.435355][ C1] ret_from_fork+0x4b/0x80 [ 683.435375][ C1] ? __pfx_kthread+0x10/0x10 [ 683.435396][ C1] ret_from_fork_asm+0x1a/0x30 [ 683.435424][ C1] [ 683.435873][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 683.670046][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01230-gf685204c57e8 #0 PREEMPT(full) [ 683.681858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.691922][ T31] Call Trace: [ 683.695304][ T31] [ 683.698247][ T31] dump_stack_lvl+0x99/0x250 [ 683.702862][ T31] ? __asan_memcpy+0x40/0x70 [ 683.707463][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.712679][ T31] ? __pfx__printk+0x10/0x10 [ 683.717295][ T31] panic+0x2db/0x790 [ 683.721237][ T31] ? __pfx_panic+0x10/0x10 [ 683.725673][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 683.731070][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 683.736456][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 683.742632][ T31] watchdog+0x102d/0x1030 [ 683.747130][ T31] ? watchdog+0x1de/0x1030 [ 683.751667][ T31] kthread+0x711/0x8a0 [ 683.755753][ T31] ? __pfx_watchdog+0x10/0x10 [ 683.760443][ T31] ? __pfx_kthread+0x10/0x10 [ 683.765049][ T31] ? __pfx_kthread+0x10/0x10 [ 683.769751][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 683.774962][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.780259][ T31] ? __pfx_kthread+0x10/0x10 [ 683.784864][ T31] ret_from_fork+0x4b/0x80 [ 683.789293][ T31] ? __pfx_kthread+0x10/0x10 [ 683.794001][ T31] ret_from_fork_asm+0x1a/0x30 [ 683.798897][ T31] [ 683.802260][ T31] Kernel Offset: disabled [ 683.806630][ T31] Rebooting in 86400 seconds..