last executing test programs: 3.391998318s ago: executing program 3 (id=541): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x38e869a5bbd4abba, 0x2e, 0x5f]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 3.09988277s ago: executing program 0 (id=545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000a491541e774a250000000071121100"/39], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000003040)="da02e092", 0x4}, {&(0x7f00000002c0)="199400b097", 0x5}, {&(0x7f0000000440)="155332", 0x3}, {&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x6, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x76, 0x76, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x3f}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x39, 0x5}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x926f}, {0x2, 0x2, 0x1}], "2290"}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000fc0)=""/176, 0x93, 0xb0, 0x0, 0x8, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0], 0x0, 0xb, &(0x7f0000001240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, 0x0, 0x700) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x25}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_device=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r0, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)=r0}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r12}, 0x10) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r13}, 0x8) close(r14) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x13, 0x9, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000feffffff00000000ff0000007290e0fff0ffffff47203000080000001868000002000000000000000100000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000200"], &(0x7f0000000e00)='syzkaller\x00', 0xa, 0x8, &(0x7f0000000e40)=""/8, 0x40f00, 0x70, '\x00', r4, @fallback=0x1a, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x3, 0xd, 0x80000000, 0x4}, 0x10, r6, r1, 0x2, &(0x7f0000001540)=[r1, r1, r1, r10, r0, r11, r14, r1], &(0x7f0000001580)=[{0x3, 0x2, 0x4, 0x4}, {0x2, 0x2, 0x0, 0xc}], 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r15, @ANYBLOB="080003"], 0x44}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xb7c, 0x0, 0x403, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x290, 0x8, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xa, @private2, 0xff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eecda2523ccb9858694a56ba8b2150b095700c9a37bc7635621ae4c2cef15388"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r15}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x878, 0x8, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @remote, 0x80000001}}, @WGPEER_A_ALLOWEDIPS={0x360, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa04}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @empty, 0xf}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xb7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 3.030278264s ago: executing program 2 (id=546): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e000000040003"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r4) r6 = socket(0x10, 0x80002, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="14000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 2.949521906s ago: executing program 4 (id=547): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.903878125s ago: executing program 3 (id=548): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) unshare(0x24040400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.880458919s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001400)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0xa00, 0x8001, 0x1, 0x4b4, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x4, 0x2f, 0x9, 0x0, 0x0, 0xc, 0x3}}, {0xa, 0x2, [0x3, 0x1, 0xc]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0xff, 0xcc9d, 0xbe59, 0x2, 0x3, 0xc, 0x4, 0x200]}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe5, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x7, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x7, 0x2, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x17c}}, 0x40010) 2.86462557s ago: executing program 2 (id=550): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) 2.683803904s ago: executing program 3 (id=552): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x64000000, 0x8, {0x0, @private=0xa010102, @local}}}], 0x20}}], 0x2, 0x20000000) 2.612116904s ago: executing program 3 (id=553): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000001a00000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.567801795s ago: executing program 1 (id=554): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x0, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x40044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000502080002400000000e05000300240000000900010073797a30000000000900"], 0x80}}, 0x24004800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000004c0)=0x8) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xdeb, 0x1f289572f4597d90, 0x1, 0x8, 0x9, 0x6}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="18000000010005", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900400073797a31040000000900010073797a30000000000800054000000021380000001d0a030000000000000000000700000009000100"], 0xbc}}, 0x0) recvfrom$rose(r0, &(0x7f00000014c0)=""/4096, 0x1000, 0x40000002, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.523629303s ago: executing program 2 (id=555): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001003dbd70100000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x005\x00@\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000a700000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESOCT], 0x48}}, 0x4004004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448c9, 0x0) sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x201}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 2.480463477s ago: executing program 0 (id=556): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="2ce8"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x7, 0x842, 0x200, {0x0, 0xea60}, {0x77359400}, {0xe8}, 0x1, @canfd={{0x3}, 0x16, 0x0, 0x0, 0x0, "d43e812962c87a422d2e8ff32aa561595af4b7d7af2268776ce5500187c2d51f5017d226b7a3eb6602bf978faa0b78f0641bbd996e1c6f1a2d74c6301e032d6e"}}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfff8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f00000008c0)={0x10, 0x0, 0x1, 0x2bfffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r6, r6, 0xc, 0x43, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac7a395c5e5813bc3845128e05bad960a992250417d49077e5115119c68046fe02eb1844ade0375cb76a4fc856ea0f9181", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x18c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x178, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xf0, 0x1e, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0x7, 0x4, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xfffffffd, 0x7, 0xa, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x0, 0x97ec}}]}, {0x5b, 0x6, "735481fc5bccec18b79bf4b8fa659cbbd8c37ed757cf4aa75a8d34ed392ed233de8833d5d1db15d71f80e7281f9daa5f6ec2590c2b12543ad9edb258dfebac7352e7e02452c637a3b243094de6c49c6db53cdabd410f5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.386840896s ago: executing program 4 (id=557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2004001}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2db926bd7000fddbdf2502000000080001000000000002cfecdca654d276132c529eb21da03f780e746db0e2ea6f0c5195c67a"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) 2.310045201s ago: executing program 1 (id=558): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="2ce8"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x7, 0x842, 0x200, {0x0, 0xea60}, {0x77359400}, {0xe8}, 0x1, @canfd={{0x3}, 0x16, 0x0, 0x0, 0x0, "d43e812962c87a422d2e8ff32aa561595af4b7d7af2268776ce5500187c2d51f5017d226b7a3eb6602bf978faa0b78f0641bbd996e1c6f1a2d74c6301e032d6e"}}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfff8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f00000008c0)={0x10, 0x0, 0x1, 0x2bfffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r6, r6, 0xc, 0x43, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac7a395c5e5813bc3845128e05bad960a992250417d49077e5115119c68046fe02eb1844ade0375cb76a4fc856ea0f9181", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x18c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x178, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xf0, 0x1e, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0x7, 0x4, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xfffffffd, 0x7, 0xa, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x0, 0x97ec}}]}, {0x5b, 0x6, "735481fc5bccec18b79bf4b8fa659cbbd8c37ed757cf4aa75a8d34ed392ed233de8833d5d1db15d71f80e7281f9daa5f6ec2590c2b12543ad9edb258dfebac7352e7e02452c637a3b243094de6c49c6db53cdabd410f5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.261330774s ago: executing program 4 (id=559): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="2ce8"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x7, 0x842, 0x200, {0x0, 0xea60}, {0x77359400}, {0xe8}, 0x1, @canfd={{0x3}, 0x16, 0x0, 0x0, 0x0, "d43e812962c87a422d2e8ff32aa561595af4b7d7af2268776ce5500187c2d51f5017d226b7a3eb6602bf978faa0b78f0641bbd996e1c6f1a2d74c6301e032d6e"}}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfff8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f00000008c0)={0x10, 0x0, 0x1, 0x2bfffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r6, r6, 0xc, 0x43, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac7a395c5e5813bc3845128e05bad960a992250417d49077e5115119c68046fe02eb1844ade0375cb76a4fc856ea0f9181", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x18c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x178, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xf0, 0x1e, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0x7, 0x4, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xfffffffd, 0x7, 0xa, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x0, 0x97ec}}]}, {0x5b, 0x6, "735481fc5bccec18b79bf4b8fa659cbbd8c37ed757cf4aa75a8d34ed392ed233de8833d5d1db15d71f80e7281f9daa5f6ec2590c2b12543ad9edb258dfebac7352e7e02452c637a3b243094de6c49c6db53cdabd410f5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.209459232s ago: executing program 2 (id=560): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e000000040003"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566c43d72918a8a9323fd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5d82054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fcfcffffffffffffffd442017cfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef8a4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6e257343c1a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabba3c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f3878b1e11316d8ddae1c6c3b8faaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080021000000000090ee7ba4a70a084bd994ac5e00000000000000000000000000351a30cdf57a3d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd68a34e286991f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf6433f76d5af45155536a1a44bfcbfbfd232af000052f9002a5876ed24609d478b4d99ca8bf44b852fed1f3a7f00836d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r4) r6 = socket(0x10, 0x80002, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="14000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 2.139997707s ago: executing program 3 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0xd8, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 2.029895591s ago: executing program 2 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="fa6ce69cd9d231ab0d45da49dfb9", 0x0, 0x400fea, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x28, 0x5, 0x0) 2.01334227s ago: executing program 4 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000005200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}}}}], 0x28}}], 0x1, 0x40088d0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/6, 0x6}, &(0x7f0000000040), 0x58}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x67d4, 0x2, {{0x1c, 0x4, 0x2, 0x36, 0x70, 0x64, 0x0, 0xf, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x0, 0x4, "81bb"}, @rr={0x7, 0xf, 0xe5, [@private=0xa010100, @local, @empty]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0xa, [{@empty, 0x4}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x31, 0x1, 0xd, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@remote, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@multicast2, 0x4}, {@empty, 0x6}, {@empty, 0x6}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011004e240000060018001f0100000800070000ffffff06000f000400000008001400390000000800040001000100060010"], 0x6c}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000001480)=[{}], 0x8, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x20, '\x00', r3, @fallback=0x1e, r5, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x2, 0xfffffffb, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000001840)=[r7, r8, r9, r10], &(0x7f0000001880)=[{0x3, 0x3, 0xf, 0xc}, {0x1, 0x2, 0x1}, {0x3, 0x4, 0x2, 0x2}], 0x10, 0x2, @void, @value}, 0x94) 2.00696633s ago: executing program 0 (id=564): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20010000) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc000900b800069900000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b31627481f6bba", 0x4c}], 0x1, 0x0, 0x0, 0x2663}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9}, {0xa, 0x10}, {0x6, 0x4}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 1.997695826s ago: executing program 1 (id=565): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @address_request}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 1.776098407s ago: executing program 4 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001400)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0xa00, 0x8001, 0x1, 0x4b4, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x4, 0x2f, 0x9, 0x0, 0x0, 0xc, 0x3}}, {0xa, 0x2, [0x3, 0x1, 0xc]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0xff, 0xcc9d, 0xbe59, 0x2, 0x3, 0xc, 0x4, 0x200]}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe5, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x7, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x7, 0x2, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x17c}}, 0x40010) 1.761818481s ago: executing program 0 (id=567): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x38}, 0x1, 0x800000000000000}, 0x0) 1.722930691s ago: executing program 1 (id=568): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x0, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x40044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000502080002400000000e05000300240000000900010073797a30000000000900"], 0x80}}, 0x24004800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000004c0)=0x8) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xdeb, 0x1f289572f4597d90, 0x1, 0x8, 0x9, 0x6}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="18000000010005", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900400073797a31040000000900010073797a30000000000800054000000021380000001d0a030000000000000000000700000009000100"], 0xbc}}, 0x0) recvfrom$rose(r0, &(0x7f00000014c0)=""/4096, 0x1000, 0x40000002, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.519723847s ago: executing program 1 (id=569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000062"], 0x14}, 0x1, 0x0, 0x0, 0x2004001}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2db926bd7000fddbdf2502000000080001000000000002cfecdca654d276132c529eb21da03f780e746db0e2ea6f0c5195c67a"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) 1.389668492s ago: executing program 1 (id=570): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r0}, 0xc) close(r1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x44040) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r3) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x14) getsockopt(r2, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000300010006", 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, [0xe4, 0xdcd, 0x6, 0x6b1c, 0x2, 0x7, 0x6, 0x0, 0x7, 0x3ff, 0x0, 0x8, 0x9, 0x3, 0x141c]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={r7, 0x53f}, &(0x7f00000004c0)=0x8) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.048212339s ago: executing program 2 (id=571): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x68, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8090) 149.570127ms ago: executing program 4 (id=572): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e000000040003"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r3, 0x0, 0x0}, 0x10) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r4) r6 = socket(0x10, 0x80002, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="14000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 107.907142ms ago: executing program 0 (id=573): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) getsockname$netrom(r0, 0x0, &(0x7f0000001280)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x4000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xbc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x44, 0x10, 0xfeff, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x402}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r9}, 0x14) 0s ago: executing program 3 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000880)=ANY=[@ANYBLOB="18000000040a010128bd7000ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) (fail_nth: 5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 77.044682][ T5815] cgroup: Unknown subsys name 'net' [ 77.190169][ T5815] cgroup: Unknown subsys name 'cpuset' [ 77.199359][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.871415][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.600284][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.616388][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.623897][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.632691][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.639094][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.641711][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.648885][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.654555][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.669783][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.676611][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.677867][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.692811][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.693700][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.706519][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.709179][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.716224][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.722137][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.743320][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.746313][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.761491][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.770887][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.778999][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.786966][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.790503][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.803279][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.389142][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.429225][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 82.529742][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 82.756853][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.764805][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.773704][ T5829] bridge_slave_0: entered allmulticast mode [ 82.781488][ T5829] bridge_slave_0: entered promiscuous mode [ 82.817980][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 82.845346][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.852891][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.860163][ T5825] bridge_slave_0: entered allmulticast mode [ 82.867846][ T5825] bridge_slave_0: entered promiscuous mode [ 82.876052][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.883196][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.892025][ T5825] bridge_slave_1: entered allmulticast mode [ 82.900029][ T5825] bridge_slave_1: entered promiscuous mode [ 82.908416][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.916040][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.923281][ T5829] bridge_slave_1: entered allmulticast mode [ 82.931879][ T5829] bridge_slave_1: entered promiscuous mode [ 83.027281][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.040653][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.051105][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.129767][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.142292][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.191180][ T5825] team0: Port device team_slave_0 added [ 83.220896][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.228211][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.235398][ T5827] bridge_slave_0: entered allmulticast mode [ 83.243075][ T5827] bridge_slave_0: entered promiscuous mode [ 83.267086][ T5825] team0: Port device team_slave_1 added [ 83.298995][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.306485][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.313663][ T5827] bridge_slave_1: entered allmulticast mode [ 83.321281][ T5827] bridge_slave_1: entered promiscuous mode [ 83.370194][ T5829] team0: Port device team_slave_0 added [ 83.390106][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.399768][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.407410][ T5826] bridge_slave_0: entered allmulticast mode [ 83.414608][ T5826] bridge_slave_0: entered promiscuous mode [ 83.423355][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.430575][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.438699][ T5826] bridge_slave_1: entered allmulticast mode [ 83.446382][ T5826] bridge_slave_1: entered promiscuous mode [ 83.483817][ T5829] team0: Port device team_slave_1 added [ 83.531241][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.539383][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.565665][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.599340][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.613565][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.625458][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.636385][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.643376][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.669493][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.721807][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.753220][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.760267][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.787353][ T5838] Bluetooth: hci0: command tx timeout [ 83.788399][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.793181][ T5837] Bluetooth: hci3: command tx timeout [ 83.854098][ T5826] team0: Port device team_slave_0 added [ 83.860389][ T5837] Bluetooth: hci1: command tx timeout [ 83.861369][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.866259][ T5838] Bluetooth: hci4: command tx timeout [ 83.876071][ T5845] Bluetooth: hci2: command tx timeout [ 83.886530][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.893748][ T5841] bridge_slave_0: entered allmulticast mode [ 83.901127][ T5841] bridge_slave_0: entered promiscuous mode [ 83.909602][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.917900][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.946290][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.966924][ T5827] team0: Port device team_slave_0 added [ 83.988428][ T5826] team0: Port device team_slave_1 added [ 84.009779][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.017058][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.024219][ T5841] bridge_slave_1: entered allmulticast mode [ 84.032676][ T5841] bridge_slave_1: entered promiscuous mode [ 84.070776][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.082316][ T5827] team0: Port device team_slave_1 added [ 84.137102][ T5825] hsr_slave_0: entered promiscuous mode [ 84.143609][ T5825] hsr_slave_1: entered promiscuous mode [ 84.153406][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.190666][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.197833][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.224616][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.237803][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.244784][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.270915][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.323494][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.330961][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.357618][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.394420][ T5829] hsr_slave_0: entered promiscuous mode [ 84.401585][ T5829] hsr_slave_1: entered promiscuous mode [ 84.407957][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.415820][ T5829] Cannot create hsr debugfs directory [ 84.432601][ T5841] team0: Port device team_slave_0 added [ 84.442149][ T5841] team0: Port device team_slave_1 added [ 84.448968][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.457153][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.484002][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.603246][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.610291][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.637234][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.697363][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.704375][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.730918][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.761798][ T5826] hsr_slave_0: entered promiscuous mode [ 84.769559][ T5826] hsr_slave_1: entered promiscuous mode [ 84.777152][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.784770][ T5826] Cannot create hsr debugfs directory [ 84.912985][ T5827] hsr_slave_0: entered promiscuous mode [ 84.919525][ T5827] hsr_slave_1: entered promiscuous mode [ 84.936221][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.943840][ T5827] Cannot create hsr debugfs directory [ 85.077533][ T5841] hsr_slave_0: entered promiscuous mode [ 85.084048][ T5841] hsr_slave_1: entered promiscuous mode [ 85.090506][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.098767][ T5841] Cannot create hsr debugfs directory [ 85.281827][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.322801][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.335501][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.383916][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.517332][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.528739][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.540196][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.568429][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.703949][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.729498][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.748485][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.785845][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.821010][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.856502][ T5845] Bluetooth: hci3: command tx timeout [ 85.856530][ T5838] Bluetooth: hci0: command tx timeout [ 85.893443][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.928997][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.936808][ T5838] Bluetooth: hci2: command tx timeout [ 85.936834][ T5845] Bluetooth: hci4: command tx timeout [ 85.942269][ T5837] Bluetooth: hci1: command tx timeout [ 85.959501][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.971264][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.012996][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.040454][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.119059][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.130553][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.137857][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.154731][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.165444][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.180711][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.191614][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.202904][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.210057][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.244518][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.251708][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.288609][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.295834][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.438584][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.549911][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.602311][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.629340][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.636579][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.670402][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.677597][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.751378][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.835337][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.842575][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.860887][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.868107][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.934008][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.960648][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.045188][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.145210][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.152542][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.195355][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.262261][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.269528][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.448415][ T5825] veth0_vlan: entered promiscuous mode [ 87.479580][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.541200][ T5825] veth1_vlan: entered promiscuous mode [ 87.659980][ T5825] veth0_macvtap: entered promiscuous mode [ 87.717598][ T5825] veth1_macvtap: entered promiscuous mode [ 87.741598][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.818491][ T5826] veth0_vlan: entered promiscuous mode [ 87.833660][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.858253][ T5826] veth1_vlan: entered promiscuous mode [ 87.870437][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.903461][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.913370][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922636][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.931782][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.936519][ T5837] Bluetooth: hci3: command tx timeout [ 87.946847][ T5845] Bluetooth: hci0: command tx timeout [ 87.992760][ T5829] veth0_vlan: entered promiscuous mode [ 88.015689][ T5837] Bluetooth: hci4: command tx timeout [ 88.017526][ T5845] Bluetooth: hci2: command tx timeout [ 88.026710][ T5845] Bluetooth: hci1: command tx timeout [ 88.046925][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.078052][ T5826] veth0_macvtap: entered promiscuous mode [ 88.089470][ T5829] veth1_vlan: entered promiscuous mode [ 88.099429][ T5827] veth0_vlan: entered promiscuous mode [ 88.131413][ T5826] veth1_macvtap: entered promiscuous mode [ 88.165187][ T5827] veth1_vlan: entered promiscuous mode [ 88.235440][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.246709][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.259395][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.300066][ T5829] veth0_macvtap: entered promiscuous mode [ 88.307391][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.315365][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.321516][ T5829] veth1_macvtap: entered promiscuous mode [ 88.337053][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.350908][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.362790][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.423207][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.427192][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.436993][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.445811][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.454614][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.465199][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.479124][ T5827] veth0_macvtap: entered promiscuous mode [ 88.494244][ T5827] veth1_macvtap: entered promiscuous mode [ 88.512416][ T5841] veth0_vlan: entered promiscuous mode [ 88.523525][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.534425][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.545986][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.556620][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.567839][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.621758][ T5841] veth1_vlan: entered promiscuous mode [ 88.646996][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.647545][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.669003][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.682768][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.693345][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.704700][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.744635][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.753802][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.767079][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.776330][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.793947][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.804599][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.815061][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.831765][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.843445][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.854354][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.867789][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.911951][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.922686][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.934570][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.949625][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.963569][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.974628][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.997023][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.013776][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.023085][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.079919][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.088829][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.099590][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.108583][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131701][ T5841] veth0_macvtap: entered promiscuous mode [ 89.184833][ T5841] veth1_macvtap: entered promiscuous mode [ 89.209910][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.237264][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.270351][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 89.279954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.298311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.320647][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 89.358425][ T5918] FAULT_INJECTION: forcing a failure. [ 89.358425][ T5918] name failslab, interval 1, probability 0, space 0, times 1 [ 89.374649][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: syz.2.7 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 89.374676][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 89.374691][ T5918] Call Trace: [ 89.374703][ T5918] [ 89.374712][ T5918] dump_stack_lvl+0x189/0x250 [ 89.374756][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.374784][ T5918] ? __pfx__printk+0x10/0x10 [ 89.374811][ T5918] ? ref_tracker_alloc+0x318/0x460 [ 89.374835][ T5918] should_fail_ex+0x414/0x560 [ 89.374871][ T5918] should_failslab+0xa8/0x100 [ 89.374898][ T5918] kmem_cache_alloc_noprof+0x73/0x3c0 [ 89.374921][ T5918] ? skb_clone+0x212/0x3a0 [ 89.374952][ T5918] skb_clone+0x212/0x3a0 [ 89.374982][ T5918] __netlink_deliver_tap+0x404/0x850 [ 89.375024][ T5918] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.375048][ T5918] netlink_deliver_tap+0x19c/0x1b0 [ 89.375069][ T5918] netlink_unicast+0x72f/0x8d0 [ 89.375096][ T5918] netlink_sendmsg+0x805/0xb30 [ 89.375124][ T5918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.375145][ T5918] ? aa_sock_msg_perm+0x94/0x160 [ 89.375162][ T5918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.375179][ T5918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.375198][ T5918] __sock_sendmsg+0x219/0x270 [ 89.375226][ T5918] ____sys_sendmsg+0x505/0x830 [ 89.375253][ T5918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.375281][ T5918] ? import_iovec+0x74/0xa0 [ 89.375307][ T5918] ___sys_sendmsg+0x21f/0x2a0 [ 89.375330][ T5918] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.375390][ T5918] ? __fget_files+0x2a/0x420 [ 89.375413][ T5918] ? __fget_files+0x3a0/0x420 [ 89.375446][ T5918] __x64_sys_sendmsg+0x19b/0x260 [ 89.375468][ T5918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.375501][ T5918] ? do_syscall_64+0xba/0x210 [ 89.375535][ T5918] do_syscall_64+0xf6/0x210 [ 89.375563][ T5918] ? clear_bhb_loop+0x45/0xa0 [ 89.375586][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.375603][ T5918] RIP: 0033:0x7f436278e969 [ 89.375627][ T5918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.375643][ T5918] RSP: 002b:00007f43635c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.375670][ T5918] RAX: ffffffffffffffda RBX: 00007f43629b5fa0 RCX: 00007f436278e969 [ 89.375683][ T5918] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 89.375695][ T5918] RBP: 00007f43635c2090 R08: 0000000000000000 R09: 0000000000000000 [ 89.375706][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.375716][ T5918] R13: 0000000000000000 R14: 00007f43629b5fa0 R15: 00007fffd7de1b78 [ 89.375746][ T5918] [ 89.381350][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.657027][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.667105][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.677586][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.677856][ T5921] FAULT_INJECTION: forcing a failure. [ 89.677856][ T5921] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.687862][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.706921][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.3.4 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 89.706950][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 89.706963][ T5921] Call Trace: [ 89.706972][ T5921] [ 89.706995][ T5921] dump_stack_lvl+0x189/0x250 [ 89.707030][ T5921] ? __lock_acquire+0xaac/0xd20 [ 89.707063][ T5921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.707093][ T5921] ? __pfx__printk+0x10/0x10 [ 89.707115][ T5921] ? __might_fault+0xb0/0x130 [ 89.707154][ T5921] should_fail_ex+0x414/0x560 [ 89.707197][ T5921] _copy_from_user+0x2d/0xb0 [ 89.707227][ T5921] ___sys_sendmsg+0x158/0x2a0 [ 89.707259][ T5921] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.707325][ T5921] ? __fget_files+0x2a/0x420 [ 89.707351][ T5921] ? __fget_files+0x3a0/0x420 [ 89.707390][ T5921] __x64_sys_sendmsg+0x19b/0x260 [ 89.707420][ T5921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.707466][ T5921] ? do_syscall_64+0xba/0x210 [ 89.707502][ T5921] do_syscall_64+0xf6/0x210 [ 89.707535][ T5921] ? clear_bhb_loop+0x45/0xa0 [ 89.707560][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.707580][ T5921] RIP: 0033:0x7f62bbb8e969 [ 89.707599][ T5921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.707616][ T5921] RSP: 002b:00007f62b99f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.707638][ T5921] RAX: ffffffffffffffda RBX: 00007f62bbdb6080 RCX: 00007f62bbb8e969 [ 89.707653][ T5921] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 89.707666][ T5921] RBP: 00007f62b99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 89.707678][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.707691][ T5921] R13: 0000000000000000 R14: 00007f62bbdb6080 R15: 00007fff32627448 [ 89.707722][ T5921] [ 89.906054][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.915994][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.926467][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.941165][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.961434][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.973129][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.990584][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.001550][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.015952][ T5845] Bluetooth: hci0: command tx timeout [ 90.021850][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.021932][ T5845] Bluetooth: hci3: command tx timeout [ 90.032483][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.048274][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.059592][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.073792][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.097677][ T5845] Bluetooth: hci2: command tx timeout [ 90.103778][ T5837] Bluetooth: hci4: command tx timeout [ 90.103791][ T5838] Bluetooth: hci1: command tx timeout [ 90.117434][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129782][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.138860][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.148718][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165315][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.219164][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276531][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.294231][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.446515][ T5928] tap0: tun_chr_ioctl cmd 21731 [ 90.455395][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.480498][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.570053][ T5933] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 90.588648][ T5933] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11'. [ 90.688609][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 90.720822][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.761106][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778937][ T5937] macvtap1: entered promiscuous mode [ 90.784285][ T5937] vlan0: entered promiscuous mode [ 90.797907][ T5937] macvtap1: entered allmulticast mode [ 90.803481][ T5937] vlan0: entered allmulticast mode [ 90.823972][ T5937] veth0_vlan: entered allmulticast mode [ 90.855482][ T5937] vlan0: left allmulticast mode [ 90.860581][ T5937] veth0_vlan: left allmulticast mode [ 90.866489][ T5937] vlan0: left promiscuous mode [ 90.995171][ T5884] IPVS: starting estimator thread 0... [ 91.017533][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.068311][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.116450][ T5951] IPVS: using max 27 ests per chain, 64800 per kthread [ 91.124002][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.153439][ T5943] netlink: 'syz.3.12': attribute type 12 has an invalid length. [ 91.163713][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.183324][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.218705][ T5943] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.253304][ T5953] warning: `syz.4.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.312551][ T5956] syz.1.15: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.389946][ T5957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.411578][ T5956] CPU: 1 UID: 0 PID: 5956 Comm: syz.1.15 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 91.411607][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 91.411620][ T5956] Call Trace: [ 91.411628][ T5956] [ 91.411636][ T5956] dump_stack_lvl+0x189/0x250 [ 91.411675][ T5956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.411704][ T5956] ? __pfx__printk+0x10/0x10 [ 91.411725][ T5956] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.411759][ T5956] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.411793][ T5956] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 91.411829][ T5956] warn_alloc+0x214/0x310 [ 91.411882][ T5956] ? __pfx_warn_alloc+0x10/0x10 [ 91.411910][ T5956] ? kasan_save_track+0x4f/0x80 [ 91.411932][ T5956] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 91.411956][ T5956] ? xskq_create+0x56/0x170 [ 91.411985][ T5956] ? __x64_sys_setsockopt+0x18b/0x220 [ 91.412008][ T5956] ? do_syscall_64+0xf6/0x210 [ 91.412036][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.412069][ T5956] __vmalloc_node_range_noprof+0x125/0x12c0 [ 91.412130][ T5956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.412162][ T5956] ? __kasan_kmalloc+0x93/0xb0 [ 91.412191][ T5956] vmalloc_user_noprof+0x74/0x80 [ 91.412220][ T5956] ? xskq_create+0xbf/0x170 [ 91.412245][ T5956] xskq_create+0xbf/0x170 [ 91.412276][ T5956] xsk_init_queue+0xb0/0x110 [ 91.412311][ T5956] xsk_setsockopt+0x43f/0x710 [ 91.412340][ T5956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 91.412377][ T5956] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 91.412398][ T5956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 91.412426][ T5956] do_sock_setsockopt+0x257/0x3e0 [ 91.412454][ T5956] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 91.412477][ T5956] ? __fget_files+0x2a/0x420 [ 91.412507][ T5956] ? __fget_files+0x3a0/0x420 [ 91.412531][ T5956] ? __fget_files+0x2a/0x420 [ 91.412566][ T5956] __x64_sys_setsockopt+0x18b/0x220 [ 91.412597][ T5956] do_syscall_64+0xf6/0x210 [ 91.412629][ T5956] ? clear_bhb_loop+0x45/0xa0 [ 91.412654][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.412672][ T5956] RIP: 0033:0x7f5dcdb8e969 [ 91.412690][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.412706][ T5956] RSP: 002b:00007f5dce923038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.412727][ T5956] RAX: ffffffffffffffda RBX: 00007f5dcddb5fa0 RCX: 00007f5dcdb8e969 [ 91.412741][ T5956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 91.412753][ T5956] RBP: 00007f5dcdc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 91.412764][ T5956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.412776][ T5956] R13: 0000000000000000 R14: 00007f5dcddb5fa0 R15: 00007ffecc5b2b28 [ 91.412808][ T5956] [ 91.769460][ T5956] Mem-Info: [ 91.772661][ T5956] active_anon:4637 inactive_anon:0 isolated_anon:0 [ 91.772661][ T5956] active_file:1156 inactive_file:38306 isolated_file:0 [ 91.772661][ T5956] unevictable:768 dirty:1537 writeback:0 [ 91.772661][ T5956] slab_reclaimable:10032 slab_unreclaimable:96464 [ 91.772661][ T5956] mapped:28470 shmem:1425 pagetables:889 [ 91.772661][ T5956] sec_pagetables:0 bounce:0 [ 91.772661][ T5956] kernel_misc_reclaimable:0 [ 91.772661][ T5956] free:1351861 free_pcp:859 free_cma:0 [ 91.802768][ T5963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.828258][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.864288][ T24] cfg80211: failed to load regulatory.db [ 91.969830][ T5956] Node 0 active_anon:18848kB inactive_anon:0kB active_file:4840kB inactive_file:153152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113984kB dirty:6344kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10812kB pagetables:3496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.082250][ T5956] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.186209][ T5956] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.290516][ T5977] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 92.319201][ T5956] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 92.354919][ T5956] Node 0 DMA32 free:1474440kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:20940kB inactive_anon:0kB active_file:4840kB inactive_file:153056kB unevictable:1536kB writepending:6336kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:2784kB local_pcp:1596kB free_cma:0kB [ 92.390468][ T5956] lowmem_reserve[]: 0 0 0 0 0 [ 92.395458][ T5956] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 92.489048][ T5956] lowmem_reserve[]: 0 0 0 0 0 [ 92.513666][ T5956] Node 1 Normal free:3908804kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:536kB local_pcp:440kB free_cma:0kB [ 92.585835][ T5956] lowmem_reserve[]: 0 0 0 0 0 [ 92.597614][ T5956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.665813][ T5956] Node 0 DMA32: 1*4kB (M) 5*8kB (UE) 11*16kB (E) 8*32kB (ME) 6*64kB (ME) 3*128kB (UE) 2*256kB (ME) 2*512kB (ME) 1*1024kB (M) 2*2048kB (ME) 354*4096kB (M) = 1457884kB [ 92.787980][ T5956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 92.869691][ T5956] Node 1 Normal: 160*4kB (UM) 61*8kB (UME) 38*16kB (UME) 222*32kB (UME) 96*64kB (UME) 29*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 6*2048kB (UE) 943*4096kB (M) = 3908872kB [ 92.899194][ T5956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.961868][ T5956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.015845][ T5956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.085251][ T5956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.123176][ T5956] 43067 total pagecache pages [ 93.157486][ T5956] 0 pages in swap cache [ 93.203392][ T5956] Free swap = 124996kB [ 93.220508][ T5956] Total swap = 124996kB [ 93.227488][ T5956] 2097051 pages RAM [ 93.235737][ T5956] 0 pages HighMem/MovableOnly [ 93.246659][ T5956] 424374 pages reserved [ 93.255354][ T5956] 0 pages cma reserved [ 93.684552][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.111250][ T6021] bridge_slave_1: left allmulticast mode [ 94.130609][ T6021] bridge_slave_1: left promiscuous mode [ 94.155304][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.220224][ T6021] bridge_slave_0: left allmulticast mode [ 94.223543][ T6030] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 94.234342][ T6021] bridge_slave_0: left promiscuous mode [ 94.241046][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.412436][ T6033] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 94.493990][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.506062][ T6030] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.687076][ T6038] netlink: 'syz.2.35': attribute type 21 has an invalid length. [ 94.695026][ T6038] __nla_validate_parse: 5 callbacks suppressed [ 94.695040][ T6038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35'. [ 94.810739][ T6046] netlink: 'syz.2.35': attribute type 21 has an invalid length. [ 94.839093][ T6046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.189617][ T6057] FAULT_INJECTION: forcing a failure. [ 95.189617][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 95.204982][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.2.41 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 95.205009][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 95.205020][ T6057] Call Trace: [ 95.205028][ T6057] [ 95.205036][ T6057] dump_stack_lvl+0x189/0x250 [ 95.205074][ T6057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.205102][ T6057] ? __pfx__printk+0x10/0x10 [ 95.205129][ T6057] ? __pfx___might_resched+0x10/0x10 [ 95.205146][ T6057] ? fs_reclaim_acquire+0x7d/0x100 [ 95.205180][ T6057] should_fail_ex+0x414/0x560 [ 95.205216][ T6057] should_failslab+0xa8/0x100 [ 95.205243][ T6057] kmem_cache_alloc_noprof+0x73/0x3c0 [ 95.205267][ T6057] ? __kernfs_new_node+0xd7/0x7f0 [ 95.205299][ T6057] __kernfs_new_node+0xd7/0x7f0 [ 95.205328][ T6057] ? __lock_acquire+0xaac/0xd20 [ 95.205362][ T6057] ? __pfx___kernfs_new_node+0x10/0x10 [ 95.205390][ T6057] ? kernfs_root+0x1c/0x230 [ 95.205424][ T6057] ? kernfs_root+0x1c/0x230 [ 95.205448][ T6057] ? kernfs_root+0x1c/0x230 [ 95.205478][ T6057] ? kernfs_root+0x1c/0x230 [ 95.205509][ T6057] kernfs_new_node+0x102/0x210 [ 95.205547][ T6057] __kernfs_create_file+0x4b/0x2e0 [ 95.205571][ T6057] sysfs_add_file_mode_ns+0x238/0x300 [ 95.205601][ T6057] sysfs_merge_group+0x177/0x310 [ 95.205632][ T6057] ? __pfx_sysfs_merge_group+0x10/0x10 [ 95.205660][ T6057] ? kobject_put+0x43f/0x480 [ 95.205684][ T6057] dpm_sysfs_add+0xd2/0x270 [ 95.205710][ T6057] device_add+0x4d8/0xb50 [ 95.205735][ T6057] device_create+0x25b/0x2f0 [ 95.205761][ T6057] ? init_timer_key+0x171/0x2d0 [ 95.205786][ T6057] ? __pfx_device_create+0x10/0x10 [ 95.205811][ T6057] ? ieee80211_alloc_hw_nm+0x18d2/0x1f20 [ 95.205851][ T6057] mac80211_hwsim_new_radio+0x418/0x5340 [ 95.205893][ T6057] ? stack_depot_save_flags+0x40/0x910 [ 95.205910][ T6057] ? check_slab_allocation+0xe1/0x120 [ 95.205931][ T6057] ? dev_hard_start_xmit+0x2d4/0x830 [ 95.205954][ T6057] ? __dev_queue_xmit+0x1adf/0x3a70 [ 95.205993][ T6057] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 95.206021][ T6057] ? __nla_validate_parse+0x2400/0x2d40 [ 95.206042][ T6057] ? __sock_sendmsg+0x219/0x270 [ 95.206069][ T6057] ? ____sys_sendmsg+0x505/0x830 [ 95.206105][ T6057] hwsim_new_radio_nl+0xea4/0x1b10 [ 95.206138][ T6057] ? __pfx___nla_validate_parse+0x10/0x10 [ 95.206176][ T6057] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 95.206220][ T6057] ? __nla_parse+0x40/0x60 [ 95.206245][ T6057] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 95.206281][ T6057] genl_family_rcv_msg_doit+0x212/0x300 [ 95.206316][ T6057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.206356][ T6057] ? bpf_lsm_capable+0x9/0x20 [ 95.206382][ T6057] ? security_capable+0x7e/0x2e0 [ 95.206409][ T6057] genl_rcv_msg+0x60e/0x790 [ 95.206444][ T6057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.206475][ T6057] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 95.206520][ T6057] netlink_rcv_skb+0x219/0x490 [ 95.206542][ T6057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.206570][ T6057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.206618][ T6057] ? down_read+0x1ad/0x2e0 [ 95.206639][ T6057] genl_rcv+0x28/0x40 [ 95.206663][ T6057] netlink_unicast+0x758/0x8d0 [ 95.206694][ T6057] netlink_sendmsg+0x805/0xb30 [ 95.206727][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.206752][ T6057] ? aa_sock_msg_perm+0x94/0x160 [ 95.206774][ T6057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.206795][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.206817][ T6057] __sock_sendmsg+0x219/0x270 [ 95.206851][ T6057] ____sys_sendmsg+0x505/0x830 [ 95.206882][ T6057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.206917][ T6057] ? import_iovec+0x74/0xa0 [ 95.206947][ T6057] ___sys_sendmsg+0x21f/0x2a0 [ 95.206974][ T6057] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.207037][ T6057] ? __fget_files+0x2a/0x420 [ 95.207060][ T6057] ? __fget_files+0x3a0/0x420 [ 95.207095][ T6057] __x64_sys_sendmsg+0x19b/0x260 [ 95.207123][ T6057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.207167][ T6057] ? do_syscall_64+0xba/0x210 [ 95.207196][ T6057] do_syscall_64+0xf6/0x210 [ 95.207221][ T6057] ? clear_bhb_loop+0x45/0xa0 [ 95.207240][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.207254][ T6057] RIP: 0033:0x7f436278e969 [ 95.207268][ T6057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.207281][ T6057] RSP: 002b:00007f43635c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.207297][ T6057] RAX: ffffffffffffffda RBX: 00007f43629b5fa0 RCX: 00007f436278e969 [ 95.207308][ T6057] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 95.207317][ T6057] RBP: 00007f43635c2090 R08: 0000000000000000 R09: 0000000000000000 [ 95.207326][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.207334][ T6057] R13: 0000000000000000 R14: 00007f43629b5fa0 R15: 00007fffd7de1b78 [ 95.207361][ T6057] [ 95.979885][ T6063] netlink: zone id is out of range [ 96.036975][ T6063] netlink: zone id is out of range [ 96.074084][ T6063] netlink: zone id is out of range [ 96.107839][ T6063] netlink: zone id is out of range [ 96.113431][ T6063] netlink: zone id is out of range [ 96.118899][ T6063] netlink: zone id is out of range [ 96.126116][ T6063] netlink: zone id is out of range [ 96.133551][ T6063] netlink: zone id is out of range [ 96.141205][ T6063] netlink: zone id is out of range [ 96.150000][ T6063] netlink: zone id is out of range [ 96.213542][ T6077] netlink: 'syz.4.47': attribute type 21 has an invalid length. [ 96.296598][ T6077] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.428696][ T6087] ieee802154 phy1 wpan1: encryption failed: -22 [ 96.475719][ T6087] ieee802154 phy1 wpan1: encryption failed: -22 [ 96.572232][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 97.041487][ T6102] Zero length message leads to an empty skb [ 97.817129][ T6141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.116135][ T6148] syzkaller1: entered promiscuous mode [ 98.116927][ T6155] FAULT_INJECTION: forcing a failure. [ 98.116927][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.121927][ T6148] syzkaller1: entered allmulticast mode [ 98.175796][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.4.67 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 98.175825][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 98.175837][ T6155] Call Trace: [ 98.175844][ T6155] [ 98.175853][ T6155] dump_stack_lvl+0x189/0x250 [ 98.175883][ T6155] ? __lock_acquire+0xaac/0xd20 [ 98.175913][ T6155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.175941][ T6155] ? __pfx__printk+0x10/0x10 [ 98.175961][ T6155] ? __might_fault+0xb0/0x130 [ 98.175998][ T6155] should_fail_ex+0x414/0x560 [ 98.176036][ T6155] _copy_from_user+0x2d/0xb0 [ 98.176064][ T6155] ___sys_sendmsg+0x158/0x2a0 [ 98.176093][ T6155] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.176157][ T6155] ? __fget_files+0x2a/0x420 [ 98.176181][ T6155] ? __fget_files+0x3a0/0x420 [ 98.176225][ T6155] __x64_sys_sendmsg+0x19b/0x260 [ 98.176254][ T6155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.176297][ T6155] ? do_syscall_64+0xba/0x210 [ 98.176331][ T6155] do_syscall_64+0xf6/0x210 [ 98.176361][ T6155] ? clear_bhb_loop+0x45/0xa0 [ 98.176384][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.176402][ T6155] RIP: 0033:0x7f626438e969 [ 98.176419][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.176435][ T6155] RSP: 002b:00007f6265119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.176455][ T6155] RAX: ffffffffffffffda RBX: 00007f62645b5fa0 RCX: 00007f626438e969 [ 98.176469][ T6155] RDX: 0000000000008090 RSI: 0000200000000100 RDI: 0000000000000003 [ 98.176481][ T6155] RBP: 00007f6265119090 R08: 0000000000000000 R09: 0000000000000000 [ 98.176492][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.176503][ T6155] R13: 0000000000000000 R14: 00007f62645b5fa0 R15: 00007ffca368a2a8 [ 98.176534][ T6155] [ 98.717090][ T6166] tipc: Can't bind to reserved service type 1 [ 98.878218][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 98.932737][ T6179] sctp: [Deprecated]: syz.2.75 (pid 6179) Use of int in max_burst socket option. [ 98.932737][ T6179] Use struct sctp_assoc_value instead [ 99.337763][ T6194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.637101][ T6205] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 99.644729][ T6205] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 99.687058][ T6205] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.83'. [ 99.951668][ T6217] xfrm1: entered promiscuous mode [ 99.976395][ T6217] xfrm1: entered allmulticast mode [ 100.054021][ T6220] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 100.075293][ T6225] bridge0: entered promiscuous mode [ 100.100993][ T6225] macvlan2: entered promiscuous mode [ 100.139552][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.152926][ T6220] team0: Port device bond0 added [ 100.167430][ T6220] syz.1.87 (6220) used greatest stack depth: 20024 bytes left [ 100.198168][ T6229] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 100.217548][ T6227] macvlan3: entered promiscuous mode [ 100.407392][ T6236] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 100.416542][ T6236] netlink: 224 bytes leftover after parsing attributes in process `syz.1.92'. [ 100.432677][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'. [ 100.484367][ T6236] macvtap1: entered promiscuous mode [ 100.492066][ T6236] vlan0: entered promiscuous mode [ 100.524111][ T6236] macvtap1: entered allmulticast mode [ 100.533842][ T6236] vlan0: entered allmulticast mode [ 100.539454][ T6236] veth0_vlan: entered allmulticast mode [ 100.566339][ T6236] vlan0: left allmulticast mode [ 100.571303][ T6236] veth0_vlan: left allmulticast mode [ 100.579545][ T6236] vlan0: left promiscuous mode [ 100.820881][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.831649][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.900511][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.917162][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.946818][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.970408][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.004205][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.020446][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.031585][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.042968][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.079611][ T6252] batadv_slave_0: entered promiscuous mode [ 101.092685][ T6252] batadv_slave_0: left promiscuous mode [ 101.259142][ T6270] FAULT_INJECTION: forcing a failure. [ 101.259142][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 101.339776][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.1.102 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 101.339804][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 101.339815][ T6270] Call Trace: [ 101.339822][ T6270] [ 101.339830][ T6270] dump_stack_lvl+0x189/0x250 [ 101.339866][ T6270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.339894][ T6270] ? __pfx__printk+0x10/0x10 [ 101.339926][ T6270] should_fail_ex+0x414/0x560 [ 101.339962][ T6270] should_failslab+0xa8/0x100 [ 101.339989][ T6270] __kmalloc_cache_noprof+0x70/0x3d0 [ 101.340013][ T6270] ? sctp_add_bind_addr+0x8c/0x370 [ 101.340048][ T6270] sctp_add_bind_addr+0x8c/0x370 [ 101.340082][ T6270] sctp_copy_local_addr_list+0x30b/0x4e0 [ 101.340116][ T6270] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 101.340164][ T6270] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 101.340196][ T6270] ? sctp_v6_is_any+0x64/0x80 [ 101.340218][ T6270] ? sctp_copy_one_addr+0x93/0x360 [ 101.340251][ T6270] sctp_bind_addr_copy+0xb3/0x3c0 [ 101.340283][ T6270] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 101.340314][ T6270] sctp_connect_new_asoc+0x2e0/0x690 [ 101.340342][ T6270] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 101.340364][ T6270] ? __local_bh_enable_ip+0x12d/0x1c0 [ 101.340403][ T6270] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 101.340426][ T6270] ? security_sctp_bind_connect+0x7e/0x2e0 [ 101.340459][ T6270] sctp_sendmsg+0x155c/0x2810 [ 101.340495][ T6270] ? __pfx_sctp_sendmsg+0x10/0x10 [ 101.340522][ T6270] ? aa_sk_perm+0x81e/0x950 [ 101.340546][ T6270] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.340568][ T6270] ? sock_rps_record_flow+0x19/0x410 [ 101.340610][ T6270] ? inet_sendmsg+0x2f4/0x370 [ 101.340643][ T6270] __sock_sendmsg+0x19c/0x270 [ 101.340679][ T6270] __sys_sendto+0x3bd/0x520 [ 101.340705][ T6270] ? __pfx___sys_sendto+0x10/0x10 [ 101.340724][ T6270] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 101.340769][ T6270] ? __fget_files+0x3a0/0x420 [ 101.340806][ T6270] ? ksys_write+0x1f0/0x250 [ 101.340826][ T6270] ? rcu_is_watching+0x15/0xb0 [ 101.340866][ T6270] __x64_sys_sendto+0xde/0x100 [ 101.340893][ T6270] do_syscall_64+0xf6/0x210 [ 101.340923][ T6270] ? clear_bhb_loop+0x45/0xa0 [ 101.340947][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.340965][ T6270] RIP: 0033:0x7f5dcdb8e969 [ 101.340983][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.340999][ T6270] RSP: 002b:00007f5dce923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 101.341019][ T6270] RAX: ffffffffffffffda RBX: 00007f5dcddb5fa0 RCX: 00007f5dcdb8e969 [ 101.341033][ T6270] RDX: 00000000000002f4 RSI: 0000200000847fff RDI: 0000000000000003 [ 101.341045][ T6270] RBP: 00007f5dce923090 R08: 000020000005ffe4 R09: 000000000000001c [ 101.341058][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.341069][ T6270] R13: 0000000000000000 R14: 00007f5dcddb5fa0 R15: 00007ffecc5b2b28 [ 101.341101][ T6270] [ 101.946135][ T6283] FAULT_INJECTION: forcing a failure. [ 101.946135][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 102.000507][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.105 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 102.000536][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 102.000547][ T6283] Call Trace: [ 102.000554][ T6283] [ 102.000562][ T6283] dump_stack_lvl+0x189/0x250 [ 102.000598][ T6283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.000627][ T6283] ? __pfx__printk+0x10/0x10 [ 102.000652][ T6283] ? __pfx___might_resched+0x10/0x10 [ 102.000669][ T6283] ? fs_reclaim_acquire+0x7d/0x100 [ 102.000702][ T6283] should_fail_ex+0x414/0x560 [ 102.000739][ T6283] should_failslab+0xa8/0x100 [ 102.000778][ T6283] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 102.000803][ T6283] ? __alloc_skb+0x112/0x2d0 [ 102.000829][ T6283] __alloc_skb+0x112/0x2d0 [ 102.000856][ T6283] netlink_ack+0x146/0xa50 [ 102.000874][ T6283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.000899][ T6283] ? ref_tracker_free+0x63a/0x7d0 [ 102.000917][ T6283] ? __copy_skb_header+0xa7/0x550 [ 102.000952][ T6283] netlink_rcv_skb+0x2a0/0x490 [ 102.000973][ T6283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.001002][ T6283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.001041][ T6283] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.001062][ T6283] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.001089][ T6283] netlink_unicast+0x758/0x8d0 [ 102.001119][ T6283] netlink_sendmsg+0x805/0xb30 [ 102.001149][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.001174][ T6283] ? aa_sock_msg_perm+0x94/0x160 [ 102.001199][ T6283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.001220][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.001243][ T6283] __sock_sendmsg+0x219/0x270 [ 102.001277][ T6283] ____sys_sendmsg+0x505/0x830 [ 102.001308][ T6283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.001342][ T6283] ? import_iovec+0x74/0xa0 [ 102.001373][ T6283] ___sys_sendmsg+0x21f/0x2a0 [ 102.001400][ T6283] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.001462][ T6283] ? __fget_files+0x2a/0x420 [ 102.001487][ T6283] ? __fget_files+0x3a0/0x420 [ 102.001522][ T6283] __x64_sys_sendmsg+0x19b/0x260 [ 102.001550][ T6283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.001592][ T6283] ? do_syscall_64+0xba/0x210 [ 102.001625][ T6283] do_syscall_64+0xf6/0x210 [ 102.001654][ T6283] ? clear_bhb_loop+0x45/0xa0 [ 102.001677][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.001696][ T6283] RIP: 0033:0x7f62bbb8e969 [ 102.001731][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.001747][ T6283] RSP: 002b:00007f62bc924038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.001784][ T6283] RAX: ffffffffffffffda RBX: 00007f62bbdb5fa0 RCX: 00007f62bbb8e969 [ 102.001817][ T6283] RDX: 0000000000040010 RSI: 00002000000012c0 RDI: 0000000000000003 [ 102.001829][ T6283] RBP: 00007f62bc924090 R08: 0000000000000000 R09: 0000000000000000 [ 102.001841][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.001852][ T6283] R13: 0000000000000000 R14: 00007f62bbdb5fa0 R15: 00007fff32627448 [ 102.001882][ T6283] [ 102.341855][ T6286] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 102.349652][ T6286] netlink: 224 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.372683][ T6285] Bluetooth: MGMT ver 1.23 [ 102.380853][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 102.391770][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 102.406841][ T6286] macvtap1: entered promiscuous mode [ 102.422035][ T6286] vlan0: entered promiscuous mode [ 102.479829][ T6286] macvtap1: entered allmulticast mode [ 102.562174][ T6286] vlan0: entered allmulticast mode [ 102.595829][ T6286] veth0_vlan: entered allmulticast mode [ 102.625099][ T6286] vlan0: left allmulticast mode [ 102.660043][ T6286] veth0_vlan: left allmulticast mode [ 102.673950][ T6286] vlan0: left promiscuous mode [ 103.011928][ T6306] netlink: 'syz.4.114': attribute type 20 has an invalid length. [ 103.092819][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.116'. [ 103.109308][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 103.142263][ T6319] netlink: 'syz.1.118': attribute type 30 has an invalid length. [ 103.156208][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 103.173638][ T6310] netlink: 'syz.3.116': attribute type 8 has an invalid length. [ 103.185291][ T6310] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 103.469866][ T6328] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.120'. [ 103.500821][ T6327] netlink: 'syz.3.121': attribute type 2 has an invalid length. [ 103.543822][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 103.584298][ T6327] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 103.735204][ T6327] team0: Port device wlan1 added [ 104.124365][ T6344] FAULT_INJECTION: forcing a failure. [ 104.124365][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.215759][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.0.127 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 104.215788][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 104.215800][ T6344] Call Trace: [ 104.215808][ T6344] [ 104.215817][ T6344] dump_stack_lvl+0x189/0x250 [ 104.215855][ T6344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.215884][ T6344] ? __pfx__printk+0x10/0x10 [ 104.215918][ T6344] should_fail_ex+0x414/0x560 [ 104.215955][ T6344] _copy_to_user+0x31/0xb0 [ 104.215984][ T6344] simple_read_from_buffer+0xe1/0x170 [ 104.216014][ T6344] proc_fail_nth_read+0x1df/0x250 [ 104.216046][ T6344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.216077][ T6344] ? rw_verify_area+0x258/0x650 [ 104.216098][ T6344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.216127][ T6344] vfs_read+0x1fd/0x980 [ 104.216155][ T6344] ? __pfx___mutex_lock+0x10/0x10 [ 104.216185][ T6344] ? __pfx_vfs_read+0x10/0x10 [ 104.216208][ T6344] ? __fget_files+0x2a/0x420 [ 104.216238][ T6344] ? __fget_files+0x3a0/0x420 [ 104.216261][ T6344] ? __fget_files+0x2a/0x420 [ 104.216296][ T6344] ksys_read+0x145/0x250 [ 104.216321][ T6344] ? __pfx_ksys_read+0x10/0x10 [ 104.216354][ T6344] do_syscall_64+0xf6/0x210 [ 104.216390][ T6344] ? clear_bhb_loop+0x45/0xa0 [ 104.216414][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.216432][ T6344] RIP: 0033:0x7fb057d8d37c [ 104.216449][ T6344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.216465][ T6344] RSP: 002b:00007fb058c31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.216486][ T6344] RAX: ffffffffffffffda RBX: 00007fb057fb5fa0 RCX: 00007fb057d8d37c [ 104.216499][ T6344] RDX: 000000000000000f RSI: 00007fb058c310a0 RDI: 0000000000000004 [ 104.216510][ T6344] RBP: 00007fb058c31090 R08: 0000000000000000 R09: 0000000000000000 [ 104.216522][ T6344] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 104.216534][ T6344] R13: 0000000000000000 R14: 00007fb057fb5fa0 R15: 00007ffe80f07b18 [ 104.216576][ T6344] [ 104.463748][ T6350] IPv6: Can't replace route, no match found [ 104.516039][ T6353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.526013][ T6353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.534837][ T6353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.543775][ T6353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.088425][ T6372] net_ratelimit: 17 callbacks suppressed [ 105.088445][ T6372] openvswitch: netlink: Message has 8 unknown bytes. [ 105.511076][ T6395] __nla_validate_parse: 8 callbacks suppressed [ 105.511095][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 105.697752][ T6390] syzkaller0: entered promiscuous mode [ 105.704132][ T6390] syzkaller0: entered allmulticast mode [ 105.727336][ T6395] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.751217][ T6395] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.008565][ T6409] openvswitch: netlink: Key type 5136 is out of range max 32 [ 107.775459][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 107.859784][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.160'. [ 107.953555][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.160'. [ 108.179201][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 108.417023][ T6446] syzkaller0: entered promiscuous mode [ 108.438024][ T6446] syzkaller0: entered allmulticast mode [ 109.868672][ T6480] Bluetooth: MGMT ver 1.23 [ 109.881419][ T6480] netlink: 'syz.1.174': attribute type 27 has an invalid length. [ 109.962535][ T6485] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 110.029318][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 110.333226][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.363935][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.445057][ T6480] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.454896][ T6480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.465269][ T6480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.475076][ T6480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.524077][ T6480] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.535417][ T6480] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.544434][ T6480] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.553370][ T6480] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.571529][ T6485] lo: entered promiscuous mode [ 110.583152][ T6485] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.749118][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.765948][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 110.775799][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.853536][ T6503] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.862500][ T6503] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.871519][ T6503] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.880360][ T6503] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.124807][ T6517] netlink: 'syz.4.190': attribute type 3 has an invalid length. [ 111.155614][ T6517] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 111.163333][ T6517] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.190'. [ 111.353962][ T6529] bond0: (slave vlan2): Opening slave failed [ 111.409577][ T6526] tap0: tun_chr_ioctl cmd 21731 [ 111.414623][ T6526] FAULT_INJECTION: forcing a failure. [ 111.414623][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 111.428765][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.3.194 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 111.428791][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 111.428802][ T6526] Call Trace: [ 111.428809][ T6526] [ 111.428817][ T6526] dump_stack_lvl+0x189/0x250 [ 111.428852][ T6526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.428889][ T6526] ? __pfx__printk+0x10/0x10 [ 111.428915][ T6526] ? __pfx___might_resched+0x10/0x10 [ 111.428932][ T6526] ? fs_reclaim_acquire+0x7d/0x100 [ 111.428967][ T6526] should_fail_ex+0x414/0x560 [ 111.429005][ T6526] should_failslab+0xa8/0x100 [ 111.429034][ T6526] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.429059][ T6526] ? security_inode_alloc+0x39/0x330 [ 111.429088][ T6526] security_inode_alloc+0x39/0x330 [ 111.429114][ T6526] inode_init_always_gfp+0x9ed/0xdc0 [ 111.429149][ T6526] alloc_inode+0x82/0x1b0 [ 111.429174][ T6526] path_from_stashed+0x299/0x8f0 [ 111.429206][ T6526] ? aa_get_newest_label+0xf7/0x5d0 [ 111.429230][ T6526] ? __pfx_path_from_stashed+0x10/0x10 [ 111.429254][ T6526] ? netdev_info+0x10a/0x160 [ 111.429286][ T6526] open_namespace+0x91/0x180 [ 111.429310][ T6526] ? __pfx_open_namespace+0x10/0x10 [ 111.429334][ T6526] ? security_capable+0x7e/0x2e0 [ 111.429355][ T6526] ? __pfx_get_net_ns+0x10/0x10 [ 111.429381][ T6526] __tun_chr_ioctl+0x12bd/0x1d90 [ 111.429418][ T6526] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 111.429474][ T6526] ? __fget_files+0x3a0/0x420 [ 111.429499][ T6526] ? __fget_files+0x2a/0x420 [ 111.429528][ T6526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.429553][ T6526] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 111.429580][ T6526] __se_sys_ioctl+0xf9/0x170 [ 111.429604][ T6526] do_syscall_64+0xf6/0x210 [ 111.429635][ T6526] ? clear_bhb_loop+0x45/0xa0 [ 111.429660][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.429679][ T6526] RIP: 0033:0x7f62bbb8e969 [ 111.429696][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.429712][ T6526] RSP: 002b:00007f62bc924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.429733][ T6526] RAX: ffffffffffffffda RBX: 00007f62bbdb5fa0 RCX: 00007f62bbb8e969 [ 111.429746][ T6526] RDX: 0000000000000000 RSI: 00000000000054e3 RDI: 0000000000000003 [ 111.429757][ T6526] RBP: 00007f62bc924090 R08: 0000000000000000 R09: 0000000000000000 [ 111.429769][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.429779][ T6526] R13: 0000000000000000 R14: 00007f62bbdb5fa0 R15: 00007fff32627448 [ 111.429809][ T6526] [ 111.492030][ T6535] netlink: 'syz.0.197': attribute type 27 has an invalid length. [ 111.549484][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 111.780708][ T6537] netlink: 340 bytes leftover after parsing attributes in process `syz.4.196'. [ 112.014800][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.022845][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.242081][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.292100][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.348387][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 112.415986][ T6535] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.425259][ T6535] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.434837][ T6535] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.444626][ T6535] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.496210][ T6535] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.505177][ T6535] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.514592][ T6535] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.523594][ T6535] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.917231][ T6577] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 112.948089][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.209'. [ 113.094718][ T6577] macvtap1: entered promiscuous mode [ 113.123997][ T6577] vlan0: entered promiscuous mode [ 113.144390][ T6577] macvtap1: entered allmulticast mode [ 113.176598][ T6577] vlan0: entered allmulticast mode [ 113.181807][ T6577] veth0_vlan: entered allmulticast mode [ 113.233489][ T6577] vlan0: left allmulticast mode [ 113.247721][ T6577] veth0_vlan: left allmulticast mode [ 113.255398][ T6577] vlan0: left promiscuous mode [ 113.548047][ T6596] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 113.584353][ T6596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.216'. [ 113.690306][ T6596] macvtap1: entered promiscuous mode [ 113.709351][ T6596] vlan0: entered promiscuous mode [ 113.720706][ T6596] macvtap1: entered allmulticast mode [ 113.756214][ T6596] vlan0: entered allmulticast mode [ 113.761504][ T6596] veth0_vlan: entered allmulticast mode [ 113.796229][ T6596] vlan0: left allmulticast mode [ 113.802453][ T6596] veth0_vlan: left allmulticast mode [ 113.816486][ T6596] vlan0: left promiscuous mode [ 114.101903][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 114.775816][ T6639] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.906324][ T6641] openvswitch: netlink: Message has 8 unknown bytes. [ 115.066031][ T6648] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 115.493548][ T6670] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 115.722231][ T6672] sctp: [Deprecated]: syz.4.246 (pid 6672) Use of int in max_burst socket option. [ 115.722231][ T6672] Use struct sctp_assoc_value instead [ 115.963625][ T6682] __nla_validate_parse: 7 callbacks suppressed [ 115.963644][ T6682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 115.981950][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 115.995325][ T6682] No such timeout policy "syz0" [ 116.581930][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 116.614358][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 116.628617][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 116.668104][ T6717] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.677667][ T6717] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.687107][ T6717] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.696454][ T6717] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.214287][ T6741] netlink: 'syz.2.274': attribute type 5 has an invalid length. [ 117.396690][ T6740] syzkaller0: entered promiscuous mode [ 117.402248][ T6740] syzkaller0: entered allmulticast mode [ 117.581742][ T6752] FAULT_INJECTION: forcing a failure. [ 117.581742][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.614980][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.2.276 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 117.615007][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 117.615019][ T6752] Call Trace: [ 117.615027][ T6752] [ 117.615035][ T6752] dump_stack_lvl+0x189/0x250 [ 117.615065][ T6752] ? __lock_acquire+0xaac/0xd20 [ 117.615112][ T6752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.615141][ T6752] ? __pfx__printk+0x10/0x10 [ 117.615161][ T6752] ? __might_fault+0xb0/0x130 [ 117.615199][ T6752] should_fail_ex+0x414/0x560 [ 117.615236][ T6752] _copy_from_user+0x2d/0xb0 [ 117.615263][ T6752] ___sys_sendmsg+0x158/0x2a0 [ 117.615290][ T6752] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.615361][ T6752] ? __fget_files+0x2a/0x420 [ 117.615386][ T6752] ? __fget_files+0x3a0/0x420 [ 117.615421][ T6752] __x64_sys_sendmsg+0x19b/0x260 [ 117.615450][ T6752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.615493][ T6752] ? do_syscall_64+0xba/0x210 [ 117.615528][ T6752] do_syscall_64+0xf6/0x210 [ 117.615558][ T6752] ? clear_bhb_loop+0x45/0xa0 [ 117.615581][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.615596][ T6752] RIP: 0033:0x7f436278e969 [ 117.615611][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.615625][ T6752] RSP: 002b:00007f43635c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.615643][ T6752] RAX: ffffffffffffffda RBX: 00007f43629b5fa0 RCX: 00007f436278e969 [ 117.615655][ T6752] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 117.615664][ T6752] RBP: 00007f43635c2090 R08: 0000000000000000 R09: 0000000000000000 [ 117.615673][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.615682][ T6752] R13: 0000000000000000 R14: 00007f43629b5fa0 R15: 00007fffd7de1b78 [ 117.615708][ T6752] [ 118.150686][ T6761] xt_CT: No such helper "pptp" [ 118.251754][ T6761] trusted_key: syz.2.279 sent an empty control message without MSG_MORE. [ 118.388525][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 118.479667][ T6769] netlink: 256 bytes leftover after parsing attributes in process `syz.2.279'. [ 118.572573][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 118.752634][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 118.766199][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 119.421903][ T6755] veth0_to_bond: entered promiscuous mode [ 119.559674][ T6768] bridge_slave_1: left allmulticast mode [ 119.566693][ T6768] bridge_slave_1: left promiscuous mode [ 119.572588][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.594875][ T6768] bridge_slave_0: left allmulticast mode [ 119.601167][ T6768] bridge_slave_0: left promiscuous mode [ 119.608914][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.687604][ T6782] netlink: 'syz.0.283': attribute type 33 has an invalid length. [ 120.185227][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.214129][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.224683][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.233146][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.240636][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.248143][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 120.255765][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 120.263720][ T5882] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 120.279629][ T5882] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 120.782318][ T6828] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 120.806867][ T6828] macvtap1: entered promiscuous mode [ 120.815394][ T6828] vlan0: entered promiscuous mode [ 120.822367][ T6828] macvtap1: entered allmulticast mode [ 120.828134][ T6828] vlan0: entered allmulticast mode [ 120.833350][ T6828] veth0_vlan: entered allmulticast mode [ 120.857877][ T6828] vlan0: left allmulticast mode [ 120.872428][ T6828] veth0_vlan: left allmulticast mode [ 120.884761][ T6828] vlan0: left promiscuous mode [ 120.936053][ T6833] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 121.068487][ T6840] __nla_validate_parse: 38 callbacks suppressed [ 121.068508][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'. [ 121.642938][ T6860] syzkaller1: entered promiscuous mode [ 121.659695][ T6860] syzkaller1: entered allmulticast mode [ 122.168016][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 122.284310][ T6889] xt_hashlimit: size too large, truncated to 1048576 [ 122.302586][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 122.332904][ T6891] FAULT_INJECTION: forcing a failure. [ 122.332904][ T6891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.340432][ T6895] xt_hashlimit: size too large, truncated to 1048576 [ 122.375401][ T6891] CPU: 1 UID: 0 PID: 6891 Comm: syz.0.322 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 122.375432][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 122.375444][ T6891] Call Trace: [ 122.375452][ T6891] [ 122.375461][ T6891] dump_stack_lvl+0x189/0x250 [ 122.375493][ T6891] ? __lock_acquire+0xaac/0xd20 [ 122.375527][ T6891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.375554][ T6891] ? __pfx__printk+0x10/0x10 [ 122.375574][ T6891] ? __might_fault+0xb0/0x130 [ 122.375609][ T6891] should_fail_ex+0x414/0x560 [ 122.375646][ T6891] _copy_from_user+0x2d/0xb0 [ 122.375675][ T6891] kstrtouint_from_user+0xc4/0x170 [ 122.375701][ T6891] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 122.375743][ T6891] proc_fail_nth_write+0x88/0x240 [ 122.375772][ T6891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.375803][ T6891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.375831][ T6891] vfs_write+0x27b/0xa90 [ 122.375861][ T6891] ? __pfx_vfs_write+0x10/0x10 [ 122.375893][ T6891] ? __fget_files+0x2a/0x420 [ 122.375924][ T6891] ? __fget_files+0x3a0/0x420 [ 122.375948][ T6891] ? __fget_files+0x2a/0x420 [ 122.375984][ T6891] ksys_write+0x145/0x250 [ 122.376009][ T6891] ? __pfx_ksys_write+0x10/0x10 [ 122.376036][ T6891] ? do_syscall_64+0xba/0x210 [ 122.376070][ T6891] do_syscall_64+0xf6/0x210 [ 122.376100][ T6891] ? asm_sysvec_call_function_single+0x1a/0x20 [ 122.376120][ T6891] ? clear_bhb_loop+0x45/0xa0 [ 122.376145][ T6891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.376163][ T6891] RIP: 0033:0x7fb057d8d41f [ 122.376180][ T6891] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 122.376196][ T6891] RSP: 002b:00007fb058c31030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.376216][ T6891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb057d8d41f [ 122.376230][ T6891] RDX: 0000000000000001 RSI: 00007fb058c310a0 RDI: 0000000000000004 [ 122.376242][ T6891] RBP: 00007fb058c31090 R08: 0000000000000000 R09: 0000000000000000 [ 122.376253][ T6891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 122.376264][ T6891] R13: 0000000000000000 R14: 00007fb057fb5fa0 R15: 00007ffe80f07b18 [ 122.376296][ T6891] [ 122.624911][ T6897] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 122.632938][ T6897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.323'. [ 123.070477][ T6897] team0: entered promiscuous mode [ 123.076776][ T6897] team_slave_0: entered promiscuous mode [ 123.082740][ T6897] team_slave_1: entered promiscuous mode [ 123.091130][ T6897] team0: entered allmulticast mode [ 123.097571][ T6897] team_slave_0: entered allmulticast mode [ 123.103339][ T6897] team_slave_1: entered allmulticast mode [ 123.110453][ T6897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 123.146836][ T6910] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 123.154648][ T6910] lo: entered promiscuous mode [ 123.169246][ T6910] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.266354][ T6913] FAULT_INJECTION: forcing a failure. [ 123.266354][ T6913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.316148][ T6913] CPU: 0 UID: 0 PID: 6913 Comm: syz.4.329 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 123.316193][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 123.316213][ T6913] Call Trace: [ 123.316227][ T6913] [ 123.316242][ T6913] dump_stack_lvl+0x189/0x250 [ 123.316301][ T6913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.316351][ T6913] ? __pfx__printk+0x10/0x10 [ 123.316415][ T6913] should_fail_ex+0x414/0x560 [ 123.316481][ T6913] _copy_to_user+0x31/0xb0 [ 123.316533][ T6913] simple_read_from_buffer+0xe1/0x170 [ 123.316573][ T6913] proc_fail_nth_read+0x1df/0x250 [ 123.316605][ T6913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.316636][ T6913] ? rw_verify_area+0x258/0x650 [ 123.316656][ T6913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.316685][ T6913] vfs_read+0x1fd/0x980 [ 123.316712][ T6913] ? __pfx___mutex_lock+0x10/0x10 [ 123.316743][ T6913] ? __pfx_vfs_read+0x10/0x10 [ 123.316765][ T6913] ? __fget_files+0x2a/0x420 [ 123.316795][ T6913] ? __fget_files+0x3a0/0x420 [ 123.316819][ T6913] ? __fget_files+0x2a/0x420 [ 123.316854][ T6913] ksys_read+0x145/0x250 [ 123.316878][ T6913] ? __pfx_ksys_read+0x10/0x10 [ 123.316904][ T6913] ? do_syscall_64+0xba/0x210 [ 123.316939][ T6913] do_syscall_64+0xf6/0x210 [ 123.316970][ T6913] ? clear_bhb_loop+0x45/0xa0 [ 123.316996][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.317014][ T6913] RIP: 0033:0x7f626438d37c [ 123.317031][ T6913] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.317046][ T6913] RSP: 002b:00007f6265119030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.317067][ T6913] RAX: ffffffffffffffda RBX: 00007f62645b5fa0 RCX: 00007f626438d37c [ 123.317081][ T6913] RDX: 000000000000000f RSI: 00007f62651190a0 RDI: 0000000000000005 [ 123.317093][ T6913] RBP: 00007f6265119090 R08: 0000000000000000 R09: 0000000000000000 [ 123.317105][ T6913] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.317116][ T6913] R13: 0000000000000000 R14: 00007f62645b5fa0 R15: 00007ffca368a2a8 [ 123.317147][ T6913] [ 124.179331][ T6948] bridge1: entered promiscuous mode [ 124.200335][ T6948] bridge1: entered allmulticast mode [ 124.231580][ T6948] team0: Port device bridge1 added [ 125.116055][ T6991] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 125.129087][ T6991] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 125.168780][ T6991] team0: Device veth1_macvtap failed to register rx_handler [ 126.430194][ T7039] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 126.462389][ T7039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.372'. [ 126.707709][ T7039] macvtap1: entered promiscuous mode [ 126.750846][ T7039] vlan0: entered promiscuous mode [ 126.806075][ T7039] macvtap1: entered allmulticast mode [ 126.835880][ T7039] vlan0: entered allmulticast mode [ 126.851979][ T7039] veth0_vlan: entered allmulticast mode [ 126.996257][ T7039] vlan0: left allmulticast mode [ 127.025812][ T7039] veth0_vlan: left allmulticast mode [ 127.062761][ T7039] vlan0: left promiscuous mode [ 127.593951][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'. [ 127.998146][ T7105] veth1_to_bond: entered allmulticast mode [ 128.018204][ T7105] veth1_to_bond: entered promiscuous mode [ 128.054732][ T7104] veth1_to_bond: left promiscuous mode [ 128.075911][ T7104] veth1_to_bond: left allmulticast mode [ 128.107306][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 128.373928][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.397'. [ 128.395704][ T7120] netlink: 256 bytes leftover after parsing attributes in process `syz.1.396'. [ 129.090363][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.412'. [ 129.113176][ T7160] gretap1: entered promiscuous mode [ 129.451359][ T7167] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 129.455953][ T7171] bridge_slave_0: left allmulticast mode [ 129.482877][ T7171] bridge_slave_0: left promiscuous mode [ 129.512960][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.567950][ T7171] bridge_slave_1: left allmulticast mode [ 129.594457][ T7171] bridge_slave_1: left promiscuous mode [ 129.605982][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 129.637505][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.674883][ T7171] bond0: (slave bond_slave_0): Releasing backup interface [ 129.675261][ T7185] netlink: 408 bytes leftover after parsing attributes in process `syz.2.420'. [ 129.700847][ T7185] netlink: 104 bytes leftover after parsing attributes in process `syz.2.420'. [ 129.713594][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 129.723214][ T7171] bond0: (slave bond_slave_1): Releasing backup interface [ 129.752437][ T7171] team0: Port device team_slave_0 removed [ 129.772089][ T7171] team0: Port device team_slave_1 removed [ 129.782016][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.792223][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.818639][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.843948][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.885376][ T7171] team0: Port device bridge1 removed [ 129.943432][ T7167] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.309827][ T7206] FAULT_INJECTION: forcing a failure. [ 130.309827][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 130.367893][ T7206] CPU: 1 UID: 0 PID: 7206 Comm: syz.4.427 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 130.367921][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 130.367933][ T7206] Call Trace: [ 130.367941][ T7206] [ 130.367949][ T7206] dump_stack_lvl+0x189/0x250 [ 130.367985][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.368020][ T7206] ? __pfx__printk+0x10/0x10 [ 130.368046][ T7206] ? __pfx___might_resched+0x10/0x10 [ 130.368070][ T7206] should_fail_ex+0x414/0x560 [ 130.368107][ T7206] should_failslab+0xa8/0x100 [ 130.368134][ T7206] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 130.368160][ T7206] ? __alloc_skb+0x112/0x2d0 [ 130.368185][ T7206] __alloc_skb+0x112/0x2d0 [ 130.368212][ T7206] netlink_sendmsg+0x5c6/0xb30 [ 130.368245][ T7206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.368271][ T7206] ? aa_sock_msg_perm+0x94/0x160 [ 130.368294][ T7206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.368315][ T7206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.368339][ T7206] __sock_sendmsg+0x219/0x270 [ 130.368373][ T7206] ____sys_sendmsg+0x505/0x830 [ 130.368404][ T7206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.368439][ T7206] ? import_iovec+0x74/0xa0 [ 130.368470][ T7206] ___sys_sendmsg+0x21f/0x2a0 [ 130.368498][ T7206] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.368558][ T7206] ? __fget_files+0x2a/0x420 [ 130.368582][ T7206] ? __fget_files+0x3a0/0x420 [ 130.368616][ T7206] __x64_sys_sendmsg+0x19b/0x260 [ 130.368644][ T7206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.368687][ T7206] ? do_syscall_64+0xba/0x210 [ 130.368721][ T7206] do_syscall_64+0xf6/0x210 [ 130.368750][ T7206] ? clear_bhb_loop+0x45/0xa0 [ 130.368775][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.368794][ T7206] RIP: 0033:0x7f626438e969 [ 130.368810][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.368826][ T7206] RSP: 002b:00007f6265119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.368847][ T7206] RAX: ffffffffffffffda RBX: 00007f62645b5fa0 RCX: 00007f626438e969 [ 130.368861][ T7206] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 130.368872][ T7206] RBP: 00007f6265119090 R08: 0000000000000000 R09: 0000000000000000 [ 130.368888][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.368899][ T7206] R13: 0000000000000000 R14: 00007f62645b5fa0 R15: 00007ffca368a2a8 [ 130.368930][ T7206] [ 130.771842][ T7214] netlink: 'syz.4.431': attribute type 2 has an invalid length. [ 130.979331][ T7223] lo: left promiscuous mode [ 131.061840][ T7223] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.587962][ T7248] tap0: tun_chr_ioctl cmd 21731 [ 131.619461][ T7251] __nla_validate_parse: 6 callbacks suppressed [ 131.619510][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 131.686610][ T7251] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.695423][ T7251] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.704613][ T7251] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.713946][ T7251] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.787124][ T7251] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.796769][ T7251] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.806360][ T7251] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.815282][ T7251] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.200080][ T7272] Illegal XDP return value 4291244032 on prog (id 128) dev N/A, expect packet loss! [ 132.311222][ T7278] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 132.345602][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 132.360489][ T7278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 132.969486][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 133.548771][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 133.573613][ T7319] syzkaller1: entered promiscuous mode [ 133.583863][ T7319] syzkaller1: entered allmulticast mode [ 133.613263][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 133.861072][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.474'. [ 133.929568][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.473'. [ 134.304832][ T7351] netlink: 'syz.0.477': attribute type 5 has an invalid length. [ 134.585264][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 134.711469][ T7368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.658263][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 135.894202][ T7400] syzkaller0: entered promiscuous mode [ 135.903450][ T7400] syzkaller0: entered allmulticast mode [ 136.072708][ T7405] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.094121][ T7405] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.210961][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 136.252126][ T7407] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.262129][ T7407] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.271438][ T7407] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.280426][ T7407] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.298771][ T7407] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.308058][ T7407] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.317159][ T7407] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.326380][ T7407] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.865286][ T7429] xt_TCPMSS: Only works on TCP SYN packets [ 137.011495][ T7433] netlink: 'syz.4.508': attribute type 11 has an invalid length. [ 137.019746][ T7433] __nla_validate_parse: 1 callbacks suppressed [ 137.019761][ T7433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.508'. [ 137.337091][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.509'. [ 137.534137][ T7448] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 137.983231][ T7435] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 138.005657][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.509'. [ 138.038826][ T7448] lo: entered allmulticast mode [ 138.051954][ T7448] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.239302][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.514'. [ 138.319681][ T7459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.334288][ T7460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'. [ 138.345225][ T7462] FAULT_INJECTION: forcing a failure. [ 138.345225][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.383446][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.4.518 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 138.383474][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 138.383486][ T7462] Call Trace: [ 138.383495][ T7462] [ 138.383503][ T7462] dump_stack_lvl+0x189/0x250 [ 138.383536][ T7462] ? __lock_acquire+0xaac/0xd20 [ 138.383566][ T7462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.383595][ T7462] ? __pfx__printk+0x10/0x10 [ 138.383615][ T7462] ? __might_fault+0xb0/0x130 [ 138.383652][ T7462] should_fail_ex+0x414/0x560 [ 138.383689][ T7462] _copy_from_iter+0x1db/0x15a0 [ 138.383721][ T7462] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 138.383743][ T7462] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 138.383770][ T7462] ? __pfx__copy_from_iter+0x10/0x10 [ 138.383795][ T7462] ? __build_skb_around+0x257/0x3e0 [ 138.383823][ T7462] ? netlink_sendmsg+0x642/0xb30 [ 138.383844][ T7462] ? skb_put+0x11b/0x210 [ 138.383871][ T7462] netlink_sendmsg+0x6b2/0xb30 [ 138.383904][ T7462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.383930][ T7462] ? aa_sock_msg_perm+0x94/0x160 [ 138.383953][ T7462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.383975][ T7462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.384008][ T7462] __sock_sendmsg+0x219/0x270 [ 138.384043][ T7462] ____sys_sendmsg+0x505/0x830 [ 138.384074][ T7462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.384110][ T7462] ? import_iovec+0x74/0xa0 [ 138.384140][ T7462] ___sys_sendmsg+0x21f/0x2a0 [ 138.384169][ T7462] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.384233][ T7462] ? __fget_files+0x2a/0x420 [ 138.384258][ T7462] ? __fget_files+0x3a0/0x420 [ 138.384295][ T7462] __x64_sys_sendmsg+0x19b/0x260 [ 138.384324][ T7462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.384368][ T7462] ? do_syscall_64+0xba/0x210 [ 138.384402][ T7462] do_syscall_64+0xf6/0x210 [ 138.384432][ T7462] ? clear_bhb_loop+0x45/0xa0 [ 138.384456][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.384475][ T7462] RIP: 0033:0x7f626438e969 [ 138.384493][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.384509][ T7462] RSP: 002b:00007f6265119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.384529][ T7462] RAX: ffffffffffffffda RBX: 00007f62645b5fa0 RCX: 00007f626438e969 [ 138.384543][ T7462] RDX: 0000000000008090 RSI: 0000200000000100 RDI: 0000000000000003 [ 138.384555][ T7462] RBP: 00007f6265119090 R08: 0000000000000000 R09: 0000000000000000 [ 138.384567][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.384578][ T7462] R13: 0000000000000000 R14: 00007f62645b5fa0 R15: 00007ffca368a2a8 [ 138.384609][ T7462] [ 138.680917][ T7465] netlink: 'syz.3.515': attribute type 27 has an invalid length. [ 138.695559][ T7465] lo: left allmulticast mode [ 138.862940][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.870753][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.889393][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.523'. [ 138.966417][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.987748][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.075494][ T7465] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.084995][ T7465] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.094071][ T7465] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.103618][ T7465] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.149470][ T7476] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 139.166308][ T7476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.521'. [ 139.211631][ T7479] macvtap1: entered promiscuous mode [ 139.241306][ T7479] vlan0: entered promiscuous mode [ 139.256204][ T7479] macvtap1: entered allmulticast mode [ 139.270501][ T7479] vlan0: entered allmulticast mode [ 139.279994][ T7479] veth0_vlan: entered allmulticast mode [ 139.294263][ T7479] vlan0: left allmulticast mode [ 139.304058][ T7479] veth0_vlan: left allmulticast mode [ 139.312040][ T7479] vlan0: left promiscuous mode [ 139.935156][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 139.976506][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 139.984921][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 139.992544][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.002594][ T7508] veth5: entered promiscuous mode [ 140.013156][ T7508] veth5: entered allmulticast mode [ 140.031280][ T7521] netlink: 996 bytes leftover after parsing attributes in process `syz.2.539'. [ 140.097955][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.110382][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.120253][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.132864][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 140.141122][ T1207] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 140.160636][ T1207] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 140.354877][ T7530] netlink: zone id is out of range [ 140.363502][ T7530] netlink: zone id is out of range [ 140.372052][ T7530] netlink: zone id is out of range [ 140.384709][ T7530] netlink: zone id is out of range [ 140.399588][ T7530] netlink: zone id is out of range [ 140.405139][ T7530] netlink: zone id is out of range [ 140.437868][ T7530] netlink: zone id is out of range [ 140.469189][ T7530] netlink: zone id is out of range [ 140.480192][ T7530] netlink: zone id is out of range [ 140.488855][ T7530] netlink: zone id is out of range [ 140.743926][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 140.773165][ T7545] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.782640][ T7545] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.791852][ T7545] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.801072][ T7545] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.838410][ T7550] netlink: 'syz.2.550': attribute type 3 has an invalid length. [ 140.852828][ T7550] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 140.883211][ T7545] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.892718][ T7545] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.901754][ T7545] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.910714][ T7545] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.164149][ T7559] netlink: 'syz.2.555': attribute type 4 has an invalid length. [ 141.225375][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.290704][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.333428][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.390597][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.404880][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.417190][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 141.424831][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3 [ 141.437509][ T1207] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x1 [ 141.468187][ T1207] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 141.634122][ T7577] syzkaller0: entered promiscuous mode [ 141.694774][ T7577] syzkaller0: entered allmulticast mode [ 142.372329][ T7606] netlink: 'syz.1.570': attribute type 27 has an invalid length. [ 142.428508][ T7607] __nla_validate_parse: 6 callbacks suppressed [ 142.428523][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 143.450113][ T7606] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.459803][ T7606] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.468796][ T7606] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.478369][ T7606] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.544363][ T7606] gretap1: left promiscuous mode [ 143.595137][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 143.598539][ T7614] xfrm1: entered promiscuous mode [ 143.604083][ T7616] FAULT_INJECTION: forcing a failure. [ 143.604083][ T7616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.605125][ T7616] [ 143.605134][ T7616] ====================================================== [ 143.605142][ T7616] WARNING: possible circular locking dependency detected [ 143.605155][ T7616] 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 Not tainted [ 143.605166][ T7616] ------------------------------------------------------ [ 143.605173][ T7616] syz.3.574/7616 is trying to acquire lock: [ 143.605184][ T7616] ffffffff8df2fa20 (console_owner){-...}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 143.605232][ T7616] [ 143.605232][ T7616] but task is already holding lock: [ 143.605238][ T7616] ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 143.605289][ T7616] [ 143.605289][ T7616] which lock already depends on the new lock. [ 143.605289][ T7616] [ 143.605296][ T7616] [ 143.605296][ T7616] the existing dependency chain (in reverse order) is: [ 143.605302][ T7616] [ 143.605302][ T7616] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 143.605328][ T7616] lock_acquire+0x120/0x360 [ 143.605354][ T7616] _raw_spin_lock_nested+0x32/0x50 [ 143.605379][ T7616] raw_spin_rq_lock_nested+0x2a/0x140 [ 143.605405][ T7616] task_rq_lock+0xbc/0x470 [ 143.605432][ T7616] cgroup_move_task+0x9a/0x590 [ 143.605449][ T7616] css_set_move_task+0x658/0x9e0 [ 143.605466][ T7616] cgroup_post_fork+0x1ef/0x790 [ 143.605482][ T7616] copy_process+0x37e6/0x3b80 [ 143.605506][ T7616] kernel_clone+0x21e/0x870 [ 143.605533][ T7616] user_mode_thread+0xdd/0x140 [ 143.605552][ T7616] rest_init+0x23/0x300 [ 143.605571][ T7616] start_kernel+0x470/0x4f0 [ 143.605590][ T7616] x86_64_start_reservations+0x2a/0x30 [ 143.605619][ T7616] x86_64_start_kernel+0x66/0x70 [ 143.605643][ T7616] common_startup_64+0x13e/0x147 [ 143.605669][ T7616] [ 143.605669][ T7616] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 143.605695][ T7616] lock_acquire+0x120/0x360 [ 143.605719][ T7616] _raw_spin_lock_irqsave+0xa7/0xf0 [ 143.605741][ T7616] try_to_wake_up+0x6e/0x1290 [ 143.605761][ T7616] __wake_up_common_lock+0x134/0x1f0 [ 143.605784][ T7616] tty_port_default_wakeup+0xa2/0xf0 [ 143.605806][ T7616] serial8250_tx_chars+0x72e/0x970 [ 143.605824][ T7616] serial8250_handle_irq+0x633/0xbb0 [ 143.605841][ T7616] serial8250_default_handle_irq+0xbf/0x1b0 [ 143.605864][ T7616] serial8250_interrupt+0xa2/0x1d0 [ 143.605890][ T7616] __handle_irq_event_percpu+0x289/0x980 [ 143.605910][ T7616] handle_irq_event+0x8b/0x1e0 [ 143.605930][ T7616] handle_edge_irq+0x24d/0xb60 [ 143.605946][ T7616] __common_interrupt+0x140/0x250 [ 143.605962][ T7616] common_interrupt+0xb6/0xe0 [ 143.605980][ T7616] asm_common_interrupt+0x26/0x40 [ 143.605998][ T7616] pv_native_safe_halt+0x13/0x20 [ 143.606022][ T7616] default_idle+0x13/0x20 [ 143.606038][ T7616] default_idle_call+0x74/0xb0 [ 143.606054][ T7616] do_idle+0x1e8/0x510 [ 143.606069][ T7616] cpu_startup_entry+0x44/0x60 [ 143.606085][ T7616] rest_init+0x2de/0x300 [ 143.606101][ T7616] start_kernel+0x470/0x4f0 [ 143.606120][ T7616] x86_64_start_reservations+0x2a/0x30 [ 143.606146][ T7616] x86_64_start_kernel+0x66/0x70 [ 143.606171][ T7616] common_startup_64+0x13e/0x147 [ 143.606198][ T7616] [ 143.606198][ T7616] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 143.606223][ T7616] lock_acquire+0x120/0x360 [ 143.606247][ T7616] _raw_spin_lock_irqsave+0xa7/0xf0 [ 143.606269][ T7616] __wake_up_common_lock+0x2f/0x1f0 [ 143.606292][ T7616] tty_port_default_wakeup+0xa2/0xf0 [ 143.606312][ T7616] serial8250_tx_chars+0x72e/0x970 [ 143.606349][ T7616] serial8250_handle_irq+0x633/0xbb0 [ 143.606367][ T7616] serial8250_default_handle_irq+0xbf/0x1b0 [ 143.606408][ T7616] serial8250_interrupt+0xa2/0x1d0 [ 143.606435][ T7616] __handle_irq_event_percpu+0x289/0x980 [ 143.606456][ T7616] handle_irq_event+0x8b/0x1e0 [ 143.606474][ T7616] handle_edge_irq+0x24d/0xb60 [ 143.606491][ T7616] __common_interrupt+0x140/0x250 [ 143.606516][ T7616] common_interrupt+0xb6/0xe0 [ 143.606535][ T7616] asm_common_interrupt+0x26/0x40 [ 143.606553][ T7616] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 143.606577][ T7616] uart_write+0x3ba/0xa40 [ 143.606593][ T7616] n_tty_write+0xd32/0x11d0 [ 143.606617][ T7616] file_tty_write+0x4fe/0x990 [ 143.606632][ T7616] vfs_write+0x548/0xa90 [ 143.606652][ T7616] ksys_write+0x145/0x250 [ 143.606671][ T7616] do_syscall_64+0xf6/0x210 [ 143.606699][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.606718][ T7616] [ 143.606718][ T7616] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 143.606744][ T7616] lock_acquire+0x120/0x360 [ 143.606769][ T7616] _raw_spin_lock_irqsave+0xa7/0xf0 [ 143.606792][ T7616] serial8250_console_write+0x17e/0x1ba0 [ 143.606812][ T7616] console_flush_all+0x728/0xc40 [ 143.606831][ T7616] console_unlock+0xc4/0x270 [ 143.606847][ T7616] vprintk_emit+0x5b7/0x7a0 [ 143.606863][ T7616] _printk+0xcf/0x120 [ 143.606880][ T7616] register_console+0xa8b/0xf90 [ 143.606900][ T7616] univ8250_console_init+0x52/0x90 [ 143.606921][ T7616] console_init+0x1a1/0x670 [ 143.606942][ T7616] start_kernel+0x2cb/0x4f0 [ 143.606962][ T7616] x86_64_start_reservations+0x2a/0x30 [ 143.606991][ T7616] x86_64_start_kernel+0x66/0x70 [ 143.607017][ T7616] common_startup_64+0x13e/0x147 [ 143.607045][ T7616] [ 143.607045][ T7616] -> #0 (console_owner){-...}-{0:0}: [ 143.607070][ T7616] validate_chain+0xb9b/0x2140 [ 143.607086][ T7616] __lock_acquire+0xaac/0xd20 [ 143.607111][ T7616] lock_acquire+0x120/0x360 [ 143.607135][ T7616] vprintk_emit+0x460/0x7a0 [ 143.607151][ T7616] _printk+0xcf/0x120 [ 143.607167][ T7616] should_fail_ex+0x3f5/0x560 [ 143.607196][ T7616] copy_to_user_nofault+0x89/0x160 [ 143.607216][ T7616] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 143.607231][ T7616] bpf_trace_run4+0x28b/0x4a0 [ 143.607250][ T7616] __bpf_trace_sched_switch+0x17a/0x1e0 [ 143.607271][ T7616] __traceiter_sched_switch+0x9a/0xd0 [ 143.607294][ T7616] __schedule+0x2303/0x4cd0 [ 143.607318][ T7616] preempt_schedule_common+0x83/0xd0 [ 143.607343][ T7616] preempt_schedule+0xae/0xc0 [ 143.607366][ T7616] preempt_schedule_thunk+0x16/0x30 [ 143.607388][ T7616] vprintk_emit+0x69a/0x7a0 [ 143.607404][ T7616] _printk+0xcf/0x120 [ 143.607420][ T7616] __nla_validate_parse+0x2563/0x2d40 [ 143.607441][ T7616] __nla_parse+0x40/0x60 [ 143.607460][ T7616] nfnetlink_rcv_msg+0x77c/0x1130 [ 143.607489][ T7616] netlink_rcv_skb+0x219/0x490 [ 143.607513][ T7616] nfnetlink_rcv+0x273/0x2530 [ 143.607538][ T7616] netlink_unicast+0x758/0x8d0 [ 143.607554][ T7616] netlink_sendmsg+0x805/0xb30 [ 143.607575][ T7616] __sock_sendmsg+0x219/0x270 [ 143.607603][ T7616] ____sys_sendmsg+0x505/0x830 [ 143.607626][ T7616] ___sys_sendmsg+0x21f/0x2a0 [ 143.607648][ T7616] __x64_sys_sendmsg+0x19b/0x260 [ 143.607672][ T7616] do_syscall_64+0xf6/0x210 [ 143.607699][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.607717][ T7616] [ 143.607717][ T7616] other info that might help us debug this: [ 143.607717][ T7616] [ 143.607723][ T7616] Chain exists of: [ 143.607723][ T7616] console_owner --> &p->pi_lock --> &rq->__lock [ 143.607723][ T7616] [ 143.607754][ T7616] Possible unsafe locking scenario: [ 143.607754][ T7616] [ 143.607761][ T7616] CPU0 CPU1 [ 143.607767][ T7616] ---- ---- [ 143.607773][ T7616] lock(&rq->__lock); [ 143.607786][ T7616] lock(&p->pi_lock); [ 143.607799][ T7616] lock(&rq->__lock); [ 143.607814][ T7616] lock(console_owner); [ 143.607827][ T7616] [ 143.607827][ T7616] *** DEADLOCK *** [ 143.607827][ T7616] [ 143.607833][ T7616] 3 locks held by syz.3.574/7616: [ 143.607844][ T7616] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: nfnetlink_rcv_msg+0x20d/0x1130 [ 143.607900][ T7616] #1: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 143.607956][ T7616] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 143.608013][ T7616] [ 143.608013][ T7616] stack backtrace: [ 143.608023][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.3.574 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 143.608046][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 143.608059][ T7616] Call Trace: [ 143.608066][ T7616] [ 143.608074][ T7616] dump_stack_lvl+0x189/0x250 [ 143.608105][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.608132][ T7616] ? __pfx__printk+0x10/0x10 [ 143.608153][ T7616] ? print_lock_name+0xde/0x100 [ 143.608174][ T7616] print_circular_bug+0x2ee/0x310 [ 143.608195][ T7616] check_noncircular+0x134/0x160 [ 143.608217][ T7616] validate_chain+0xb9b/0x2140 [ 143.608248][ T7616] __lock_acquire+0xaac/0xd20 [ 143.608277][ T7616] ? vprintk_emit+0x444/0x7a0 [ 143.608294][ T7616] lock_acquire+0x120/0x360 [ 143.608320][ T7616] ? vprintk_emit+0x444/0x7a0 [ 143.608343][ T7616] ? do_raw_spin_unlock+0x122/0x240 [ 143.608364][ T7616] ? vprintk_emit+0x444/0x7a0 [ 143.608382][ T7616] vprintk_emit+0x460/0x7a0 [ 143.608399][ T7616] ? vprintk_emit+0x444/0x7a0 [ 143.608418][ T7616] ? __pfx_vprintk_emit+0x10/0x10 [ 143.608435][ T7616] ? move_right+0x5d/0xa0 [ 143.608459][ T7616] ? __asan_memmove+0x40/0x70 [ 143.608478][ T7616] ? format_decode+0xd9/0xe30 [ 143.608500][ T7616] ? vsnprintf+0x386/0xf00 [ 143.608550][ T7616] _printk+0xcf/0x120 [ 143.608571][ T7616] ? __pfx__printk+0x10/0x10 [ 143.608590][ T7616] ? __lock_acquire+0xaac/0xd20 [ 143.608622][ T7616] should_fail_ex+0x3f5/0x560 [ 143.608656][ T7616] copy_to_user_nofault+0x89/0x160 [ 143.608679][ T7616] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 143.608696][ T7616] bpf_trace_run4+0x28b/0x4a0 [ 143.608718][ T7616] ? bpf_trace_run4+0x19c/0x4a0 [ 143.608740][ T7616] ? __pfx_bpf_trace_run4+0x10/0x10 [ 143.608760][ T7616] ? kvm_sched_clock_read+0x11/0x20 [ 143.608787][ T7616] ? sched_clock_cpu+0x74/0x430 [ 143.608819][ T7616] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 143.608846][ T7616] __bpf_trace_sched_switch+0x17a/0x1e0 [ 143.608871][ T7616] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 143.608893][ T7616] ? psi_group_change+0xbc7/0x1210 [ 143.608914][ T7616] ? rcu_read_lock_sched_held+0x89/0x100 [ 143.608945][ T7616] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 143.608979][ T7616] ? psi_task_switch+0x318/0x6d0 [ 143.609002][ T7616] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 143.609024][ T7616] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 143.609048][ T7616] __traceiter_sched_switch+0x9a/0xd0 [ 143.609075][ T7616] __schedule+0x2303/0x4cd0 [ 143.609098][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.609129][ T7616] ? preempt_schedule_common+0x83/0xd0 [ 143.609153][ T7616] ? console_flush_all+0x7f7/0xc40 [ 143.609173][ T7616] ? __pfx___schedule+0x10/0x10 [ 143.609204][ T7616] ? preempt_schedule+0xae/0xc0 [ 143.609229][ T7616] preempt_schedule_common+0x83/0xd0 [ 143.609255][ T7616] preempt_schedule+0xae/0xc0 [ 143.609278][ T7616] ? __pfx_preempt_schedule+0x10/0x10 [ 143.609302][ T7616] ? console_unlock+0x214/0x270 [ 143.609318][ T7616] ? __pfx_console_unlock+0x10/0x10 [ 143.609332][ T7616] preempt_schedule_thunk+0x16/0x30 [ 143.609350][ T7616] ? vprintk_emit+0x695/0x7a0 [ 143.609364][ T7616] vprintk_emit+0x69a/0x7a0 [ 143.609379][ T7616] ? __pfx_vprintk_emit+0x10/0x10 [ 143.609391][ T7616] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 143.609411][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.609432][ T7616] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 143.609452][ T7616] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.609476][ T7616] _printk+0xcf/0x120 [ 143.609492][ T7616] ? __pfx__printk+0x10/0x10 [ 143.609513][ T7616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.609533][ T7616] __nla_validate_parse+0x2563/0x2d40 [ 143.609553][ T7616] ? stack_trace_save+0x9c/0xe0 [ 143.609573][ T7616] ? __pfx___nla_validate_parse+0x10/0x10 [ 143.609593][ T7616] ? __lock_acquire+0xaac/0xd20 [ 143.609617][ T7616] ? nfnl_pernet+0x23/0x240 [ 143.609642][ T7616] __nla_parse+0x40/0x60 [ 143.609660][ T7616] nfnetlink_rcv_msg+0x77c/0x1130 [ 143.609683][ T7616] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 143.609712][ T7616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.609746][ T7616] ? is_bpf_text_address+0x26/0x2b0 [ 143.609770][ T7616] ? is_bpf_text_address+0x292/0x2b0 [ 143.609794][ T7616] netlink_rcv_skb+0x219/0x490 [ 143.609811][ T7616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.609833][ T7616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.609855][ T7616] ? apparmor_capable+0x137/0x1b0 [ 143.609876][ T7616] ? bpf_lsm_capable+0x9/0x20 [ 143.609898][ T7616] ? security_capable+0x7e/0x2e0 [ 143.609916][ T7616] nfnetlink_rcv+0x273/0x2530 [ 143.609939][ T7616] ? kernel_text_address+0xa5/0xe0 [ 143.609959][ T7616] ? __kernel_text_address+0xd/0x40 [ 143.609979][ T7616] ? unwind_get_return_address+0x4d/0x90 [ 143.609998][ T7616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.610014][ T7616] ? arch_stack_walk+0xfc/0x150 [ 143.610038][ T7616] ? stack_trace_save+0x9c/0xe0 [ 143.610054][ T7616] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.610074][ T7616] ? stack_depot_save_flags+0x40/0x910 [ 143.610092][ T7616] ? kasan_save_track+0x4f/0x80 [ 143.610108][ T7616] ? kasan_save_track+0x3e/0x80 [ 143.610127][ T7616] ? __lock_acquire+0xaac/0xd20 [ 143.610157][ T7616] ? __lock_acquire+0xaac/0xd20 [ 143.610180][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.610199][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.610215][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.610234][ T7616] netlink_unicast+0x758/0x8d0 [ 143.610252][ T7616] netlink_sendmsg+0x805/0xb30 [ 143.610272][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.610291][ T7616] ? aa_sock_msg_perm+0x94/0x160 [ 143.610307][ T7616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.610323][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.610341][ T7616] __sock_sendmsg+0x219/0x270 [ 143.610366][ T7616] ____sys_sendmsg+0x505/0x830 [ 143.610387][ T7616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.610410][ T7616] ? import_iovec+0x74/0xa0 [ 143.610431][ T7616] ___sys_sendmsg+0x21f/0x2a0 [ 143.610451][ T7616] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.610485][ T7616] ? __fget_files+0x2a/0x420 [ 143.610504][ T7616] ? __fget_files+0x3a0/0x420 [ 143.610534][ T7616] __x64_sys_sendmsg+0x19b/0x260 [ 143.610554][ T7616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.610581][ T7616] ? do_syscall_64+0xba/0x210 [ 143.610605][ T7616] do_syscall_64+0xf6/0x210 [ 143.610628][ T7616] ? clear_bhb_loop+0x45/0xa0 [ 143.610644][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.610659][ T7616] RIP: 0033:0x7f62bbb8e969 [ 143.610672][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.610685][ T7616] RSP: 002b:00007f62bc924038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.610700][ T7616] RAX: ffffffffffffffda RBX: 00007f62bbdb5fa0 RCX: 00007f62bbb8e969 [ 143.610711][ T7616] RDX: 0000000000008000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 143.610721][ T7616] RBP: 00007f62bc924090 R08: 0000000000000000 R09: 0000000000000000 [ 143.610730][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.610739][ T7616] R13: 0000000000000000 R14: 00007f62bbdb5fa0 R15: 00007fff32627448 [ 143.610756][ T7616] [ 145.109549][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.3.574 Not tainted 6.15.0-rc4-syzkaller-00775-g953d9480f7d1 #0 PREEMPT(full) [ 145.109568][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 145.109578][ T7616] Call Trace: [ 145.109586][ T7616] [ 145.109594][ T7616] dump_stack_lvl+0x189/0x250 [ 145.109619][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.109640][ T7616] ? __pfx__printk+0x10/0x10 [ 145.109654][ T7616] ? __lock_acquire+0xaac/0xd20 [ 145.109677][ T7616] should_fail_ex+0x414/0x560 [ 145.109701][ T7616] copy_to_user_nofault+0x89/0x160 [ 145.109718][ T7616] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 145.109731][ T7616] bpf_trace_run4+0x28b/0x4a0 [ 145.109747][ T7616] ? bpf_trace_run4+0x19c/0x4a0 [ 145.109762][ T7616] ? __pfx_bpf_trace_run4+0x10/0x10 [ 145.109775][ T7616] ? kvm_sched_clock_read+0x11/0x20 [ 145.109794][ T7616] ? sched_clock_cpu+0x74/0x430 [ 145.109817][ T7616] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 145.109836][ T7616] __bpf_trace_sched_switch+0x17a/0x1e0 [ 145.109853][ T7616] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 145.109868][ T7616] ? psi_group_change+0xbc7/0x1210 [ 145.109881][ T7616] ? rcu_read_lock_sched_held+0x89/0x100 [ 145.109903][ T7616] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 145.109926][ T7616] ? psi_task_switch+0x318/0x6d0 [ 145.109941][ T7616] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 145.109956][ T7616] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 145.109972][ T7616] __traceiter_sched_switch+0x9a/0xd0 [ 145.109991][ T7616] __schedule+0x2303/0x4cd0 [ 145.110010][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.110033][ T7616] ? preempt_schedule_common+0x83/0xd0 [ 145.110051][ T7616] ? console_flush_all+0x7f7/0xc40 [ 145.110067][ T7616] ? __pfx___schedule+0x10/0x10 [ 145.110091][ T7616] ? preempt_schedule+0xae/0xc0 [ 145.110109][ T7616] preempt_schedule_common+0x83/0xd0 [ 145.110128][ T7616] preempt_schedule+0xae/0xc0 [ 145.110145][ T7616] ? __pfx_preempt_schedule+0x10/0x10 [ 145.110162][ T7616] ? console_unlock+0x214/0x270 [ 145.110176][ T7616] ? __pfx_console_unlock+0x10/0x10 [ 145.110188][ T7616] preempt_schedule_thunk+0x16/0x30 [ 145.110205][ T7616] ? vprintk_emit+0x695/0x7a0 [ 145.110217][ T7616] vprintk_emit+0x69a/0x7a0 [ 145.110231][ T7616] ? __pfx_vprintk_emit+0x10/0x10 [ 145.110243][ T7616] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 145.110260][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.110279][ T7616] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.110300][ T7616] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.110325][ T7616] _printk+0xcf/0x120 [ 145.110340][ T7616] ? __pfx__printk+0x10/0x10 [ 145.110354][ T7616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.110373][ T7616] __nla_validate_parse+0x2563/0x2d40 [ 145.110391][ T7616] ? stack_trace_save+0x9c/0xe0 [ 145.110410][ T7616] ? __pfx___nla_validate_parse+0x10/0x10 [ 145.110433][ T7616] ? __lock_acquire+0xaac/0xd20 [ 145.110455][ T7616] ? nfnl_pernet+0x23/0x240 [ 145.110478][ T7616] __nla_parse+0x40/0x60 [ 145.110495][ T7616] nfnetlink_rcv_msg+0x77c/0x1130 [ 145.110516][ T7616] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 145.110543][ T7616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 145.110574][ T7616] ? is_bpf_text_address+0x26/0x2b0 [ 145.110595][ T7616] ? is_bpf_text_address+0x292/0x2b0 [ 145.110617][ T7616] netlink_rcv_skb+0x219/0x490 [ 145.110632][ T7616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 145.110652][ T7616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.110672][ T7616] ? apparmor_capable+0x137/0x1b0 [ 145.110691][ T7616] ? bpf_lsm_capable+0x9/0x20 [ 145.110711][ T7616] ? security_capable+0x7e/0x2e0 [ 145.110727][ T7616] nfnetlink_rcv+0x273/0x2530 [ 145.110748][ T7616] ? kernel_text_address+0xa5/0xe0 [ 145.110767][ T7616] ? __kernel_text_address+0xd/0x40 [ 145.110785][ T7616] ? unwind_get_return_address+0x4d/0x90 [ 145.110802][ T7616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.110817][ T7616] ? arch_stack_walk+0xfc/0x150 [ 145.110839][ T7616] ? stack_trace_save+0x9c/0xe0 [ 145.110854][ T7616] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.110872][ T7616] ? stack_depot_save_flags+0x40/0x910 [ 145.110889][ T7616] ? kasan_save_track+0x4f/0x80 [ 145.110903][ T7616] ? kasan_save_track+0x3e/0x80 [ 145.110920][ T7616] ? __lock_acquire+0xaac/0xd20 [ 145.110946][ T7616] ? __lock_acquire+0xaac/0xd20 [ 145.110968][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.110984][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.110999][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.111015][ T7616] netlink_unicast+0x758/0x8d0 [ 145.111032][ T7616] netlink_sendmsg+0x805/0xb30 [ 145.111050][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.111067][ T7616] ? aa_sock_msg_perm+0x94/0x160 [ 145.111081][ T7616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.111096][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.111112][ T7616] __sock_sendmsg+0x219/0x270 [ 145.111134][ T7616] ____sys_sendmsg+0x505/0x830 [ 145.111153][ T7616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.111173][ T7616] ? import_iovec+0x74/0xa0 [ 145.111193][ T7616] ___sys_sendmsg+0x21f/0x2a0 [ 145.111211][ T7616] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.111241][ T7616] ? __fget_files+0x2a/0x420 [ 145.111258][ T7616] ? __fget_files+0x3a0/0x420 [ 145.111278][ T7616] __x64_sys_sendmsg+0x19b/0x260 [ 145.111297][ T7616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.111320][ T7616] ? do_syscall_64+0xba/0x210 [ 145.111341][ T7616] do_syscall_64+0xf6/0x210 [ 145.111362][ T7616] ? clear_bhb_loop+0x45/0xa0 [ 145.111377][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.111391][ T7616] RIP: 0033:0x7f62bbb8e969 [ 145.111404][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.111421][ T7616] RSP: 002b:00007f62bc924038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.111436][ T7616] RAX: ffffffffffffffda RBX: 00007f62bbdb5fa0 RCX: 00007f62bbb8e969 [ 145.111446][ T7616] RDX: 0000000000008000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 145.111455][ T7616] RBP: 00007f62bc924090 R08: 0000000000000000 R09: 0000000000000000 [ 145.111464][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.111472][ T7616] R13: 0000000000000000 R14: 00007f62bbdb5fa0 R15: 00007fff32627448 [ 145.111488][ T7616] [ 145.714270][ T7614] xfrm1: entered allmulticast mode [ 145.737521][ T7616] syz.3.574 (7616) used greatest stack depth: 19944 bytes left