last executing test programs: 13.709174768s ago: executing program 0 (id=1684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8005) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8005) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) (async) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) read$alg(r1, &(0x7f0000002840)=""/4089, 0xff9) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0xffe0}, {0xd, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xc4, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0xffe0}, {0xd, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xc4, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) socketpair(0x22, 0x3, 0x0, &(0x7f0000000780)) 12.768684689s ago: executing program 0 (id=1698): r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x323, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xae, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff0600000000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) 12.537011215s ago: executing program 0 (id=1702): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@dellink={0xa4, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24, 0xe, {0x800, 0x6, 0x5, 0x1, 0x2, 0xd}}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0xb}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}}, 0x0) 12.167223365s ago: executing program 0 (id=1703): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) unshare(0x22020600) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x7, 0x0, 0x0) 10.028430332s ago: executing program 0 (id=1714): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, 0x2, 0x8}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}, 0x4d4}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400feffffffffffffff00000000000001000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xc, "54df942f7e09586180bb"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, 0x2, 0x8}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}, 0x4d4}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400feffffffffffffff00000000000001000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) (async) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x9) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xc, "54df942f7e09586180bb"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) (async) 4.301688217s ago: executing program 1 (id=1774): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="0bc3a3", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f00000000c0)='\x00'/10, 0xa}], 0x3) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00'}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x8000, 0x0, 'wrr\x00', 0x11, 0x0, 0x3}, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 2.951768691s ago: executing program 1 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="1430d922ed", 0x5}], 0x1, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x66aa}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x1, 0x5, 0x2, 0x100, r2, 0xeb9, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) splice(r2, 0x0, r3, &(0x7f0000000100)=0x3, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xf, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', r7, @fallback=0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0xb5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000300)={r3, r2, 0x5, 0x47, &(0x7f0000000000)="900562124cc7657adb6ab1911d520d96ee9700ee667dfe3d777e84a4c1f63b70fcbabfc17e9396fe7ae200f15e2068423e2f0f1e8a6d3d2401a45262f1c4ae9a6900ce68073e1d", 0x1, 0x3, 0x3c3d, 0x5, 0xff, 0x0, 0x4, 'syz0\x00'}) 2.616412203s ago: executing program 4 (id=1782): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x730, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4}, 0x38) (async) sendmsg$kcm(r1, &(0x7f0000001040)={&(0x7f0000000800)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="e9b7e8fe08d9aeb1d27298e0c1b85119f70726db5be05a850512f3948d98ed8a5b13af7f39bedb752519a5a578c20cb07e16c1a0c81c7b77ecdcc681878ce7f299e1662545f8ab4be63ca21d1443e41239fcbb460b447f0abe08ffd65ff6c33254dd3016cc14fe8af9293d8ff348a0dd7c1abe7d82c1b57ed0772342ccaddd542597a940951749fa15e6e4daf8d26aa4b9898aeadc3d6362687ed4a69d0b4366a48744c29558fc5a541a19441087a53056d2de5adb9530ee3343", 0xba}, {&(0x7f0000000b40)="4f30a0b7c7ebe4962c8c8b238a3d0ad137e5965f99ccddf0d0bff79f0219a03f6d92929867636e593af274155d3a6128e2602220b98a4351cbb14bce3d4a619419e1a245f79151a42aad9b96535aca10d89a46b35f94c1f4d54273e722fc59a23276843cada0c09e0b7b19e01548131ecccc981403fcdb5048228386f30f8951805144ec3676f51eae09c961e37943fd02da32a9d290831f4d461ff4643c33cb91d8dd0c20adc9d464b110a84a7ee53a5a2f781b4b64f38a0a35b2b5", 0xbc}, {&(0x7f00000008c0)="5da86278e1f4280b2f86ef6f7b279058912759966eec92d7d4cc5280ed", 0x1d}, {&(0x7f0000000c00)="59fc24527b34e766d5ae0c3d7cfe3f3d21dce44c03f1982d7c69445c5bec873995b5ad142b747507e2e5148c0a6b8d6a3bcbb1e494f94e351c057bdd1b82", 0x3e}, {&(0x7f0000000c40)="f39d97775efe6d5877c42a52ccf2c5c752f7e5e62258f37bc0fe2c9c308e", 0x1e}], 0x5, &(0x7f0000000d00)=[{0x20, 0xff, 0x7, "a18fca641d573c56d17283690031fb"}, {0xc0, 0x3a, 0x6, "70633e7bd78da48128e106f7c1fcce73ab7116a50873f48697b1de1b96c0ca0b67aa298a147e334d6a2b83cc8dd36a79ae608f29f0db3b00b13844bdc3ea91d1995dcdfe18928c44fdec1dabd0e433fb09aa2ee9b6229bdf0c7e28e58b8bcbcb9eb2667f5acc5b76a0e06a58e08fa394f027abfedb4b41a818e5791af378d412d7cf801739bd8f22c9823e0e5e4e377bf3aa55b9ca457cd59f34e40f3929340764427af33e85987b7b8136932a2fe9"}, {0x90, 0x84, 0xffffffff, "3d39e44d65ff91c3005c94ff889757200249dbaabcda2da9267390d00ab89c6d2ae5ed4c781b5246b5759e8f88ec4a5271b3f15e9c8def53767e87b34ef7f31ebd5619968cbd1e794c834fcb9dc18fd47240a04023361adaa744c19674988f285f3dcce6638bba66ae56ae7a11013b504a0e5d325b745952c995e2"}, {0x20, 0x114, 0x1, "2ac0443606108ad28a71227e53c5"}, {0x10, 0x6, 0x9}, {0x80, 0x88, 0x19, "affed84ac0fa8f88a61be7d4ea064ddbe5c82131ae45160598b39f307460bfc485a61bbfabc4c508573124159f0c9ef9c3ee5a5b1b1b7efc004f575c666115c4620ff9635d2a858e28926f772da90fadb6d923e4ae741e58f4217eb807de0c94853f8271b08ec40e140eb0"}, {0xf0, 0xff, 0x0, "138c07681e89b6fa562be864956db556bc8d0557615691d4763eceef0b543c9d18bfc77895d67329985ae0e1ba5365328bec6df2731e1169d9a1157aa142693438edd3df9918054e89e7cd6c0c138d597eb18053b98de59028ebf4b5396a6e90949465137afcef6b16e81d2db339bf63f78408cebc4fd4fd3a39c1cabe3bba0e2fd4d2eeb704e977cf89bdb7c7ed26249eb7f13164b0b92ebbbe530360ddf3e180c49af0514571e9683a9b46114bedbf82af90b4f942c921509cbf76bdebd982955696a1b4ff232e3298e3f6af0b062b004e7905ab7d401389fdf4"}], 0x310}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780050005"], 0x38}}, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="03032abd7000ffdbdf2506"], 0xec0}}, 0x80) close(0x3) (async, rerun: 32) sendfile(r0, r1, 0x0, 0xffffffff000) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20000e4, 0x0, 0x0, 0x10, &(0x7f00000010c0), 0x0, 0x0, 0xb0, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e21, 0x1, @mcast2, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0xcf) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) 2.452787882s ago: executing program 4 (id=1785): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0x25}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414000000003fe3ff00000000000000000000070000009404000000420000"], 0x38}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001ac0)={'sit0\x00', 0x4}) 2.354166867s ago: executing program 4 (id=1788): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000900"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4a}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000d70b00004000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000067e84226c718331f35df6d301e31811da3ba9c98d56e5225844fe26182a066fe4675eae2eaffba908f88b2ed6e1a9314", @ANYRES16=r7, @ANYBLOB="1107000000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 2.299188042s ago: executing program 3 (id=1789): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40041) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="60812876ef15f6592addd4a7790000001200040227bd", @ANYRES32=0x0, @ANYBLOB="c40200000250000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x45) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0x97b}, 0x0, &(0x7f0000000140)={0x1ff, 0xfffffffffffffffc, 0x101}, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @local}, &(0x7f0000000500)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x80, &(0x7f00000002c0)=""/128, 0x41000, 0x2, '\x00', r5, 0x25, r2, 0x8, &(0x7f0000000540)={0x4, 0xbb}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x2, 0x7fe4800, 0x1ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000680)=[{0x0, 0x3, 0x9, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x3, 0x4, 0x1, 0xa}, {0x2, 0x2, 0xe, 0x3}, {0x5, 0x2, 0xb, 0x2}, {0x0, 0x2, 0xa, 0x6}], 0x10, 0x7, @void, @value}, 0x94) ppoll(&(0x7f0000000480)=[{r3}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x5) write(r6, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdae) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x810, 0x510, 0x350, 0x350, 0x0, 0x188, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_vlan\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty, [], [], [], 0x1404}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @HL={0x28}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xff, 0xff, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010102, [0x0, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xffffff00, 0xff], 0x52, 0x7f, 0x1d, 0x4e21, 0x4e22, 0x4e21, 0x4e21, 0x88, 0x80}, 0x82, 0x2444}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x0, 0x32}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private1, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.963438566s ago: executing program 1 (id=1791): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x5d) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030428bf700000000000000004"], 0x54}, 0x1, 0x0, 0x0, 0x4040002}, 0x4004850) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) 1.94672955s ago: executing program 4 (id=1792): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.636881471s ago: executing program 4 (id=1794): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x3, r5, 0x6}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000001c0)="becf2c34a686f14f3c7533bb18d3e54295901cdd69779ad430f20315a3d4a17bd4c3d1c5b6b9fb87aea6fc27ea254e194e5c376b17e76070fc211c5cfd333a2b9e1decfef3021cf45687918cf1ed7ab74086eba5c782beb03832419772807bab25abd1611c", &(0x7f0000000240)=""/151, &(0x7f0000000300)="2d286a11599c81d78167297a29eb11bd9391f5607df6c2c1e63022ed7f94ea30e9d0eb083bde0ba5d516c5cead07baea251b65c3df6eff9ca95e18c08dd75473b16d46f25ce78b8d57389e4af61f4310197f44585b37d8093596fb466c8ab6e3c179ac67f41f6c9220b6d1377b100ffa3a04a4d901e6f5e30c4366bc202e1db72f7b421bd8e5cd4b194c33b0ab8bb6ca437b6212d5c76f88ec83f4473c85b10c4e6ea693a53d3b889668e352183193a0fa334080f863ceb61a2cccb6497ed6f3f583de593c97d8f1a9ada772c5a60f2383f7250fb83bdfb4e7145777e43f8a31367f48cce0204e", &(0x7f0000000400)="5026f26d0bd1a897a9173805697d699550e2430b1ca25033c19e199a3e17c5144d81de5c385f6f7e8f7fb37e8b269adcfc9c3ddc3e9247dfeb4162117e8f6c171646dee67e28f136e1903fe9c3b65d0644c2a4459bcae1c3ecd817c1dc661be1ab3480f0092b6d78b4e88faf6025f122362b1714e23a4111fb34be623659946419b12682db5398b0f37dbba24d7ce4444ece5d29d52fc68a91fe58b10d99266d9f94ef78221cdea137fcc27c9255db56e1554b", 0x8001, r6, 0x4}, 0x38) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000800}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x4, 0x0, 0x59, 0x8, 0x5f, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x0, 0x0, 0xfffffffd}}) 1.564924594s ago: executing program 2 (id=1795): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x6}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@multicast1, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x8000000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x7d}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x14c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000006c0)="b94aa13e775f095afaa6d4fdc0e52d9f1a011b73bfb899b81a9bdafc0478add8047b6da02e0793b27861e4b3d5927eeeaa01350f1b187417f9fd6593936247f756350273b3f5a3a6f4f73de64b4b17636f9cc86a33bcad5ff48320a92a97e5cee75b8720cdc9446fd246dd0e9249db10949b4e0dbbb0b7ba4771e617dd1e15dae097b5e0d5f595c4466bd747bd310ee400636c5d", 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001980)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)="14e7c03a4b1361e6973305f5bb2e6e5824fbf5f9b8a63c6bc79dc443fa5ab448ee948a050e2bcb8a984e5af9c450f44f083916edcaaaa03ef7bba218dd4726d7e051f7542c106c1765ca150e7e48f1439792725929da4d069075a1b212964db9028328bc73887e22f1d7db58e9f324193dc2f6c0a79bb41615d69be0093b69d6b62eae245d38837df49ee5a3ce34c1fa4861cf061ad6fbb8c6ee052d9dbf0921f1467e0000fa6801ed1831c8f320cb4ba1cb32a3722ed84ef09606be6dc6ef67a223a93e80cf2b78c601382433e87ee560705e085de5da", 0xd7}, {&(0x7f00000008c0)="a02ef1e143b36dfd827b81d17c8e4b61e41ed753a085f3a4508a2d788ca92945aa6fa8f6d4c68a4fd2a1a3afb8c831a4ad5430affe55cc0ccd285f38cf1ffe4b768c6fdf72324c63cf95db877919f4cb98df27eed200753255baa2507e30e6f47f6b84c6703f33790b8c818529ec3e5de3cb5b792f7ffbd0d8edfdfcd0c5b459e96b72f131a9ddfa3f9822185c10bb3cc3b3662cc22e363906faae86585d0627b06a28dab3a68d19f7db425fe4f2b565a445f64c6a2221576d258467927e23c89ba689fbd4dcfc63d48fbeb48f1553a1ebb206a13abc9a532b32d6927956acef4d41e80b94e2449e31c637d575cfa525997972", 0xf3}, {&(0x7f00000009c0)="5b99609089cce78ee762caa258f095dddae3910832f4caa93c057ac1fcbb26b286b3db910ecbac8d22e6aff2da880a5acc648b68684c8e6789c0fb8b449d8b980df626195ed5be9cc894110ad9c4e7baf94b7a6d5666cb5f52c56620ea4ed19236c512a2f11767770c17181f15cc8c2ec3582862226342f22c6198fafab1475df14f6a12df64812be802acae06cb504467bb0b24005e", 0x96}, {&(0x7f0000005d40)="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", 0x166}, {&(0x7f0000000b80)="c2972cb2d09557dc5e05201c51", 0xd}, {&(0x7f0000000bc0)="5cd07de1b36e46be840c1397ba7468cf7fb77978ef465fa8ade01aeae3177ae064a4aaf8e52bcba53b2b5c5d35eb308947afcfdc399223d9fbbd9c1f1b4c05a99607b6325132a4490c20241d67ae06e016c51b765d4ea8b92a0b81917645bdbe2513b2bb93dff27011e8b3", 0x6b}, {&(0x7f0000000c40)="16a23846dfa1f04a86fcef1ffe5a77322f42255b8b6da4c9738e94acf6e6421238a8606e43003282f538babac3776c24378a6e05cd7989f29596ada787174b58c540d30b1040a4960ff1cbbbca61c61c47be72d11835e668a412348835832bbc6086cc1cdaf87aceb3f11329e088f26b4a4e6020fac89888e210777d101ee45e7d4ca36916952c326316de7c6886c8d2de4fe28133f547e1a031a046", 0x9c}, {&(0x7f0000000d00)="cba13ad2282fd0a71a8f310d559f495ccc1659e7e72f858f07657475390ede430c7a9d44a796d7597d26c65782894ead9ffe0fed", 0x34}], 0x8}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000e40)="a453d4a57be36209d318", 0xa}], 0x1}}], 0x4, 0x400c404) 1.274625116s ago: executing program 2 (id=1796): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.215499828s ago: executing program 1 (id=1797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) 1.21292267s ago: executing program 3 (id=1798): r0 = socket(0x2, 0x6, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000200, @void, @value}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9}, 0x10) close(r3) 1.057079048s ago: executing program 1 (id=1799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x40010, r0, 0x19f02000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x4000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891b, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="0200ff7fffff"}) 1.019857288s ago: executing program 3 (id=1800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f00000000c0), 0x20000000}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000180)={0x8, 'vlan0\x00', {'veth1_to_batadv\x00'}, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 895.622377ms ago: executing program 2 (id=1801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 828.47747ms ago: executing program 2 (id=1802): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="d52d7c042ac51cc5e930d71e26b088737357ecbf8a4819cbb9ccb1427a4ca5d12bcc9bc4c9ec4dc5b5a12f717e36426925d91bdbe14449f9327efb4fe0319855eec1362b04d2c4769e4d2a33a7d21c8c2d935b55bca6c88f41bca59cc53f1c8e00b571a444793c7c4c420050cca5", 0x6e}, {&(0x7f0000000480)="df83b3db95154c8d5b162b7674c15d4c7f833fdd3b79ff0643410479e4ec5951d0dedd27649ca1a1559e9d5f40f30a9f048ba17264d2ed8414e7bf47f4aa08153277ec6e4bd5051d1cc0782da1ac2015fbb089e91e242f9bbee066bd7f2b2df483731f6bee93c2549234755e03a07dd578e63dc4d9798782aee62446800d4d20f65bc5551be27b434118ca791633f08892f772aaec98f8d64f292d2c6b6e1943fe496719945df7b73083b9acb559d812dc5b00a1d44691b39fb4c05571ed7595426c70eb5081900c6d96c8d51eeba08ed0c57f5b8a2e8a64a03a29d9ee8260d1e93c92caeb2a7480b74ca063ef05afae83f506e8551a3f02e5", 0xf9}, {&(0x7f0000001c40)="ce2119c7854bd16dbecf5aae1b2d36833c0dff33b9244257efb22f6830e988111fb89f85845c99ff76ba0ce4cc9c1bf2f78c4e4e877783a80fdcc1faa605d712d1af9ff20856b9fdb9685d953c65ac828f19f5dcd96845eebd2173a82ad32d9b4e29ce71945b0e9d83701b9940a812148468aaa5c77d39b130465834fb591628f79d012b134d0a54607546ee0f12396eb37cf3cc2f15897c5ed58b2e9f87a83d5ad0b654ff31ec371ec52a663f6eb9406aece7cba7aea258ffd16ef480b8b19d69f57ad3411afa95660eb8986473fe415416d59f5e8ef426d3714222a867391956f73fc1f0c8d9d28e56bb02313bb26baa5d588e4eee6658e7b113a558d57351eb6278069a42804e0220d40cb32839b96a9f4ce5624915bdbb8385fcdd8cab6dc5a632d94e940687a0e8e4ae637fc9baaa74a661bbaf606cc3ec58590fff44ee0f83bae2a9dc3429709e1e7ea043ca162e60b05463ad9a333a36b59f968d31521eeb12d55f8d43da0309aecfbe564aa15dac754df4d4384a1782775edb4522f601ddba7a84a5a59e4dd1e7add299b8561c023c06b7b4c06f264df95bd5ce5a2e18bc9225441b83d55263f2a8ef18b449e97ae5b105891a0a5c4e60e947a52b396c97e06b3ec71990ecc1260028f517b43ee7cbf3b97fded40eed90667f89b97f4fa236cbfb24e40f094eb5833b72e1504d4780d1b96273c66a862c0b2c5f671edac4a156d8b507fab5df684328118229aac47555619be4559594d473c0737daba7e0358f52d235663e4c8ff293a561c9596634029ecef091b62a4d84e88d58b83d0b46909d4e7a4c96386d10a6b06333f4be313dd8b0c58a43afa1043d0e079838472735a0351a580294e4d0cdcc106d5f1e1eccf9a2e4338c3272deb947686959fc31f9a98ed4af04236743fbf73819834f2c42f2074db47b0fcc8eb2a9ab8a06bbf4445c70b279d884e336c08250e9480e986c8d890941f6c60b1d7c1cb30272b7ec7a0d14279d7b77e8a19159baafa1173da8e878784ad745f6225a3f1e0f524013de41c4d33e4a55dba079b9f76dfb426e65e184a142e5957d540be3af3b20039c7f03a69a918c95ed6c79e6a0d10ac28f48047b0e06cc23d3e8fcd9afec1f2598b76f5c304a644d2d39e6bfb5d2c17c7f941e46f908d7816f3859ccbfb8c1982825cb78a07ee7712d7ec09bf903169599947e03a761fdaaddc5e619024e966dc5cc8058ffc8aa17bc542d76c87138842c8a7fb6f2d6dc8891c25d783ad51491f76d60002a851c71e1d55e830212de005eeda90afb989b5c7d77433fe5479d3d31d61f2631bd53998d6cd17dc0d9ebb71058f1f7a3ecb08d2379c3f2d46fd55be3f8f9d1640d4ba596ca74c6bd10aee805e14f465e3e1ff2d6c3e6b450bb8d5c91c24d8e16c61bbef2c8bb13953a118e46ca930133fa8c44b1b16fd3e810298e68b381645af4a6d83d6c6cbf2d99b506b5a1091db0f7e0ec7e3412a41f0d69eb2dce101e0bfac7f324fcde148eeed3ea1951374d303f38f4b3adc2a03e0474f8487ab9025503568d05aaaa3a1d0cff416ae1883e3f0b04147c5ade27bad4c7b7ec724986fe5c4165ee06d76842ac130cc2266764ad945d7e8b7dc8aa216f526d147e5cb41c31226c7a2468bf42933c4894963c5091e0b069f6ca63b73c3f1d2490fb3c235691d0086d2327a673da06ce7b0987e5b0756df49eca7bd815f92112edb08d0c50a580945ef046d460338df427dd9ade04f040bd844f12dc30170de0e1af7023f563628636d1bb1ecdd30bb99f83c99a4292d5e84ca572669d9cf606d3a33a457b0b7e6f7a7133c0bd301ec2fbf63d8ba650bab1f6ba8820c29f51a281c2b630bb2c6ec88e108ecc53c124a79416478968e23fbd157e3bfc23e02fe6c85a160a8c7b9513952c66ba0d3a47e35d29ff5a453a98d3e2108e5a753e0f9bc16d8822d0cba0f180f6407ef9c5965700f1ed588cca80144eebe0875462d1abc4328398ae11e28ab7723c7e7de3ecd10232c456bcf4b291a4d4f12778042c646e5f0edccf7952dee8b6655dba52d5b7b80fffe385533caece533d29f40a47cb9afb6286ad5b8d2949cb41434a4e7d4d9c6c677fe32c2d1257bb6980aa74c5846187ddc56420612193e2d314ef0f186bce8bb96bbb90c0dffd7910a1666b113d90beaafa58962c63551d2333408953065ec49bdd312b98a2e93e64082f928b01baf4c7a198f1f5507c6a81463071875683d108156edb1f458c75c4de88e11db569e1a55e4f84a13286d092d137356f76b05c5c490518bf46c505004fca37c8af96df8e594eeb13d6404fd0bbf32b45c53dcb8b391ab0b81e26929a5f8b63b0c426110ff85254bea4102cff6f75274cebfdfb80b3d8e60696377a127a83f1db354cbb351a591382b73c4e0f0e3477469646f69d4de7d38dce38c6de2031820ac1290295fd40c6b92ab4a5bc80d607170af2025f101b0bda18a6127663b39cbb92ccf92084b10599a836bf7bac14e6bd591a9dd86fa6158a57ebf69a0f540d33a8670aae0ffc8c992d03251f847b6c398c4617a35a6fc58bca2ed0f6382c619b40b6ebd1eb83b2c0f7932f13c43cbd86b2df55d3cc92d9af7aa08e47b15d3d516905f3f5fd78d0625616479492b2939abc38337ce8f0256ceed8f9362f6d2d3b4219eaa1d75483883ab8f9c5bd7fe8fac4a6d46b34aa099c0990c86f925b45cec687f3fb47658879462eb45fee20af0a44da6d9a78db9212d3234b29234fa40e154513060d2e6dfa9cc39e3420b4cbd4385e4c157a55f1e664c8caa9854c43130703ce196d1888c50ec57945d7e5c7da0ab2165b22c8c0db0715942c11e2a8b3db3c759a0e22fe95928be290f346a06ebdc4914fdc7863973d7d27e6f3b0404b2bb9297aa8e8f8f3720e5153546229c4ecb866ee3462393a6781414f148ec238d488a99e51b6fcefd4956f144187aaaf38ad1e6bb418b1c417b3fcb0bd380141e83abd1b37ecf3fa425d73a237c075a91ff4be5eb18e38b060cf27e8fafdc4d02b7be32dd47e1c89c10cfb2c76b9c1339a07b5c8d203ed2671781c02f5500beab5b86e750426a0591874110e9f03e39b51988f086a2285cd05bbf393e7cf3e6574267fcbeafc7dc599a3b51c6058bf1bbe71a25c0b26eeb3c0a1c3edfe587d7b6b18eda5646568c727b398869db0910850d38e07331ed1a6eba05fd9d03b968b001cc20fae768665eb341403a2392f93b0d6bd2972f42994cd0c9d5d14e521d5bb78f9aca8effa1bd38c8c361b6bf6d691225777627b75c72c39ec7184d76ceaedef4d632efb1c63ef0d3ec1261ca5cc2ad6e8b9ba5c901596e60bd3c7de433c7b31cda21cbab15afbd62ea9c4a4f65b5c85132cc14c774be639f782f744f41e102aa3ce5b3d2766b486efab6467365117421f3e9c9a09e6b791033458d85401ea85d9a04b84c3e5b9a08be13eb2d6bdca0a8b3a07ddd51afaa7bcc26cdd554ca1458d8d813b85dbe44d4f85467a6afb9ea7a267bc10696c9d92dae58a8e940134a91279b18fae286cba66816de75341213f8321506d027257ef222ae1e27e589044ced56dbc9717d5a0004efa8046da666db63aeb40895988375d3853474744d8c3ddca58dfefc5576c40be11dfb95a34078e740199d65fe39e3511835e7efeda603bc490ea41838ca67ec4574cb1779d044a6f2cefd62379843a4fa4cecf8009a071f6dcb8f222a07977ff1a674c00010d81aa1b8052eed723bd215904ef21148600bb15b940e95a388d4ce42009e0d67619d83194778fe8f5d6043a269f0bd9c0e071f49989de7c27a644bb03878dae08f18eb9fd49da98b650491a3ff4bff88725c327fbd817776d4af383e286754160a33e1bbaece5ab0b364a820a4b957781d577e6d8992b7998be519e4bc12e09ea71e47d9fb51fa189bc5cd178d208fa8fb58748f0c71be669fec22ec47ed0f1204d39f8f28a9cd3c834e71e39e5ba01e639a137690522fd3e54be91136206b57b20e8f04693af661a593f178f5a257321adf2da6a61fe127c24d2c21567cfd168676fe261902d24ec7f4effedd7b1935f13f8e6b254c2578e88dc89d3618057c7c9e4eb054cbf2f3ed68ce43b3d0779fbb9299a169c257b6359d88c4fda81436cfd62378b806c2246aa1123510bf7cf24da47d34df8679c26b7fc20dff3cae2c17a9acd84ae20c588fa6d23fe3f03bf7cab0d486b5744b1c65f15ed109b51440cb4e70f9e47be516ff041377701969fe42eff7b4320a06c9bb79ab2b95c62d896bf7211efbf50bd7ccd1729f34dacb4e28bbc6941846fc02d6afa0ea8369c1286c9bc651d0bc1c2a22c6b9f84101f157eadce747dce6eea224e7b6288348362a34ef5b1a1d5a2b4d823df4c261497afc7f5d1789f6f0069cd9cc7266ad07b65f743fd60dcdcb9ee34a705b5416ef813a03ed52b7a7866cd253a79cf45c83e1f4a9aff386f0cddfab5c6db24d1173a43349221c3dacaa32b6ffce86b9e96710f086fbbc3717580c4b075dc370b4db5e17f308d4c790f0d12a00a015ed5c9a9fb1a940637aa7071ebd6765bcbf060fd6a54b85653c0a74e993c8714d570ff40104027c68e9a5a2e676ee8b819dc31b0d745c8c9a04f87a1f7debbd5624158d80db8bc5f94f3d20995429ff1c151c43523b907b30b9ace3c7763c1881bb080fcb5a57044b9b21c1c261176843a02672f233849f1b73d35832e0c96af4e26f9517fb9bdc9886163797a206dd086ae1eac04371a34ce4acc4e3b732ac22a0e551d8120ac72712ebf108926296d3ff972cb0b1a7e8bee27f8c322edf7d6ca33115f1860d937c8b5174b2f020c58b2b400c92458ebd2683e920a1b4e7357ee86d7cdb5631d8268578a31be85af1378c6c30992bcfb4925246f87fce88337f19fda1e1e49ee13eedda633f991ef09ee35865c080f127bb88c6dc8ff73b3002e2d70b7c53438a35c9f80d68d70c96c501277793bca69c1dc2ac0d592c0477508f45d751cd4a7005421bcaae7a1f0de266d3828fce70090ad8c5b6e304c3fc0d0b51ca7f79e54d538babb93c472d0e4875ab33f7860b3b9af10f7cde386266395d653ac3bd720588ffffb86f21f4ece274fbc9936aeb9390ca901d01531ba1f89e211f742c4aa2c248e9b89cb088b53b577bb09000cdd16b3f59d7f3df420381575958551d5d6e4a8f9e8bb664e58965ada5227ddc52f4eb59624016e7d7e6fe1e738626d724e9c733ee147e23f2dc07d031e8694aa359522d757f4ff5a4cd67d48422900d5b95b2602dd5dbca3ee38785f97eebf5c1e198d67437459330bbe4fb673a6a7a30e4beac569677dc54fd7d14668b4ec5755fc7e2643ac468959340ae7838682ab852d3351aa8585079d7e8055a93ef44d62f379632fce4bf2a24eb4ef16334291ed383b1dfe4645a6a80bb131b287fbaff5a796e00955d04c87a554869bc47fa0274253093f5e3ccb3e403fc7862bf104a1c1a817a0f364adf4b00f7f27c952f30e4d2ddeb39613b4237c714e1735b04a78b5c7f2ca13ec8c91a604357470af705196c9d012c491b3785b3a7da5b9be9ac68e21dd7c17c8fcfea6bd532cd2e19b8eb8af19109f21db4d041e00933c9a88a71de73f8d1dba0c0158ced2219fa6411da6c3e1e7e11b28c88ccff0144d437f60a8831fc5ff4bb37ab86b8abfaf4e9894e6cfa5b37377668bbe724f8098fe927577897dcf85b6f11d3e5ea8131e1809dabe5309580231f69dd1fbcef015437df5ab51a2d9a76d083e8f1d5a74c788e36151d0209728603afc91843a4c", 0x1000}, {&(0x7f0000000580)="0ca6c4a8e6fdb9f8a7d63822e878bb3352514616b696c599b8d8b7cc00d78ee961046c14ded11f844147349d3ca3ff9804f6e265c18894548c1a1e47a823b15383bbda884ce3e35275f4318df60fd30420b07082", 0x54}, {&(0x7f0000000600)="bd711801b775edd1632900a7c09df64ab8170e318e29e091def3558e1d646e3616ca25f679ec63819ad49b61b0e925d1dcfbd7e62ff7d60144b4ccab82c958264660b6d089dc22ac8457d19c616125d53b61de02657565221a6309a16cda2b4ea34ad493beb29d757ee7497df4a622f0f5d56da5aab2ee0a4d2fe8b56bc4b2c4e4b29a417c", 0x85}], 0x5}}, {{&(0x7f0000000940)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="1a3d74fe88a4b707c30100954b5c41b7eeb5483324a6fdefb91494", 0x1b}, {&(0x7f0000002c40)="f94b48f7e0f3c251a0f66b2e0f64c308cf781da1d6d4cf1130d1788ac2fd201ecec3bf3b53828214179556179964d8bc02c19cdedc31f0628c7e5912340c7a37a2400a347aeab49e8bbed9d8ce928a8b5e2625e414f2bec9acb79079d756db0d62c69f9c7cf58df8a57d0ae71edac289f857d5b7ba1be5329f9c6c2e10c81b2ac7d9a51d433f568fe801791447fcd9f4586c26fe64a82179fa7bbe7595b5e5b7ed64ec44fa8c92fd1b21a1af25f2d84e979c5ba71e33ffe9a985e71d83a2284c4a0728c0919338043697638d93c7fe3ef9f36d38e74d76b26a162842887fbfc63d816d631cd6e9e6f462dd7e8d1880250a9b0b2e8a3b704ca55c3b732f4b49c515ad42ae6497ccb88dcd946c870b56e82a6b9bc890df8537c92a743bb3c656e0462e2131bfeedea9cf83dad08cf4f3bdefc992af5197ff77c068372fbe076d174b201c11a5641451b35c9ef13a944776c8277b5654bd3fc1454f66bfd5878a316296480e5ccf26111af3ce47109cef94e51a939f730bdfeffd1292e9b83e5e03d02df4125bbab4e92882012eb6a41da845e5204d41f492d94ac289c6f82a4f4fe889fa1c0d38ac422a6bfe44041b7257d0ee1c6232cbefbcfec2e13fa570abef5cc82b8588af11f33e37a24b8cbab9f27240811523122e0c9f98484cb265a4f915e023640fe9922b7e1699f19baec51f7c0d0a4985c85a41b891c43fa36254e1030c018193ad55d45546c8159f7def9499a86bf44bda16b4020ac13a8f78002c55cf164db79b2db5207e9538ee78ab087b88aa50d9883c7ca5662fd827e973c0d909068aa13c94d8936e9838c50964afce3ad66544ca0b11406d7132e2960140c2101f5b4a160fe0b8b17e762499905aa97f371fe32be056e2937d914530bbbd58a455e722f520f68453292c4e91fa61c46c0bd0444b1c40678294353b31dbc0e84f1a9b38f6931d98239a575882b6ad750e6e0e0ecc0159f9bae4d59ae028d51d6f8a9957bfc4943a08aa001968f9a3463280e5a06de2b18fab65b314a8e580cb175dc5547aa1160e18ad90488c59fd663bde870c30628ca73d8b2fa68066b284695205d518c675635940ea327cb1eb7d5eb41fb49396fe593d644cb8c7ca399bc169fd8883de4c4b659755028db6fa20c208fe9b2d4d97cb48c11eb7ad3ee889e8ecc726c36f31df83e4bcf1a80f7e5be53791c611893a35cee2c8840fcf795c10e83afd118399ded4daf83d397e2bac5dd9af3bcf4ed80a2cec313d7a79d788cbb1f70dc1d5b0d9bd630a8539eeab86eb54a67e226de05fbc83e734bba84682e17eb135589cd09d0574cfca83a7a4e763a66e5978b7d86dfee370dfe2b31843be1ccade34dd1b4cc702f5728a740df0b10ffea436afc1a7ccf2623e776bc9d03b44db9f54560b3390da1c5832502b65ec659eb9e654ecd997dfa5ba97db42876058ecbfb9728cf7a582904a19d736a1a1cb84d1c5d4c4384598e65add6c0eb4a8e43ccfc686d535fc88f10671b93c7a1dd68d0fb68f7ee494b24abaa687ccda432617e82d59ccad65395ccd7dcdbaf594327190810527c2a3c2871f468a128a5c66cb3e1ce6de81fde4814674a36822c805331513c586a3a00f69703e66d3fbc3ab904a68856e57a064daa9e882f55f331b8b7f4a3e7a1609958bf4f9f9c7b48c75f5e312fa014ef7f548f1986a77805846c37b416add3d0e385765cbc36ab506bff08568586f89eb750709703d5d987bddfff6bf8ac0afc95848252e47cdb1459831f4c42d3314d0f940f439d93036db0c8926bb95be8dc7c5164d34f2397a80889e954d04ec1073ef372771455150f56f66b8c0126c47dc7b1c7072eef5a62b3a2344955a0ecde246b24f5380b240348d85a9b17715819baf9d99ecf18554d8e22a07b1cd9d979224fbd614a3ed07b9cb33484aba00093994dfdc333052244899088956f66981038df404d13107713f7c1a5ed51a401be5499c4910ae3f2a8bc58db6f35f11ec3bf511f72638869604c246be980050b618be1c88e7d00cde4bfa424eef7b1dfefbc68633037755acec1e3c076c4c2fd031bf7a58c011c787699343d4ffda49b217067690e4f770c78eb6fbc0d440639b761cb2828347c5284972ebc0cb70647d12d4de8114d9ceb805ec165361a48cef98b72dfc9c7f5b11b48d42e2c38c32c401968f99f5d8da9c21efe1174c2671ebf3e4cf1adb89890f6dbf4d9b96dc5e344ad1eea7e580dfa6b529de5af35701dbc0458529ba1d51ee85102dda00bcaaa55bb808cfea175772b9769c115b9ea6357637df92b2562a4d60a68aecbbd7b2a68bcadef9b469d1f3f0cc6ace5e1b2eae19eae7d170dfe6b0557b4be1e5ab503da4d74f0d034d285c0018d544467244a59e85b0b87ff213cabc1caa741764aeb5ef758b9956a2c6a011bd8ac354163dc0c183e6ccbe1602b113b85c58ed4bcd2db4b205eefb29338f8d9ca8569a857deac18177b4f6b8f233731f0063454398030051c69a0578a6f844d4f235ff45876e129ec8d77adc8e5b2efad0294e63f384e5e0a9c5671300b3587809834ca1c940fc58fc5a5c5f8de15c1174496fbbaf5d60fbee3f57382104ec6cb50d26578b288c92f71ceeb232253ee71ea287266cd1d40139be03eb542dfa0e37e86fbf4a726b72053cc22392d7fa580cea1547ae1a25ae5f50d803a620bdc65f4bff281f8f21a83b51e8a910fd2d131100286de811f4cb393b52231f1a3eda24fd58fa2cecec41703cff89a1003f2b1f8712e409d6ca995cc45c6cfacd95ef64f52f186de749cf51bfcaa8c70e3a1946e1babd97414db687b7fec587412e2d1732722e67b37651fc169d3a53bf551b539cb6ac71b9e0d2789eed7d4ef6f6badd986396fab0c21cdaae6b1156f2f38723e1b01c44823499d2cc4ecf887b796a013c767e3324435f3869d72f9b69479c4d085d9653e14772e9e151cd271c9757d2498ad357267a137d71861d616b77d72d807d8bd49efc6b130bf5bd6b3711543b7f471316048902fdd63e5efd08ba3cf0fb74a1834c08fa0bfb149cbfb3c6db6f58108633a1fff4c93ad9611313df0b62f5285d5c6961104f20d1c74fc6270c6d04572949a95679f5f458a311a52b6bb425ba03a088a4f5115b5356fb5b77db3d7b25b81a7f0da92c0f1a87ba5a7320dc20cce1bef9b228c806299b9bb7dba5e7a5fce96bb12b3588f796e476ddbc7a0efcddc36b0c8bc65fff63c59754d72b5f9a0efb520f3f908af79101480b13a02ff5fc124cea254eb6305031b267af7d4b78f8eedc05051b6690e251819b33d6c2ef8743ace8d7494d34920bbe2805eff3e88ddb801462be27e09944019b3b97ba178c22d7577840ae82ea2d15a63f690d2cc605f9e73cc5438ee784189932e17e8ae33b97fbe532c765e93e125581c3bf3d9c3ee17fa50555685ba17e1cc53b25df14c0e3939ded332073fb6500809518884cb486e9fb582c3ed303ec8ead45aff42bc3fb1daa9038f8dfacd00cb4625424e405750bfaaa31d37ee52ef6b383c652c2d4d33f2e6df90413c1a77721d26cdb48ec71e0a2ed79b0af3998c9caeca51012e5fa607d6470da1bb6ffb5b7e17867f70ab0584dfc025f8804c6d680f7b2717f17d11ca89b54e6648ccedefb77965e0d6afa95b9770d80d81840ec81f65f05358f2f2abb8cd264556992b0c94b08351deff7223ad460ea6ee5ca1444598baa94ff9460e7db5d155ee83bf75519301ead86d3997352ee1a94411f082d634abe480b872e800e92925d70ff9103341ef4091660db5b1d9c9f9485a759f2cecb1dd4f01f29f28fe6a73583be15739784afb26be65da71a5fba3dd466ddd8ae169613215283540f6422fb3f3bfde3e9c5f60842c7841fa8667657ddb58a49a45dc8c567517e0605a545703e99f5d123dcd6d9f575d233f7a7d36526d5878284c89439a455d2f0f20e4b78feffbfd537f1fc3a5b8e51d97259c87e2d5b2a216c06326a9792544d5f5755b6845f3eb2bd72d82a9997dfc6d5ab6f6e1fe741ffd7986340cc64acbe827d361c74cf1b91699b5ceea1415b5f43846849cc464e2ad847e6f989fb82e899d3c3b0053aa23fa4f39aa5e70ed3f172d3ee16a6f34e98850f2d30fa70f9e72a823f4b46a8cf8678db43ad25108c49e69e74e3df0c3368c624a638b5ff3825a9522faa53adad49e5b659f8540482e81a6f80eb361efaad2daf11d289c25e9e569c49e7537aa646e5dbdc9b0d088f49979d4ca614d86edf6174a832a03eacb7e70d4fb46a33364e09e2fa07a7e7f7835c6d01e7ef5a5f30f702f096bd8912bf67171acfcb26561c9b0c1549bf8d512a1c30e24f648cad05842c1dc0357939e1116b39754e39108d7590eb37e0a38dfe7e32d53be47a13c2780f35acfdd8c54cc0d9be31159608146bb3e04fb1ac069938332c70b43d99083779ae41e902bec0d01ea01f4982fe30a2403ef0a9e1497eebf85cc877dcba99f11672b27704b76f4658377ae485eec62ee31c972b8f2a70f5aa5b578c322ac5e67e10d3dd50cc191b4bf4de758fd67e71fb429530d7390c8594c1157567f206d48f4b588cb5ec5e452fcd68272d7413dd4c5d98a62336b08d70308a075ca80991a424e7233b899ddb29fbbca5a6dca3fe557dbe927b99ca5487a2d45bc325041a26b6ea26d0da866a03a384a504cdf7b5a7b55c7d1b312d1e2255ef36a8fe04323220369c43e1608f3f2c218b626f97ca7b345f88ba99e14787c3162ad983b4ea3e5652895eaa92a4c3a314d4d94c369e4ee92b22cf0cbcf4943fe4069c198ddc00ec84a4839df8a884ab2b6f7412d1f934b309d03adc3119999ccd7b73a36b36d4aad683fd2ea8d640aee028b58e770cca400c4957ca8c1ab6c656622684c65e9123e9fcd74eadee2cc6cf26a7c49360426db21438af109e8495c125c4b9aec557f4cb91b2c0d3e04944c64f17a696fa6f35326760a75e313446745c75c5f9220b7d57089f0b6033ccbc7733d6e220e4d45149f8af84703c4f0cdac9d90ea2c7a48e33becba1421c8332f582080c0bbb741f0befa9b9f4f5eaefd9a39fb2fba6c7793e1edbb987ca6809a969dcefe4df0fce2d3e2b8c79fedbe540fafa41d10b72add49d357281ef973c2d4961288c97e545fe3a80e20600a5ab926e340a43398fe4a6b5358f74d40e630a0a5db8b599f14aac12f6aeba298ad30fb81d7996fd16f4e983091bed9d520eeb078b0118fc210c8b7a10fcacdbab7c935b3b77068741763ee50fa38b66d8e7dced6b3af0793ee1d495027186e01b9c7b0cc0b0fb0d0f8357b4d3f8802f3ea4de4324f45cee04489dacda31abcb3c11bca209b197ac6d21ac361fcfedb769ae2afa4a3cf4dc3fa3a8e73310000b8e2448a95d9bc89ff5a72e99c5c9a0bb302d826a9f577f9e0a3abe0bf7d726d6de98a75c750fe19a06cdacc0db07fe23c352160717b39048045f1f62558c47f8fbf3110511e6808803f7f168c8c967a3fa988be7d69d40268931405036ffc608916c97f16f6642b24dcf6ccf14064c09a42a51973c2bc0eaeeeb61c2e662ae962afd99b30961ebe8b928e6f0f4573ef955ac5f7128b4431232767ca31ceb6375606939c58a40eb56527495ea24a3a1707fc0516da7721655706c980ef2cc981fa5bcee7807f817f166c3865833fb190a8c470cf01f91aa2fc018549190041219cc0b1f52e68f2a3199dbcb9bdb8307ec7a1d39713181bd61ed796b0301ace9a37ec011517e119b8600289f8036e0fe2dd15d4bef6ef1fc0a0da8bc6649d5672551f2534624", 0x1000}, {&(0x7f0000000840)}], 0x3}}], 0x2, 0xc001) shutdown(r0, 0x1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES64=r2], 0x78}, 0x1, 0x0, 0x0, 0x24044050}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x0, 0x4, 0x2ef, 0x4, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 757.383466ms ago: executing program 0 (id=1803): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x4, 0x4) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x3, 0xfffffffd, {{0x31, 0x4, 0x1, 0x1, 0xc4, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@noop, @generic={0x7, 0xc, "a4cdebbfc97b2d292620"}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x9, "a7431ff3ef6d3d"}]}, @cipso={0x86, 0x30, 0x1, [{0x7, 0x8, "f3eff480b231"}, {0x0, 0xb, "5e740c6ae7ee153a1b"}, {0x0, 0xa, "becb8a696fd998c5"}, {0x2, 0xd, "53065bde428cd0167c09e3"}]}, @lsrr={0x83, 0x1b, 0xf8, [@private=0xa010100, @remote, @loopback, @multicast2, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0x3, [{@broadcast, 0x8001}]}, @cipso={0x86, 0x3d, 0x2, [{0x7, 0x3, 'B'}, {0x7, 0xa, "090dc8c121aa376d"}, {0x0, 0xe, "8e0538dab669e22bb90804f4"}, {0x6, 0x11, "b913d925931a02ecd57f79d6dba15c"}, {0x7, 0xb, "fbfb7f2a78574c1573"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000780)={@local, @rand_addr, 0x0}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x33, 0xf, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x10, 0x8, 0x7}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x9, 0x5dbe0ad5, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x8, 0x77, 0x0, 0x7, [0x7]}, @timestamp={0x44, 0x8, 0x6e, 0x0, 0x0, [0x3]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x9, [0x89, 0x0]}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c00)={0x0, @remote, @private}, &(0x7f0000000c40)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000cc0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000002a80)=@newtaction={0x2a70, 0x30, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{0x8a8, 0x1, [@m_vlan={0xfc, 0xf, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffa70b, 0x6, 0x7, 0x1, 0x3}, 0x2}}]}, {0x84, 0x6, "47c1fd89b84abcaa88ca7b468a7aaf0d5af719e0b1a0036ecc5d99301c8676c5269438c516931887b37ff1e0ac7c11da6500a59fac9af328b8b52a86cf21b3d3abaa042e980816093799e79704ad1f65fe90ff625bb0537a2fcd9cf178e771e1c2208aba2a738af3fa8fb53530b6b94316f326775ab0d732ef3958615f32e5a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x8422167a47df389e, 0x1}}}}, @m_sample={0xa8, 0x6, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xb, 0x20000000, 0x8, 0x7f}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1ff, 0x6, 0x3, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x81, 0x4, 0x10000000, 0x8, 0xffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0x2a, 0x6, "a3404ff9419e017d851d25ac9af1f4e52bb47438385cd74279247c87437057b4074b8a29dd59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x158, 0x1f, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9e0, 0x2, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x6, 0x8000007, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x3, 0x5, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x6, 0x9, 0x38}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x8, 0x100007, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x10000000, 0x2, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x8, 0x2, 0x4, 0x3}, 0xafff8ac0bca48df7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x6, 0x80, 0x2}, 0x1}}]}, {0x2c, 0x6, "0ba2daf2afd474d69a3a7c2c412399b64a36f4f26e2ca7481060574bd0dee5f6da682edf55c4c319"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x108, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x5, 0x2}, 0x3}}]}, {0xba, 0x6, "925403c0c71e410238c06674c9892a828738c652e3cbe9e3d8ab003cf79eb905a81845e90053903382bf5b86a58549cee1a53e8844608a5e47a4ce0b5e54793236c828d7b0c2529c9dd7ce19ba812911533f3d510d72c4d2ccaffa00575e64124fc41ad84d903188c09112b1cf238636d9ac56303114bb8a9566a3e25fcca5ababe769acea88e07a6dab811128431b294f5ee0132e3491c4ca4f048126a9f614effc107e87b6b2bf5d8427c2d0072dc53445e569bd47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x1b4, 0x16, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x5, 0x2, 0xf}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9, 0x555, 0x4, 0x400, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x80000001, 0x1, 0x2, 0x6}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffffff44, 0x7, 0x3, 0xd6}, 0x1520}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x1, 0x10000000, 0x8, 0x3}, 0xfff6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000000, 0xbe, 0x3ec2f8b3}, 0x7}}]}, {0xda, 0x6, "1b357f75c26f3423eafbca0a3a390efdf3c82c1cc5f73a93330b58ce659ae06fc70e7c8b1b33378843086fac77180483580e9532d726c3f1a12d81edb1ec40fd594ea67cf88db63d917a69aee0f43f870bd64cea2044b127dfd7be76e5dd3977b91fb78a6fb84193aaafc4496869f17a6fa6df7a0324459255e8d4d598bf469ab25cffdbec8620e67f062cdd52a29c73e64315d7966903755cdcac4d7daf44ce77524cb8942962b484c426475a8b143e3eefb74e6508c8849784fd9eb2285bb00e8908aaeda0793200311a0c444359b76fed2e451819"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x74, 0x18, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0xffffffffffffffff, 0x9, 0x4}, 0x3b}}]}, {0x2c, 0x6, "820a0ec0558f5b4e86c2a95b4621f6d2a9baa10b4406bf060d52b3937a62c1a30511873270e03c43"}, {0xc}, {0xc, 0x8, {0x2, 0x5}}}}, @m_skbedit={0x140, 0x10, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffff06f, 0x9, 0x2, 0x8, 0x73}}]}, {0xe4, 0x6, "8f129bb79584f8795f720b3478b9c2350b8b3d8b777a3ff32355a1607205a79f39a79bd8cf79033af260cf6dd69d95859e709a6c7055986bd3c9231107e01f4ae7f2b950e2509f2a086aee0165e4cc715db989b11c3c295ee5715445b5d71c8cfc9ed43cc6135e1be8a8a07ed6ff81133cb6dd6e980615d23e7843c11e7dff081844c13faf6bb8cceedf3a17cdb43be2f1091cbeceb370bf96ce3ea3f8671acf768f6d6d4acb396e0687d04b6d9c2691e4c7f7471b14f4cb667d48432ecae34d55ad8d6fc8577c764b3f305049c7846c1c1aafcfcde96507e4c62b094e551d7d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x138, 0x8, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x13, 0x3, '-\'$/[$,+]^!/^\'\x00'}, @TCA_DEF_DATA={0x8, 0x3, '{[]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x5, 0x5, 0xbc, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xbf, 0x6, "b8ad14a0171d3ff5a4677fe59f06350eb820840688f7afaee780d41ecf4422f6c65265a7a99274f1562ba71277e52c69e1668beeb6f08b0e462d0c032610a0d7d4df41d0c67ae38f3c77d6753d9dd38a18690ffe09d490be2a2631ec4a755708ce92bfd0ae29318f8c6b186bf89bea8b99a192b7f463645c8f084ba8641306e30171dadd09fd8fcfbb35b8faa68f978144fcb0267d600e1f9b1ba5dcdb83dbe71c15648081339e8910104a7fd1994e211af5ab2760abe18855b201"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x18e4, 0x1, [@m_connmark={0x94, 0x6, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x7, 0x0, 0x37f, 0x4b0}, 0x100}}]}, {0x45, 0x6, "571daf0c8773d7607730a2f7a7e655589f123e566a474fd9ef4f3b9cfc572cbc49f5dd05602a7d03ea292ed5ac81fc0f22eb1100"/65}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x154, 0x6, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0x80, 0x70, 0x6a9}, {0x5, 0x0, 0x8, 0xb}, {0x8000, 0xf, 0x3, 0x7}, {0x2, 0x7f, 0x40, 0x3}, {0x2, 0x1, 0xd4, 0xcd0}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x80000001, 0x7, 0x1, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x51, 0x200, 0x30000001, 0x2, 0xa}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x200, 0x7, 0x0, 0x7}, {0x1, 0x7, 0x7, 0x3}, {0x6, 0x1, 0x7, 0xc5ba}, {0x401, 0x5, 0x1, 0x5}, {0x7, 0x9, 0x83, 0x4}, {0x0, 0x0, 0x1}, {0x3, 0x1, 0x2, 0x1}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5560, 0x5, 0x8, 0x7}, {0x2, 0x9d, 0x6, 0x5}]}]}, {0x72, 0x6, "e108c319c8ae31b7a4b712f3bde948d72b4e9aca1b3de7d1b9ecc2ed035cb778abe107cb0e04b285fce1932ed6280b8a89c3507830fc6f1a1095e3176a4eacd5a92cee5c7a48db886f05be5800a28158b90bd7d705b92cf82cef35b0fa1feeb0bd34af56b59c9184583606c1c372"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x10b0, 0x5, 0x0, 0x0, {{0xa}, {0x84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xfc, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xa4e, 0x5, 0x0, 0x7fffffff}, 0x2937}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4553, 0x8, 0x8, 0x0, 0x10001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x1, 0x0, 0x5}, 0x1}}]}, {0x78, 0x6, "f063612d71807e475e19f5c7637e0c85cc65d783887e802ad8124812d811c61a3d3d2aef9dd0383db4ae734a595ec20392f4a234a23117626ab781901e94fccf57b8622ffe77326ed7a590b5250f5c4beb3fc35ceb8be0e67df3a2483f882c70be4fdacb543f6f4d8b617b1bdc08fe3b895bd910"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x9c, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x50, 0x6, "bc4b0005d5d6a56792984faadb0af62bbce8f4457fbbc356283ada39c5ca09bbcd31b4764a5bfa34e63f4f824b992ddbfa232f0e95ce89d035a323538fb29de851f6559b7d184c48088521b5"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xf8, 0x20, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "4d6ce476cb50381e961712c4ee7cdf54"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "52f9bc8fcb1d894638f46d98c1d3d9d5"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x81}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x80, 0x6, "94f3b0006fd234c954b5a700590ff43a3bbbacad9472cfaa55d37f19a64c6c4af05cdc47d7601eb047f89d4ffc3e702c11bae40ae327b572951336669e02ecb6bd1078ab30985048b66ec73e9b652a8d89f624df24a89842ee1f527b07356d4b9ed6587cf013efbf87334079525236320d0ff6e4323c56a8b563e1eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x48, 0x6, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb49}]}, {0x11, 0x6, "57c8b24a39b77913af59b4f8c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1a8, 0x11, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x20000000, 0x1, 0xd}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x7, 0x4, 0x5, 0x3}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb45e, 0x7, 0xffffffffffffffff, 0x9, 0x7f}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe5c, 0x0, 0x3, 0x0, 0xfffffff8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x10000000, 0xffffffff, 0x2}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x6, 0x8, 0x800}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff81, 0x7, 0x5, 0x0, 0x3}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10000, 0xd, 0x3}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f063974, 0x788, 0x8, 0x9, 0x25a0}, 0x3, r9}}]}, {0x59, 0x6, "d64fe8a5a104d257814787b9dcdda4728a5bb34232a018658867e0ea26d75f1e2dc10def22782feed0a04bb83dc85781d326b8ef2e79e49952f817767098f964499eaa721a8859da5e5a1a6e35bac029a335f22f57"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xb0, 0x1b, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc5f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xfffffffc, 0x1, 0x8, 0x4}, 0x1}}]}, {0x5f, 0x6, "66f55dced5e46951a50e8dbf493e108072916993b87640fc79b81cb1eb7e3d249bdfd2e9387abca237cddaff91d6b695d7d2b62d1c78c5de7365f40059057f6bdde325958a212f481d33cf99f04f242e7dcff6c72c7f134d27699c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x118, 0x5, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x5, 0xfffffc01, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x12a}]}, {0xb8, 0x6, "8e105b4391f26c5a7b10a5d2fd6dc889f65a0c1b67700405e145540765208e1d13b860260882c722d33a08e21f761acf97b4f74bc31deaa9ef922f584eca21f446fad657a659f33e0587909b212fc45d0ca9059e03dbc6dc1498fc636985b6d521f657bd5743d77962b31cc4e2bede8f9b364bfab382c50889388005fc7141f7cc593d11cb4570c8afaaea7d06edc024fafa3965d98c513c379a9ca77ef8f69e2923ba69731f447e21d1db529226453d31de70bc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x604, 0x1, [@m_mpls={0x140, 0x1b, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xffffff5f, 0x6, 0x0, 0xfffffffd}, 0x4}}, @TCA_MPLS_PROTO={0x6}]}, {0xde, 0x6, "28a77679f9f617fa7248c831d5046522ca1a0289958441df0391c627d6809ca2ecdd71527c74678ee841ea0f77ffde9baf2b5acdb6ea348c597fc6d32a52eda6d087ee2edf0e02ec9f0cad9f35e0805be0473badee46b97914f4cdf484204563ef2dddd3d156ab487167cad115848048223c5411bf64002073b25617c40a8e61d2796e90b772b34061f0946804f5fb14f9a49180af9f0b1ba54364bc88d9ed69a19eaf95c8caeb12a9ede150623da301e3bfabc5e584b683c0a983aea5adc444d704cd8eb4d7916a7c408385873cdf08f5282fb22c3276cb1a6c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xb8, 0x9, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffe}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8c}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0x34, 0x6, "6757b3bb63c267b1c7bedd6e715fb8eade2d0fd892487ca8f5c69ca51fc90d24c5538908d9bd5e84d61c71a92612b631"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xa4, 0x6, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffc}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xcb}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x324b}]}]}, {0x3d, 0x6, "62220d1dae23cd93df33d356a4409cb0e610d0d9fe3da2e0ea85f1a2514b87f28076ce8d0a8b854bd660ddf4d2e31ad6e97086d05f416f936b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x180, 0x1d, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="23a4ef393334"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x0, 0x4, 0xffffffff, 0x39c2c000}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x51b79f2988c7d9aa}}, {0xc}}}, @m_mirred={0xfc, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x14f, 0x81, 0x1, 0xab37, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80, 0x8, 0xf754, 0xfffffffc}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x1, 0x2, 0x100}, 0x0, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0xffffffffffffffff, 0xb}, 0x1, r12}}]}, {0x50, 0x6, "4b7a8506c9d933f1b6b797d52209cfae5d3ef0dfb7c91ad1495c2ad8a16f125fbe8811b285e3dbc4c2ef69ab1fcc48dbfd73cc663b5657949aff1727ec067c5bd11e5d02c52c2f0a55df73f0"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xe8, 0x14, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x10, 0x7, 0x3, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x7c, 0x6, "c6c71d85154cfaabf23697c53c042df05fef45546e4952164dc9cf6f3e24483c175c16d4ddd1626e37cb235e64c5ea1aee9588a1af870465c5e5f192974010590eefa48f15c5bda464070893d435af2fe1d52f8a3e2718c9f989aaa621243e9d1187e82ba3160d94717d6821cc3dce89e1391bd7d109d5ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x94, 0x1, [@m_tunnel_key={0x90, 0x7, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x7, 0x6, "917623"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x238, 0x1, [@m_vlan={0x110, 0x13, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8ba}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb8e}]}, {0xd3, 0x6, "b8858957527d6eccd19209c18b49c53df1241cb3f32935916a6ffabb2b06fb99e3cf7c758282e6a27ce7cbf0cc29b299cacb5a1a550da82ad5d7d74f39baba3f7d72cc21da878b44156f868d08739fa6235d0efddda7b85dd4e2ba72aa9a784e0fd1e3ae7d8f530ae08fbc298d423737d0594ad3800d27c4c1b4b061fa9d3caaf6e9da9d5c8430af9b021234983cd84350621315929ee0e828a8f8da6f3896bd7c69e53a1c6cd123968695c4c29f13b553f62e1571c1b4f2cbc1c094fc88056968745b182d6cf39ddfe1b59d78df24"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x43c731efa05e25ad, 0x6}}}}, @m_nat={0x124, 0x3, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0xfffffffc, 0x4, 0xffff7fff, 0x5}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1ff, 0x0, 0x412, 0x5}, @multicast2, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x61, 0x7f, 0xffffffffffffffff, 0x1ff, 0x5}, @remote, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x10000000, 0x45a, 0x6}, @broadcast, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x8, 0x2, 0x6}, @local, @rand_addr=0x64010100, 0xffffff00}}]}, {0x31, 0x6, "29614c9394f36fe4f968c04ba7ca0b451abff5b50723b0c1f8dcc8fad1dbd3aa88093f32db8b146b03e2e5501b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2a70}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x600, 0x80, 0x0, 0x1a6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000005500)="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", 0x1000}], 0x1, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000003c0)="9ac75e8d823add6a827146b80f2224f43b48dc005cc75bb45df78dae8027", 0x1e}, {&(0x7f0000000400)="10aa8d7517824d0c4348a719111e2ffaa59b73187efe4e2c18df94fdcd4c1057638fe8786c49533683210b140dc04c8850c6bef5556f9de75dc1312b0947ba93a89e5e940d0832e0cc76d4e0d89d569f07fd9d9b08dd7a6442e534c8897ebcb64f2f021313507035a1d00cdcef456ee9d2cacc9397816fcbc9f6273b621cffa3c509f79e0a88947462443132b2f44c59053173e177815534b8d9f983fc32b84bd6adc6570f4583b09d98533acd63cfd3a8090666e1db8a5c0e2a7a06404a5b8338981fa89f5d48164c793a129dc23dfd372ae23c24230936d90d53d0f5eb6643305bc45f", 0xe4}, {&(0x7f0000000a80)="53f7b046cd089b15d65c4e577f32ba986d0cb1cc979276723c5abf66a20d19351a2a2972c5b0a8b93e8754c82de7734f14d1d4a532ddbeff55ec564abe853dc7e845c737c79b441f4f981e15f984aea9c1d66fb823aaa896c6b11f96f94e00f5419f762890988f643fc535dae1b179df2e16e1c2a6c6b489a7b0078a0554de54d24908bfbada8274a010093d7d1dccd43f4556f009fcb12b072220c96c068b763ef08233e3bba8c60e85", 0xaa}, {&(0x7f0000000d80)="c553ac31955c95bef06d36c1ea5fb203d49faaccd5080da2e07fb453a54c66c9c3183033138ac3b822137fed78767deaa303ff79c37a71f2ced6163cee3f0ca4b7abfc39e4bfc8adf0c9591e4ac9efd4e41c4c5a64ccbbac1691ee581b9b7df87e9290ea13fc48c90006a7878226bbbe8bebe40184b6bf54e8a141b1a3d8793f4cdf3bdf7d0f97024c0c02ec314334fae997038b201b01", 0x97}, {&(0x7f0000000ec0)="6be6f34ff7b7e338a51ce6c246c247badee6ad26a04fd6ee311b088f7eda489ee3dea2b27c5d54025dedcf4ef65070ca7474e952aaf164fe862277bdfad4c5f5af2f4223200804a20b6db2dd058d07ebd9d82ff881a9c771025860516afeca483a7bcde0161fdba472d3ff21ad3d2a753c6eace3e9c19ff83479a8693c6d5b460d3dbe88fbbae04f04edb10ad197209d360482a85f791a344dd2031f66b3fd91fc51b8", 0xa3}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x118, 0x80}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001140)="bd45488e4f9935214df571c4ab1a943d460dc0267d45ee739329f429636528981f7281b10fa0e251bf4aa3ce717bd4dcff31fb7ea369d97eb5bb12d4e2e9d8fe0ebe02c07f070005270d41013138932282116babb7a56d3556b9471f5a2aacbd51c50e7330a0988f0b6d9cf18bd5b58113b9566638c498ceda47216512ff1ea8530306e863756b4d32a9551f0288956f0137bfaf2e73a4789f9915f7905505e31361f0c330bfee70e0f48c290fb3916c7e151648a169b3689a97ae4460b4fc163a3efdad6a29683f3373f8d7a07bfeab3eec7c44c5ddebe872127bacec5cb00de7989794c9f58a8b3b6846f3bc", 0xed}], 0x1, &(0x7f0000006500)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x1030, 0x4001}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001240)="2ba781f18d3d5f7d0976b14bebc2430301acfc8250d548b67a9b62d24bf9718da9ddc30a71e273f60ba8fdd496ee42cf80293130acf5acbfec1c2e318ed386745723f31189f4db88684802d92f221be47fca46a9f3054d549884bced8cba95075e4b176373b69176384a39b02c3352549f8c560ddadd53dfef763a4372eba69e9f560c5cb235613456", 0x89}], 0x1, &(0x7f0000001300)=[@iv={0x20, 0x117, 0x2, 0xc, "72b0bbb636ec9ab00652508d"}], 0x20, 0x20000000}], 0x4, 0x4001) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r13, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r13, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r13, &(0x7f0000001a80)=""/4063, 0xfdf, 0x40010103, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x40, 0x2, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x4000006}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="25330c3301d42f12b7986a186857bc03cc322e", 0x13}, {&(0x7f0000000140)="244b12de10c156407ffb64daf0f068296ae52af9892a01e0299973dc84d5a4fa1bd62e03b31832f19b889e61f33ea3b0e8a3a0ec12e2e1d15309b9db9239b733ed8c2b20999da80898c579022dee6cddf24866c8be", 0x55}, {&(0x7f00000001c0)="c27a661b36f08814007ac0e45679e0418a77f06e8a59a0f471cc69b1e04e2dc32939f2bef57146f44ca15e7427939ef8075ab031fa2ca4b3c73425aea656fa2b7af37864b39d9a8b6d7fec044a461d435f", 0x51}], 0x3}}], 0x2, 0xc004) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b151000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000021400128009000100626f6e64000000000400028008001f0001"], 0x3c}}, 0x0) 663.542955ms ago: executing program 4 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x8, 0x6, 0x2000, r4, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x5, @void, @value, @void, @value}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r7 = accept4$netrom(r1, 0x0, 0x0, 0x80000) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000bc0)="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", 0x2c7}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) getpid() 529.884107ms ago: executing program 3 (id=1805): r0 = socket(0x22, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000280)=0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000ad0d0000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e0200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xc4}}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000600)=@gcm_256={{0x304}, "7a9819928e9eae3c", "f755a782076e75ff6df9a54003208c55e1a9e1df991ddacf87f55f3392f4348a", "a195dd72", "bacd252e72b54d8d"}, 0x38) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x4000051, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "b65f5afe00", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000041) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 444.170183ms ago: executing program 2 (id=1806): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xdbd16000) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000000c0)=""/229, &(0x7f00000001c0)=0xe5) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x1, 0x1}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044940) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x1, 0x2, 0x32, @private2, @mcast2, 0x10, 0x20, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x20, 0x710, 0x7, 0x7, {{0x22, 0x4, 0x1, 0x2d, 0x88, 0x68, 0x7d1, 0x0, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0x13, 0xb9, [@multicast2, @multicast1, @multicast2, @multicast2]}, @lsrr={0x83, 0x7, 0xff, [@dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x8, [{@loopback, 0x4}]}, @cipso={0x86, 0x34, 0x2, [{0x0, 0x2}, {0x7, 0x5, "8938ed"}, {0x2, 0x4, "caef"}, {0x0, 0x10, "d61d90741822fc2932b4827535cf"}, {0x6, 0x6, "ed265406"}, {0x7, 0xd, "e9d0cc32ef2f22e364dcee"}]}, @timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0x9}]}, @generic={0x82, 0x6, "e1c393ee"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x1, 0x0, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x0, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010102, {[@cipso={0x86, 0x39, 0x3, [{0x5, 0x6, "66edf8e6"}, {0x1, 0x7, "2ec54fbdd4"}, {0x7, 0xb, "1def2fa1e5e5049f52"}, {0x5, 0x3, '>'}, {0x6, 0xb, "4d3a1b1ccbe8c85c81"}, {0x0, 0xd, "3f5e42e2ec6e24670205dd"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x101, 0x1a8, {{0x5, 0x4, 0x2, 0x3c, 0x14, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @remote}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x20040041}, 0x4800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r9, &(0x7f0000001580)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}}], 0x1, 0x4000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000004140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r10, 0xf9bd2d6ca286407d, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004844}, 0x20010040) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', r5, 0x2f, 0x6, 0xb2, 0x5, 0x3, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0xe1}}) syz_emit_ethernet(0x26, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaabbbb8a5fd0c25908060321080606040008aaaaaaaa2a278c0d63d7000000000000eb088bf2f7f1050c9860abeaaf7f942f19644ca30c1d999fbb004face7cb69"], 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40045}, 0xc000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@ipv6_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x1, 0xfd, 0x0, 0xc8, 0x9, 0x3000}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x840) 248.85982ms ago: executing program 3 (id=1807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) 47.020356ms ago: executing program 1 (id=1808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='f\n\x00\x00', @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r2], 0x0, 0x1006, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0xfffffff7) connect$inet6(r5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3b42d200", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0xd4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000310000007f000d00009546e410f78695b74f00002f96e17b23a79e102b49342576b7d9f359afaf859c134d8d733fcdd44a986e594651797e13fddc30dc5cb53c22517987e47dd962f0334432211211d012903b5054141d696505ce71095ecb29e4307edb29ec85b5"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) 45.474601ms ago: executing program 2 (id=1809): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x10000001}) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1a, &(0x7f00000000c0)=[{&(0x7f0000000f80)="ea", 0x1}, {&(0x7f00000003c0)="0c22cb6b1615c6c1accecb0d7346a43a53cb5d19646daba3eb9e43af1d4882f4016422c92723306f318110e700703001aa91e3a175a3ff5db72fec1655474294b704f495711db31602686156f32e183811a55922e2275ca7a4ce8c859cd7b18d317558342c6cd516b7a5895dd1f71561e9a4b241eee3db88b91ba948c26b985995704a13702de479a54845e84158bdfc26efc7b23b635543123be838d3aed3207058fbbc95c7e5aab1a9fe515f892dae5df13e8a0a39cb"}], 0x1}}], 0x1, 0x20000040) (async) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r5, 0x2}, 0x8) close(r1) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 0s ago: executing program 3 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): length. [ 158.511360][ T7988] netlink: 'syz.1.533': attribute type 6 has an invalid length. [ 158.512379][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 158.551196][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 158.680827][ T7999] netlink: 88 bytes leftover after parsing attributes in process `syz.3.537'. [ 158.732038][ T8007] netlink: 76 bytes leftover after parsing attributes in process `syz.4.540'. [ 158.733802][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 158.769145][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 159.232863][ T8023] ip6t_srh: unknown srh match flags 4000 [ 159.251565][ T8021] netlink: 'syz.2.544': attribute type 39 has an invalid length. [ 159.554990][ T8040] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 159.644434][ T8044] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 160.093710][ T8044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.104261][ T8044] bond2: (slave bond3): making interface the new active one [ 160.112728][ T8044] bond2: (slave bond3): Enslaving as an active interface with an up link [ 160.207651][ T8054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.390822][ T8069] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 160.544636][ T8071] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 160.564612][ T8075] netlink: 'syz.4.558': attribute type 39 has an invalid length. [ 160.592997][ T8071] lo: entered promiscuous mode [ 160.624711][ T8071] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.664482][ T8079] netlink: 76 bytes leftover after parsing attributes in process `syz.0.560'. [ 160.816054][ T8084] nbd: must specify an index to disconnect [ 160.891772][ T8087] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 161.324308][ T8103] bridge0: port 1(syz_tun) entered disabled state [ 161.431024][ T8103] syz_tun (unregistering): left allmulticast mode [ 161.438656][ T8103] syz_tun (unregistering): left promiscuous mode [ 161.446988][ T8103] bridge0: port 1(syz_tun) entered disabled state [ 161.668534][ T8119] x_tables: duplicate underflow at hook 2 [ 161.913988][ T8131] netlink: 'syz.2.576': attribute type 16 has an invalid length. [ 161.989820][ T8131] netlink: 'syz.2.576': attribute type 17 has an invalid length. [ 162.429983][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.437835][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.706624][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.724110][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.762930][ T8131] tipc: Resetting bearer [ 162.781247][ T8131] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.790905][ T8131] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.800824][ T8131] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.810143][ T8131] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.859197][ T8131] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 162.920754][ T8146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.998304][ T8157] __nla_validate_parse: 5 callbacks suppressed [ 162.998328][ T8157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.581'. [ 163.112631][ T8159] netlink: 76 bytes leftover after parsing attributes in process `syz.1.582'. [ 163.361928][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 163.430124][ T8165] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 163.438669][ T8165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.584'. [ 163.515147][ T8180] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 163.561109][ T8180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.587'. [ 163.762220][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 163.814265][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 163.935612][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'. [ 163.949756][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 163.955982][ T8194] Bluetooth: MGMT ver 1.23 [ 163.966393][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 164.353643][ T8207] netlink: 'syz.2.594': attribute type 39 has an invalid length. [ 165.096215][ T8244] validate_nla: 1 callbacks suppressed [ 165.096239][ T8244] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 165.739608][ T8254] netlink: 'syz.2.609': attribute type 39 has an invalid length. [ 166.357949][ T8282] openvswitch: netlink: Missing key (keys=40, expected=80) [ 166.625305][ T8298] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 166.687501][ T8300] netlink: 'syz.4.623': attribute type 39 has an invalid length. [ 167.471833][ T8332] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 167.555003][ T8336] netlink: 'syz.4.636': attribute type 39 has an invalid length. [ 167.810642][ T8342] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 167.851009][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.390951][ T8375] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 168.410227][ T8375] __nla_validate_parse: 22 callbacks suppressed [ 168.410252][ T8375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.645'. [ 168.480688][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 168.546673][ T8381] sctp: [Deprecated]: syz.2.646 (pid 8381) Use of int in max_burst socket option. [ 168.546673][ T8381] Use struct sctp_assoc_value instead [ 168.630931][ T8384] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 168.633717][ T8377] IPVS: stopping backup sync thread 8384 ... [ 168.671034][ T8382] netlink: 156 bytes leftover after parsing attributes in process `syz.3.647'. [ 168.824187][ T8392] netlink: 76 bytes leftover after parsing attributes in process `syz.1.650'. [ 169.058241][ T3024] dummy0: left promiscuous mode [ 169.405819][ T8413] netlink: 'syz.4.657': attribute type 4 has an invalid length. [ 169.733796][ T8423] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 169.976160][ T8435] FAULT_INJECTION: forcing a failure. [ 169.976160][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.008556][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.3.663 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 170.008590][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.008603][ T8435] Call Trace: [ 170.008611][ T8435] [ 170.008620][ T8435] dump_stack_lvl+0x241/0x360 [ 170.008659][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.008688][ T8435] ? __pfx__printk+0x10/0x10 [ 170.008735][ T8435] should_fail_ex+0x424/0x570 [ 170.008765][ T8435] _copy_from_iter+0x211/0x1c70 [ 170.008800][ T8435] ? __build_skb_around+0x247/0x3d0 [ 170.008824][ T8435] ? __alloc_skb+0x298/0x480 [ 170.008843][ T8435] ? __pfx__copy_from_iter+0x10/0x10 [ 170.008875][ T8435] ? __pfx___alloc_skb+0x10/0x10 [ 170.008899][ T8435] ? skb_put+0x114/0x1f0 [ 170.008926][ T8435] netlink_sendmsg+0x73c/0xcd0 [ 170.008973][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.009019][ T8435] ? aa_sock_msg_perm+0x91/0x160 [ 170.009053][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.009082][ T8435] __sock_sendmsg+0x221/0x270 [ 170.009117][ T8435] ____sys_sendmsg+0x523/0x860 [ 170.009151][ T8435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.009172][ T8435] ? __fget_files+0x2a/0x420 [ 170.009196][ T8435] ? __fget_files+0x2a/0x420 [ 170.009224][ T8435] __sys_sendmsg+0x271/0x360 [ 170.009251][ T8435] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.009334][ T8435] ? do_syscall_64+0xb6/0x210 [ 170.009358][ T8435] do_syscall_64+0xf3/0x210 [ 170.009379][ T8435] ? clear_bhb_loop+0x45/0xa0 [ 170.009403][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.009422][ T8435] RIP: 0033:0x7f41f5f8e969 [ 170.009441][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.009457][ T8435] RSP: 002b:00007f41f6d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.009479][ T8435] RAX: ffffffffffffffda RBX: 00007f41f61b5fa0 RCX: 00007f41f5f8e969 [ 170.009494][ T8435] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 170.009507][ T8435] RBP: 00007f41f6d13090 R08: 0000000000000000 R09: 0000000000000000 [ 170.009519][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.009531][ T8435] R13: 0000000000000000 R14: 00007f41f61b5fa0 R15: 00007ffdaea67c88 [ 170.009564][ T8435] [ 170.363851][ T8437] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.373192][ T8437] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.382451][ T8437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.391490][ T8437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.543863][ T8442] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.605963][ T8442] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.698396][ T8442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.742399][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 170.768781][ T8442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.983522][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.996353][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 171.064930][ T8478] FAULT_INJECTION: forcing a failure. [ 171.064930][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 171.065510][ T8472] netlink: 45 bytes leftover after parsing attributes in process `syz.0.675'. [ 171.083185][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.4.676 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 171.083218][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.083231][ T8478] Call Trace: [ 171.083241][ T8478] [ 171.083250][ T8478] dump_stack_lvl+0x241/0x360 [ 171.083292][ T8478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.083323][ T8478] ? __pfx__printk+0x10/0x10 [ 171.083351][ T8478] ? __lock_acquire+0xad5/0xd80 [ 171.083394][ T8478] should_fail_ex+0x424/0x570 [ 171.083426][ T8478] should_failslab+0xac/0x100 [ 171.083451][ T8478] kmem_cache_alloc_noprof+0x78/0x390 [ 171.083472][ T8478] ? skb_clone+0x20c/0x390 [ 171.083506][ T8478] skb_clone+0x20c/0x390 [ 171.083538][ T8478] __netlink_deliver_tap+0x3c4/0x7f0 [ 171.083588][ T8478] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.083618][ T8478] netlink_deliver_tap+0x19d/0x1b0 [ 171.083653][ T8478] netlink_unicast+0x7c6/0x9a0 [ 171.083693][ T8478] ? __pfx_netlink_unicast+0x10/0x10 [ 171.083726][ T8478] ? skb_put+0x114/0x1f0 [ 171.083754][ T8478] netlink_sendmsg+0x8c3/0xcd0 [ 171.083803][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.083841][ T8478] ? aa_sock_msg_perm+0x91/0x160 [ 171.083885][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.083916][ T8478] __sock_sendmsg+0x221/0x270 [ 171.083952][ T8478] ____sys_sendmsg+0x523/0x860 [ 171.083989][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.084012][ T8478] ? __fget_files+0x2a/0x420 [ 171.084036][ T8478] ? __fget_files+0x2a/0x420 [ 171.084068][ T8478] __sys_sendmsg+0x271/0x360 [ 171.084100][ T8478] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.084189][ T8478] ? do_syscall_64+0xb6/0x210 [ 171.084216][ T8478] do_syscall_64+0xf3/0x210 [ 171.084238][ T8478] ? clear_bhb_loop+0x45/0xa0 [ 171.084264][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.084285][ T8478] RIP: 0033:0x7f4b6358e969 [ 171.084306][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.084323][ T8478] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.084347][ T8478] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 171.084363][ T8478] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 171.084377][ T8478] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 171.084391][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.084404][ T8478] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 171.084439][ T8478] [ 171.492985][ T8489] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 171.564349][ T8490] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 171.959601][ T8510] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 172.016477][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 172.103933][ T8522] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 172.119059][ T8520] netlink: 328 bytes leftover after parsing attributes in process `syz.4.688'. [ 172.142107][ T8510] : entered promiscuous mode [ 173.153502][ T8554] netlink: 'syz.0.694': attribute type 4 has an invalid length. [ 173.173967][ T8557] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 173.465592][ T8564] FAULT_INJECTION: forcing a failure. [ 173.465592][ T8564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.479118][ T8564] CPU: 1 UID: 0 PID: 8564 Comm: syz.4.699 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 173.479147][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.479160][ T8564] Call Trace: [ 173.479168][ T8564] [ 173.479177][ T8564] dump_stack_lvl+0x241/0x360 [ 173.479214][ T8564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.479243][ T8564] ? __pfx__printk+0x10/0x10 [ 173.479286][ T8564] should_fail_ex+0x424/0x570 [ 173.479315][ T8564] _copy_from_user+0x2d/0xb0 [ 173.479347][ T8564] copy_msghdr_from_user+0xb3/0x580 [ 173.479385][ T8564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.479433][ T8564] __sys_sendmmsg+0x361/0x7b0 [ 173.479470][ T8564] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.479534][ T8564] ? rcu_read_lock_any_held+0xbb/0x160 [ 173.479556][ T8564] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 173.479582][ T8564] ? vfs_write+0xb29/0xd10 [ 173.479638][ T8564] ? ksys_write+0x24e/0x2d0 [ 173.479672][ T8564] ? __mutex_unlock_slowpath+0x229/0x800 [ 173.479739][ T8564] ? ksys_write+0x275/0x2d0 [ 173.479779][ T8564] __x64_sys_sendmmsg+0xa0/0xb0 [ 173.479805][ T8564] do_syscall_64+0xf3/0x210 [ 173.479826][ T8564] ? clear_bhb_loop+0x45/0xa0 [ 173.479850][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.479870][ T8564] RIP: 0033:0x7f4b6358e969 [ 173.479888][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.479903][ T8564] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.479924][ T8564] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 173.479938][ T8564] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 173.479951][ T8564] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 173.479962][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.479971][ T8564] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 173.479998][ T8564] [ 173.865294][ T8570] x_tables: duplicate underflow at hook 3 [ 174.201361][ T8580] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 174.209378][ T8580] __nla_validate_parse: 3 callbacks suppressed [ 174.209394][ T8580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.705'. [ 174.408126][ T8601] FAULT_INJECTION: forcing a failure. [ 174.408126][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 174.435135][ T8602] FAULT_INJECTION: forcing a failure. [ 174.435135][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.453471][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.3.711 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 174.453502][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.453515][ T8601] Call Trace: [ 174.453523][ T8601] [ 174.453532][ T8601] dump_stack_lvl+0x241/0x360 [ 174.453570][ T8601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.453607][ T8601] ? __pfx__printk+0x10/0x10 [ 174.453641][ T8601] ? __pfx___might_resched+0x10/0x10 [ 174.453678][ T8601] should_fail_ex+0x424/0x570 [ 174.453708][ T8601] should_failslab+0xac/0x100 [ 174.453731][ T8601] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 174.453754][ T8601] ? __alloc_skb+0x1c2/0x480 [ 174.453780][ T8601] __alloc_skb+0x1c2/0x480 [ 174.453808][ T8601] ? __pfx___alloc_skb+0x10/0x10 [ 174.453840][ T8601] netlink_sendmsg+0x638/0xcd0 [ 174.453887][ T8601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.453923][ T8601] ? aa_sock_msg_perm+0x91/0x160 [ 174.453956][ T8601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.453985][ T8601] __sock_sendmsg+0x221/0x270 [ 174.454019][ T8601] ____sys_sendmsg+0x523/0x860 [ 174.454054][ T8601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.454096][ T8601] __sys_sendmmsg+0x3a0/0x7b0 [ 174.454134][ T8601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 174.454198][ T8601] ? rcu_read_lock_any_held+0xbb/0x160 [ 174.454219][ T8601] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 174.454243][ T8601] ? vfs_write+0xb29/0xd10 [ 174.454279][ T8601] ? ksys_write+0x24e/0x2d0 [ 174.454310][ T8601] ? __mutex_unlock_slowpath+0x229/0x800 [ 174.454362][ T8601] ? ksys_write+0x275/0x2d0 [ 174.454407][ T8601] __x64_sys_sendmmsg+0xa0/0xb0 [ 174.454434][ T8601] do_syscall_64+0xf3/0x210 [ 174.454455][ T8601] ? clear_bhb_loop+0x45/0xa0 [ 174.454480][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.454500][ T8601] RIP: 0033:0x7f41f5f8e969 [ 174.454518][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.454535][ T8601] RSP: 002b:00007f41f6d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.454557][ T8601] RAX: ffffffffffffffda RBX: 00007f41f61b5fa0 RCX: 00007f41f5f8e969 [ 174.454572][ T8601] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 174.454593][ T8601] RBP: 00007f41f6d13090 R08: 0000000000000000 R09: 0000000000000000 [ 174.454606][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.454618][ T8601] R13: 0000000000000000 R14: 00007f41f61b5fa0 R15: 00007ffdaea67c88 [ 174.454651][ T8601] [ 174.676187][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.0.709 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 174.676224][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.676238][ T8602] Call Trace: [ 174.676251][ T8602] [ 174.676263][ T8602] dump_stack_lvl+0x241/0x360 [ 174.676306][ T8602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.676337][ T8602] ? __pfx__printk+0x10/0x10 [ 174.676381][ T8602] should_fail_ex+0x424/0x570 [ 174.676413][ T8602] _copy_to_user+0x31/0xb0 [ 174.676449][ T8602] simple_read_from_buffer+0xc4/0x170 [ 174.676488][ T8602] proc_fail_nth_read+0x1ef/0x260 [ 174.676528][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.676566][ T8602] ? rw_verify_area+0x246/0x630 [ 174.676594][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.676630][ T8602] vfs_read+0x21f/0xb90 [ 174.676665][ T8602] ? __pfx___mutex_lock+0x10/0x10 [ 174.676689][ T8602] ? __pfx_vfs_read+0x10/0x10 [ 174.676722][ T8602] ? __fget_files+0x2a/0x420 [ 174.676744][ T8602] ? __fget_files+0x39d/0x420 [ 174.676762][ T8602] ? __fget_files+0x2a/0x420 [ 174.676800][ T8602] ksys_read+0x19d/0x2d0 [ 174.676833][ T8602] ? __pfx_ksys_read+0x10/0x10 [ 174.676870][ T8602] ? do_syscall_64+0xb6/0x210 [ 174.676897][ T8602] do_syscall_64+0xf3/0x210 [ 174.676920][ T8602] ? clear_bhb_loop+0x45/0xa0 [ 174.676948][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.676969][ T8602] RIP: 0033:0x7f826598d37c [ 174.676989][ T8602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.677006][ T8602] RSP: 002b:00007f82637f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.677031][ T8602] RAX: ffffffffffffffda RBX: 00007f8265bb6080 RCX: 00007f826598d37c [ 174.677047][ T8602] RDX: 000000000000000f RSI: 00007f82637f60a0 RDI: 0000000000000005 [ 174.677061][ T8602] RBP: 00007f82637f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.677075][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.677087][ T8602] R13: 0000000000000001 R14: 00007f8265bb6080 R15: 00007fffe22cba08 [ 174.677123][ T8602] [ 175.170442][ T8616] netlink: 'syz.2.714': attribute type 4 has an invalid length. [ 175.763129][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 176.106974][ T8644] tun0: tun_chr_ioctl cmd 1074025677 [ 176.112738][ T8644] tun0: linktype set to 825 [ 176.546504][ T8669] netlink: 'syz.0.729': attribute type 39 has an invalid length. [ 176.934882][ T8687] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 177.132300][ T8695] FAULT_INJECTION: forcing a failure. [ 177.132300][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.194171][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.4.736 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 177.194203][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.194216][ T8695] Call Trace: [ 177.194224][ T8695] [ 177.194232][ T8695] dump_stack_lvl+0x241/0x360 [ 177.194270][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.194298][ T8695] ? __pfx__printk+0x10/0x10 [ 177.194352][ T8695] should_fail_ex+0x424/0x570 [ 177.194380][ T8695] _copy_from_iter+0x211/0x1c70 [ 177.194417][ T8695] ? __build_skb_around+0x247/0x3d0 [ 177.194444][ T8695] ? __alloc_skb+0x298/0x480 [ 177.194463][ T8695] ? __pfx__copy_from_iter+0x10/0x10 [ 177.194495][ T8695] ? __pfx___alloc_skb+0x10/0x10 [ 177.194519][ T8695] ? skb_put+0x114/0x1f0 [ 177.194544][ T8695] netlink_sendmsg+0x73c/0xcd0 [ 177.194589][ T8695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.194625][ T8695] ? aa_sock_msg_perm+0x91/0x160 [ 177.194657][ T8695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.194687][ T8695] __sock_sendmsg+0x221/0x270 [ 177.194720][ T8695] ____sys_sendmsg+0x523/0x860 [ 177.194752][ T8695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.194773][ T8695] ? __fget_files+0x2a/0x420 [ 177.194796][ T8695] ? __fget_files+0x2a/0x420 [ 177.194825][ T8695] __sys_sendmsg+0x271/0x360 [ 177.194854][ T8695] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.194934][ T8695] ? do_syscall_64+0xb6/0x210 [ 177.194959][ T8695] do_syscall_64+0xf3/0x210 [ 177.194979][ T8695] ? clear_bhb_loop+0x45/0xa0 [ 177.195003][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.195023][ T8695] RIP: 0033:0x7f4b6358e969 [ 177.195041][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.195057][ T8695] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.195080][ T8695] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 177.195095][ T8695] RDX: 0000000000040000 RSI: 0000200000000800 RDI: 0000000000000003 [ 177.195108][ T8695] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 177.195124][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.195136][ T8695] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 177.195168][ T8695] [ 177.718041][ T8697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.761088][ T8707] netlink: 76 bytes leftover after parsing attributes in process `syz.3.740'. [ 177.777730][ T8708] Illegal XDP return value 4294967282 on prog (id 382) dev N/A, expect packet loss! [ 177.866369][ T8713] netlink: 116 bytes leftover after parsing attributes in process `syz.0.741'. [ 178.008732][ T8697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.202564][ T8697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.376198][ T8697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.603046][ T8697] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.789986][ T8697] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.834220][ T8697] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.866205][ T8697] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.934045][ T8736] vlan2: entered promiscuous mode [ 178.963603][ T8736] erspan0: entered promiscuous mode [ 178.974412][ T8736] vlan2: entered allmulticast mode [ 178.981343][ T8736] erspan0: entered allmulticast mode [ 179.000061][ T8745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.297266][ T8761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.752'. [ 179.549054][ T8770] gtp0: entered promiscuous mode [ 179.570879][ T8770] gtp0: entered allmulticast mode [ 179.785166][ T8780] netlink: 256 bytes leftover after parsing attributes in process `syz.3.758'. [ 179.790380][ T8784] FAULT_INJECTION: forcing a failure. [ 179.790380][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.808809][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.2.759 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 179.808856][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.808873][ T8784] Call Trace: [ 179.808884][ T8784] [ 179.808897][ T8784] dump_stack_lvl+0x241/0x360 [ 179.808953][ T8784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.808999][ T8784] ? __pfx__printk+0x10/0x10 [ 179.809048][ T8784] should_fail_ex+0x424/0x570 [ 179.809078][ T8784] _copy_to_user+0x31/0xb0 [ 179.809111][ T8784] simple_read_from_buffer+0xc4/0x170 [ 179.809146][ T8784] proc_fail_nth_read+0x1ef/0x260 [ 179.809182][ T8784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.809217][ T8784] ? rw_verify_area+0x246/0x630 [ 179.809242][ T8784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.809285][ T8784] vfs_read+0x21f/0xb90 [ 179.809318][ T8784] ? __pfx___mutex_lock+0x10/0x10 [ 179.809339][ T8784] ? __pfx_vfs_read+0x10/0x10 [ 179.809370][ T8784] ? __fget_files+0x2a/0x420 [ 179.809390][ T8784] ? __fget_files+0x39d/0x420 [ 179.809407][ T8784] ? __fget_files+0x2a/0x420 [ 179.809436][ T8784] ksys_read+0x19d/0x2d0 [ 179.809465][ T8784] ? __pfx_ksys_read+0x10/0x10 [ 179.809499][ T8784] ? do_syscall_64+0xb6/0x210 [ 179.809523][ T8784] do_syscall_64+0xf3/0x210 [ 179.809543][ T8784] ? clear_bhb_loop+0x45/0xa0 [ 179.809568][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.809588][ T8784] RIP: 0033:0x7f62c838d37c [ 179.809607][ T8784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.809623][ T8784] RSP: 002b:00007f62c9249030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.809645][ T8784] RAX: ffffffffffffffda RBX: 00007f62c85b5fa0 RCX: 00007f62c838d37c [ 179.809660][ T8784] RDX: 000000000000000f RSI: 00007f62c92490a0 RDI: 0000000000000004 [ 179.809672][ T8784] RBP: 00007f62c9249090 R08: 0000000000000000 R09: 0000000000000000 [ 179.809685][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.809696][ T8784] R13: 0000000000000000 R14: 00007f62c85b5fa0 R15: 00007ffcf22f82b8 [ 179.809729][ T8784] [ 180.070784][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 180.183724][ T8791] Cannot find del_set index 1 as target [ 180.389925][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 180.413582][ T8798] : entered promiscuous mode [ 180.580779][ T8803] netlink: 76 bytes leftover after parsing attributes in process `syz.2.767'. [ 180.652144][ T8811] x_tables: duplicate underflow at hook 4 [ 180.720744][ T8817] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 180.809625][ T8821] FAULT_INJECTION: forcing a failure. [ 180.809625][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 180.831868][ T8821] CPU: 0 UID: 0 PID: 8821 Comm: syz.3.770 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 180.831900][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.831912][ T8821] Call Trace: [ 180.831920][ T8821] [ 180.831929][ T8821] dump_stack_lvl+0x241/0x360 [ 180.831966][ T8821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.831996][ T8821] ? __pfx__printk+0x10/0x10 [ 180.832039][ T8821] ? __pfx___might_resched+0x10/0x10 [ 180.832076][ T8821] should_fail_ex+0x424/0x570 [ 180.832106][ T8821] should_failslab+0xac/0x100 [ 180.832130][ T8821] __kmalloc_cache_noprof+0x73/0x370 [ 180.832151][ T8821] ? tcf_proto_create+0x62/0x370 [ 180.832179][ T8821] tcf_proto_create+0x62/0x370 [ 180.832207][ T8821] tc_new_tfilter+0x15e8/0x1a90 [ 180.832258][ T8821] ? __pfx_tc_new_tfilter+0x10/0x10 [ 180.832292][ T8821] ? __lock_acquire+0xad5/0xd80 [ 180.832341][ T8821] ? __pfx_tc_new_tfilter+0x10/0x10 [ 180.832364][ T8821] rtnetlink_rcv_msg+0x80f/0xd70 [ 180.832394][ T8821] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 180.832428][ T8821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.832468][ T8821] ? ref_tracker_free+0x63e/0x7e0 [ 180.832502][ T8821] netlink_rcv_skb+0x208/0x480 [ 180.832532][ T8821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.832565][ T8821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.832617][ T8821] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.832649][ T8821] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.832681][ T8821] netlink_unicast+0x7f8/0x9a0 [ 180.832719][ T8821] ? __pfx_netlink_unicast+0x10/0x10 [ 180.832750][ T8821] ? skb_put+0x114/0x1f0 [ 180.832777][ T8821] netlink_sendmsg+0x8c3/0xcd0 [ 180.832823][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.832857][ T8821] ? aa_sock_msg_perm+0x91/0x160 [ 180.832889][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.832916][ T8821] __sock_sendmsg+0x221/0x270 [ 180.832949][ T8821] ____sys_sendmsg+0x523/0x860 [ 180.832984][ T8821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.833033][ T8821] __sys_sendmmsg+0x3a0/0x7b0 [ 180.833072][ T8821] ? __pfx___sys_sendmmsg+0x10/0x10 [ 180.833142][ T8821] ? rcu_read_lock_any_held+0xbb/0x160 [ 180.833164][ T8821] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 180.833190][ T8821] ? vfs_write+0xb29/0xd10 [ 180.833226][ T8821] ? ksys_write+0x24e/0x2d0 [ 180.833258][ T8821] ? __mutex_unlock_slowpath+0x229/0x800 [ 180.833312][ T8821] ? ksys_write+0x275/0x2d0 [ 180.833353][ T8821] __x64_sys_sendmmsg+0xa0/0xb0 [ 180.833381][ T8821] do_syscall_64+0xf3/0x210 [ 180.833401][ T8821] ? clear_bhb_loop+0x45/0xa0 [ 180.833426][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.833446][ T8821] RIP: 0033:0x7f41f5f8e969 [ 180.833465][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.833481][ T8821] RSP: 002b:00007f41f6d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 180.833503][ T8821] RAX: ffffffffffffffda RBX: 00007f41f61b5fa0 RCX: 00007f41f5f8e969 [ 180.833518][ T8821] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 180.833531][ T8821] RBP: 00007f41f6d13090 R08: 0000000000000000 R09: 0000000000000000 [ 180.833543][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.833555][ T8821] R13: 0000000000000000 R14: 00007f41f61b5fa0 R15: 00007ffdaea67c88 [ 180.833588][ T8821] [ 181.236564][ T8826] netlink: 'syz.3.772': attribute type 39 has an invalid length. [ 181.451384][ T8833] netlink: 'syz.3.774': attribute type 4 has an invalid length. [ 181.916288][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 182.065144][ T8854] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 182.258318][ T8858] FAULT_INJECTION: forcing a failure. [ 182.258318][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 182.301671][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.2.780 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 182.301702][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.301714][ T8858] Call Trace: [ 182.301722][ T8858] [ 182.301731][ T8858] dump_stack_lvl+0x241/0x360 [ 182.301775][ T8858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.301803][ T8858] ? __pfx__printk+0x10/0x10 [ 182.301834][ T8858] ? __pfx___might_resched+0x10/0x10 [ 182.301880][ T8858] should_fail_ex+0x424/0x570 [ 182.301909][ T8858] should_failslab+0xac/0x100 [ 182.301932][ T8858] __kmalloc_cache_noprof+0x73/0x370 [ 182.301952][ T8858] ? device_add+0xc1/0xbf0 [ 182.301982][ T8858] device_add+0xc1/0xbf0 [ 182.302008][ T8858] ? device_initialize+0x266/0x460 [ 182.302037][ T8858] netdev_register_kobject+0x157/0x2f0 [ 182.302067][ T8858] register_netdevice+0x12b0/0x1b80 [ 182.302107][ T8858] ? __pfx_register_netdevice+0x10/0x10 [ 182.302142][ T8858] ? net_generic+0x1f/0x240 [ 182.302171][ T8858] ip6_tnl_create2+0x76/0x150 [ 182.302200][ T8858] ip6_tnl_newlink+0x2e9/0x5c0 [ 182.302227][ T8858] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 182.302251][ T8858] ? rtnl_create_link+0x964/0xc90 [ 182.302279][ T8858] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 182.302306][ T8858] rtnl_newlink_create+0x3a1/0xc30 [ 182.302329][ T8858] ? __mutex_lock+0xbe3/0x10c0 [ 182.302361][ T8858] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 182.302387][ T8858] ? __pfx___mutex_lock+0x10/0x10 [ 182.302418][ T8858] ? ns_capable+0x8a/0xf0 [ 182.302452][ T8858] rtnl_newlink+0x18b0/0x1fe0 [ 182.302504][ T8858] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.302531][ T8858] ? unwind_get_return_address+0x4d/0x90 [ 182.302555][ T8858] ? arch_stack_walk+0xff/0x150 [ 182.302584][ T8858] ? __lock_acquire+0xad5/0xd80 [ 182.302618][ T8858] ? __lock_acquire+0xad5/0xd80 [ 182.302651][ T8858] ? __lock_acquire+0xad5/0xd80 [ 182.302700][ T8858] ? is_bpf_text_address+0x26/0x2a0 [ 182.302731][ T8858] ? 0xffffffffa0000958 [ 182.302758][ T8858] ? is_bpf_text_address+0x288/0x2a0 [ 182.302783][ T8858] ? is_bpf_text_address+0x26/0x2a0 [ 182.302812][ T8858] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.302838][ T8858] ? kernel_text_address+0xa7/0xe0 [ 182.302872][ T8858] ? __kernel_text_address+0xd/0x40 [ 182.302905][ T8858] ? aa_get_newest_label+0x101/0x6f0 [ 182.302939][ T8858] ? __lock_acquire+0xad5/0xd80 [ 182.302988][ T8858] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.303022][ T8858] rtnetlink_rcv_msg+0x80f/0xd70 [ 182.303051][ T8858] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 182.303087][ T8858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.303115][ T8858] ? __lock_acquire+0xad5/0xd80 [ 182.303162][ T8858] netlink_rcv_skb+0x208/0x480 [ 182.303195][ T8858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.303228][ T8858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.303280][ T8858] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.303312][ T8858] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.303345][ T8858] netlink_unicast+0x7f8/0x9a0 [ 182.303385][ T8858] ? __pfx_netlink_unicast+0x10/0x10 [ 182.303415][ T8858] ? skb_put+0x114/0x1f0 [ 182.303443][ T8858] netlink_sendmsg+0x8c3/0xcd0 [ 182.303489][ T8858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.303526][ T8858] ? aa_sock_msg_perm+0x91/0x160 [ 182.303559][ T8858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.303588][ T8858] __sock_sendmsg+0x221/0x270 [ 182.303622][ T8858] ____sys_sendmsg+0x523/0x860 [ 182.303657][ T8858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.303678][ T8858] ? __fget_files+0x2a/0x420 [ 182.303701][ T8858] ? __fget_files+0x2a/0x420 [ 182.303731][ T8858] __sys_sendmsg+0x271/0x360 [ 182.303761][ T8858] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.303854][ T8858] ? do_syscall_64+0xb6/0x210 [ 182.303878][ T8858] do_syscall_64+0xf3/0x210 [ 182.303899][ T8858] ? clear_bhb_loop+0x45/0xa0 [ 182.303922][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.303942][ T8858] RIP: 0033:0x7f62c838e969 [ 182.303960][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.303976][ T8858] RSP: 002b:00007f62c9249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.304005][ T8858] RAX: ffffffffffffffda RBX: 00007f62c85b5fa0 RCX: 00007f62c838e969 [ 182.304021][ T8858] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.304033][ T8858] RBP: 00007f62c9249090 R08: 0000000000000000 R09: 0000000000000000 [ 182.304046][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.304058][ T8858] R13: 0000000000000000 R14: 00007f62c85b5fa0 R15: 00007ffcf22f82b8 [ 182.304092][ T8858] [ 182.799328][ T8862] FAULT_INJECTION: forcing a failure. [ 182.799328][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 182.827838][ T8860] netlink: 76 bytes leftover after parsing attributes in process `syz.3.781'. [ 182.920904][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.4.782 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 182.920937][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.920950][ T8862] Call Trace: [ 182.920958][ T8862] [ 182.920967][ T8862] dump_stack_lvl+0x241/0x360 [ 182.921006][ T8862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.921035][ T8862] ? __pfx__printk+0x10/0x10 [ 182.921068][ T8862] ? __pfx___might_resched+0x10/0x10 [ 182.921108][ T8862] should_fail_ex+0x424/0x570 [ 182.921139][ T8862] should_failslab+0xac/0x100 [ 182.921162][ T8862] __kvmalloc_node_noprof+0x170/0x5a0 [ 182.921185][ T8862] ? rhashtable_init_noprof+0x534/0xa60 [ 182.921221][ T8862] rhashtable_init_noprof+0x534/0xa60 [ 182.921259][ T8862] tcf_proto_create+0x262/0x370 [ 182.921289][ T8862] tc_new_tfilter+0x15e8/0x1a90 [ 182.921341][ T8862] ? __pfx_tc_new_tfilter+0x10/0x10 [ 182.921378][ T8862] ? __lock_acquire+0xad5/0xd80 [ 182.921431][ T8862] ? __pfx_tc_new_tfilter+0x10/0x10 [ 182.921455][ T8862] rtnetlink_rcv_msg+0x80f/0xd70 [ 182.921485][ T8862] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 182.921519][ T8862] ? rcu_preempt_deferred_qs_irqrestore+0x8e7/0xcb0 [ 182.921549][ T8862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.921600][ T8862] netlink_rcv_skb+0x208/0x480 [ 182.921633][ T8862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.921667][ T8862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.921723][ T8862] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.921758][ T8862] ? __rcu_read_unlock+0xa1/0x110 [ 182.921787][ T8862] netlink_unicast+0x7f8/0x9a0 [ 182.921833][ T8862] ? __pfx_netlink_unicast+0x10/0x10 [ 182.921863][ T8862] ? skb_put+0x114/0x1f0 [ 182.921891][ T8862] netlink_sendmsg+0x8c3/0xcd0 [ 182.921937][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.921974][ T8862] ? aa_sock_msg_perm+0x91/0x160 [ 182.922006][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.922036][ T8862] __sock_sendmsg+0x221/0x270 [ 182.922071][ T8862] ____sys_sendmsg+0x523/0x860 [ 182.922106][ T8862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.922149][ T8862] __sys_sendmmsg+0x3a0/0x7b0 [ 182.922189][ T8862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.922254][ T8862] ? rcu_read_lock_any_held+0xbb/0x160 [ 182.922277][ T8862] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 182.922302][ T8862] ? vfs_write+0xb29/0xd10 [ 182.922342][ T8862] ? ksys_write+0x24e/0x2d0 [ 182.922374][ T8862] ? __mutex_unlock_slowpath+0x229/0x800 [ 182.922429][ T8862] ? ksys_write+0x275/0x2d0 [ 182.922472][ T8862] __x64_sys_sendmmsg+0xa0/0xb0 [ 182.922500][ T8862] do_syscall_64+0xf3/0x210 [ 182.922521][ T8862] ? clear_bhb_loop+0x45/0xa0 [ 182.922547][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.922567][ T8862] RIP: 0033:0x7f4b6358e969 [ 182.922586][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.922602][ T8862] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.922625][ T8862] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 182.922640][ T8862] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 182.922654][ T8862] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 182.922667][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.922679][ T8862] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 182.922712][ T8862] [ 182.922964][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 183.756996][ T8885] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 183.790275][ T8893] veth0: entered promiscuous mode [ 183.800644][ T8885] netlink: 208 bytes leftover after parsing attributes in process `syz.4.791'. [ 183.847359][ T8885] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 183.859988][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 183.897370][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 184.368254][ T8904] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.377219][ T8904] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.385622][ T8904] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.393260][ T8910] netlink: 44 bytes leftover after parsing attributes in process `syz.4.799'. [ 184.394175][ T8904] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.533147][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 184.721651][ T8913] lo: left promiscuous mode [ 184.858024][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.869655][ T8913] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.891269][ T8913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.019090][ T8913] syz.2.796 (8913) used greatest stack depth: 18344 bytes left [ 185.141883][ T8923] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.403422][ T8933] netlink: 666 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.659680][ T8923] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.811821][ T8958] netlink: 156 bytes leftover after parsing attributes in process `syz.1.805'. [ 186.094966][ T8923] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.243901][ T8969] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 186.325181][ T8923] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.483081][ T8969] bond4: entered promiscuous mode [ 186.488775][ T8969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.706025][ T8930] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 187.144802][ T5851] Bluetooth: hci3: command 0x0401 tx timeout [ 187.221598][ T8923] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.498888][ T8923] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.652652][ T8923] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.795019][ T8923] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.477975][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 188.730711][ T9031] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 188.785712][ T9021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.827853][ T9034] FAULT_INJECTION: forcing a failure. [ 188.827853][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 188.876007][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.4.824 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 188.876040][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.876052][ T9034] Call Trace: [ 188.876060][ T9034] [ 188.876069][ T9034] dump_stack_lvl+0x241/0x360 [ 188.876106][ T9034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.876135][ T9034] ? __pfx__printk+0x10/0x10 [ 188.876166][ T9034] ? __pfx___might_resched+0x10/0x10 [ 188.876203][ T9034] should_fail_ex+0x424/0x570 [ 188.876231][ T9034] should_failslab+0xac/0x100 [ 188.876255][ T9034] __kmalloc_cache_noprof+0x73/0x370 [ 188.876274][ T9034] ? fl_change+0x217/0x1f10 [ 188.876297][ T9034] fl_change+0x217/0x1f10 [ 188.876332][ T9034] ? __pfx_fl_change+0x10/0x10 [ 188.876348][ T9034] ? fl_get+0x9d/0x480 [ 188.876364][ T9034] ? fl_destroy+0x270/0x280 [ 188.876384][ T9034] ? __pfx_fl_change+0x10/0x10 [ 188.876403][ T9034] tc_new_tfilter+0x112f/0x1a90 [ 188.876456][ T9034] ? __pfx_tc_new_tfilter+0x10/0x10 [ 188.876488][ T9034] ? __lock_acquire+0xad5/0xd80 [ 188.876532][ T9034] ? __pfx_tc_new_tfilter+0x10/0x10 [ 188.876552][ T9034] rtnetlink_rcv_msg+0x80f/0xd70 [ 188.876577][ T9034] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 188.876608][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.876641][ T9034] ? ref_tracker_free+0x63e/0x7e0 [ 188.876669][ T9034] netlink_rcv_skb+0x208/0x480 [ 188.876696][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.876732][ T9034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.876780][ T9034] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.876813][ T9034] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.876846][ T9034] netlink_unicast+0x7f8/0x9a0 [ 188.876885][ T9034] ? __pfx_netlink_unicast+0x10/0x10 [ 188.876915][ T9034] ? skb_put+0x114/0x1f0 [ 188.876941][ T9034] netlink_sendmsg+0x8c3/0xcd0 [ 188.876986][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.877022][ T9034] ? aa_sock_msg_perm+0x91/0x160 [ 188.877054][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.877083][ T9034] __sock_sendmsg+0x221/0x270 [ 188.877116][ T9034] ____sys_sendmsg+0x523/0x860 [ 188.877150][ T9034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.877192][ T9034] __sys_sendmmsg+0x3a0/0x7b0 [ 188.877230][ T9034] ? __pfx___sys_sendmmsg+0x10/0x10 [ 188.877296][ T9034] ? rcu_read_lock_any_held+0xbb/0x160 [ 188.877318][ T9034] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 188.877343][ T9034] ? vfs_write+0xb29/0xd10 [ 188.877382][ T9034] ? ksys_write+0x24e/0x2d0 [ 188.877412][ T9034] ? __mutex_unlock_slowpath+0x229/0x800 [ 188.877473][ T9034] ? ksys_write+0x275/0x2d0 [ 188.877515][ T9034] __x64_sys_sendmmsg+0xa0/0xb0 [ 188.877541][ T9034] do_syscall_64+0xf3/0x210 [ 188.877562][ T9034] ? clear_bhb_loop+0x45/0xa0 [ 188.877587][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.877607][ T9034] RIP: 0033:0x7f4b6358e969 [ 188.877625][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.877641][ T9034] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 188.877663][ T9034] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 188.877678][ T9034] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 188.877691][ T9034] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 188.877704][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.877715][ T9034] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 188.877748][ T9034] [ 188.928352][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.819'. [ 189.245727][ T9042] veth5: entered promiscuous mode [ 189.271988][ T9042] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 189.288679][ T9026] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 189.290145][ T9026] block (null): Could not allocate knbd recv work queue. [ 189.292177][ T9045] x_tables: ip_tables: udp match: only valid for protocol 17 [ 189.332626][ T9026] nbd: failed to add new device [ 189.336413][ T9038] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 189.353698][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.361797][ T9031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.490434][ T3024] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.618814][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 190.258932][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 190.405858][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 190.685375][ T9105] netlink: 'syz.4.840': attribute type 13 has an invalid length. [ 190.731608][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.840'. [ 190.801832][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 190.820821][ T9109] netlink: 'syz.1.841': attribute type 2 has an invalid length. [ 191.121089][ T9114] x_tables: duplicate underflow at hook 3 [ 191.601497][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.843'. [ 192.011591][ T8945] Set syz1 is full, maxelem 65536 reached [ 193.161931][ T9156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.173029][ T9156] team0: Port device bond2 added [ 193.392099][ T9167] netlink: 'syz.3.855': attribute type 39 has an invalid length. [ 193.712509][ T9183] netlink: 'syz.1.862': attribute type 39 has an invalid length. [ 194.422714][ T9207] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 194.733796][ T9219] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 194.751492][ T9207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.101436][ T9226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.873'. [ 195.941794][ T9261] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 195.970406][ T9263] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 195.995344][ T9263] syzkaller1: linktype set to 821 [ 196.006134][ T9261] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 196.024565][ T9261] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 196.170639][ T9270] netlink: 104 bytes leftover after parsing attributes in process `syz.4.889'. [ 196.336403][ T9279] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.435426][ T9281] netlink: 188 bytes leftover after parsing attributes in process `syz.2.891'. [ 196.585645][ T9288] netlink: 84 bytes leftover after parsing attributes in process `syz.0.894'. [ 196.604210][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 196.883151][ T9304] tipc: Started in network mode [ 196.893481][ T9304] tipc: Node identity 46403c7ec26d, cluster identity 4711 [ 196.904750][ T9304] tipc: Enabled bearer , priority 0 [ 197.025448][ T9294] syzkaller0: entered promiscuous mode [ 197.040432][ T9294] syzkaller0: entered allmulticast mode [ 197.048563][ T9294] tipc: Resetting bearer [ 197.062829][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d59800: rx timeout, send abort [ 197.155342][ T36] tipc: Resetting bearer [ 197.172194][ T9316] netlink: 'syz.1.901': attribute type 39 has an invalid length. [ 197.180555][ T9292] tipc: Resetting bearer [ 197.572836][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d59800: abort rx timeout. Force session deactivation [ 198.019437][ T5891] tipc: Node number set to 2217557118 [ 198.442715][ T9292] tipc: Disabling bearer [ 199.542904][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.942847][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 200.055030][ T9364] xt_CT: No such helper "pptp" [ 200.252763][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 200.264445][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 200.447357][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'. [ 200.543282][ T9384] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.554074][ T9384] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.563973][ T9384] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.575095][ T9384] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.595936][ T9384] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 200.632492][ T9387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.926350][ T9403] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 201.400691][ T9424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 201.515199][ T9432] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 201.792297][ T9443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.928'. [ 202.042072][ T9432] bond5: entered promiscuous mode [ 202.057937][ T9432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.542975][ T9467] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.791874][ T9476] vlan0: entered promiscuous mode [ 202.809763][ T9476] vlan0: entered allmulticast mode [ 202.831578][ T9476] hsr_slave_1: entered allmulticast mode [ 202.983189][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 203.124923][ T9493] SET target dimension over the limit! [ 204.228231][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 204.533697][ T9558] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 204.541603][ T9558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.949'. [ 204.925287][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 206.069013][ T9611] netlink: 'syz.4.962': attribute type 16 has an invalid length. [ 206.106222][ T9611] netlink: 'syz.4.962': attribute type 17 has an invalid length. [ 206.288419][ T9611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.437202][ T9626] netlink: 'syz.0.965': attribute type 16 has an invalid length. [ 206.452214][ T9625] bond0: option all_slaves_active: invalid value (7) [ 206.477205][ T9626] netlink: 'syz.0.965': attribute type 17 has an invalid length. [ 206.639157][ T9626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.649287][ T9626] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.871344][ T9626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.412496][ T9666] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 207.769928][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 207.827599][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.977'. [ 207.831049][ T6152] IPVS: starting estimator thread 0... [ 207.924526][ T9684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 207.935236][ T9684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.946203][ T9686] IPVS: using max 24 ests per chain, 57600 per kthread [ 208.303364][ T9684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 208.334019][ T9684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.401762][ T9707] xt_CT: No such helper "syz0" [ 208.508679][ T9711] netlink: 'syz.3.986': attribute type 21 has an invalid length. [ 208.676149][ T9721] netlink: 'syz.3.990': attribute type 39 has an invalid length. [ 208.837967][ T9689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.981'. [ 208.860772][ T9684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 208.877342][ T9684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.905469][ T9698] netlink: 312 bytes leftover after parsing attributes in process `syz.0.983'. [ 208.915853][ T9732] netlink: 76 bytes leftover after parsing attributes in process `syz.4.991'. [ 208.923017][ T9723] syzkaller1: entered promiscuous mode [ 208.930865][ T9723] syzkaller1: entered allmulticast mode [ 209.075698][ T9684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 209.090486][ T9684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.098313][ T9738] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 209.115764][ T9689] tipc: Started in network mode [ 209.125294][ T9689] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.142349][ T9689] tipc: Enabling of bearer rejected, failed to enable media [ 209.176282][ T9741] IPVS: length: 95 != 24 [ 209.262333][ T9684] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.271752][ T9684] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 209.333000][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 209.395133][ T9684] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.403741][ T9684] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 209.460955][ T9684] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.479440][ T9684] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 209.632260][ T9684] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.641863][ T9684] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 209.667910][ T9758] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.690216][ T9758] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 209.726383][ T9758] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 209.769495][ T9758] netlink: 'syz.2.1000': attribute type 3 has an invalid length. [ 209.807907][ T9758] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 209.835780][ T9758] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1000'. [ 209.845400][ T9758] NCSI netlink: No device for ifindex 262149 [ 210.134280][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1008'. [ 210.363707][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 210.407425][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'. [ 210.426485][ T9788] erspan0: entered promiscuous mode [ 210.545287][ T9795] netlink: 'syz.2.1011': attribute type 4 has an invalid length. [ 210.781181][ T9801] team_slave_0: entered promiscuous mode [ 210.949707][ T9800] team_slave_0: left promiscuous mode [ 211.244833][ T9817] netlink: 'syz.0.1019': attribute type 39 has an invalid length. [ 211.652343][ T9839] netlink: 'syz.4.1027': attribute type 12 has an invalid length. [ 211.857927][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.864435][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.866799][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 211.870661][ T5842] Bluetooth: hci3: command 0x0401 tx timeout [ 212.009482][ T9850] lo: entered promiscuous mode [ 212.031647][ T9850] tunl0: entered promiscuous mode [ 212.038136][ T9850] gre0: entered promiscuous mode [ 212.045024][ T9850] gretap0: entered promiscuous mode [ 212.052179][ T9850] erspan0: entered promiscuous mode [ 212.060622][ T9850] ip_vti0: entered promiscuous mode [ 212.067637][ T9850] ip6_vti0: entered promiscuous mode [ 212.073992][ T9850] sit0: entered promiscuous mode [ 212.108490][ T9850] ip6tnl0: entered promiscuous mode [ 212.114558][ T9850] ip6gre0: entered promiscuous mode [ 212.157944][ T9850] ip6gretap0: entered promiscuous mode [ 212.164246][ T9850] bridge0: entered promiscuous mode [ 212.191276][ T9850] vcan0: entered promiscuous mode [ 212.207183][ T9850] bond0: entered promiscuous mode [ 212.213411][ T9850] team0: entered promiscuous mode [ 212.228674][ T9850] dummy0: entered promiscuous mode [ 212.235163][ T9850] nlmon0: entered promiscuous mode [ 212.271480][ T9850] caif0: entered promiscuous mode [ 212.284424][ T9850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.812446][ T9883] xt_hashlimit: max too large, truncated to 1048576 [ 212.874676][ T9885] __nla_validate_parse: 13 callbacks suppressed [ 212.874699][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 213.633425][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 213.835113][ T9913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1050'. [ 213.894523][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 214.791246][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 214.799070][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 214.936307][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 215.259977][ T9956] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1062'. [ 215.271812][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 215.712922][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 216.104192][ T9984] syzkaller1: entered promiscuous mode [ 216.138452][ T9984] syzkaller1: entered allmulticast mode [ 216.715924][ T10] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 216.837544][T10024] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 216.853458][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.872108][T10024] batadv0: entered promiscuous mode [ 216.880346][T10024] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.132077][T10037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.511618][T10044] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 217.777806][T10055] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 217.880578][T10066] sctp: [Deprecated]: syz.2.1089 (pid 10066) Use of int in max_burst socket option. [ 217.880578][T10066] Use struct sctp_assoc_value instead [ 218.127444][T10075] __nla_validate_parse: 4 callbacks suppressed [ 218.127466][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1094'. [ 218.603966][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 218.794443][T10112] gretap1: entered promiscuous mode [ 218.869460][T10118] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 218.943728][T10118] team0: Device veth1_macvtap failed to register rx_handler [ 219.114349][T10127] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1104'. [ 219.656357][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 219.935376][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 220.437634][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 220.815211][T10211] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.092027][T10223] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.101095][T10223] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.110111][T10223] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.118902][T10223] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.177440][T10223] vxlan0: entered promiscuous mode [ 221.182639][T10223] vxlan0: entered allmulticast mode [ 221.251817][T10227] netlink: 'syz.0.1130': attribute type 4 has an invalid length. [ 221.276820][T10223] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.285819][T10223] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.295145][T10223] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.304552][T10223] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.484059][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 222.128850][T10272] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1141'. [ 222.633249][T10298] FAULT_INJECTION: forcing a failure. [ 222.633249][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.676902][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.3.1146 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 222.676937][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.676950][T10298] Call Trace: [ 222.676958][T10298] [ 222.676967][T10298] dump_stack_lvl+0x241/0x360 [ 222.677005][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.677034][T10298] ? __pfx__printk+0x10/0x10 [ 222.677074][T10298] should_fail_ex+0x424/0x570 [ 222.677104][T10298] _copy_from_user+0x2d/0xb0 [ 222.677137][T10298] copy_msghdr_from_user+0xb3/0x580 [ 222.677184][T10298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 222.677212][T10298] ? __fget_files+0x2a/0x420 [ 222.677234][T10298] ? __fget_files+0x2a/0x420 [ 222.677264][T10298] __sys_sendmsg+0x20a/0x360 [ 222.677294][T10298] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.677378][T10298] ? do_syscall_64+0xb6/0x210 [ 222.677402][T10298] do_syscall_64+0xf3/0x210 [ 222.677423][T10298] ? clear_bhb_loop+0x45/0xa0 [ 222.677448][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.677468][T10298] RIP: 0033:0x7f41f5f8e969 [ 222.677487][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.677506][T10298] RSP: 002b:00007f41f6d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.677528][T10298] RAX: ffffffffffffffda RBX: 00007f41f61b5fa0 RCX: 00007f41f5f8e969 [ 222.677544][T10298] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 222.677557][T10298] RBP: 00007f41f6d13090 R08: 0000000000000000 R09: 0000000000000000 [ 222.677570][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.677583][T10298] R13: 0000000000000000 R14: 00007f41f61b5fa0 R15: 00007ffdaea67c88 [ 222.677615][T10298] [ 223.427239][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 223.450171][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 223.481350][T10324] nbd: must specify an index to disconnect [ 223.768513][T10345] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1156'. [ 223.815979][T10345] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1156'. [ 223.833501][T10353] FAULT_INJECTION: forcing a failure. [ 223.833501][T10353] name failslab, interval 1, probability 0, space 0, times 0 [ 223.862020][T10345] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1156'. [ 223.896935][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.4.1158 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 223.896967][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.896980][T10353] Call Trace: [ 223.896997][T10353] [ 223.897005][T10353] dump_stack_lvl+0x241/0x360 [ 223.897042][T10353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.897070][T10353] ? __pfx__printk+0x10/0x10 [ 223.897101][T10353] ? __pfx___might_resched+0x10/0x10 [ 223.897138][T10353] should_fail_ex+0x424/0x570 [ 223.897166][T10353] should_failslab+0xac/0x100 [ 223.897188][T10353] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 223.897210][T10353] ? __alloc_skb+0x1c2/0x480 [ 223.897236][T10353] __alloc_skb+0x1c2/0x480 [ 223.897263][T10353] ? __pfx___alloc_skb+0x10/0x10 [ 223.897287][T10353] ? netlink_autobind+0xd6/0x2f0 [ 223.897303][T10353] ? netlink_autobind+0x2b0/0x2f0 [ 223.897326][T10353] netlink_sendmsg+0x638/0xcd0 [ 223.897371][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.897407][T10353] ? aa_sock_msg_perm+0x91/0x160 [ 223.897438][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.897467][T10353] __sock_sendmsg+0x221/0x270 [ 223.897498][T10353] ____sys_sendmsg+0x523/0x860 [ 223.897530][T10353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.897552][T10353] ? __fget_files+0x2a/0x420 [ 223.897573][T10353] ? __fget_files+0x2a/0x420 [ 223.897600][T10353] __sys_sendmsg+0x271/0x360 [ 223.897631][T10353] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.897711][T10353] ? do_syscall_64+0xb6/0x210 [ 223.897737][T10353] do_syscall_64+0xf3/0x210 [ 223.897757][T10353] ? clear_bhb_loop+0x45/0xa0 [ 223.897782][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.897803][T10353] RIP: 0033:0x7f4b6358e969 [ 223.897821][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.897839][T10353] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.897860][T10353] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 223.897875][T10353] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 223.897887][T10353] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 223.897900][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.897911][T10353] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 223.897944][T10353] [ 223.918816][T10355] sctp: [Deprecated]: syz.3.1159 (pid 10355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.918816][T10355] Use struct sctp_sack_info instead [ 224.374560][T10372] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 224.409918][T10372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1160'. [ 224.454891][T10372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.455894][T10379] x_tables: ip_tables: ah match: only valid for protocol 51 [ 224.700796][T10382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 224.765659][T10392] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1163'. [ 225.124606][T10406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1166'. [ 225.314506][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 225.375102][T10412] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.411284][T10412] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.577828][T10434] netlink: 'syz.4.1173': attribute type 58 has an invalid length. [ 225.586534][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'. [ 225.709006][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.048744][T10460] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 226.065099][T10460] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001 [ 226.722118][T10500] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 226.742245][T10500] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 226.771927][T10500] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 226.788029][T10500] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 226.797140][T10500] geneve2: left promiscuous mode [ 226.802608][T10500] geneve2: left allmulticast mode [ 226.821465][T10500] bond0: left promiscuous mode [ 226.826328][T10500] bond_slave_0: left promiscuous mode [ 226.843728][T10500] bond_slave_1: left promiscuous mode [ 226.853878][T10500] macvlan2: left promiscuous mode [ 226.932575][T10500] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 226.947931][T10500] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 226.973605][T10500] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 226.993858][T10500] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 227.015583][T10500] bond5: left promiscuous mode [ 227.152015][T10516] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 227.212289][T10516] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 227.221817][T10516] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.237538][T10525] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 227.300069][T10529] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 227.848702][T10549] FAULT_INJECTION: forcing a failure. [ 227.848702][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 227.866311][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.2.1205 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 227.866344][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.866357][T10549] Call Trace: [ 227.866365][T10549] [ 227.866374][T10549] dump_stack_lvl+0x241/0x360 [ 227.866411][T10549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.866442][T10549] ? __pfx__printk+0x10/0x10 [ 227.866474][T10549] ? __pfx___might_resched+0x10/0x10 [ 227.866512][T10549] should_fail_ex+0x424/0x570 [ 227.866541][T10549] should_failslab+0xac/0x100 [ 227.866565][T10549] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 227.866587][T10549] ? __alloc_skb+0x1c2/0x480 [ 227.866613][T10549] __alloc_skb+0x1c2/0x480 [ 227.866640][T10549] ? __pfx___alloc_skb+0x10/0x10 [ 227.866676][T10549] ? netlink_ack_tlv_len+0x6e/0x200 [ 227.866713][T10549] netlink_ack+0x147/0xa70 [ 227.866740][T10549] ? __up_read+0x2c4/0x6b0 [ 227.866762][T10549] ? __pfx___up_read+0x10/0x10 [ 227.866793][T10549] rdma_nl_rcv+0x3f8/0x9e0 [ 227.866830][T10549] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 227.866858][T10549] ? __lock_acquire+0xad5/0xd80 [ 227.866905][T10549] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.866939][T10549] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.866971][T10549] netlink_unicast+0x7f8/0x9a0 [ 227.867009][T10549] ? __pfx_netlink_unicast+0x10/0x10 [ 227.867034][T10549] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 227.867061][T10549] ? skb_put+0x114/0x1f0 [ 227.867086][T10549] netlink_sendmsg+0x8c3/0xcd0 [ 227.867129][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.867164][T10549] ? aa_sock_msg_perm+0x91/0x160 [ 227.867196][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.867223][T10549] __sock_sendmsg+0x221/0x270 [ 227.867254][T10549] ____sys_sendmsg+0x523/0x860 [ 227.867287][T10549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.867309][T10549] ? __fget_files+0x2a/0x420 [ 227.867332][T10549] ? __fget_files+0x2a/0x420 [ 227.867361][T10549] __sys_sendmsg+0x271/0x360 [ 227.867391][T10549] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.867472][T10549] ? do_syscall_64+0xb6/0x210 [ 227.867497][T10549] do_syscall_64+0xf3/0x210 [ 227.867515][T10549] ? clear_bhb_loop+0x45/0xa0 [ 227.867540][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.867561][T10549] RIP: 0033:0x7f62c838e969 [ 227.867580][T10549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.867598][T10549] RSP: 002b:00007f62c9249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.867619][T10549] RAX: ffffffffffffffda RBX: 00007f62c85b5fa0 RCX: 00007f62c838e969 [ 227.867635][T10549] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 227.867648][T10549] RBP: 00007f62c9249090 R08: 0000000000000000 R09: 0000000000000000 [ 227.867671][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.867683][T10549] R13: 0000000000000000 R14: 00007f62c85b5fa0 R15: 00007ffcf22f82b8 [ 227.867714][T10549] [ 228.391044][T10556] block nbd0: not configured, cannot reconfigure [ 228.438195][T10558] openvswitch: netlink: Message has 4 unknown bytes. [ 228.781794][T10579] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 228.831198][T10579] : mtu less than device minimum [ 228.855750][T10579] bond0: (slave ): Error -22 calling dev_set_mtu [ 228.870471][T10586] __nla_validate_parse: 7 callbacks suppressed [ 228.870493][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 228.907789][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 228.937906][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'. [ 228.974280][T10584] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1219'. [ 229.114162][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 229.628484][T10611] bond0: (slave wlan1): Releasing backup interface [ 229.663235][T10611] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 230.186022][T10627] trusted_key: syz.4.1230 sent an empty control message without MSG_MORE. [ 230.380772][T10632] sctp: [Deprecated]: syz.1.1231 (pid 10632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.380772][T10632] Use struct sctp_sack_info instead [ 231.614445][T10627] netlink: 'syz.4.1230': attribute type 3 has an invalid length. [ 231.745266][T10641] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1233'. [ 231.819413][T10645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.993136][T10645] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 232.017268][T10655] lo: left promiscuous mode [ 232.038029][T10655] tunl0: left promiscuous mode [ 232.127906][T10655] gre0: left promiscuous mode [ 232.132927][T10650] netlink: 'syz.1.1236': attribute type 2 has an invalid length. [ 232.144440][T10655] gretap0: left promiscuous mode [ 232.160396][T10655] erspan0: left promiscuous mode [ 232.166304][T10655] ip_vti0: left promiscuous mode [ 232.176640][T10655] ip6_vti0: left promiscuous mode [ 232.186526][T10655] sit0: left promiscuous mode [ 232.199800][T10655] ip6tnl0: left promiscuous mode [ 232.205564][T10655] ip6gre0: left promiscuous mode [ 232.209495][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 232.217742][T10655] ip6gretap0: left promiscuous mode [ 232.225771][T10655] bridge0: left promiscuous mode [ 232.238749][T10655] vcan0: left promiscuous mode [ 232.243966][T10655] bond0: left promiscuous mode [ 232.254709][T10655] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.574215][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 232.607766][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 232.646923][T10668] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.1240'. [ 232.693536][T10673] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 234.075055][T10694] __nla_validate_parse: 5 callbacks suppressed [ 234.075077][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 234.611126][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1252'. [ 234.728004][T10744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 234.836780][ T5854] Bluetooth: hci4: link tx timeout [ 234.842150][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 235.406115][T10773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1264'. [ 235.576089][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1266'. [ 235.796114][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 235.835792][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 236.027527][T10807] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 236.069219][T10807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1275'. [ 236.102722][T10807] tipc: Invalid UDP bearer configuration [ 236.102782][T10807] tipc: Enabling of bearer rejected, failed to enable media [ 236.159914][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 236.178924][T10821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1279'. [ 236.503963][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.655990][T10851] netlink: 'syz.4.1289': attribute type 4 has an invalid length. [ 236.783397][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 236.898451][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 237.182826][T10875] netlink: 'syz.4.1295': attribute type 33 has an invalid length. [ 237.429473][T10895] SET target dimension over the limit! [ 237.631275][T10899] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 237.721819][T10901] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 237.735528][T10901] batman_adv: batadv0: Adding interface: ip6gretap2 [ 237.742806][T10901] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.792651][T10906] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 237.807156][T10901] batman_adv: batadv0: Interface activated: ip6gretap2 [ 237.980523][T10904] wireguard0: entered promiscuous mode [ 237.987077][T10904] wireguard0: entered allmulticast mode [ 238.571619][T10944] netlink: 'syz.4.1314': attribute type 4 has an invalid length. [ 238.598924][T10935] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 240.617607][T10955] tipc: Enabling of bearer rejected, failed to enable media [ 240.643493][T10968] netem: incorrect gi model size [ 240.651652][T10968] netem: change failed [ 240.821542][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 240.830157][ T5854] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 241.122496][T10987] __nla_validate_parse: 4 callbacks suppressed [ 241.122518][T10987] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1326'. [ 241.159616][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 241.171528][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1326'. [ 241.192505][T10987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.249064][T10990] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1329'. [ 241.297632][T10990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.193266][T11016] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 242.244622][T11017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1336'. [ 242.324900][T11016] bond3: entered promiscuous mode [ 242.333655][T11026] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 242.341880][T11026] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 242.350430][T11016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.389589][T11013] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.399116][T11013] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.408402][T11013] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.419172][T11013] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.457335][T11013] vxlan0: entered promiscuous mode [ 242.462974][T11013] vxlan0: entered allmulticast mode [ 242.492309][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 242.774222][T11045] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1343'. [ 242.817875][T11042] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1343'. [ 242.954344][T11056] FAULT_INJECTION: forcing a failure. [ 242.954344][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 243.005725][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.0.1346 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 243.005758][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.005773][T11056] Call Trace: [ 243.005782][T11056] [ 243.005791][T11056] dump_stack_lvl+0x241/0x360 [ 243.005833][T11056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.005861][T11056] ? __pfx__printk+0x10/0x10 [ 243.005893][T11056] ? __pfx___might_resched+0x10/0x10 [ 243.005931][T11056] should_fail_ex+0x424/0x570 [ 243.005960][T11056] should_failslab+0xac/0x100 [ 243.005983][T11056] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 243.006005][T11056] ? __alloc_skb+0x1c2/0x480 [ 243.006029][T11056] __alloc_skb+0x1c2/0x480 [ 243.006054][T11056] ? __pfx___alloc_skb+0x10/0x10 [ 243.006083][T11056] ? netlink_ack_tlv_len+0x6e/0x200 [ 243.006117][T11056] netlink_ack+0x147/0xa70 [ 243.006144][T11056] ? __up_read+0x2c4/0x6b0 [ 243.006168][T11056] ? __pfx___up_read+0x10/0x10 [ 243.006210][T11056] rdma_nl_rcv+0x3f8/0x9e0 [ 243.006246][T11056] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 243.006275][T11056] ? __lock_acquire+0xad5/0xd80 [ 243.006323][T11056] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.006357][T11056] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.006389][T11056] netlink_unicast+0x7f8/0x9a0 [ 243.006425][T11056] ? __pfx_netlink_unicast+0x10/0x10 [ 243.006454][T11056] ? skb_put+0x114/0x1f0 [ 243.006478][T11056] netlink_sendmsg+0x8c3/0xcd0 [ 243.006520][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.006556][T11056] ? aa_sock_msg_perm+0x91/0x160 [ 243.006589][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.006619][T11056] __sock_sendmsg+0x221/0x270 [ 243.006652][T11056] ____sys_sendmsg+0x523/0x860 [ 243.006686][T11056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.006706][T11056] ? __fget_files+0x2a/0x420 [ 243.006727][T11056] ? __fget_files+0x2a/0x420 [ 243.006755][T11056] __sys_sendmsg+0x271/0x360 [ 243.006784][T11056] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.006860][T11056] ? do_syscall_64+0xb6/0x210 [ 243.006885][T11056] do_syscall_64+0xf3/0x210 [ 243.006905][T11056] ? clear_bhb_loop+0x45/0xa0 [ 243.006930][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.006950][T11056] RIP: 0033:0x7f826598e969 [ 243.006969][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.006986][T11056] RSP: 002b:00007f8266725038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.007009][T11056] RAX: ffffffffffffffda RBX: 00007f8265bb5fa0 RCX: 00007f826598e969 [ 243.007025][T11056] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 243.007039][T11056] RBP: 00007f8266725090 R08: 0000000000000000 R09: 0000000000000000 [ 243.007052][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.007065][T11056] R13: 0000000000000000 R14: 00007f8265bb5fa0 R15: 00007fffe22cba08 [ 243.007097][T11056] [ 243.292209][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 243.301753][T11058] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.370170][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 244.462850][T11108] pim6reg: entered allmulticast mode [ 245.438950][T11166] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 245.447383][T11160] netlink: 'syz.3.1375': attribute type 29 has an invalid length. [ 247.161506][T11148] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 247.163330][T11171] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 247.529602][T11204] __nla_validate_parse: 7 callbacks suppressed [ 247.529627][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 247.560355][T11202] sctp: [Deprecated]: syz.3.1384 (pid 11202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.560355][T11202] Use struct sctp_sack_info instead [ 247.629670][T11209] x_tables: ip_tables: osf match: only valid for protocol 6 [ 248.222992][T11213] team0: left promiscuous mode [ 248.260392][T11213] dummy0: left promiscuous mode [ 248.292693][T11213] nlmon0: left promiscuous mode [ 248.312201][T11213] caif0: left promiscuous mode [ 248.840665][T11213] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.867062][T11213] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.875543][T11213] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.885394][T11213] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.929588][T11213] bridge1: left allmulticast mode [ 248.944076][T11213] ip6erspan0: left promiscuous mode [ 248.964846][T11213] gtp0: left promiscuous mode [ 248.981507][T11213] gtp0: left allmulticast mode [ 249.045136][T11212] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 249.051611][T11212] syzkaller0: linktype set to 774 [ 250.348361][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1408'. [ 250.360789][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1408'. [ 250.371241][T11284] netlink: 'syz.2.1408': attribute type 4 has an invalid length. [ 250.489629][T11290] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1406'. [ 250.674889][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 251.240635][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 251.273111][T11311] netlink: 'syz.1.1415': attribute type 3 has an invalid length. [ 251.439670][T11322] nbd: must specify at least one socket [ 251.761398][T11341] sctp: [Deprecated]: syz.1.1426 (pid 11341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.761398][T11341] Use struct sctp_sack_info instead [ 251.900275][T11346] netlink: 'syz.1.1427': attribute type 7 has an invalid length. [ 252.003564][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 252.299349][T11361] lo speed is unknown, defaulting to 1000 [ 252.312201][T11361] lo speed is unknown, defaulting to 1000 [ 252.323077][T11361] lo speed is unknown, defaulting to 1000 [ 252.630985][T11361] infiniband syz0: set down [ 252.677500][T11361] infiniband syz0: added lo [ 252.811531][T11361] RDS/IB: syz0: added [ 252.816453][T11361] smc: adding ib device syz0 with port count 1 [ 252.840681][T11361] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 254.099236][ T6140] lo speed is unknown, defaulting to 1000 [ 254.159564][ T6146] lo speed is unknown, defaulting to 1000 [ 254.168385][T11361] lo speed is unknown, defaulting to 1000 [ 254.229279][T11383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1440'. [ 254.704415][T11401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.795403][T11361] lo speed is unknown, defaulting to 1000 [ 254.802972][T11409] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 255.342639][T11361] lo speed is unknown, defaulting to 1000 [ 255.415013][T11432] netlink: 'syz.2.1453': attribute type 10 has an invalid length. [ 255.448557][T11432] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 255.710253][T11361] lo speed is unknown, defaulting to 1000 [ 256.218275][T11456] syzkaller1: entered promiscuous mode [ 256.223848][T11456] syzkaller1: entered allmulticast mode [ 256.249359][T11361] lo speed is unknown, defaulting to 1000 [ 256.553146][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 256.655119][T11445] lo speed is unknown, defaulting to 1000 [ 257.214935][T11477] netlink: 'syz.1.1469': attribute type 10 has an invalid length. [ 257.234084][T11477] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.246244][T11476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.566500][T11479] bond0: (slave bridge0): Releasing backup interface [ 257.580514][T11479] bridge_slave_0: left allmulticast mode [ 257.586234][T11479] bridge_slave_0: left promiscuous mode [ 257.594026][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.603561][T11479] bridge_slave_1: left promiscuous mode [ 257.610326][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.622984][T11479] bond0: (slave bond_slave_0): Releasing backup interface [ 257.633606][T11479] bond0: (slave bond_slave_1): Releasing backup interface [ 257.650865][T11479] team0: Port device team_slave_0 removed [ 257.662920][T11479] team0: Port device team_slave_1 removed [ 257.670279][T11479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.678771][T11479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.690644][T11479] team0: Port device geneve0 removed [ 257.697839][T11479] bond1: (slave gretap1): Releasing active interface [ 257.850111][T11484] lo speed is unknown, defaulting to 1000 [ 258.124651][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1476'. [ 258.145180][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 258.174625][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 258.420282][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 258.657400][T11518] netlink: 'syz.3.1481': attribute type 2 has an invalid length. [ 258.717401][T11520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.785634][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 258.801310][T11525] sctp: [Deprecated]: syz.3.1481 (pid 11525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.801310][T11525] Use struct sctp_sack_info instead [ 258.843784][T11527] batadv_slave_1: entered promiscuous mode [ 258.851735][T11526] batadv_slave_1: left promiscuous mode [ 259.001013][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'. [ 259.131690][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1472'. [ 259.285148][T11535] lo speed is unknown, defaulting to 1000 [ 259.893039][T11565] gretap0: entered promiscuous mode [ 259.904286][T11565] vlan2: entered promiscuous mode [ 260.156953][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 260.200372][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 260.205167][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 260.291878][T11577] veth0_to_bond: entered allmulticast mode [ 260.607947][T11597] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 260.628703][T11591] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 260.794547][T11597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.838570][T11606] netlink: 'syz.4.1504': attribute type 10 has an invalid length. [ 260.846799][T11606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 261.506679][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 261.791975][T11655] sit0: entered promiscuous mode [ 261.845672][T11655] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 261.878151][T11655] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1515'. [ 261.976277][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'. [ 261.993810][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'. [ 262.093024][T11658] lo speed is unknown, defaulting to 1000 [ 262.184534][T11670] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1519'. [ 262.227526][T11670] netlink: 'syz.0.1519': attribute type 29 has an invalid length. [ 262.235839][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 262.277549][T11673] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.326962][T11673] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.346058][T11673] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.416980][T11673] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.437708][T11673] geneve5: entered promiscuous mode [ 262.449147][T11673] geneve5: entered allmulticast mode [ 262.470658][T11673] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.492508][T11673] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.512033][T11673] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.521230][T11673] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.215259][T11700] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 263.356967][T11702] lo speed is unknown, defaulting to 1000 [ 263.414174][T11709] syzkaller1: entered promiscuous mode [ 263.425728][T11709] syzkaller1: entered allmulticast mode [ 263.933724][T11722] bridge0: entered promiscuous mode [ 264.096832][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 264.103007][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 264.410057][T11720] lo speed is unknown, defaulting to 1000 [ 264.744343][T11721] bridge0: left promiscuous mode [ 264.755866][T11722] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 264.994004][T11745] lo speed is unknown, defaulting to 1000 [ 265.321393][T11748] netlink: 'syz.1.1538': attribute type 8 has an invalid length. [ 265.678924][T11759] syzkaller1: entered promiscuous mode [ 265.684655][T11759] syzkaller1: entered allmulticast mode [ 265.691723][T11766] xt_CT: No such helper "pptp" [ 265.881323][T11770] __nla_validate_parse: 2 callbacks suppressed [ 265.881346][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 266.005790][T11777] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1544'. [ 266.016926][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 266.724035][T11796] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1550'. [ 267.001223][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 267.040112][T11806] SET target dimension over the limit! [ 267.192383][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 267.263506][T11814] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 267.413135][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 267.808922][T11844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1567'. [ 268.609862][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 268.638575][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 268.687307][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'. [ 268.762284][T11902] unsupported nlmsg_type 40 [ 268.785050][T11888] lo speed is unknown, defaulting to 1000 [ 269.217960][T11914] netlink: 'syz.4.1587': attribute type 2 has an invalid length. [ 269.247063][T11918] netlink: 'syz.4.1587': attribute type 2 has an invalid length. [ 269.273149][T11914] : entered promiscuous mode [ 269.516171][T11926] netlink: 'syz.3.1593': attribute type 9 has an invalid length. [ 269.538911][T11926] netlink: 'syz.3.1593': attribute type 6 has an invalid length. [ 269.683315][T11926] bond0 (unregistering): Released all slaves [ 269.835714][T11887] lo speed is unknown, defaulting to 1000 [ 270.673738][T11931] lo speed is unknown, defaulting to 1000 [ 270.754572][T11962] lo: entered allmulticast mode [ 270.760271][T11962] lo: left allmulticast mode [ 270.929785][T11959] xt_hashlimit: size too large, truncated to 1048576 [ 270.996228][T11968] __nla_validate_parse: 7 callbacks suppressed [ 270.996250][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 271.321816][T11963] lo speed is unknown, defaulting to 1000 [ 271.497513][T11975] syzkaller1: entered promiscuous mode [ 271.506992][T11975] syzkaller1: entered allmulticast mode [ 271.670487][T11982] --map-set only usable from mangle table [ 271.985552][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 271.995834][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 272.015907][T11990] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 272.030743][T11991] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 272.047225][T11990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.079542][T11991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.651706][T12011] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 272.669895][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 272.865844][T12003] veth1_to_bond: entered allmulticast mode [ 272.884892][T12005] veth1_to_bond: entered promiscuous mode [ 272.959749][T12002] veth1_to_bond: left promiscuous mode [ 272.965992][T12002] veth1_to_bond: left allmulticast mode [ 273.424312][T12029] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 273.531329][T12029] lo speed is unknown, defaulting to 1000 [ 273.568756][T12034] netlink: 'syz.1.1623': attribute type 5 has an invalid length. [ 273.813540][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 273.834517][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 274.374063][T12059] lo speed is unknown, defaulting to 1000 [ 275.285187][T12070] lo speed is unknown, defaulting to 1000 [ 276.393930][T12099] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.403725][T12099] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.413373][T12099] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.423521][T12099] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.096524][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1645'. [ 277.436499][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1647'. [ 277.448388][T12139] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 277.456180][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 277.481415][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1647'. [ 277.786395][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'. [ 277.828105][T12155] x_tables: duplicate underflow at hook 3 [ 277.885612][T12155] netlink: 'syz.3.1651': attribute type 10 has an invalid length. [ 277.922966][T12161] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1655'. [ 277.953405][T12161] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1655'. [ 278.242638][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 278.954787][T12202] syz.3.1668: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.988734][T12200] can: request_module (can-proto-3) failed. [ 278.992641][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.3.1668 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 278.992676][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.992691][T12202] Call Trace: [ 278.992700][T12202] [ 278.992719][T12202] dump_stack_lvl+0x241/0x360 [ 278.992760][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.992792][T12202] ? __pfx__printk+0x10/0x10 [ 278.992820][T12202] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 278.992848][T12202] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 278.992871][T12202] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 278.992898][T12202] warn_alloc+0x27c/0x410 [ 278.992933][T12202] ? __pfx_warn_alloc+0x10/0x10 [ 278.992968][T12202] ? nf_tables_newset+0x188b/0x30e0 [ 278.992990][T12202] ? __get_vm_area_node+0x1c8/0x2d0 [ 278.993013][T12202] ? __get_vm_area_node+0x25c/0x2d0 [ 278.993046][T12202] __vmalloc_node_range_noprof+0x634/0x1390 [ 278.993110][T12202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.993137][T12202] ? __kasan_kmalloc_large+0x1a/0xa0 [ 278.993176][T12202] ? nf_tables_newset+0x188b/0x30e0 [ 278.993199][T12202] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 278.993225][T12202] ? nf_tables_newset+0x188b/0x30e0 [ 278.993244][T12202] ? nf_tables_newset+0x188b/0x30e0 [ 278.993273][T12202] nf_tables_newset+0x188b/0x30e0 [ 278.993323][T12202] ? __pfx_nf_tables_newset+0x10/0x10 [ 278.993376][T12202] ? __nla_parse+0x40/0x60 [ 278.993411][T12202] nfnetlink_rcv+0x12eb/0x28f0 [ 278.993435][T12202] ? __kernel_text_address+0xd/0x40 [ 278.993504][T12202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.993549][T12202] ? __lock_acquire+0xad5/0xd80 [ 278.993635][T12202] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.993672][T12202] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.993714][T12202] netlink_unicast+0x7f8/0x9a0 [ 278.993755][T12202] ? __pfx_netlink_unicast+0x10/0x10 [ 278.993788][T12202] ? skb_put+0x114/0x1f0 [ 278.993817][T12202] netlink_sendmsg+0x8c3/0xcd0 [ 278.993867][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.993905][T12202] ? aa_sock_msg_perm+0x91/0x160 [ 278.993940][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.993971][T12202] __sock_sendmsg+0x221/0x270 [ 278.994007][T12202] ____sys_sendmsg+0x523/0x860 [ 278.994044][T12202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.994067][T12202] ? __fget_files+0x2a/0x420 [ 278.994091][T12202] ? __fget_files+0x2a/0x420 [ 278.994123][T12202] __sys_sendmsg+0x271/0x360 [ 278.994155][T12202] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.994246][T12202] ? do_syscall_64+0xb6/0x210 [ 278.994273][T12202] do_syscall_64+0xf3/0x210 [ 278.994294][T12202] ? clear_bhb_loop+0x45/0xa0 [ 278.994321][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.994343][T12202] RIP: 0033:0x7f41f5f8e969 [ 278.994363][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.994382][T12202] RSP: 002b:00007f41f6d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.994406][T12202] RAX: ffffffffffffffda RBX: 00007f41f61b5fa0 RCX: 00007f41f5f8e969 [ 278.994424][T12202] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 278.994438][T12202] RBP: 00007f41f6010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 278.994453][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.994465][T12202] R13: 0000000000000000 R14: 00007f41f61b5fa0 R15: 00007ffdaea67c88 [ 278.994500][T12202] [ 278.994510][T12202] Mem-Info: [ 279.343951][T12202] active_anon:8895 inactive_anon:0 isolated_anon:0 [ 279.343951][T12202] active_file:1539 inactive_file:38389 isolated_file:0 [ 279.343951][T12202] unevictable:768 dirty:132 writeback:0 [ 279.343951][T12202] slab_reclaimable:10520 slab_unreclaimable:105843 [ 279.343951][T12202] mapped:29917 shmem:1442 pagetables:964 [ 279.343951][T12202] sec_pagetables:0 bounce:0 [ 279.343951][T12202] kernel_misc_reclaimable:0 [ 279.343951][T12202] free:1318457 free_pcp:1056 free_cma:0 [ 279.411778][T12202] Node 0 active_anon:35580kB inactive_anon:0kB active_file:6156kB inactive_file:153480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119668kB dirty:524kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12200kB pagetables:3756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.453983][T12202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.508390][T12202] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.564272][T12202] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 279.622114][T12202] Node 0 DMA32 free:1353896kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35472kB inactive_anon:0kB active_file:6156kB inactive_file:153388kB unevictable:1536kB writepending:524kB present:3129332kB managed:2547444kB mlocked:0kB bounce:0kB free_pcp:4036kB local_pcp:3788kB free_cma:0kB [ 279.744491][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 279.757094][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1672'. [ 279.764787][T12202] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 279.781736][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1672'. [ 279.831020][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 279.841167][T12202] Node 1 Normal free:3909936kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 279.883544][T12221] veth1: entered promiscuous mode [ 279.895124][T12221] dummy0: entered promiscuous mode [ 279.907011][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 279.911829][T12202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 279.918975][T12221] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 279.949763][T12202] Node 0 DMA32: 513*4kB (UM) 232*8kB (ME) 195*16kB (UME) 204*32kB (UME) 1037*64kB (UME) 508*128kB (UME) 200*256kB (UME) 85*512kB (UM) 30*1024kB (UME) 4*2048kB (UM) 264*4096kB (M) = 1359924kB [ 279.956110][T12221] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 279.987281][T12202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.023586][T12202] Node 1 Normal: 236*4kB (UM) 54*8kB (UME) 39*16kB (UME) 231*32kB (UME) 94*64kB (UM) 36*128kB (UME) 13*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 945*4096kB (M) = 3909936kB [ 280.045604][T12202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.115907][T12202] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.152035][T12202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.185028][T12202] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.210937][T12202] 41373 total pagecache pages [ 280.215731][T12202] 0 pages in swap cache [ 280.216188][T12232] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 280.242657][T12202] Free swap = 124996kB [ 280.246186][T12232] veth0_vlan: left promiscuous mode [ 280.247400][T12202] Total swap = 124996kB [ 280.262228][T12202] 2097051 pages RAM [ 280.264430][T12232] veth0_vlan: entered promiscuous mode [ 280.266075][T12202] 0 pages HighMem/MovableOnly [ 280.266088][T12202] 428532 pages reserved [ 280.266099][T12202] 0 pages cma reserved [ 280.307544][T12234] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 280.316011][T12232] veth0_vlan: entered allmulticast mode [ 280.344024][T12232] bridge0: port 3(veth0_vlan) entered blocking state [ 280.351425][T12232] bridge0: port 3(veth0_vlan) entered disabled state [ 280.370660][T12232] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 280.415533][T12237] atomic_op ffff88807df9a198 conn xmit_atomic 0000000000000000 [ 280.458431][T12237] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 280.551758][T12240] netlink: 'syz.0.1679': attribute type 21 has an invalid length. [ 280.618042][T12241] bond5: (slave gretap2): making interface the new active one [ 280.644162][T12241] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 280.823200][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 280.927921][T12259] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.036575][T12309] lo speed is unknown, defaulting to 1000 [ 282.067257][T12311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.091656][T12311] bond_slave_0: left promiscuous mode [ 282.107173][T12311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.127475][T12311] bond_slave_1: left promiscuous mode [ 282.134944][T12311] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 282.146371][T12311] batadv0: left promiscuous mode [ 282.168170][T12311] bond0 (unregistering): Released all slaves [ 282.551053][T12322] syzkaller0: create flow: hash 3756268046 index 1 [ 282.688951][T12327] __nla_validate_parse: 10 callbacks suppressed [ 282.688969][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 282.899398][T12325] syzkaller0: delete flow: hash 3756268046 index 1 [ 283.028291][T12342] sctp: [Deprecated]: syz.4.1712 (pid 12342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.028291][T12342] Use struct sctp_sack_info instead [ 284.466505][T12340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.488309][T12340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.501003][T12340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.511199][T12340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.522627][T12340] geneve2: entered promiscuous mode [ 284.531252][T12340] geneve2: entered allmulticast mode [ 284.558971][T12353] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1714'. [ 285.015903][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'. [ 285.221630][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 285.462062][T12388] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 285.644194][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 285.780510][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'. [ 285.808606][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'. [ 285.842533][T12407] netlink: 'syz.1.1727': attribute type 21 has an invalid length. [ 285.875435][T12407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1727'. [ 286.031518][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 286.113492][T12417] openvswitch: netlink: IPv6 tunnel dst address is zero [ 286.117647][T12418] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1732'. [ 286.126114][T12417] nr0: entered allmulticast mode [ 286.145217][T12418] gretap0: entered promiscuous mode [ 286.371832][T12435] FAULT_INJECTION: forcing a failure. [ 286.371832][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 286.400035][T12438] tipc: Enabled bearer , priority 27 [ 286.414851][T12438] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 286.427982][T12435] CPU: 0 UID: 0 PID: 12435 Comm: syz.3.1736 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 286.428016][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.428029][T12435] Call Trace: [ 286.428038][T12435] [ 286.428047][T12435] dump_stack_lvl+0x241/0x360 [ 286.428086][T12435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.428115][T12435] ? __pfx__printk+0x10/0x10 [ 286.428147][T12435] ? __pfx___might_resched+0x10/0x10 [ 286.428184][T12435] should_fail_ex+0x424/0x570 [ 286.428213][T12435] should_failslab+0xac/0x100 [ 286.428235][T12435] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 286.428256][T12435] ? __alloc_skb+0x1c2/0x480 [ 286.428282][T12435] __alloc_skb+0x1c2/0x480 [ 286.428309][T12435] ? __pfx___alloc_skb+0x10/0x10 [ 286.428333][T12435] ? netlink_autobind+0xd6/0x2f0 [ 286.428351][T12435] ? netlink_autobind+0x2b0/0x2f0 [ 286.428375][T12435] netlink_sendmsg+0x638/0xcd0 [ 286.428420][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.428456][T12435] ? aa_sock_msg_perm+0x91/0x160 [ 286.428488][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.428517][T12435] __sock_sendmsg+0x221/0x270 [ 286.428550][T12435] ____sys_sendmsg+0x523/0x860 [ 286.428584][T12435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.428606][T12435] ? __fget_files+0x2a/0x420 [ 286.428629][T12435] ? __fget_files+0x2a/0x420 [ 286.428658][T12435] __sys_sendmsg+0x271/0x360 [ 286.428711][T12435] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.428794][T12435] ? do_syscall_64+0xb6/0x210 [ 286.428820][T12435] do_syscall_64+0xf3/0x210 [ 286.428841][T12435] ? clear_bhb_loop+0x45/0xa0 [ 286.428866][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.428887][T12435] RIP: 0033:0x7f41f5f8e969 [ 286.428906][T12435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.428932][T12435] RSP: 002b:00007f41f3df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.428955][T12435] RAX: ffffffffffffffda RBX: 00007f41f61b6080 RCX: 00007f41f5f8e969 [ 286.428971][T12435] RDX: 0000000000008010 RSI: 0000200000000d40 RDI: 0000000000000006 [ 286.428984][T12435] RBP: 00007f41f3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.428997][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.429010][T12435] R13: 0000000000000000 R14: 00007f41f61b6080 R15: 00007ffdaea67c88 [ 286.429042][T12435] [ 286.430832][T12438] tipc: Resetting bearer [ 286.566094][T12442] FAULT_INJECTION: forcing a failure. [ 286.566094][T12442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.570848][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.581434][T12442] CPU: 1 UID: 0 PID: 12442 Comm: syz.4.1740 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 286.581467][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.581482][T12442] Call Trace: [ 286.581490][T12442] [ 286.581500][T12442] dump_stack_lvl+0x241/0x360 [ 286.581540][T12442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.581572][T12442] ? __pfx__printk+0x10/0x10 [ 286.581617][T12442] should_fail_ex+0x424/0x570 [ 286.581648][T12442] _copy_from_user+0x2d/0xb0 [ 286.581693][T12442] copy_msghdr_from_user+0xb3/0x580 [ 286.581735][T12442] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.581764][T12442] ? __fget_files+0x2a/0x420 [ 286.581788][T12442] ? __fget_files+0x2a/0x420 [ 286.581819][T12442] __sys_sendmsg+0x20a/0x360 [ 286.581851][T12442] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.581939][T12442] ? do_syscall_64+0xb6/0x210 [ 286.581964][T12442] do_syscall_64+0xf3/0x210 [ 286.581986][T12442] ? clear_bhb_loop+0x45/0xa0 [ 286.582013][T12442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.582034][T12442] RIP: 0033:0x7f4b6358e969 [ 286.582054][T12442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.582074][T12442] RSP: 002b:00007f4b64314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.582100][T12442] RAX: ffffffffffffffda RBX: 00007f4b637b5fa0 RCX: 00007f4b6358e969 [ 286.582117][T12442] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 286.582131][T12442] RBP: 00007f4b64314090 R08: 0000000000000000 R09: 0000000000000000 [ 286.582146][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.582159][T12442] R13: 0000000000000000 R14: 00007f4b637b5fa0 R15: 00007fffbce41888 [ 286.582194][T12442] [ 286.888962][T12438] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 287.054051][T12449] lo speed is unknown, defaulting to 1000 [ 287.404832][T12467] sctp: [Deprecated]: syz.1.1749 (pid 12467) Use of int in max_burst socket option. [ 287.404832][T12467] Use struct sctp_assoc_value instead [ 287.424591][T12466] sctp: [Deprecated]: syz.1.1749 (pid 12466) Use of int in max_burst socket option. [ 287.424591][T12466] Use struct sctp_assoc_value instead [ 287.587303][T12477] syz.4.1752 uses old SIOCAX25GETINFO [ 288.032878][T12494] __nla_validate_parse: 1 callbacks suppressed [ 288.032898][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 288.041444][T12491] lo speed is unknown, defaulting to 1000 [ 288.190314][T12496] tipc: Resetting bearer [ 288.223018][T12496] bridge_slave_1: left allmulticast mode [ 288.236191][T12496] hsr0: left promiscuous mode [ 288.265730][T12496] macsec1: left promiscuous mode [ 288.279358][T12496] macsec1: left allmulticast mode [ 288.299214][T12496] macsec2: left promiscuous mode [ 288.304232][T12496] macsec2: left allmulticast mode [ 288.413324][T12496] bond3: left promiscuous mode [ 288.436170][T12496] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.445309][T12496] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.454366][T12496] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.463497][T12496] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.489319][T12496] geneve2: left promiscuous mode [ 288.494548][T12496] geneve2: left allmulticast mode [ 289.533562][T12533] veth1_to_team: entered promiscuous mode [ 289.549239][T12533] netlink: 'syz.2.1766': attribute type 10 has an invalid length. [ 289.615808][T12533] team0: Port device dummy0 added [ 289.646967][T12539] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1768'. [ 289.791829][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 290.018568][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 290.149267][T12556] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1775'. [ 290.433893][T12563] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1775'. [ 291.678901][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'. [ 291.734006][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'. [ 291.788584][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 291.973344][T12591] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 292.081572][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 292.135425][T12600] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 292.188208][T12600] tap0: tun_chr_ioctl cmd 1074025677 [ 292.207451][T12600] tap0: linktype set to 778 [ 292.452117][T12610] xt_cluster: you have exceeded the maximum number of cluster nodes (2147483648 > 32) [ 293.292700][T12641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 293.315412][T12642] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 293.562755][T12651] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 293.661360][T12651] bond2: entered promiscuous mode [ 293.680100][T12651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.802166][T12663] sctp: [Deprecated]: syz.0.1803 (pid 12663) Use of int in max_burst socket option deprecated. [ 293.802166][T12663] Use struct sctp_assoc_value instead [ 293.813018][T12657] bond2: (slave veth5): making interface the new active one [ 293.835902][T12657] veth5: entered promiscuous mode [ 293.856422][T12657] bond2: (slave veth5): Enslaving as an active interface with an up link [ 294.139347][T12680] __nla_validate_parse: 4 callbacks suppressed [ 294.139368][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 294.358713][T12688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.438556][T12691] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1808'. [ 294.490930][T12693] netlink: 'syz.2.1809': attribute type 10 has an invalid length. [ 294.519446][T12693] [ 294.521832][T12693] ====================================================== [ 294.528870][T12693] WARNING: possible circular locking dependency detected [ 294.535923][T12693] 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 Not tainted [ 294.543054][T12693] ------------------------------------------------------ [ 294.550097][T12693] syz.2.1809/12693 is trying to acquire lock: [ 294.556182][T12693] ffff888060f2ce00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 294.566529][T12693] [ 294.566529][T12693] but task is already holding lock: [ 294.573923][T12693] ffff88803509cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3c1/0x4390 [ 294.583642][T12693] [ 294.583642][T12693] which lock already depends on the new lock. [ 294.583642][T12693] [ 294.594071][T12693] [ 294.594071][T12693] the existing dependency chain (in reverse order) is: [ 294.603089][T12693] [ 294.603089][T12693] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 294.611537][T12693] lock_acquire+0x116/0x2f0 [ 294.616579][T12693] __mutex_lock+0x1a5/0x10c0 [ 294.621689][T12693] dev_set_mtu+0x11c/0x270 [ 294.626628][T12693] team_add_slave+0x83b/0x28b0 [ 294.631923][T12693] do_set_master+0x579/0x730 [ 294.637039][T12693] do_setlink+0xf76/0x4390 [ 294.641975][T12693] rtnl_newlink+0x17e2/0x1fe0 [ 294.647179][T12693] rtnetlink_rcv_msg+0x80f/0xd70 [ 294.652647][T12693] netlink_rcv_skb+0x208/0x480 [ 294.657942][T12693] netlink_unicast+0x7f8/0x9a0 [ 294.663234][T12693] netlink_sendmsg+0x8c3/0xcd0 [ 294.668530][T12693] __sock_sendmsg+0x221/0x270 [ 294.673750][T12693] ____sys_sendmsg+0x523/0x860 [ 294.679068][T12693] __sys_sendmsg+0x271/0x360 [ 294.684197][T12693] do_syscall_64+0xf3/0x210 [ 294.689230][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.695650][T12693] [ 294.695650][T12693] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 294.703841][T12693] validate_chain+0xa69/0x24e0 [ 294.709129][T12693] __lock_acquire+0xad5/0xd80 [ 294.714339][T12693] lock_acquire+0x116/0x2f0 [ 294.719369][T12693] __mutex_lock+0x1a5/0x10c0 [ 294.724479][T12693] team_port_change_check+0x51/0x1e0 [ 294.730306][T12693] team_device_event+0x161/0x5b0 [ 294.735771][T12693] notifier_call_chain+0x1a5/0x3f0 [ 294.741412][T12693] __dev_notify_flags+0x209/0x410 [ 294.746959][T12693] netif_change_flags+0xf0/0x1a0 [ 294.752417][T12693] do_setlink+0xee3/0x4390 [ 294.757358][T12693] rtnl_newlink+0x17e2/0x1fe0 [ 294.762562][T12693] rtnetlink_rcv_msg+0x80f/0xd70 [ 294.768032][T12693] netlink_rcv_skb+0x208/0x480 [ 294.773323][T12693] netlink_unicast+0x7f8/0x9a0 [ 294.778633][T12693] netlink_sendmsg+0x8c3/0xcd0 [ 294.784039][T12693] __sock_sendmsg+0x221/0x270 [ 294.789244][T12693] ____sys_sendmsg+0x523/0x860 [ 294.794534][T12693] __sys_sendmsg+0x271/0x360 [ 294.799652][T12693] do_syscall_64+0xf3/0x210 [ 294.804766][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.811180][T12693] [ 294.811180][T12693] other info that might help us debug this: [ 294.811180][T12693] [ 294.821406][T12693] Possible unsafe locking scenario: [ 294.821406][T12693] [ 294.828855][T12693] CPU0 CPU1 [ 294.834221][T12693] ---- ---- [ 294.839584][T12693] lock(&dev_instance_lock_key#3); [ 294.844801][T12693] lock(team->team_lock_key#5); [ 294.852272][T12693] lock(&dev_instance_lock_key#3); [ 294.860004][T12693] lock(team->team_lock_key#5); [ 294.864956][T12693] [ 294.864956][T12693] *** DEADLOCK *** [ 294.864956][T12693] [ 294.873100][T12693] 2 locks held by syz.2.1809/12693: [ 294.878298][T12693] #0: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 294.887397][T12693] #1: ffff88803509cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3c1/0x4390 [ 294.897521][T12693] [ 294.897521][T12693] stack backtrace: [ 294.903421][T12693] CPU: 1 UID: 0 PID: 12693 Comm: syz.2.1809 Not tainted 6.15.0-rc2-syzkaller-00682-gcd7276ecac9c #0 PREEMPT(full) [ 294.903445][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.903455][T12693] Call Trace: [ 294.903463][T12693] [ 294.903470][T12693] dump_stack_lvl+0x241/0x360 [ 294.903499][T12693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.903521][T12693] ? __pfx__printk+0x10/0x10 [ 294.903544][T12693] ? print_lock+0x171/0x1a0 [ 294.903570][T12693] print_circular_bug+0x2e1/0x300 [ 294.903588][T12693] check_noncircular+0x142/0x160 [ 294.903607][T12693] validate_chain+0xa69/0x24e0 [ 294.903634][T12693] __lock_acquire+0xad5/0xd80 [ 294.903660][T12693] lock_acquire+0x116/0x2f0 [ 294.903681][T12693] ? team_port_change_check+0x51/0x1e0 [ 294.903709][T12693] __mutex_lock+0x1a5/0x10c0 [ 294.903724][T12693] ? team_port_change_check+0x51/0x1e0 [ 294.903751][T12693] ? team_port_change_check+0x51/0x1e0 [ 294.903771][T12693] ? bond_netdev_event+0xe0/0xfb0 [ 294.903791][T12693] ? __pfx___mutex_lock+0x10/0x10 [ 294.903806][T12693] ? __timer_delete_sync+0x25f/0x310 [ 294.903829][T12693] ? __asan_memset+0x23/0x50 [ 294.903853][T12693] team_port_change_check+0x51/0x1e0 [ 294.903877][T12693] team_device_event+0x161/0x5b0 [ 294.903898][T12693] ? notifier_call_chain+0x15a/0x3f0 [ 294.903931][T12693] notifier_call_chain+0x1a5/0x3f0 [ 294.903960][T12693] __dev_notify_flags+0x209/0x410 [ 294.903981][T12693] ? __pfx___dev_notify_flags+0x10/0x10 [ 294.903997][T12693] ? __dev_change_flags+0x517/0x700 [ 294.904014][T12693] ? do_setlink+0x3c1/0x4390 [ 294.904030][T12693] ? __pfx___dev_change_flags+0x10/0x10 [ 294.904045][T12693] ? validate_linkmsg+0x82a/0xa40 [ 294.904068][T12693] ? __pfx_validate_linkmsg+0x10/0x10 [ 294.904089][T12693] netif_change_flags+0xf0/0x1a0 [ 294.904108][T12693] do_setlink+0xee3/0x4390 [ 294.904128][T12693] ? _printk+0xd5/0x120 [ 294.904148][T12693] ? __nla_validate_parse+0x4fb/0x32e0 [ 294.904174][T12693] ? __pfx_do_setlink+0x10/0x10 [ 294.904191][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904218][T12693] ? __pfx___mutex_trylock_common+0x10/0x10 [ 294.904236][T12693] ? rcu_is_watching+0x15/0xb0 [ 294.904251][T12693] ? trace_contention_end+0x3c/0x120 [ 294.904266][T12693] ? __mutex_lock+0x380/0x10c0 [ 294.904283][T12693] ? __pfx_aa_get_newest_label+0x10/0x10 [ 294.904306][T12693] ? rcu_is_watching+0x15/0xb0 [ 294.904320][T12693] ? rtnl_newlink+0xd68/0x1fe0 [ 294.904343][T12693] ? __pfx___mutex_lock+0x10/0x10 [ 294.904363][T12693] ? ns_capable+0x8a/0xf0 [ 294.904387][T12693] ? rtnl_link_get_net_capable+0x168/0x340 [ 294.904405][T12693] rtnl_newlink+0x17e2/0x1fe0 [ 294.904435][T12693] ? __pfx_rtnl_newlink+0x10/0x10 [ 294.904458][T12693] ? do_raw_spin_unlock+0x13c/0x8b0 [ 294.904479][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904503][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904525][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904554][T12693] ? is_bpf_text_address+0x26/0x2a0 [ 294.904578][T12693] ? 0xffffffffa000094c [ 294.904592][T12693] ? is_bpf_text_address+0x288/0x2a0 [ 294.904613][T12693] ? is_bpf_text_address+0x26/0x2a0 [ 294.904635][T12693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.904655][T12693] ? kernel_text_address+0xa7/0xe0 [ 294.904675][T12693] ? __kernel_text_address+0xd/0x40 [ 294.904697][T12693] ? aa_get_newest_label+0x101/0x6f0 [ 294.904720][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904749][T12693] ? __pfx_rtnl_newlink+0x10/0x10 [ 294.904773][T12693] rtnetlink_rcv_msg+0x80f/0xd70 [ 294.904797][T12693] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 294.904823][T12693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.904846][T12693] ? __lock_acquire+0xad5/0xd80 [ 294.904874][T12693] netlink_rcv_skb+0x208/0x480 [ 294.904899][T12693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.904932][T12693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.904963][T12693] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.904988][T12693] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.905013][T12693] netlink_unicast+0x7f8/0x9a0 [ 294.905039][T12693] ? __pfx_netlink_unicast+0x10/0x10 [ 294.905061][T12693] ? skb_put+0x114/0x1f0 [ 294.905079][T12693] netlink_sendmsg+0x8c3/0xcd0 [ 294.905109][T12693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.905135][T12693] ? aa_sock_msg_perm+0x91/0x160 [ 294.905158][T12693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.905181][T12693] __sock_sendmsg+0x221/0x270 [ 294.905206][T12693] ____sys_sendmsg+0x523/0x860 [ 294.905228][T12693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.905245][T12693] ? __fget_files+0x2a/0x420 [ 294.905261][T12693] ? __fget_files+0x2a/0x420 [ 294.905278][T12693] __sys_sendmsg+0x271/0x360 [ 294.905299][T12693] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.905316][T12693] ? hci_sock_bind+0x293/0x12d0 [ 294.905360][T12693] ? do_syscall_64+0xb6/0x210 [ 294.905377][T12693] do_syscall_64+0xf3/0x210 [ 294.905393][T12693] ? clear_bhb_loop+0x45/0xa0 [ 294.905411][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.905427][T12693] RIP: 0033:0x7f62c838e969 [ 294.905442][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.905456][T12693] RSP: 002b:00007f62c9249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.905474][T12693] RAX: ffffffffffffffda RBX: 00007f62c85b5fa0 RCX: 00007f62c838e969 [ 294.905487][T12693] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 294.905497][T12693] RBP: 00007f62c8410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 294.905508][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.905518][T12693] R13: 0000000000000000 R14: 00007f62c85b5fa0 R15: 00007ffcf22f82b8 [ 294.905536][T12693] [ 295.464229][T12698] netlink: 'syz.3.1810': attribute type 4 has an invalid length.