last executing test programs: 3m59.906764723s ago: executing program 3 (id=164): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x34}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) 3m59.671332874s ago: executing program 3 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ff"], 0x5c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0xff, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x3, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x3, 0x4, {0xa, 0x4e20, 0x5, @local, 0x5}}}, 0x3a) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000006001a"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) (async) r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockname$netrom(r6, &(0x7f0000000180)={{0x3, @bcast}, [@bcast, @netrom, @netrom, @null, @default, @rose, @default, @netrom]}, &(0x7f0000000080)=0x48) syz_emit_ethernet(0x22, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x6}}, {@can={0xc, {{}, 0x4, 0x3, 0x0, 0x0, "6ab97853117d3e3f"}}}}, 0x0) 3m59.40892725s ago: executing program 3 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/28], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x19, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5a6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m48.139640378s ago: executing program 3 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/28], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x19, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5a6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m40.222488668s ago: executing program 0 (id=350): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c00000003"], 0xa0}}, 0x8040) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) (async) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x32, @multicast1, 0x4e21, 0x0, 'sed\x00', 0x2, 0x2, 0xa}, 0x2c) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0xfe01, 0x1, 0x8b, 0xe}, {0x5, 0x4, 0x5}, {0x9c1e, 0x7, 0x4, 0x2000}, {0x0, 0x0, 0x2, 0x6}, {0x5, 0x20, 0x2, 0x9}, {0x6, 0x4, 0xb, 0x9}, {0x7, 0x8, 0x5, 0x7fffffff}, {0x3, 0x4, 0x2, 0x3}]}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0xfe01, 0x1, 0x8b, 0xe}, {0x5, 0x4, 0x5}, {0x9c1e, 0x7, 0x4, 0x2000}, {0x0, 0x0, 0x2, 0x6}, {0x5, 0x20, 0x2, 0x9}, {0x6, 0x4, 0xb, 0x9}, {0x7, 0x8, 0x5, 0x7fffffff}, {0x3, 0x4, 0x2, 0x3}]}) 3m39.987465584s ago: executing program 0 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r10, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) 3m39.63178209s ago: executing program 2 (id=359): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x6, 0x80000000, 0x5, 0x6, 0xabc, 0x3ff, 0x2000003, 0x1, 0x3, 0x1, 0x1, 0x7ff, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x4007, 0x6, 0x4005, 0x800}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@remote}, {@multicast1}]}}) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x40800) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000001480)="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", 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) 3m39.500101667s ago: executing program 2 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x4, 0x1, 0x0, 0xf, 0xfffff, [{0x3, 0xe1, 0x1000e0}], "f188"}, @datasec={0x5, 0x0, 0x0, 0xf, 0x2, [], "5ede"}]}, {0x0, [0x2e, 0x2e, 0x61, 0x30, 0x61]}}, 0x0, 0x47, 0x0, 0x1, 0x100, 0x0, @void, @value}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}}, 0x4000) syz_80211_inject_frame(0x0, 0x0, 0x0) 3m39.448222608s ago: executing program 1 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4000814) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[], 0xdc}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3ba0fa8a2e7"}}, 0x2a) (async) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0xd9, [0x4, 0x3, 0x7, 0x734b, 0x9], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000040)=""/217}, &(0x7f00000001c0)=0x78) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000940)=0x1e, 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x148, 0x328, 0xffffffff, 0x0, 0x238, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000200), {[{{@ipv6={@mcast2, @remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0x7fffff80, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'syzkaller0\x00', {}, {}, 0x6, 0x6, 0x1, 0x18}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {"d655"}}, @common=@unspec=@mac={{0x30}, {@broadcast}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@remote, @ipv6=@private1, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@empty, @private2, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff, 0xff0000ff], 'macvtap0\x00', 'vlan0\x00', {}, {0xff}, 0xff, 0x9, 0x3, 0x3f}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @port=0x4e24, @gre_key=0x7fff}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xff], 'wlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x4, 0x7f, 0x4, 0x7}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv6=@loopback, @port=0x4e21, @port=0x4e20}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xd8d8c78eab33bfa8, 0xff, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x73, 0x2, 0x1, 0x58}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@broadcast, @icmp_id=0x67, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r7, &(0x7f00000005c0)="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", 0xaf6) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r8, 0xaf6, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB="8e535ed52a47bed54bbc3e"], 0x1c}, 0x1, 0x0, 0x0, 0x48890}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000090c0)={&(0x7f0000008f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x1, 0x3}]}]}}, 0x0, 0x36, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) (async) r10 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r10, 0x110, 0x3, 0x0, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 3m39.400007263s ago: executing program 3 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/28], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x19, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5a6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m38.967619032s ago: executing program 1 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa3abbbbbbbbbbbb08004700003800000000002f907864010101ac1414aa8606000000010000807899ffff007f0000017f00000100"/70], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000000000000000000000001400078008001240000000000500150002000000050200000005000400000000000900020073797a31000000000c000300686173683a697000"/88], 0x58}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b", 0xb}], 0x1) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) r7 = socket$inet(0xa, 0x801, 0x100) listen(r7, 0x81) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x5, 0x41, @loopback, @empty, 0x40, 0x7800, 0x91, 0x3}}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@getqdisc={0x44, 0x26, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1, 0xf}, {0x0, 0x2}, {0xd, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004800}, 0x20004050) 3m38.908684486s ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b0a}, [@IFLA_LINKINFO={0x14, 0x43, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="750a00000000000061119c0000000000180000000071000000000000000000009500000000000000192b08d56ed1011f53e5953fbf688cd7e8ac7a894797930451840c3393030fb5b73d6e11740b5b3e94e32ebad3ba5debd2481f671d7fe7eab8193e8ecba1b4ba37dfc5d11eed17ab69304e31dc7d2faab3bbe430b25650ee72e1a5a39d6dbb742b0e00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r7, &(0x7f00000002c0)="8ef82f", 0x3) socket(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x18, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @snprintf]}, &(0x7f00000001c0)='syzkaller\x00', 0x324af673, 0xab, &(0x7f0000000200)=""/171, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3d66, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11], &(0x7f0000000ac0)=[{0x0, 0x5, 0x0, 0x3}, {0x2, 0x1, 0xe, 0x8}], 0x10, 0x10001, @void, @value}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x20000000ec071, r4, 0x7b207000) 3m38.645005757s ago: executing program 0 (id=369): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f00000000c0)="4b3bb5f926f57195b91daef17a2baf5576c68f879b0f458066dea6408516a6d918bccc8edd932384e68e9cd6a918832b5b7cec89812f682bc6e695de6282e86fc12adaba4fd504fcf1d19c1e53b50a6c84c5b3bcab973bd1281577945f12a2a108bb5b33e3657846b95ab98fb4c4ada6aee6fc90e6f76b651f9dd0dd35a141c056cd130b57e20f7631d049ebcbee0a7193fab81ea207ff1b3b4b0588ff78c656c083f1f6d6e3f11ea02f8a") connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="10310100000000002c0012800e00010000001800028008001500b9c20a0004001200050016000100"/52], 0x4c}}, 0x20000) 3m38.363900271s ago: executing program 1 (id=371): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r3, 0xad00, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x4050) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x98, 0x48, 0x300, 0x70bd25, 0x3, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x9}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0xfffffffffffffe44, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 3m38.274185431s ago: executing program 2 (id=373): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x14, &(0x7f0000000100)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x6, 0x2, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x70, &(0x7f0000000200)=""/112, 0x41000, 0x4, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x3, 0x10}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0), &(0x7f00000004c0)=[{0x5, 0x1, 0xa, 0x6}, {0x1, 0x2, 0xa, 0x7}, {0x0, 0x4, 0x7, 0x4}, {0x0, 0x1, 0x2, 0x2}, {0x0, 0x3, 0xa, 0x6}, {0x4, 0x2, 0x3, 0x8}, {0x1, 0x5, 0x9, 0x6}], 0x10, 0x1, @void, @value}, 0x94) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9ce8, 0x0, 0x1, 0x3, '\x00', 0x0, r2, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xb, 0x1) 3m38.176057912s ago: executing program 0 (id=374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x12) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "899de4841185de6f281d2503a1cc72f6"}]}}}}}}}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x4c0, 0x210, 0x300, 0xffffffff, 0x210, 0x0, 0x3f0, 0x300, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@mcast1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, @port=0x4e23, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x66, 0x4, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0xffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4=@empty, @icmp_id=0x68, @gre_key}}}, {{@ipv6={@local, @private1, [0x0, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {0xff}, 0x2b}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@mcast2, @gre_key=0x3, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @local}}, 0xb, 0x7fff}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010027bd7000fbdbdfa500000000", @ANYRES32=r11, @ANYBLOB="104e0600016201004c001280110001006272696467655f736c617665000000003400058006000200010000000500190000000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) read(r9, &(0x7f0000000700)=""/161, 0xa1) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 3m38.058829561s ago: executing program 1 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2e}, 0x14}}, 0x0) 3m37.909641954s ago: executing program 1 (id=377): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0xa8, 0xfeffffff, 0x0, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @port=0x4e22, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @rand_addr=0x64010101, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x22f) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0xa8, 0xfeffffff, 0x0, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @port=0x4e22, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @rand_addr=0x64010101, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x22f) epoll_create(0x61a88e8c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000480)={&(0x7f0000000380)={0x18, 0x3e, 0x229, 0x0, 0x0, {0xa, 0x0, 0xa6}, [@typed={0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000480)={&(0x7f0000000380)={0x18, 0x3e, 0x229, 0x0, 0x0, {0xa, 0x0, 0xa6}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000280040072800c0009000600000000000000681304d24f6e68f0b2e6cc22b2032f17d456f03221cfa1d72ddda42ce2b31dd6ba115091"], 0x38}}, 0xc000) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) recvmmsg(r5, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x2060, 0x0) (async) recvmmsg(r5, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x2060, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, 0x20000, 0x2b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0xf}}, 0x2000c840) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m37.688577971s ago: executing program 3 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/28], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x19, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5a6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m37.19629869s ago: executing program 32 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/28], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x19, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5a6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m37.190527014s ago: executing program 0 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) unshare(0x20000400) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)='nr0\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) unshare(0x1c000100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106f00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 3m37.18940911s ago: executing program 1 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f0000000480)='syzkaller\x00', 0x69a9, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 3m36.902323545s ago: executing program 33 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f0000000480)='syzkaller\x00', 0x69a9, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 3m36.893254253s ago: executing program 2 (id=381): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x22020600) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r8], 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000000100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r11, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r11, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x258, 0xd0, 0xd0, 0x0, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf7}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) socket$inet_smc(0x2b, 0x1, 0x0) 3m36.422188531s ago: executing program 0 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000a14010025bd7000fedbdf2505000900"], 0x28}, 0x1, 0x0, 0x0, 0x4024}, 0x480c0) 3m36.371915729s ago: executing program 2 (id=383): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000003000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ed48db9a4baa315d1aa57e2bda44007e11ece378118c798879dc70", @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a65637457723a696e6574645f6368696c645f657865635f743a7330001400060076657468305f746f5f7465616d00000005000400ac1e00fe040005"], 0x64}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff51, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, &(0x7f0000000080)=0x10) 3m35.994927514s ago: executing program 34 (id=383): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000003000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ed48db9a4baa315d1aa57e2bda44007e11ece378118c798879dc70", @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a65637457723a696e6574645f6368696c645f657865635f743a7330001400060076657468305f746f5f7465616d00000005000400ac1e00fe040005"], 0x64}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff51, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, &(0x7f0000000080)=0x10) 3m35.989534912s ago: executing program 35 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000a14010025bd7000fedbdf2505000900"], 0x28}, 0x1, 0x0, 0x0, 0x4024}, 0x480c0) 7.650472752s ago: executing program 7 (id=2911): syz_emit_ethernet(0x92, &(0x7f0000000500)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0x5c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @dev={0xfe, 0x80, '\x00', 0x3e}, [{0x1f, 0x2, "a4953778b163ad5a5b226e82581e4978805b77c5"}, {0x19}, {0x18, 0x3, "9fcee8ca4e28e31bfaa73113e7069eabe09d76a3375ab77c164f"}]}}}}}}, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40019}, 0x44) unshare(0x20000400) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000060000000600000000000002010000100c0000000900001306000000070000000200000018fd000001000000070000007200000010000000060000000d0300000305000004000000ff7f00000100000040000000040000000600000004000000080000000400000040000000060000000c000000ff7f0000000000800b00000002000000cd0e00000b00000002000006040000000a000000788200000500000002000000002e00285f00"], &(0x7f0000000300)=""/265, 0xbe, 0x109, 0x0, 0x5, 0x10000, @value=r4}, 0x28) r5 = socket(0x22, 0x2, 0x2) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 7.475242541s ago: executing program 7 (id=2915): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0xc4, 0x2, 0x1, 0x600, 0x0, 0x0, {0x8, 0x0, 0x8}, [@CTA_SYNPROXY={0x1c}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x335}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast1}}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xd}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x9}}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0xde}}]}}, @CTA_STATUS_MASK={0xffffff93, 0x1a, 0x1, 0x0, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x2008c000) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000e00)='wlan0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xbd3, 0x90000000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a"], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) epoll_create1(0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @private0, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00'}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000440)=@id, &(0x7f0000000640)=0x10, 0x80800) bind$tipc(r7, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4, 0x3}}, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xa4, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="e3ffffff", @ANYRES16=r5, @ANYBLOB="000325bd7000fcdbdf257400000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000480)) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.668029783s ago: executing program 7 (id=2926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}}, 0x24}}, 0x0) 6.572801347s ago: executing program 7 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 5.997451967s ago: executing program 7 (id=2933): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000010000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff17000580ffffffff8000000000000100000000000000000200080008"], 0x80}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1, 0xff, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) 5.510143003s ago: executing program 7 (id=2939): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x17}}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113e00000400000000000000000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f0000001640)=""/113, 0x71}], 0x9}, 0x1f21) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f0000001640)=""/113, 0x71}], 0x9}, 0x1f21) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000280)=0x8, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x89fe, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r5, 0x89fe, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1806, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1806, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x20000400) (async) unshare(0x20000400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) close(0x3) (async) close(0x3) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 2.541893511s ago: executing program 6 (id=2981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x805, 0x0) unshare(0x20060400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000040)=0x9eb9, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2.409629928s ago: executing program 8 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2.409036565s ago: executing program 6 (id=2984): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local={0x3}, @random="b95c8ca3936a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @loopback, @rand_addr=0x64010100}, "0500000000000000"}}}}}, 0x0) 2.131947063s ago: executing program 6 (id=2986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="290a28bd700001000000140000000800", @ANYRES32], 0x24}}, 0x4009000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x28c}}, 0x4094) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 2.02483706s ago: executing program 8 (id=2987): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d080000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000080)="1a26a4f5c800f5365e3cd8417d031c072b213f9d483b173464f7cfbc649167b358971c1c1caef3c58bcc44a9077d9cb8084cbfd390b852db60c7afe75bca848acf8b948c95e9f162d7207c52ec422a5921cae487c41e1921de09e9634194a620a8d4c0aa3da0c43e307501b9b6dc0f1344670c97449731b6522fbf7c023b640fe26d0edf3d35d1b0fd6b5f2161a14f9361c4b8124d274f39ec9682bbf4ba5266ac55123b6e7941a0ebf8f21b7a8c01faf3e3e453fc9d1aba73d233cf78", &(0x7f0000000180)=""/120, &(0x7f0000000300)="8367fb274822e36318caba069a77024e34f6a3719477276a476ec741977e891b4d2165ef6c789d15ba90e5a1875c85d03b49fa935415691ec92477539fad257ed57bac1f4093ba50febb275d3b02b2ad3d425cff610abc626351a6ea1d75e417fc0980b1a569083ede256cc8de9cd65db45c5efd8402a6da99c05404", &(0x7f0000000000)="f6", 0x1ff, r0, 0x4}, 0x38) 1.538331708s ago: executing program 6 (id=2988): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) epoll_create(0x200008) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000a543e7938838d3d180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.495786054s ago: executing program 8 (id=2989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000440)=0x7, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r9, 0x8b1a, &(0x7f0000000040)) 1.263249614s ago: executing program 6 (id=2993): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000004000000040000001201000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000faff00"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfe00}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 1.206982081s ago: executing program 8 (id=2994): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x805, 0x0) unshare(0x20060400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000040)=0x9eb9, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.019316417s ago: executing program 5 (id=2998): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 903.382285ms ago: executing program 6 (id=3001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb5, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_extract_tcp_res(0x0, 0x7fff, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa86dd60f10200001c06fffc010000000000000000000000000001fe8000000400000000000000000000aa4e2000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6010000090780000000000002d675343"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x2070bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) unshare(0x42000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 885.253047ms ago: executing program 8 (id=3003): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000002240)=ANY=[], 0x6a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000002240)=ANY=[], 0x6a) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) (async) 807.839298ms ago: executing program 5 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000440)=0x7, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b1a, &(0x7f0000000040)) 653.00793ms ago: executing program 8 (id=3006): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffffff8c, 0x1ff, 0x5}, &(0x7f0000000040)=0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r2, &(0x7f0000000100)="fd8d7533d7ce658a64e8796070d1c562a924dccc6a3a9bc5cce3db1bb0fbd201f5aa494a1c", 0x25, 0x40081, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8, 0x5, 0x5}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0xc4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xec486aabfb0bef37}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x46}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000480)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp-reno\x00', 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @dev}, &(0x7f0000000580)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={&(0x7f0000000500), 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=@delchain={0x1f4, 0x65, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x7, 0xa}, {0xa, 0x7}, {0x3, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x98, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xb}}, @TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd3e, 0x0, 0x9, 0x2, 0x3, {0x1, 0x0, 0x401, 0x2, 0x2, 0x6}, {0x2, 0x0, 0x4, 0x3, 0xe, 0x3ff}, 0x7, 0x1, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x101}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_FW_MASK={0x8, 0x5, 0x80000000}, @TCA_FW_MASK={0x8, 0x5, 0x7fffffff}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x110, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0xf4, 0x2, [@m_vlan={0xf0, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x31d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffbff, 0x5, 0x1, 0xb, 0xf}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x75, 0x6, "bcc6c749805c1a9903e251060df64c9c660694f43cd42f988305242b1ea95f6bd8658e6e2c824f5799dfbef67c343e976d7de5eb2c81c9b24853526e4e3e917a99c0e2c4b7af0036d58d59178f511ef26edcbaad6e25e5bc781de351c76a5c61d16352585ce5f13aea86e631beb0709359"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x4}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x10000800}, 0x8804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5000}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x9000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'nicvf0\x00'}) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000a00)={r1, 0x1}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000a80)={r10, @in6={{0xa, 0x4e20, 0x401, @mcast2}}}, &(0x7f0000000b40)=0x84) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000c00)={&(0x7f0000000b80)=""/97, 0x61, 0x10001}) sendto$inet(r2, &(0x7f0000000c40)="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", 0x1000, 0x2004c0c4, &(0x7f0000001c40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000001c80)=0x1, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r5, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r11, 0x80049367, &(0x7f0000001d40)=0xf) recvmsg(r3, &(0x7f0000003000)={&(0x7f0000001d80)=@ethernet, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001e00)=""/13, 0xd}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/32, 0x20}, {&(0x7f0000002e80)=""/74, 0x4a}], 0x4, &(0x7f0000002f40)=""/167, 0xa7}, 0x100) 612.719965ms ago: executing program 4 (id=3007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000005009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 499.752171ms ago: executing program 4 (id=3008): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x75}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076864266ed78cb89e14f0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x5, 0x20000000, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xfffffffffffffd52, 0x0, @wg=@data={0x4, 0xfffffffe, 0xffffdd86}}}}}}}, 0x3e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff00000600000000080001"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d7fb1a33b7f392e65c0ff358dc4f", 0x0, 0x3, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000380)="a4", 0x4}, 0x50) close(r3) r10 = socket(0x1d, 0x3, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000004240), &(0x7f00000057c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) 460.219404ms ago: executing program 5 (id=3009): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local={0x3}, @random="b95c8ca3936a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @loopback, @rand_addr=0x64010100}, "0500000000000000"}}}}}, 0x0) 355.849978ms ago: executing program 5 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0, 0x80010000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 219.927236ms ago: executing program 4 (id=3011): unshare(0x22020600) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = socket$inet(0x2, 0x6, 0x80008) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) unshare(0x22020600) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) socket$inet(0x2, 0x6, 0x80008) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (async) 219.54115ms ago: executing program 5 (id=3012): bpf$MAP_CREATE(0x80010000, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff37"], 0x48) 170.595344ms ago: executing program 4 (id=3013): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x805, 0x0) unshare(0x20060400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000040)=0x9eb9, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 121.872265ms ago: executing program 5 (id=3014): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff374b0000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) 106.346447ms ago: executing program 4 (id=3015): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x4000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000000c0)={@rand_addr, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x902767828e0d7120, {{0x41, 0x4}, 0x3}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x48) 0s ago: executing program 4 (id=3016): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x2}, &(0x7f0000000040)=0x8) bind$bt_hci(r4, &(0x7f0000000040), 0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7, 0xac93}, 0x8) ioctl$sock_bt_hci(r4, 0x400448dc, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xcc, &(0x7f0000000340)=""/204, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): etlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.020667][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.096855][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.100941][T13464] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.115275][T13464] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.124683][T13464] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.134091][T13464] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.156330][T13464] vxlan0: entered promiscuous mode [ 290.161495][T13464] vxlan0: entered allmulticast mode [ 290.170250][T13464] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.179750][T13464] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.189656][T13464] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.199666][T13464] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.316768][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.323232][T13469] netlink: 'syz.5.2277': attribute type 10 has an invalid length. [ 290.432934][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.499435][T13471] bridge12: entered allmulticast mode [ 290.544364][T13474] bridge13: entered allmulticast mode [ 290.552393][T13472] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 290.553377][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.622546][T13477] IPVS: Scheduler module ip_vs_sip not found [ 290.638284][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 290.969886][T13492] netlink: 'syz.6.2286': attribute type 39 has an invalid length. [ 291.055638][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.510176][T13514] bridge14: entered allmulticast mode [ 291.555438][T13513] IPVS: Scheduler module ip_vs_sip not found [ 291.713676][T13524] bridge17: entered allmulticast mode [ 291.753670][T13527] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.763184][T13527] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.772579][T13527] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.781672][T13527] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.791006][T13527] vxlan0: entered promiscuous mode [ 291.797855][T13527] vxlan0: entered allmulticast mode [ 291.808500][T13527] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.818604][T13527] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.828673][T13527] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.838525][T13527] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.095646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.196269][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2305'. [ 292.240738][T13554] IPVS: Scheduler module ip_vs_sip not found [ 292.579378][T13569] bridge13: entered allmulticast mode [ 293.005125][T13591] pimreg: entered allmulticast mode [ 293.012128][T13591] pimreg: left allmulticast mode [ 293.071896][T13595] FAULT_INJECTION: forcing a failure. [ 293.071896][T13595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.085181][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.6.2320 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 293.085207][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.085224][T13595] Call Trace: [ 293.085232][T13595] [ 293.085241][T13595] dump_stack_lvl+0x189/0x250 [ 293.085277][T13595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.085314][T13595] ? __pfx__printk+0x10/0x10 [ 293.085335][T13595] ? exc_page_fault+0x91/0x110 [ 293.085373][T13595] should_fail_ex+0x414/0x560 [ 293.085417][T13595] strncpy_from_user+0x36/0x290 [ 293.085454][T13595] strncpy_from_user_nofault+0x72/0x140 [ 293.085493][T13595] bpf_probe_read_user_str+0x2a/0x70 [ 293.085539][T13595] bpf_prog_a91b00db09d76834+0x46/0x48 [ 293.085576][T13595] bpf_test_run+0x38b/0x830 [ 293.085611][T13595] ? bpf_test_run+0x205/0x830 [ 293.085641][T13595] ? __pfx_bpf_test_run+0x10/0x10 [ 293.085681][T13595] ? __skb_checksum+0x8d9/0x9f0 [ 293.085717][T13595] ? slab_build_skb+0x273/0x3e0 [ 293.085744][T13595] bpf_prog_test_run_skb+0xb30/0x1560 [ 293.085782][T13595] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 293.085804][T13595] bpf_prog_test_run+0x2a9/0x340 [ 293.085834][T13595] __sys_bpf+0x4a4/0x860 [ 293.085868][T13595] ? __pfx___sys_bpf+0x10/0x10 [ 293.085908][T13595] ? ksys_write+0x1f0/0x250 [ 293.085955][T13595] __x64_sys_bpf+0x7c/0x90 [ 293.085993][T13595] do_syscall_64+0xf6/0x210 [ 293.086027][T13595] ? clear_bhb_loop+0x45/0xa0 [ 293.086059][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.086078][T13595] RIP: 0033:0x7f699ab8e969 [ 293.086103][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.086120][T13595] RSP: 002b:00007f699ba76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.086145][T13595] RAX: ffffffffffffffda RBX: 00007f699adb5fa0 RCX: 00007f699ab8e969 [ 293.086160][T13595] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 293.086172][T13595] RBP: 00007f699ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 293.086184][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.086195][T13595] R13: 0000000000000000 R14: 00007f699adb5fa0 R15: 00007ffe973cbe48 [ 293.086227][T13595] [ 293.245726][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 293.258128][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.638712][T13608] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.695128][T13608] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2323'. [ 293.832974][T13617] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.841823][T13617] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.851208][T13617] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.862567][T13617] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.873987][T13617] vxlan0: entered promiscuous mode [ 293.879244][T13617] vxlan0: entered allmulticast mode [ 293.899757][T13617] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.908781][T13617] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.917860][T13617] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.927017][T13617] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.058864][T13625] bridge14: entered allmulticast mode [ 294.335639][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.600890][T13643] FAULT_INJECTION: forcing a failure. [ 294.600890][T13643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.614097][T13643] CPU: 0 UID: 0 PID: 13643 Comm: syz.7.2332 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 294.614123][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.614134][T13643] Call Trace: [ 294.614141][T13643] [ 294.614150][T13643] dump_stack_lvl+0x189/0x250 [ 294.614183][T13643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.614210][T13643] ? __pfx__printk+0x10/0x10 [ 294.614228][T13643] ? exc_page_fault+0x91/0x110 [ 294.614265][T13643] should_fail_ex+0x414/0x560 [ 294.614299][T13643] strncpy_from_user+0x36/0x290 [ 294.614331][T13643] strncpy_from_user_nofault+0x72/0x140 [ 294.614357][T13643] bpf_probe_read_user_str+0x2a/0x70 [ 294.614385][T13643] bpf_prog_a91b00db09d76834+0x46/0x48 [ 294.614403][T13643] bpf_test_run+0x38b/0x830 [ 294.614434][T13643] ? bpf_test_run+0x205/0x830 [ 294.614461][T13643] ? __pfx_bpf_test_run+0x10/0x10 [ 294.614497][T13643] ? __skb_checksum+0x8d9/0x9f0 [ 294.614530][T13643] ? slab_build_skb+0x273/0x3e0 [ 294.614556][T13643] bpf_prog_test_run_skb+0xb30/0x1560 [ 294.614592][T13643] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 294.614613][T13643] bpf_prog_test_run+0x2a9/0x340 [ 294.614640][T13643] __sys_bpf+0x4a4/0x860 [ 294.614664][T13643] ? __pfx___sys_bpf+0x10/0x10 [ 294.614700][T13643] ? ksys_write+0x1f0/0x250 [ 294.614719][T13643] ? rcu_is_watching+0x15/0xb0 [ 294.614757][T13643] __x64_sys_bpf+0x7c/0x90 [ 294.614784][T13643] do_syscall_64+0xf6/0x210 [ 294.614812][T13643] ? clear_bhb_loop+0x45/0xa0 [ 294.614834][T13643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.614851][T13643] RIP: 0033:0x7f7c6a18e969 [ 294.614867][T13643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.614882][T13643] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.614901][T13643] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 294.614914][T13643] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 294.614926][T13643] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 294.614936][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.614947][T13643] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 294.614976][T13643] [ 295.302626][T13670] bridge15: entered allmulticast mode [ 295.375628][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.394813][T13679] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.404478][T13679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.413810][T13679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.423075][T13679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.436420][T13679] vxlan0: entered promiscuous mode [ 295.441591][T13679] vxlan0: entered allmulticast mode [ 295.457799][T13679] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.466825][T13679] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.476699][T13679] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.486279][T13679] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.651707][T13690] __nla_validate_parse: 1 callbacks suppressed [ 295.651726][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 296.192545][T13697] pim6reg1: entered promiscuous mode [ 296.199314][T13697] pim6reg1: entered allmulticast mode [ 296.415716][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.454954][T13708] tipc: Enabling of bearer rejected, already enabled [ 296.909066][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2357'. [ 296.924326][T13734] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 297.202241][T13750] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.211125][T13750] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.220143][T13750] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.229044][T13750] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.250211][T13750] vxlan2: entered promiscuous mode [ 297.257989][T13750] vxlan2: entered allmulticast mode [ 297.288664][T13750] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.300761][T13750] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.310388][T13750] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.319975][T13750] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.455638][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.495878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.551085][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2372'. [ 298.583978][T13797] tipc: Can't bind to reserved service type 0 [ 298.733163][T13801] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2378'. [ 298.749997][T13803] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2378'. [ 298.760223][T13801] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2378'. [ 299.030528][T13814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.039931][T13814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.049215][T13814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.058970][T13814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.069765][T13814] vxlan0: entered promiscuous mode [ 299.074942][T13814] vxlan0: entered allmulticast mode [ 299.087171][T13814] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.096770][T13814] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.106392][T13814] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.115297][T13814] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.313820][T13820] xt_l2tp: invalid flags combination: 4 [ 299.414121][T13828] bridge16: entered allmulticast mode [ 299.504445][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2389'. [ 299.535603][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.701505][T13843] netlink: 'syz.5.2391': attribute type 8 has an invalid length. [ 299.915170][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2395'. [ 299.950737][T13855] netlink: 'syz.6.2392': attribute type 1 has an invalid length. [ 299.979420][T13854] wg2: entered promiscuous mode [ 299.985151][T13854] wg2: entered allmulticast mode [ 300.143998][T13859] netlink: 'syz.5.2396': attribute type 10 has an invalid length. [ 300.360130][T13874] FAULT_INJECTION: forcing a failure. [ 300.360130][T13874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.373318][T13874] CPU: 0 UID: 0 PID: 13874 Comm: syz.7.2401 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 300.373345][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 300.373357][T13874] Call Trace: [ 300.373365][T13874] [ 300.373374][T13874] dump_stack_lvl+0x189/0x250 [ 300.373410][T13874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.373438][T13874] ? __pfx__printk+0x10/0x10 [ 300.373458][T13874] ? exc_page_fault+0x91/0x110 [ 300.373497][T13874] should_fail_ex+0x414/0x560 [ 300.373532][T13874] strncpy_from_user+0x36/0x290 [ 300.373567][T13874] strncpy_from_user_nofault+0x72/0x140 [ 300.373593][T13874] bpf_probe_read_user_str+0x2a/0x70 [ 300.373624][T13874] bpf_prog_a91b00db09d76834+0x46/0x48 [ 300.373643][T13874] bpf_test_run+0x38b/0x830 [ 300.373675][T13874] ? bpf_test_run+0x205/0x830 [ 300.373703][T13874] ? __pfx_bpf_test_run+0x10/0x10 [ 300.373741][T13874] ? __skb_checksum+0x8d9/0x9f0 [ 300.373777][T13874] ? slab_build_skb+0x273/0x3e0 [ 300.373803][T13874] bpf_prog_test_run_skb+0xb30/0x1560 [ 300.373841][T13874] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 300.373863][T13874] bpf_prog_test_run+0x2a9/0x340 [ 300.373893][T13874] __sys_bpf+0x4a4/0x860 [ 300.373919][T13874] ? __pfx___sys_bpf+0x10/0x10 [ 300.373957][T13874] ? ksys_write+0x1f0/0x250 [ 300.373984][T13874] ? rcu_is_watching+0x15/0xb0 [ 300.374025][T13874] __x64_sys_bpf+0x7c/0x90 [ 300.374047][T13874] do_syscall_64+0xf6/0x210 [ 300.374077][T13874] ? clear_bhb_loop+0x45/0xa0 [ 300.374101][T13874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.374119][T13874] RIP: 0033:0x7f7c6a18e969 [ 300.374136][T13874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.374152][T13874] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.374173][T13874] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 300.374187][T13874] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 300.374210][T13874] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 300.374222][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.374232][T13874] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 300.374263][T13874] [ 300.602684][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.643360][T13876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2399'. [ 300.716850][T13881] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2402'. [ 300.884015][T13892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2408'. [ 300.901607][T13892] openvswitch: netlink: Message has 12 unknown bytes. [ 300.909367][T13892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.989572][T13899] batadv_slave_1: entered promiscuous mode [ 300.999155][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 301.084862][T13907] netlink: 'syz.8.2409': attribute type 10 has an invalid length. [ 301.086766][T13898] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.101180][T13898] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.109410][T13898] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.117777][T13898] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.126975][T13898] vxlan2: entered promiscuous mode [ 301.149657][T13898] vxlan2: entered allmulticast mode [ 301.184792][T13898] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.194386][T13898] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.203277][T13898] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.212872][T13898] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.439632][T13923] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2414'. [ 301.615608][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.655823][T13933] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2418'. [ 301.685492][T13938] ipip1: entered promiscuous mode [ 301.691586][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2418'. [ 302.001246][T13955] netlink: 160868 bytes leftover after parsing attributes in process `syz.4.2425'. [ 302.011396][T13955] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 302.020623][T13955] openvswitch: netlink: Message has 8454 unknown bytes. [ 302.215493][T13960] netlink: 'syz.7.2426': attribute type 10 has an invalid length. [ 302.249755][T13962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2428'. [ 302.386515][T13966] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 302.556674][T13979] bridge14: entered allmulticast mode [ 302.655720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.869132][T14003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2442'. [ 302.911803][T14006] xfrm2: entered allmulticast mode [ 302.984182][T14003] vlan2: entered promiscuous mode [ 303.013060][T14003] gretap0: entered promiscuous mode [ 303.081676][T14013] team0: Device gtp0 is of different type [ 303.288341][T14034] hsr0: entered promiscuous mode [ 303.293436][T14034] hsr0: entered allmulticast mode [ 303.299008][T14034] hsr_slave_0: entered allmulticast mode [ 303.305477][T14034] hsr_slave_1: entered allmulticast mode [ 303.495501][T14042] wlan1: mtu greater than device maximum [ 303.592510][T14048] ipvlan0: entered promiscuous mode [ 303.599250][T14048] bridge0: port 1(ipvlan0) entered blocking state [ 303.606868][T14048] bridge0: port 1(ipvlan0) entered disabled state [ 303.613507][T14048] ipvlan0: entered allmulticast mode [ 303.626266][T14048] bridge0: entered allmulticast mode [ 303.634450][T14048] ipvlan0: left allmulticast mode [ 303.640536][T14048] bridge0: left allmulticast mode [ 303.696027][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.721157][T14051] bridge18: entered allmulticast mode [ 304.319659][T14075] : entered promiscuous mode [ 304.735887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.827933][T14083] IPVS: Scheduler module ip_vs_sip not found [ 305.144976][T14105] bridge15: entered allmulticast mode [ 305.307877][T14118] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 305.569896][T14123] FAULT_INJECTION: forcing a failure. [ 305.569896][T14123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.583035][T14123] CPU: 1 UID: 0 PID: 14123 Comm: syz.7.2476 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 305.583059][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 305.583073][T14123] Call Trace: [ 305.583100][T14123] [ 305.583107][T14123] dump_stack_lvl+0x189/0x250 [ 305.583142][T14123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.583168][T14123] ? __pfx__printk+0x10/0x10 [ 305.583186][T14123] ? exc_page_fault+0x91/0x110 [ 305.583222][T14123] should_fail_ex+0x414/0x560 [ 305.583256][T14123] strncpy_from_user+0x36/0x290 [ 305.583288][T14123] strncpy_from_user_nofault+0x72/0x140 [ 305.583313][T14123] bpf_probe_read_user_str+0x2a/0x70 [ 305.583342][T14123] bpf_prog_a91b00db09d76834+0x46/0x48 [ 305.583359][T14123] bpf_test_run+0x38b/0x830 [ 305.583390][T14123] ? bpf_test_run+0x205/0x830 [ 305.583416][T14123] ? __pfx_bpf_test_run+0x10/0x10 [ 305.583466][T14123] ? __skb_checksum+0x8d9/0x9f0 [ 305.583517][T14123] ? slab_build_skb+0x273/0x3e0 [ 305.583544][T14123] bpf_prog_test_run_skb+0xb30/0x1560 [ 305.583583][T14123] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 305.583604][T14123] bpf_prog_test_run+0x2a9/0x340 [ 305.583653][T14123] __sys_bpf+0x4a4/0x860 [ 305.583679][T14123] ? __pfx___sys_bpf+0x10/0x10 [ 305.583724][T14123] ? ksys_write+0x1f0/0x250 [ 305.583745][T14123] ? rcu_is_watching+0x15/0xb0 [ 305.583787][T14123] __x64_sys_bpf+0x7c/0x90 [ 305.583809][T14123] do_syscall_64+0xf6/0x210 [ 305.583840][T14123] ? clear_bhb_loop+0x45/0xa0 [ 305.583865][T14123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.583884][T14123] RIP: 0033:0x7f7c6a18e969 [ 305.583902][T14123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.583919][T14123] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.583941][T14123] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 305.583956][T14123] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 305.583970][T14123] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 305.583982][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.583994][T14123] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 305.584026][T14123] [ 305.775620][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.220255][T14141] __nla_validate_parse: 3 callbacks suppressed [ 306.220275][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2483'. [ 306.236647][T14137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.312800][T14137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.339749][T14144] FAULT_INJECTION: forcing a failure. [ 306.339749][T14144] name failslab, interval 1, probability 0, space 0, times 0 [ 306.368772][T14144] CPU: 0 UID: 0 PID: 14144 Comm: syz.7.2485 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 306.368815][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.368827][T14144] Call Trace: [ 306.368835][T14144] [ 306.368843][T14144] dump_stack_lvl+0x189/0x250 [ 306.368880][T14144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.368908][T14144] ? __pfx__printk+0x10/0x10 [ 306.368933][T14144] ? __pfx___might_resched+0x10/0x10 [ 306.368955][T14144] should_fail_ex+0x414/0x560 [ 306.368992][T14144] should_failslab+0xa8/0x100 [ 306.369019][T14144] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 306.369044][T14144] ? __alloc_skb+0x112/0x2d0 [ 306.369072][T14144] __alloc_skb+0x112/0x2d0 [ 306.369096][T14144] netlink_sendmsg+0x5c6/0xb30 [ 306.369128][T14144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.369153][T14144] ? aa_sock_msg_perm+0x94/0x160 [ 306.369175][T14144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.369197][T14144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.369219][T14144] __sock_sendmsg+0x219/0x270 [ 306.369252][T14144] ____sys_sendmsg+0x505/0x830 [ 306.369282][T14144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.369316][T14144] ? import_iovec+0x74/0xa0 [ 306.369345][T14144] ___sys_sendmsg+0x21f/0x2a0 [ 306.369372][T14144] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.369434][T14144] ? __fget_files+0x2a/0x420 [ 306.369458][T14144] ? __fget_files+0x3a0/0x420 [ 306.369492][T14144] __x64_sys_sendmsg+0x19b/0x260 [ 306.369520][T14144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.369564][T14144] ? do_syscall_64+0xba/0x210 [ 306.369597][T14144] do_syscall_64+0xf6/0x210 [ 306.369662][T14144] ? clear_bhb_loop+0x45/0xa0 [ 306.369687][T14144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.369706][T14144] RIP: 0033:0x7f7c6a18e969 [ 306.369725][T14144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.369741][T14144] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.369762][T14144] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 306.369777][T14144] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 306.369790][T14144] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 306.369801][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.369812][T14144] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 306.369844][T14144] [ 306.642543][T14146] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2487'. [ 306.678032][T14148] netlink: 'syz.5.2486': attribute type 10 has an invalid length. [ 306.815592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.156175][T14178] bridge18: entered allmulticast mode [ 307.257537][T14180] xt_bpf: check failed: parse error [ 307.444461][T14186] FAULT_INJECTION: forcing a failure. [ 307.444461][T14186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.457616][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.8.2500 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 307.457642][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 307.457654][T14186] Call Trace: [ 307.457662][T14186] [ 307.457670][T14186] dump_stack_lvl+0x189/0x250 [ 307.457707][T14186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.457737][T14186] ? __pfx__printk+0x10/0x10 [ 307.457757][T14186] ? exc_page_fault+0x91/0x110 [ 307.457797][T14186] should_fail_ex+0x414/0x560 [ 307.457835][T14186] strncpy_from_user+0x36/0x290 [ 307.457871][T14186] strncpy_from_user_nofault+0x72/0x140 [ 307.457898][T14186] bpf_probe_read_user_str+0x2a/0x70 [ 307.457930][T14186] bpf_prog_a91b00db09d76834+0x46/0x48 [ 307.457950][T14186] bpf_test_run+0x38b/0x830 [ 307.457977][T14186] ? trace_irq_disable+0x37/0x110 [ 307.458004][T14186] ? bpf_test_run+0x205/0x830 [ 307.458033][T14186] ? __pfx_bpf_test_run+0x10/0x10 [ 307.458072][T14186] ? __skb_checksum+0x8d9/0x9f0 [ 307.458110][T14186] ? slab_build_skb+0x273/0x3e0 [ 307.458138][T14186] bpf_prog_test_run_skb+0xb30/0x1560 [ 307.458178][T14186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 307.458201][T14186] bpf_prog_test_run+0x2a9/0x340 [ 307.458232][T14186] __sys_bpf+0x4a4/0x860 [ 307.458259][T14186] ? __pfx___sys_bpf+0x10/0x10 [ 307.458306][T14186] ? ksys_write+0x1f0/0x250 [ 307.458327][T14186] ? rcu_is_watching+0x15/0xb0 [ 307.458369][T14186] __x64_sys_bpf+0x7c/0x90 [ 307.458392][T14186] do_syscall_64+0xf6/0x210 [ 307.458422][T14186] ? clear_bhb_loop+0x45/0xa0 [ 307.458447][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.458467][T14186] RIP: 0033:0x7f1e2a38e969 [ 307.458484][T14186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.458500][T14186] RSP: 002b:00007f1e2b2cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.458521][T14186] RAX: ffffffffffffffda RBX: 00007f1e2a5b5fa0 RCX: 00007f1e2a38e969 [ 307.458537][T14186] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 307.458549][T14186] RBP: 00007f1e2b2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 307.458561][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.458572][T14186] R13: 0000000000000000 R14: 00007f1e2a5b5fa0 R15: 00007ffe789c2538 [ 307.458605][T14186] [ 307.855612][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.881645][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2501'. [ 308.059824][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2505'. [ 308.072816][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 308.082561][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2505'. [ 308.092303][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2505'. [ 308.331191][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2506'. [ 308.427344][T14212] netlink: 'syz.6.2506': attribute type 19 has an invalid length. [ 308.661936][T14225] FAULT_INJECTION: forcing a failure. [ 308.661936][T14225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.711409][T14225] CPU: 1 UID: 0 PID: 14225 Comm: syz.6.2512 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 308.711456][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.711475][T14225] Call Trace: [ 308.711482][T14225] [ 308.711491][T14225] dump_stack_lvl+0x189/0x250 [ 308.711523][T14225] ? __lock_acquire+0xaac/0xd20 [ 308.711554][T14225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.711582][T14225] ? __pfx__printk+0x10/0x10 [ 308.711602][T14225] ? __might_fault+0xb0/0x130 [ 308.711638][T14225] should_fail_ex+0x414/0x560 [ 308.711675][T14225] _copy_from_iter+0x1db/0x15a0 [ 308.711719][T14225] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 308.711738][T14225] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 308.711760][T14225] ? __pfx__copy_from_iter+0x10/0x10 [ 308.711779][T14225] ? __build_skb_around+0x257/0x3e0 [ 308.711800][T14225] ? netlink_sendmsg+0x642/0xb30 [ 308.711815][T14225] ? skb_put+0x11b/0x210 [ 308.711835][T14225] netlink_sendmsg+0x6b2/0xb30 [ 308.711858][T14225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.711877][T14225] ? aa_sock_msg_perm+0x94/0x160 [ 308.711894][T14225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.711910][T14225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.711927][T14225] __sock_sendmsg+0x219/0x270 [ 308.711953][T14225] ____sys_sendmsg+0x505/0x830 [ 308.711976][T14225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.712001][T14225] ? import_iovec+0x74/0xa0 [ 308.712024][T14225] ___sys_sendmsg+0x21f/0x2a0 [ 308.712063][T14225] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.712117][T14225] ? __fget_files+0x2a/0x420 [ 308.712137][T14225] ? __fget_files+0x3a0/0x420 [ 308.712165][T14225] __x64_sys_sendmsg+0x19b/0x260 [ 308.712187][T14225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.712222][T14225] ? do_syscall_64+0xba/0x210 [ 308.712249][T14225] do_syscall_64+0xf6/0x210 [ 308.712273][T14225] ? clear_bhb_loop+0x45/0xa0 [ 308.712291][T14225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.712306][T14225] RIP: 0033:0x7f699ab8e969 [ 308.712321][T14225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.712334][T14225] RSP: 002b:00007f699ba76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.712350][T14225] RAX: ffffffffffffffda RBX: 00007f699adb5fa0 RCX: 00007f699ab8e969 [ 308.712362][T14225] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 308.712371][T14225] RBP: 00007f699ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 308.712381][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.712390][T14225] R13: 0000000000000000 R14: 00007f699adb5fa0 R15: 00007ffe973cbe48 [ 308.712414][T14225] [ 308.895614][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.264213][T14244] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2518'. [ 309.268300][T14238] bridge0: port 3(ipvlan2) entered blocking state [ 309.285382][T14238] bridge0: port 3(ipvlan2) entered disabled state [ 309.333475][T14238] ipvlan2: entered allmulticast mode [ 309.339851][T14238] bridge0: entered allmulticast mode [ 309.363034][T14238] ipvlan2: left allmulticast mode [ 309.371881][T14238] bridge0: left allmulticast mode [ 309.494482][T14246] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 309.513512][T14246] bridge16: entered allmulticast mode [ 309.643962][T14258] bridge15: entered allmulticast mode [ 309.672392][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2524'. [ 309.874057][T14269] netlink: 'syz.4.2529': attribute type 10 has an invalid length. [ 309.912135][T14275] FAULT_INJECTION: forcing a failure. [ 309.912135][T14275] name failslab, interval 1, probability 0, space 0, times 0 [ 309.935608][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.977364][T14275] CPU: 0 UID: 0 PID: 14275 Comm: syz.6.2527 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 309.977397][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.977410][T14275] Call Trace: [ 309.977418][T14275] [ 309.977428][T14275] dump_stack_lvl+0x189/0x250 [ 309.977465][T14275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.977500][T14275] ? __pfx__printk+0x10/0x10 [ 309.977527][T14275] ? __pfx___might_resched+0x10/0x10 [ 309.977549][T14275] ? fs_reclaim_acquire+0x7d/0x100 [ 309.977583][T14275] should_fail_ex+0x414/0x560 [ 309.977621][T14275] should_failslab+0xa8/0x100 [ 309.977649][T14275] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 309.977675][T14275] ? __alloc_skb+0x112/0x2d0 [ 309.977703][T14275] __alloc_skb+0x112/0x2d0 [ 309.977730][T14275] netlink_ack+0x146/0xa50 [ 309.977749][T14275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.977771][T14275] ? __lock_acquire+0xaac/0xd20 [ 309.977813][T14275] netlink_rcv_skb+0x2a0/0x490 [ 309.977836][T14275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.977859][T14275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.977902][T14275] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.977923][T14275] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.977951][T14275] netlink_unicast+0x758/0x8d0 [ 309.977982][T14275] netlink_sendmsg+0x805/0xb30 [ 309.978026][T14275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.978052][T14275] ? aa_sock_msg_perm+0x94/0x160 [ 309.978075][T14275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.978097][T14275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.978120][T14275] __sock_sendmsg+0x219/0x270 [ 309.978154][T14275] ____sys_sendmsg+0x505/0x830 [ 309.978186][T14275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.978222][T14275] ? import_iovec+0x74/0xa0 [ 309.978259][T14275] ___sys_sendmsg+0x21f/0x2a0 [ 309.978287][T14275] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.978352][T14275] ? __fget_files+0x2a/0x420 [ 309.978377][T14275] ? __fget_files+0x3a0/0x420 [ 309.978414][T14275] __x64_sys_sendmsg+0x19b/0x260 [ 309.978442][T14275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.978486][T14275] ? do_syscall_64+0xba/0x210 [ 309.978520][T14275] do_syscall_64+0xf6/0x210 [ 309.978551][T14275] ? clear_bhb_loop+0x45/0xa0 [ 309.978575][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.978594][T14275] RIP: 0033:0x7f699ab8e969 [ 309.978612][T14275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.978630][T14275] RSP: 002b:00007f699ba76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.978651][T14275] RAX: ffffffffffffffda RBX: 00007f699adb5fa0 RCX: 00007f699ab8e969 [ 309.978666][T14275] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 309.978678][T14275] RBP: 00007f699ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 309.978690][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.978702][T14275] R13: 0000000000000000 R14: 00007f699adb5fa0 R15: 00007ffe973cbe48 [ 309.978734][T14275] [ 310.308823][T14284] openvswitch: netlink: Actions may not be safe on all matching packets [ 310.404816][T14286] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 310.420929][T14292] netlink: 'syz.6.2534': attribute type 10 has an invalid length. [ 310.431286][T14292] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.441025][T14292] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.682145][T14306] xt_nfacct: accounting object `syz1' does not exists [ 310.718103][T14300] bridge12: entered allmulticast mode [ 310.787951][T14311] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.796613][T14311] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.804832][T14311] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.813152][T14311] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.829157][T14314] FAULT_INJECTION: forcing a failure. [ 310.829157][T14314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.842313][T14314] CPU: 1 UID: 0 PID: 14314 Comm: syz.4.2544 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 310.842338][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 310.842350][T14314] Call Trace: [ 310.842357][T14314] [ 310.842365][T14314] dump_stack_lvl+0x189/0x250 [ 310.842400][T14314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.842428][T14314] ? __pfx__printk+0x10/0x10 [ 310.842448][T14314] ? exc_page_fault+0x91/0x110 [ 310.842487][T14314] should_fail_ex+0x414/0x560 [ 310.842523][T14314] strncpy_from_user+0x36/0x290 [ 310.842556][T14314] strncpy_from_user_nofault+0x72/0x140 [ 310.842582][T14314] bpf_probe_read_user_str+0x2a/0x70 [ 310.842612][T14314] bpf_prog_a91b00db09d76834+0x46/0x48 [ 310.842630][T14314] bpf_test_run+0x38b/0x830 [ 310.842661][T14314] ? bpf_test_run+0x205/0x830 [ 310.842689][T14314] ? __pfx_bpf_test_run+0x10/0x10 [ 310.842727][T14314] ? __skb_checksum+0x8d9/0x9f0 [ 310.842762][T14314] ? slab_build_skb+0x273/0x3e0 [ 310.842789][T14314] bpf_prog_test_run_skb+0xb30/0x1560 [ 310.842827][T14314] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 310.842849][T14314] bpf_prog_test_run+0x2a9/0x340 [ 310.842878][T14314] __sys_bpf+0x4a4/0x860 [ 310.842904][T14314] ? __pfx___sys_bpf+0x10/0x10 [ 310.842942][T14314] ? ksys_write+0x1f0/0x250 [ 310.842970][T14314] ? rcu_is_watching+0x15/0xb0 [ 310.843011][T14314] __x64_sys_bpf+0x7c/0x90 [ 310.843033][T14314] do_syscall_64+0xf6/0x210 [ 310.843062][T14314] ? clear_bhb_loop+0x45/0xa0 [ 310.843086][T14314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.843104][T14314] RIP: 0033:0x7ff89498e969 [ 310.843121][T14314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.843137][T14314] RSP: 002b:00007ff895894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.843158][T14314] RAX: ffffffffffffffda RBX: 00007ff894bb5fa0 RCX: 00007ff89498e969 [ 310.843172][T14314] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 310.843184][T14314] RBP: 00007ff895894090 R08: 0000000000000000 R09: 0000000000000000 [ 310.843196][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.843207][T14314] R13: 0000000000000000 R14: 00007ff894bb5fa0 R15: 00007ffe58d92988 [ 310.843238][T14314] [ 310.975655][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.039133][T14311] vxlan1: entered promiscuous mode [ 311.122580][T14319] FAULT_INJECTION: forcing a failure. [ 311.122580][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 311.135978][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.4.2545 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 311.136004][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.136016][T14319] Call Trace: [ 311.136024][T14319] [ 311.136032][T14319] dump_stack_lvl+0x189/0x250 [ 311.136068][T14319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.136096][T14319] ? __pfx__printk+0x10/0x10 [ 311.136132][T14319] ? __pfx___might_resched+0x10/0x10 [ 311.136149][T14319] ? fs_reclaim_acquire+0x7d/0x100 [ 311.136179][T14319] should_fail_ex+0x414/0x560 [ 311.136213][T14319] should_failslab+0xa8/0x100 [ 311.136239][T14319] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 311.136262][T14319] ? __alloc_skb+0x112/0x2d0 [ 311.136286][T14319] __alloc_skb+0x112/0x2d0 [ 311.136311][T14319] netlink_ack+0x146/0xa50 [ 311.136328][T14319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.136351][T14319] ? ref_tracker_free+0x63a/0x7d0 [ 311.136368][T14319] ? __copy_skb_header+0xa7/0x550 [ 311.136399][T14319] netlink_rcv_skb+0x2a0/0x490 [ 311.136420][T14319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.136457][T14319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.136506][T14319] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.136527][T14319] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.136553][T14319] netlink_unicast+0x758/0x8d0 [ 311.136584][T14319] netlink_sendmsg+0x805/0xb30 [ 311.136615][T14319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.136640][T14319] ? aa_sock_msg_perm+0x94/0x160 [ 311.136662][T14319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.136684][T14319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.136706][T14319] __sock_sendmsg+0x219/0x270 [ 311.136740][T14319] ____sys_sendmsg+0x505/0x830 [ 311.136780][T14319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.136812][T14319] ? import_iovec+0x74/0xa0 [ 311.136840][T14319] ___sys_sendmsg+0x21f/0x2a0 [ 311.136864][T14319] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.136947][T14319] ? __fget_files+0x2a/0x420 [ 311.136971][T14319] ? __fget_files+0x3a0/0x420 [ 311.137006][T14319] __x64_sys_sendmsg+0x19b/0x260 [ 311.137033][T14319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.137076][T14319] ? do_syscall_64+0xba/0x210 [ 311.137108][T14319] do_syscall_64+0xf6/0x210 [ 311.137137][T14319] ? clear_bhb_loop+0x45/0xa0 [ 311.137160][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.137179][T14319] RIP: 0033:0x7ff89498e969 [ 311.137196][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.137213][T14319] RSP: 002b:00007ff895894038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.137233][T14319] RAX: ffffffffffffffda RBX: 00007ff894bb5fa0 RCX: 00007ff89498e969 [ 311.137246][T14319] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 311.137258][T14319] RBP: 00007ff895894090 R08: 0000000000000000 R09: 0000000000000000 [ 311.137270][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.137280][T14319] R13: 0000000000000000 R14: 00007ff894bb5fa0 R15: 00007ffe58d92988 [ 311.137311][T14319] [ 311.154721][T14311] vxlan1: entered allmulticast mode [ 311.569335][T14311] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.578564][T14311] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.586979][T14311] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.595357][T14311] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.866942][T14344] netlink: 'syz.5.2549': attribute type 1 has an invalid length. [ 311.900460][T14344] netlink: 'syz.5.2549': attribute type 2 has an invalid length. [ 311.923981][T14345] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2551'. [ 311.945417][T14344] netlink: 'syz.5.2549': attribute type 58 has an invalid length. [ 311.957911][T14344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2549'. [ 312.015681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.529114][T14384] bridge19: entered allmulticast mode [ 312.661605][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2564'. [ 312.692502][T14393] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2566'. [ 312.702923][T14393] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 312.775254][T14389] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 313.001343][T14406] FAULT_INJECTION: forcing a failure. [ 313.001343][T14406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.032448][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.8.2571 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 313.032475][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 313.032487][T14406] Call Trace: [ 313.032494][T14406] [ 313.032502][T14406] dump_stack_lvl+0x189/0x250 [ 313.032532][T14406] ? __lock_acquire+0xaac/0xd20 [ 313.032560][T14406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.032586][T14406] ? __pfx__printk+0x10/0x10 [ 313.032605][T14406] ? __might_fault+0xb0/0x130 [ 313.032659][T14406] should_fail_ex+0x414/0x560 [ 313.032697][T14406] _copy_from_user+0x2d/0xb0 [ 313.032724][T14406] kstrtouint_from_user+0xc4/0x170 [ 313.032749][T14406] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 313.032790][T14406] proc_fail_nth_write+0x88/0x240 [ 313.032818][T14406] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.032852][T14406] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.032882][T14406] vfs_write+0x27b/0xa90 [ 313.032915][T14406] ? __pfx_vfs_write+0x10/0x10 [ 313.032939][T14406] ? __fget_files+0x2a/0x420 [ 313.032970][T14406] ? __fget_files+0x3a0/0x420 [ 313.032993][T14406] ? __fget_files+0x2a/0x420 [ 313.033035][T14406] ksys_write+0x145/0x250 [ 313.033060][T14406] ? __pfx_ksys_write+0x10/0x10 [ 313.033086][T14406] ? do_syscall_64+0xba/0x210 [ 313.033120][T14406] do_syscall_64+0xf6/0x210 [ 313.033150][T14406] ? clear_bhb_loop+0x45/0xa0 [ 313.033174][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.033193][T14406] RIP: 0033:0x7f1e2a38d41f [ 313.033211][T14406] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 313.033227][T14406] RSP: 002b:00007f1e2b2cd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 313.033247][T14406] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2a38d41f [ 313.033260][T14406] RDX: 0000000000000001 RSI: 00007f1e2b2cd0a0 RDI: 0000000000000004 [ 313.033272][T14406] RBP: 00007f1e2b2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 313.033284][T14406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 313.033295][T14406] R13: 0000000000000000 R14: 00007f1e2a5b5fa0 R15: 00007ffe789c2538 [ 313.033328][T14406] [ 313.057059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.096652][T14407] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2572'. [ 313.166603][T14415] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2572'. [ 313.289073][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2572'. [ 313.308209][T14415] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 313.442757][T14425] bridge17: entered allmulticast mode [ 313.554874][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2579'. [ 313.653150][T14438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2582'. [ 313.659661][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2581'. [ 313.662413][T14438] netem: change failed [ 313.880220][T14451] FAULT_INJECTION: forcing a failure. [ 313.880220][T14451] name failslab, interval 1, probability 0, space 0, times 0 [ 313.893804][T14451] CPU: 1 UID: 0 PID: 14451 Comm: syz.4.2587 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 313.893829][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 313.893840][T14451] Call Trace: [ 313.893847][T14451] [ 313.893855][T14451] dump_stack_lvl+0x189/0x250 [ 313.893883][T14451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.893905][T14451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.893930][T14451] ? __pfx__printk+0x10/0x10 [ 313.893964][T14451] should_fail_ex+0x414/0x560 [ 313.893998][T14451] should_failslab+0xa8/0x100 [ 313.894024][T14451] __kmalloc_noprof+0xcb/0x4f0 [ 313.894046][T14451] ? sk_prot_alloc+0xe7/0x220 [ 313.894073][T14451] sk_prot_alloc+0xe7/0x220 [ 313.894092][T14451] ? sk_alloc+0x24/0x370 [ 313.894110][T14451] sk_alloc+0x3a/0x370 [ 313.894126][T14451] ? bt_sock_create+0xb1/0x240 [ 313.894144][T14451] bt_sock_alloc+0x3b/0x310 [ 313.894160][T14451] l2cap_sock_create+0x147/0x300 [ 313.894182][T14451] bt_sock_create+0x160/0x240 [ 313.894198][T14451] __sock_create+0x4b0/0x9f0 [ 313.894220][T14451] rfcomm_dlc_open+0x287/0xed0 [ 313.894264][T14451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.894289][T14451] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.894312][T14451] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 313.894332][T14451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.894355][T14451] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.894383][T14451] ? do_raw_spin_unlock+0x122/0x240 [ 313.894405][T14451] rfcomm_sock_connect+0x2f7/0x610 [ 313.894427][T14451] __sys_connect+0x313/0x440 [ 313.894443][T14451] ? __fget_files+0x3a0/0x420 [ 313.894464][T14451] ? __pfx___sys_connect+0x10/0x10 [ 313.894500][T14451] __x64_sys_connect+0x7a/0x90 [ 313.894518][T14451] do_syscall_64+0xf6/0x210 [ 313.894542][T14451] ? clear_bhb_loop+0x45/0xa0 [ 313.894561][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.894576][T14451] RIP: 0033:0x7ff89498e969 [ 313.894601][T14451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.894613][T14451] RSP: 002b:00007ff895894038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 313.894629][T14451] RAX: ffffffffffffffda RBX: 00007ff894bb5fa0 RCX: 00007ff89498e969 [ 313.894648][T14451] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 313.894657][T14451] RBP: 00007ff895894090 R08: 0000000000000000 R09: 0000000000000000 [ 313.894666][T14451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.894674][T14451] R13: 0000000000000000 R14: 00007ff894bb5fa0 R15: 00007ffe58d92988 [ 313.894698][T14451] [ 314.095596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.287449][T14453] netlink: 'syz.6.2588': attribute type 10 has an invalid length. [ 314.363487][T14461] netlink: 'syz.7.2591': attribute type 8 has an invalid length. [ 314.674852][T14472] netlink: 'syz.6.2595': attribute type 15 has an invalid length. [ 314.757247][T14475] lo speed is unknown, defaulting to 1000 [ 314.763636][T14475] lo speed is unknown, defaulting to 1000 [ 314.771208][T14475] lo speed is unknown, defaulting to 1000 [ 314.794038][T14475] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.832733][T14475] lo speed is unknown, defaulting to 1000 [ 314.848910][T14475] lo speed is unknown, defaulting to 1000 [ 314.858224][T14475] lo speed is unknown, defaulting to 1000 [ 314.868659][T14475] lo speed is unknown, defaulting to 1000 [ 314.877933][T14475] lo speed is unknown, defaulting to 1000 [ 315.138012][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.186325][T14493] xt_nfacct: accounting object `syz1' does not exists [ 315.266461][T14499] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 315.381659][T14501] bridge21: entered allmulticast mode [ 316.175662][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.322242][T14520] nbd: must specify at least one socket [ 316.498955][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.500340][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.525075][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.534202][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.543735][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.552540][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.568763][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 316.607504][T14529] hsr_slave_0: left promiscuous mode [ 316.627690][T14529] hsr_slave_1: left promiscuous mode [ 316.761521][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.784552][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 316.806664][T14543] FAULT_INJECTION: forcing a failure. [ 316.806664][T14543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.819813][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.5.2613 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 316.819839][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.819851][T14543] Call Trace: [ 316.819858][T14543] [ 316.819867][T14543] dump_stack_lvl+0x189/0x250 [ 316.819903][T14543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.819931][T14543] ? __pfx__printk+0x10/0x10 [ 316.819951][T14543] ? exc_page_fault+0x91/0x110 [ 316.819989][T14543] should_fail_ex+0x414/0x560 [ 316.820025][T14543] strncpy_from_user+0x36/0x290 [ 316.820059][T14543] strncpy_from_user_nofault+0x72/0x140 [ 316.820085][T14543] bpf_probe_read_user_str+0x2a/0x70 [ 316.820116][T14543] bpf_prog_a91b00db09d76834+0x46/0x48 [ 316.820134][T14543] bpf_test_run+0x38b/0x830 [ 316.820166][T14543] ? bpf_test_run+0x205/0x830 [ 316.820194][T14543] ? __pfx_bpf_test_run+0x10/0x10 [ 316.820233][T14543] ? __skb_checksum+0x8d9/0x9f0 [ 316.820268][T14543] ? slab_build_skb+0x273/0x3e0 [ 316.820295][T14543] bpf_prog_test_run_skb+0xb30/0x1560 [ 316.820333][T14543] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 316.820354][T14543] bpf_prog_test_run+0x2a9/0x340 [ 316.820389][T14543] __sys_bpf+0x4a4/0x860 [ 316.820416][T14543] ? __pfx___sys_bpf+0x10/0x10 [ 316.820453][T14543] ? ksys_write+0x1f0/0x250 [ 316.820473][T14543] ? rcu_is_watching+0x15/0xb0 [ 316.820513][T14543] __x64_sys_bpf+0x7c/0x90 [ 316.820534][T14543] do_syscall_64+0xf6/0x210 [ 316.820564][T14543] ? clear_bhb_loop+0x45/0xa0 [ 316.820588][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.820606][T14543] RIP: 0033:0x7fed1df8e969 [ 316.820622][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.820650][T14543] RSP: 002b:00007fed1eeba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.820668][T14543] RAX: ffffffffffffffda RBX: 00007fed1e1b5fa0 RCX: 00007fed1df8e969 [ 316.820681][T14543] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 316.820691][T14543] RBP: 00007fed1eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 316.820703][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.820713][T14543] R13: 0000000000000000 R14: 00007fed1e1b5fa0 R15: 00007ffc9aa21808 [ 316.820742][T14543] [ 317.103866][T14547] bridge16: entered allmulticast mode [ 317.124396][T14547] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 317.130670][T14530] lo speed is unknown, defaulting to 1000 [ 317.158699][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.215711][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.256123][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.266673][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 317.291252][T14549] netlink: 'syz.6.2615': attribute type 7 has an invalid length. [ 317.332530][T14549] netlink: 'syz.6.2615': attribute type 8 has an invalid length. [ 317.343393][T14549] netlink: 'syz.6.2615': attribute type 15 has an invalid length. [ 317.364186][T14559] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.403580][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.417076][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 317.587773][T14569] FAULT_INJECTION: forcing a failure. [ 317.587773][T14569] name failslab, interval 1, probability 0, space 0, times 0 [ 317.601166][T14569] CPU: 0 UID: 0 PID: 14569 Comm: syz.5.2622 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 317.601192][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.601203][T14569] Call Trace: [ 317.601210][T14569] [ 317.601235][T14569] dump_stack_lvl+0x189/0x250 [ 317.601270][T14569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.601307][T14569] ? __pfx__printk+0x10/0x10 [ 317.601326][T14569] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 317.601352][T14569] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.601381][T14569] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 317.601406][T14569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.601434][T14569] should_fail_ex+0x414/0x560 [ 317.601470][T14569] should_failslab+0xa8/0x100 [ 317.601499][T14569] __kmalloc_cache_noprof+0x70/0x3d0 [ 317.601523][T14569] ? l2cap_chan_create+0x50/0x760 [ 317.601553][T14569] l2cap_chan_create+0x50/0x760 [ 317.601580][T14569] l2cap_sock_create+0x1e7/0x300 [ 317.601608][T14569] bt_sock_create+0x160/0x240 [ 317.601631][T14569] __sock_create+0x4b0/0x9f0 [ 317.601671][T14569] rfcomm_dlc_open+0x287/0xed0 [ 317.601724][T14569] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.601754][T14569] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.601781][T14569] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 317.601807][T14569] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.601835][T14569] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 317.601869][T14569] ? do_raw_spin_unlock+0x122/0x240 [ 317.601897][T14569] rfcomm_sock_connect+0x2f7/0x610 [ 317.601925][T14569] __sys_connect+0x313/0x440 [ 317.601945][T14569] ? __fget_files+0x3a0/0x420 [ 317.601970][T14569] ? __pfx___sys_connect+0x10/0x10 [ 317.602017][T14569] __x64_sys_connect+0x7a/0x90 [ 317.602039][T14569] do_syscall_64+0xf6/0x210 [ 317.602069][T14569] ? clear_bhb_loop+0x45/0xa0 [ 317.602093][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.602111][T14569] RIP: 0033:0x7fed1df8e969 [ 317.602129][T14569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.602145][T14569] RSP: 002b:00007fed1eeba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 317.602165][T14569] RAX: ffffffffffffffda RBX: 00007fed1e1b5fa0 RCX: 00007fed1df8e969 [ 317.602179][T14569] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 317.602191][T14569] RBP: 00007fed1eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 317.602203][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.602214][T14569] R13: 0000000000000000 R14: 00007fed1e1b5fa0 R15: 00007ffc9aa21808 [ 317.602247][T14569] [ 318.060708][T14577] __nla_validate_parse: 5 callbacks suppressed [ 318.060728][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2626'. [ 318.220573][T14549] bond0: (slave team0): Releasing backup interface [ 318.246928][T14549] team0 (unregistering): Port device team_slave_0 removed [ 318.256222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.264677][T14549] team0 (unregistering): Port device team_slave_1 removed [ 318.412551][T14586] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2626'. [ 318.580270][ T5836] Bluetooth: hci1: command tx timeout [ 318.722309][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2631'. [ 319.081331][T14607] FAULT_INJECTION: forcing a failure. [ 319.081331][T14607] name failslab, interval 1, probability 0, space 0, times 0 [ 319.139285][T14607] CPU: 1 UID: 0 PID: 14607 Comm: syz.6.2635 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 319.139314][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 319.139327][T14607] Call Trace: [ 319.139335][T14607] [ 319.139344][T14607] dump_stack_lvl+0x189/0x250 [ 319.139381][T14607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.139410][T14607] ? __pfx__printk+0x10/0x10 [ 319.139444][T14607] ? __pfx___might_resched+0x10/0x10 [ 319.139461][T14607] ? fs_reclaim_acquire+0x7d/0x100 [ 319.139492][T14607] should_fail_ex+0x414/0x560 [ 319.139526][T14607] should_failslab+0xa8/0x100 [ 319.139552][T14607] __kmalloc_cache_noprof+0x70/0x3d0 [ 319.139574][T14607] ? rfcomm_session_add+0x52/0x2a0 [ 319.139607][T14607] rfcomm_session_add+0x52/0x2a0 [ 319.139638][T14607] rfcomm_dlc_open+0x886/0xed0 [ 319.139671][T14607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.139699][T14607] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.139725][T14607] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 319.139748][T14607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.139775][T14607] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.139807][T14607] ? do_raw_spin_unlock+0x122/0x240 [ 319.139833][T14607] rfcomm_sock_connect+0x2f7/0x610 [ 319.139859][T14607] __sys_connect+0x313/0x440 [ 319.139878][T14607] ? __fget_files+0x3a0/0x420 [ 319.139903][T14607] ? __pfx___sys_connect+0x10/0x10 [ 319.139945][T14607] __x64_sys_connect+0x7a/0x90 [ 319.139967][T14607] do_syscall_64+0xf6/0x210 [ 319.139994][T14607] ? clear_bhb_loop+0x45/0xa0 [ 319.140016][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.140033][T14607] RIP: 0033:0x7f699ab8e969 [ 319.140050][T14607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.140065][T14607] RSP: 002b:00007f699ba76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 319.140084][T14607] RAX: ffffffffffffffda RBX: 00007f699adb5fa0 RCX: 00007f699ab8e969 [ 319.140097][T14607] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 319.140108][T14607] RBP: 00007f699ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 319.140120][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.140130][T14607] R13: 0000000000000000 R14: 00007f699adb5fa0 R15: 00007ffe973cbe48 [ 319.140165][T14607] [ 319.143566][ T1156] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 319.295715][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.472810][T14620] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.541204][T14604] xt_CT: No such helper "pptp" [ 319.636330][ T1156] batman_adv: batadv0: Removing interface: ip6gretap2 [ 319.861276][ T1156] bond3 (unregistering): (slave gretap2): Releasing active interface [ 320.214776][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 320.335671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.656721][ T5836] Bluetooth: hci1: command tx timeout [ 320.852824][ T1156] bond0 (unregistering): left promiscuous mode [ 320.859488][ T1156] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 320.885409][ T1156] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 320.893914][ T1156] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 320.910057][ T1156] bond0 (unregistering): Released all slaves [ 321.017803][ T1156] bond1 (unregistering): Released all slaves [ 321.033835][ T1156] bond2 (unregistering): Released all slaves [ 321.046912][ T1156] bond3 (unregistering): Released all slaves [ 321.061633][ T1156] bond4 (unregistering): Released all slaves [ 321.130374][T14530] chnl_net:caif_netlink_parms(): no params data found [ 321.296542][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2644'. [ 321.333656][ T1156] tipc: Disabling bearer [ 321.341564][ T1156] tipc: Left network mode [ 321.375597][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.459064][ T5834] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec [ 321.478376][T14656] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2646'. [ 321.491625][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2648'. [ 321.774998][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.801292][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.829350][T14530] bridge_slave_0: entered allmulticast mode [ 321.850764][T14530] bridge_slave_0: entered promiscuous mode [ 321.883619][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.909780][T14530] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.921956][T14530] bridge_slave_1: entered allmulticast mode [ 321.931641][T14530] bridge_slave_1: entered promiscuous mode [ 322.262789][T14530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.313443][T14530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.338589][T14678] syz_tun: entered allmulticast mode [ 322.382359][T14678] x_tables: duplicate underflow at hook 4 [ 322.399088][T14679] bridge13: entered allmulticast mode [ 322.415704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.480443][T14675] syz_tun: left allmulticast mode [ 322.558888][T14689] netlink: 'syz.6.2658': attribute type 10 has an invalid length. [ 322.653443][ T1156] hsr_slave_0: left promiscuous mode [ 322.660012][ T1156] hsr_slave_1: left promiscuous mode [ 322.683420][ T1156] dummy0: left allmulticast mode [ 322.736166][ T5836] Bluetooth: hci1: command tx timeout [ 323.362877][T14530] team0: Port device team_slave_0 added [ 323.380769][T14698] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 323.395908][T14698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.455748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.528558][T14530] team0: Port device team_slave_1 added [ 323.728129][T14530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.745610][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.797525][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2668'. [ 323.810510][T14530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.838003][T14530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.855696][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.918398][T14530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.966014][T14719] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 323.975451][T14719] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 323.986940][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2672'. [ 323.987250][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2672'. [ 324.137594][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2673'. [ 324.154118][T14741] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2673'. [ 324.432955][T14745] xt_hashlimit: size too large, truncated to 1048576 [ 324.495586][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.793177][T14728] bridge18: entered allmulticast mode [ 324.817796][ T5836] Bluetooth: hci1: command tx timeout [ 325.173989][T14530] hsr_slave_0: entered promiscuous mode [ 325.181701][T14530] hsr_slave_1: entered promiscuous mode [ 325.353351][ T1156] IPVS: stop unused estimator thread 0... [ 325.449818][T14762] delete_channel: no stack [ 325.535596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.661654][T14768] bridge14: entered allmulticast mode [ 325.887392][T14772] IPv6: NLM_F_REPLACE set, but no existing node found! [ 325.948423][T14776] xfrm3: entered promiscuous mode [ 325.953615][T14776] xfrm3: entered allmulticast mode [ 326.041452][T14776] xt_hashlimit: size too large, truncated to 1048576 [ 326.064011][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2686'. [ 326.099052][T14782] veth1_to_batadv: entered promiscuous mode [ 326.116601][T14782] macvtap1: entered promiscuous mode [ 326.122210][T14782] macvtap1: entered allmulticast mode [ 326.133042][T14782] veth1_to_batadv: entered allmulticast mode [ 326.393342][T14530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.423777][T14530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.481439][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2685'. [ 326.518831][T14530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.575685][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.910359][T14530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.924637][T14809] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2694'. [ 327.011966][T14813] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 327.043048][T14813] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 327.069936][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2695'. [ 327.187772][T14821] syzkaller1: entered promiscuous mode [ 327.194173][T14821] syzkaller1: entered allmulticast mode [ 327.361718][T14825] netlink: 'syz.6.2698': attribute type 1 has an invalid length. [ 327.483374][T14825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.513666][T14830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.521555][T14830] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 327.534649][T14830] bond3: (slave vcan0): Error -95 calling set_mac_address [ 327.583235][T14824] lo speed is unknown, defaulting to 1000 [ 327.587485][T14841] FAULT_INJECTION: forcing a failure. [ 327.587485][T14841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.605287][T14841] CPU: 0 UID: 0 PID: 14841 Comm: syz.7.2703 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 327.605315][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 327.605327][T14841] Call Trace: [ 327.605335][T14841] [ 327.605343][T14841] dump_stack_lvl+0x189/0x250 [ 327.605373][T14841] ? __lock_acquire+0xaac/0xd20 [ 327.605403][T14841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.605430][T14841] ? __pfx__printk+0x10/0x10 [ 327.605448][T14841] ? __might_fault+0xb0/0x130 [ 327.605485][T14841] should_fail_ex+0x414/0x560 [ 327.605524][T14841] _copy_from_user+0x2d/0xb0 [ 327.605551][T14841] __sys_bpf+0x1ed/0x860 [ 327.605584][T14841] ? __pfx___sys_bpf+0x10/0x10 [ 327.605621][T14841] ? ksys_write+0x1f0/0x250 [ 327.605663][T14841] ? rcu_is_watching+0x15/0xb0 [ 327.605700][T14841] __x64_sys_bpf+0x7c/0x90 [ 327.605720][T14841] do_syscall_64+0xf6/0x210 [ 327.605748][T14841] ? clear_bhb_loop+0x45/0xa0 [ 327.605770][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.605787][T14841] RIP: 0033:0x7f7c6a18e969 [ 327.605804][T14841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.605819][T14841] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.605839][T14841] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 327.605851][T14841] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 327.605862][T14841] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 327.605872][T14841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.605883][T14841] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 327.605912][T14841] [ 327.611795][T14530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.618833][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.810221][T14530] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.891438][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.898723][ T9601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.914675][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.921998][ T9601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.971953][T14848] netlink: 'syz.7.2706': attribute type 2 has an invalid length. [ 327.999627][T14848] : entered promiscuous mode [ 328.380204][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2712'. [ 328.492747][T14874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.507352][T14875] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 328.541832][T14881] FAULT_INJECTION: forcing a failure. [ 328.541832][T14881] name failslab, interval 1, probability 0, space 0, times 0 [ 328.574360][T14881] CPU: 0 UID: 0 PID: 14881 Comm: syz.7.2716 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 328.574388][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 328.574400][T14881] Call Trace: [ 328.574407][T14881] [ 328.574416][T14881] dump_stack_lvl+0x189/0x250 [ 328.574449][T14881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.574482][T14881] ? __pfx__printk+0x10/0x10 [ 328.574502][T14881] ? __pfx___might_resched+0x10/0x10 [ 328.574519][T14881] ? fs_reclaim_acquire+0x7d/0x100 [ 328.574551][T14881] should_fail_ex+0x414/0x560 [ 328.574585][T14881] should_failslab+0xa8/0x100 [ 328.574610][T14881] __kmalloc_noprof+0xcb/0x4f0 [ 328.574632][T14881] ? bpf_map_meta_alloc+0x181/0x770 [ 328.574657][T14881] bpf_map_meta_alloc+0x181/0x770 [ 328.574700][T14881] htab_of_map_alloc+0x38/0xc0 [ 328.574722][T14881] map_create+0x900/0x1150 [ 328.574750][T14881] ? security_bpf+0x7e/0x300 [ 328.574771][T14881] __sys_bpf+0x67e/0x860 [ 328.574814][T14881] ? __pfx___sys_bpf+0x10/0x10 [ 328.574849][T14881] ? ksys_write+0x1f0/0x250 [ 328.574885][T14881] ? rcu_is_watching+0x15/0xb0 [ 328.574924][T14881] __x64_sys_bpf+0x7c/0x90 [ 328.574947][T14881] do_syscall_64+0xf6/0x210 [ 328.574977][T14881] ? clear_bhb_loop+0x45/0xa0 [ 328.575001][T14881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.575019][T14881] RIP: 0033:0x7f7c6a18e969 [ 328.575037][T14881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.575053][T14881] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.575074][T14881] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 328.575088][T14881] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 328.575100][T14881] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 328.575112][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.575123][T14881] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 328.575153][T14881] [ 328.583022][T14530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.655698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.174002][T14906] FAULT_INJECTION: forcing a failure. [ 329.174002][T14906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.187269][T14906] CPU: 0 UID: 0 PID: 14906 Comm: syz.8.2724 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 329.187296][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 329.187309][T14906] Call Trace: [ 329.187317][T14906] [ 329.187325][T14906] dump_stack_lvl+0x189/0x250 [ 329.187361][T14906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.187390][T14906] ? __pfx__printk+0x10/0x10 [ 329.187409][T14906] ? exc_page_fault+0x91/0x110 [ 329.187454][T14906] should_fail_ex+0x414/0x560 [ 329.187491][T14906] strncpy_from_user+0x36/0x290 [ 329.187526][T14906] strncpy_from_user_nofault+0x72/0x140 [ 329.187556][T14906] bpf_probe_read_user_str+0x2a/0x70 [ 329.187586][T14906] bpf_prog_a91b00db09d76834+0x46/0x48 [ 329.187624][T14906] bpf_test_run+0x38b/0x830 [ 329.187657][T14906] ? bpf_test_run+0x205/0x830 [ 329.187687][T14906] ? __pfx_bpf_test_run+0x10/0x10 [ 329.187726][T14906] ? __skb_checksum+0x8d9/0x9f0 [ 329.187763][T14906] ? slab_build_skb+0x273/0x3e0 [ 329.187790][T14906] bpf_prog_test_run_skb+0xb30/0x1560 [ 329.187829][T14906] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 329.187852][T14906] bpf_prog_test_run+0x2a9/0x340 [ 329.187882][T14906] __sys_bpf+0x4a4/0x860 [ 329.187909][T14906] ? __pfx___sys_bpf+0x10/0x10 [ 329.187948][T14906] ? ksys_write+0x1f0/0x250 [ 329.187969][T14906] ? rcu_is_watching+0x15/0xb0 [ 329.188011][T14906] __x64_sys_bpf+0x7c/0x90 [ 329.188034][T14906] do_syscall_64+0xf6/0x210 [ 329.188064][T14906] ? clear_bhb_loop+0x45/0xa0 [ 329.188088][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.188108][T14906] RIP: 0033:0x7f1e2a38e969 [ 329.188125][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.188143][T14906] RSP: 002b:00007f1e2b2cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.188164][T14906] RAX: ffffffffffffffda RBX: 00007f1e2a5b5fa0 RCX: 00007f1e2a38e969 [ 329.188179][T14906] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 329.188192][T14906] RBP: 00007f1e2b2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 329.188205][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.188216][T14906] R13: 0000000000000000 R14: 00007f1e2a5b5fa0 R15: 00007ffe789c2538 [ 329.188248][T14906] [ 329.336501][T14910] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 329.464572][T14530] veth0_vlan: entered promiscuous mode [ 329.481518][T14530] veth1_vlan: entered promiscuous mode [ 329.553484][T14530] veth0_macvtap: entered promiscuous mode [ 329.631159][T14916] syzkaller0: entered promiscuous mode [ 329.637705][T14916] syzkaller0: entered allmulticast mode [ 329.678568][T14530] veth1_macvtap: entered promiscuous mode [ 329.695596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.717920][T14530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.732684][T14530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.768540][T14530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.796475][T14530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.805437][T14530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.822834][T14530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.004522][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.025291][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.042029][T14934] lo speed is unknown, defaulting to 1000 [ 330.076573][T14940] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.087554][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2736'. [ 330.103697][T14942] FAULT_INJECTION: forcing a failure. [ 330.103697][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.116966][T14942] CPU: 0 UID: 0 PID: 14942 Comm: syz.5.2738 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 330.116992][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 330.117003][T14942] Call Trace: [ 330.117010][T14942] [ 330.117018][T14942] dump_stack_lvl+0x189/0x250 [ 330.117059][T14942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.117086][T14942] ? __pfx__printk+0x10/0x10 [ 330.117103][T14942] ? exc_page_fault+0x91/0x110 [ 330.117139][T14942] should_fail_ex+0x414/0x560 [ 330.117173][T14942] strncpy_from_user+0x36/0x290 [ 330.117204][T14942] strncpy_from_user_nofault+0x72/0x140 [ 330.117229][T14942] bpf_probe_read_user_str+0x2a/0x70 [ 330.117256][T14942] bpf_prog_a91b00db09d76834+0x46/0x48 [ 330.117274][T14942] bpf_test_run+0x38b/0x830 [ 330.117304][T14942] ? bpf_test_run+0x205/0x830 [ 330.117331][T14942] ? __pfx_bpf_test_run+0x10/0x10 [ 330.117366][T14942] ? __skb_checksum+0x8d9/0x9f0 [ 330.117398][T14942] ? slab_build_skb+0x273/0x3e0 [ 330.117423][T14942] bpf_prog_test_run_skb+0xb30/0x1560 [ 330.117457][T14942] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 330.117477][T14942] bpf_prog_test_run+0x2a9/0x340 [ 330.117504][T14942] __sys_bpf+0x4a4/0x860 [ 330.117528][T14942] ? __pfx___sys_bpf+0x10/0x10 [ 330.117567][T14942] ? ksys_write+0x1f0/0x250 [ 330.117586][T14942] ? rcu_is_watching+0x15/0xb0 [ 330.117641][T14942] __x64_sys_bpf+0x7c/0x90 [ 330.117664][T14942] do_syscall_64+0xf6/0x210 [ 330.117694][T14942] ? clear_bhb_loop+0x45/0xa0 [ 330.117717][T14942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.117733][T14942] RIP: 0033:0x7fed1df8e969 [ 330.117748][T14942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.117764][T14942] RSP: 002b:00007fed1eeba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.117785][T14942] RAX: ffffffffffffffda RBX: 00007fed1e1b5fa0 RCX: 00007fed1df8e969 [ 330.117799][T14942] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 330.117811][T14942] RBP: 00007fed1eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 330.117823][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.117834][T14942] R13: 0000000000000000 R14: 00007fed1e1b5fa0 R15: 00007ffc9aa21808 [ 330.117865][T14942] [ 330.367711][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.376294][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.735645][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.775611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.966582][T14948] netlink: 'syz.7.2740': attribute type 1 has an invalid length. [ 331.978184][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2740'. [ 332.162340][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 332.230440][T14966] !: renamed from dummy0 (while UP) [ 332.245007][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'. [ 332.349411][T14969] lo speed is unknown, defaulting to 1000 [ 332.546596][T14975] FAULT_INJECTION: forcing a failure. [ 332.546596][T14975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.559808][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.7.2748 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 332.559873][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 332.559885][T14975] Call Trace: [ 332.559894][T14975] [ 332.559902][T14975] dump_stack_lvl+0x189/0x250 [ 332.559940][T14975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.559970][T14975] ? __pfx__printk+0x10/0x10 [ 332.559990][T14975] ? exc_page_fault+0x91/0x110 [ 332.560030][T14975] should_fail_ex+0x414/0x560 [ 332.560069][T14975] strncpy_from_user+0x36/0x290 [ 332.560104][T14975] strncpy_from_user_nofault+0x72/0x140 [ 332.560131][T14975] bpf_probe_read_user_str+0x2a/0x70 [ 332.560164][T14975] bpf_prog_a91b00db09d76834+0x46/0x48 [ 332.560183][T14975] bpf_test_run+0x614/0x830 [ 332.560218][T14975] ? bpf_test_run+0x205/0x830 [ 332.560248][T14975] ? __pfx_bpf_test_run+0x10/0x10 [ 332.560287][T14975] ? __skb_checksum+0x8d9/0x9f0 [ 332.560324][T14975] ? slab_build_skb+0x273/0x3e0 [ 332.560351][T14975] bpf_prog_test_run_skb+0xb30/0x1560 [ 332.560391][T14975] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 332.560413][T14975] bpf_prog_test_run+0x2a9/0x340 [ 332.560443][T14975] __sys_bpf+0x4a4/0x860 [ 332.560471][T14975] ? __pfx___sys_bpf+0x10/0x10 [ 332.560509][T14975] ? ksys_write+0x1f0/0x250 [ 332.560530][T14975] ? rcu_is_watching+0x15/0xb0 [ 332.560571][T14975] __x64_sys_bpf+0x7c/0x90 [ 332.560604][T14975] do_syscall_64+0xf6/0x210 [ 332.560634][T14975] ? clear_bhb_loop+0x45/0xa0 [ 332.560658][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.560677][T14975] RIP: 0033:0x7f7c6a18e969 [ 332.560694][T14975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.560712][T14975] RSP: 002b:00007f7c6af87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.560732][T14975] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e969 [ 332.560746][T14975] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 332.560758][T14975] RBP: 00007f7c6af87090 R08: 0000000000000000 R09: 0000000000000000 [ 332.560770][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.560781][T14975] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007fff042abad8 [ 332.560813][T14975] [ 332.815666][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.084192][T14969] lo speed is unknown, defaulting to 1000 [ 333.158579][T14983] bridge20: entered allmulticast mode [ 333.169145][T14990] tipc: Cannot configure node identity twice [ 333.314247][T14994] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2753'. [ 333.583687][T15000] bridge1: entered allmulticast mode [ 333.693244][T15011] FAULT_INJECTION: forcing a failure. [ 333.693244][T15011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.781273][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.8.2757 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 333.781302][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 333.781313][T15011] Call Trace: [ 333.781321][T15011] [ 333.781330][T15011] dump_stack_lvl+0x189/0x250 [ 333.781359][T15011] ? __lock_acquire+0xaac/0xd20 [ 333.781416][T15011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.781447][T15011] ? __pfx__printk+0x10/0x10 [ 333.781467][T15011] ? __might_fault+0xb0/0x130 [ 333.781503][T15011] should_fail_ex+0x414/0x560 [ 333.781550][T15011] _copy_from_user+0x2d/0xb0 [ 333.781588][T15011] do_ip_vs_set_ctl+0x2d3/0xa60 [ 333.781638][T15011] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 333.781661][T15011] ? rcu_is_watching+0x15/0xb0 [ 333.781709][T15011] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 333.781750][T15011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.781778][T15011] ? aa_sk_perm+0x81e/0x950 [ 333.781803][T15011] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.781828][T15011] nf_setsockopt+0x26c/0x290 [ 333.781855][T15011] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.781881][T15011] do_sock_setsockopt+0x257/0x3e0 [ 333.781909][T15011] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.781930][T15011] ? __fget_files+0x2a/0x420 [ 333.781966][T15011] ? __fget_files+0x3a0/0x420 [ 333.781991][T15011] ? __fget_files+0x2a/0x420 [ 333.782025][T15011] __x64_sys_setsockopt+0x18b/0x220 [ 333.782056][T15011] do_syscall_64+0xf6/0x210 [ 333.782088][T15011] ? clear_bhb_loop+0x45/0xa0 [ 333.782112][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.782131][T15011] RIP: 0033:0x7f1e2a38e969 [ 333.782149][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.782164][T15011] RSP: 002b:00007f1e2b2cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.782184][T15011] RAX: ffffffffffffffda RBX: 00007f1e2a5b5fa0 RCX: 00007f1e2a38e969 [ 333.782198][T15011] RDX: 0000000000000488 RSI: 0000000000000000 RDI: 0000000000000003 [ 333.782208][T15011] RBP: 00007f1e2b2cd090 R08: 0000000000000044 R09: 0000000000000000 [ 333.782218][T15011] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 333.782227][T15011] R13: 0000000000000000 R14: 00007f1e2a5b5fa0 R15: 00007ffe789c2538 [ 333.782257][T15011] [ 333.855654][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.060684][T15016] FAULT_INJECTION: forcing a failure. [ 334.060684][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.076727][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.4.2762 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 334.076752][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 334.076764][T15016] Call Trace: [ 334.076771][T15016] [ 334.076779][T15016] dump_stack_lvl+0x189/0x250 [ 334.076811][T15016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.076834][T15016] ? __pfx__printk+0x10/0x10 [ 334.076861][T15016] should_fail_ex+0x414/0x560 [ 334.076893][T15016] _copy_to_user+0x31/0xb0 [ 334.076927][T15016] bpf_test_finish+0x4d1/0x660 [ 334.076952][T15016] ? __pfx_bpf_test_finish+0x10/0x10 [ 334.076969][T15016] ? __skb_checksum+0x8d9/0x9f0 [ 334.077000][T15016] ? slab_build_skb+0x273/0x3e0 [ 334.077022][T15016] bpf_prog_test_run_skb+0xed5/0x1560 [ 334.077055][T15016] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.077073][T15016] bpf_prog_test_run+0x2a9/0x340 [ 334.077099][T15016] __sys_bpf+0x4a4/0x860 [ 334.077121][T15016] ? __pfx___sys_bpf+0x10/0x10 [ 334.077152][T15016] ? ksys_write+0x1f0/0x250 [ 334.077170][T15016] ? rcu_is_watching+0x15/0xb0 [ 334.077203][T15016] __x64_sys_bpf+0x7c/0x90 [ 334.077223][T15016] do_syscall_64+0xf6/0x210 [ 334.077249][T15016] ? clear_bhb_loop+0x45/0xa0 [ 334.077270][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.077286][T15016] RIP: 0033:0x7ffb6498e969 [ 334.077301][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.077315][T15016] RSP: 002b:00007ffb65839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.077332][T15016] RAX: ffffffffffffffda RBX: 00007ffb64bb5fa0 RCX: 00007ffb6498e969 [ 334.077343][T15016] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 334.077354][T15016] RBP: 00007ffb65839090 R08: 0000000000000000 R09: 0000000000000000 [ 334.077363][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.077372][T15016] R13: 0000000000000000 R14: 00007ffb64bb5fa0 R15: 00007ffebd9637b8 [ 334.077398][T15016] [ 334.424566][T15026] bridge2: entered allmulticast mode [ 334.642183][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2770'. [ 334.746343][T15051] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 334.895619][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.962499][T15046] pim6reg: entered allmulticast mode [ 334.969906][T15029] veth0_to_bridge: entered promiscuous mode [ 335.001694][T15049] pim6reg: left allmulticast mode [ 335.084861][T15029] veth0_to_bridge: left promiscuous mode [ 335.292424][T15059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.301610][T15059] bridge0: port 3(bond1) entered blocking state [ 335.309054][T15059] bridge0: port 3(bond1) entered disabled state [ 335.316753][T15059] bond1: entered allmulticast mode [ 335.336294][T15059] bond1: entered promiscuous mode [ 335.342867][T15059] bridge0: port 3(bond1) entered blocking state [ 335.349700][T15059] bridge0: port 3(bond1) entered forwarding state [ 335.363062][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2771'. [ 335.392563][T15062] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.396217][ T5882] IPVS: starting estimator thread 0... [ 335.401551][T15065] syz_tun: entered allmulticast mode [ 335.526176][T15069] IPVS: using max 31 ests per chain, 74400 per kthread [ 335.558790][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 335.623746][T15065] dvmrp8: entered allmulticast mode [ 335.686939][T15065] syz_tun: left allmulticast mode [ 335.706369][T15065] dvmrp8: left allmulticast mode [ 335.935670][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.083754][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2784'. [ 336.259722][ T2968] bridge0: port 3(bond1) entered disabled state [ 336.352921][T15096] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.431798][T15096] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.560937][T15096] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.654824][T15096] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.822515][T15096] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.923567][T15096] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.937041][T15118] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2793'. [ 336.958197][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2796'. [ 336.975669][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.032730][T15096] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.111988][T15096] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.121562][T15130] netlink: 'syz.4.2798': attribute type 10 has an invalid length. [ 337.197057][T15130] team0: Device ipvlan1 failed to register rx_handler [ 337.214882][T15124] lo speed is unknown, defaulting to 1000 [ 337.278480][T15134] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 338.015603][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.052354][T15186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2814'. [ 338.114893][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 338.131293][T15188] macvlan2: entered promiscuous mode [ 338.139527][T15188] macvlan2: entered allmulticast mode [ 338.145304][T15188] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 338.255226][T15197] IPVS: Scheduler module ip_vs_sip not found [ 338.440339][T15207] netlink: 'syz.8.2818': attribute type 32 has an invalid length. [ 338.484738][T15209] lo speed is unknown, defaulting to 1000 [ 338.527494][T15211] netlink: 'syz.8.2818': attribute type 11 has an invalid length. [ 338.535374][T15211] netlink: 'syz.8.2818': attribute type 11 has an invalid length. [ 338.568107][T15211] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2818'. [ 338.681981][T15216] FAULT_INJECTION: forcing a failure. [ 338.681981][T15216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.713074][T15216] CPU: 1 UID: 0 PID: 15216 Comm: syz.5.2824 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 338.713102][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.713114][T15216] Call Trace: [ 338.713120][T15216] [ 338.713128][T15216] dump_stack_lvl+0x189/0x250 [ 338.713163][T15216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.713189][T15216] ? __pfx__printk+0x10/0x10 [ 338.713220][T15216] should_fail_ex+0x414/0x560 [ 338.713274][T15216] _copy_to_user+0x31/0xb0 [ 338.713302][T15216] simple_read_from_buffer+0xe1/0x170 [ 338.713331][T15216] proc_fail_nth_read+0x1df/0x250 [ 338.713362][T15216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.713393][T15216] ? rw_verify_area+0x258/0x650 [ 338.713412][T15216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.713441][T15216] vfs_read+0x1fd/0x980 [ 338.713467][T15216] ? __pfx___mutex_lock+0x10/0x10 [ 338.713503][T15216] ? __pfx_vfs_read+0x10/0x10 [ 338.713526][T15216] ? __fget_files+0x2a/0x420 [ 338.713556][T15216] ? __fget_files+0x3a0/0x420 [ 338.713579][T15216] ? __fget_files+0x2a/0x420 [ 338.713613][T15216] ksys_read+0x145/0x250 [ 338.713632][T15216] ? rcu_is_watching+0x15/0xb0 [ 338.713662][T15216] ? __pfx_ksys_read+0x10/0x10 [ 338.713698][T15216] ? do_syscall_64+0xba/0x210 [ 338.713728][T15216] do_syscall_64+0xf6/0x210 [ 338.713755][T15216] ? clear_bhb_loop+0x45/0xa0 [ 338.713777][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.713794][T15216] RIP: 0033:0x7fed1df8d37c [ 338.713810][T15216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 338.713825][T15216] RSP: 002b:00007fed1eeba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.713844][T15216] RAX: ffffffffffffffda RBX: 00007fed1e1b5fa0 RCX: 00007fed1df8d37c [ 338.713857][T15216] RDX: 000000000000000f RSI: 00007fed1eeba0a0 RDI: 0000000000000004 [ 338.713867][T15216] RBP: 00007fed1eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 338.713878][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.713888][T15216] R13: 0000000000000000 R14: 00007fed1e1b5fa0 R15: 00007ffc9aa21808 [ 338.713918][T15216] [ 339.055682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.257790][T15222] netlink: 'syz.8.2825': attribute type 21 has an invalid length. [ 339.713163][T15232] team0 (unregistering): Port device team_slave_0 removed [ 339.747573][T15232] team0 (unregistering): Port device team_slave_1 removed [ 340.095711][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.212196][T15240] netlink: 'syz.4.2832': attribute type 1 has an invalid length. [ 340.220167][T15240] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2832'. [ 340.360556][T15252] bridge3: entered allmulticast mode [ 340.387298][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2833'. [ 340.454229][ T7524] bond0: (slave wlan1): link status definitely down, disabling slave [ 340.495475][ T7524] bond0: now running without any active interface! [ 340.779112][T15256] lo speed is unknown, defaulting to 1000 [ 340.911119][T15285] bridge19: entered allmulticast mode [ 341.023214][T15283] lo speed is unknown, defaulting to 1000 [ 341.135647][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.300427][T15295] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2849'. [ 341.808002][T15308] netlink: 'syz.4.2853': attribute type 23 has an invalid length. [ 341.970740][T15315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 341.991665][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2852'. [ 342.001109][T15315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 342.084491][T15323] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2857'. [ 342.104503][T15311] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 342.167657][T15325] netlink: 'syz.6.2855': attribute type 2 has an invalid length. [ 342.175433][T15325] netlink: 'syz.6.2855': attribute type 6 has an invalid length. [ 342.175590][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.564793][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2864'. [ 342.630041][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2866'. [ 342.643424][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 342.666408][T15354] FAULT_INJECTION: forcing a failure. [ 342.666408][T15354] name failslab, interval 1, probability 0, space 0, times 0 [ 342.679938][T15354] CPU: 0 UID: 0 PID: 15354 Comm: syz.8.2864 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 342.679964][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 342.679977][T15354] Call Trace: [ 342.679984][T15354] [ 342.679992][T15354] dump_stack_lvl+0x189/0x250 [ 342.680029][T15354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.680057][T15354] ? __pfx__printk+0x10/0x10 [ 342.680082][T15354] ? __pfx___might_resched+0x10/0x10 [ 342.680106][T15354] should_fail_ex+0x414/0x560 [ 342.680142][T15354] should_failslab+0xa8/0x100 [ 342.680169][T15354] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 342.680195][T15354] ? __alloc_skb+0x112/0x2d0 [ 342.680221][T15354] __alloc_skb+0x112/0x2d0 [ 342.680247][T15354] netlink_sendmsg+0x5c6/0xb30 [ 342.680280][T15354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.680305][T15354] ? aa_sock_msg_perm+0x94/0x160 [ 342.680328][T15354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.680361][T15354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.680382][T15354] __sock_sendmsg+0x219/0x270 [ 342.680413][T15354] ____sys_sendmsg+0x505/0x830 [ 342.680442][T15354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.680474][T15354] ? import_iovec+0x74/0xa0 [ 342.680502][T15354] ___sys_sendmsg+0x21f/0x2a0 [ 342.680527][T15354] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.680585][T15354] ? __fget_files+0x2a/0x420 [ 342.680607][T15354] ? __fget_files+0x3a0/0x420 [ 342.680640][T15354] __x64_sys_sendmsg+0x19b/0x260 [ 342.680666][T15354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.680720][T15354] ? do_syscall_64+0xba/0x210 [ 342.680768][T15354] do_syscall_64+0xf6/0x210 [ 342.680798][T15354] ? clear_bhb_loop+0x45/0xa0 [ 342.680821][T15354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.680846][T15354] RIP: 0033:0x7f1e2a38e969 [ 342.680864][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.680881][T15354] RSP: 002b:00007f1e2b2ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.680901][T15354] RAX: ffffffffffffffda RBX: 00007f1e2a5b6080 RCX: 00007f1e2a38e969 [ 342.680915][T15354] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 342.680928][T15354] RBP: 00007f1e2b2ac090 R08: 0000000000000000 R09: 0000000000000000 [ 342.680940][T15354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.680951][T15354] R13: 0000000000000000 R14: 00007f1e2a5b6080 R15: 00007ffe789c2538 [ 342.680982][T15354] [ 342.940249][T15357] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 343.047108][T15363] netlink: 'syz.6.2868': attribute type 1 has an invalid length. [ 343.054919][T15363] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2868'. [ 343.100156][T15363] netlink: 'syz.6.2868': attribute type 1 has an invalid length. [ 343.109202][T15363] netlink: 'syz.6.2868': attribute type 2 has an invalid length. [ 343.140749][T15366] lo speed is unknown, defaulting to 1000 [ 343.215682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.225194][T15372] bond0: (slave bond_slave_1): Releasing backup interface [ 343.240693][T15372] team0: Port device team_slave_0 removed [ 343.253793][T15372] team0: Port device team_slave_1 removed [ 343.261560][T15372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.272683][T15372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.288022][T15372] team0: Port device macsec0 removed [ 343.308453][T15372] team0: Port device geneve0 removed [ 343.316356][T15372] bond2: (slave gretap1): Releasing active interface [ 343.586873][T15391] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.595028][T15391] block nbd1: shutting down sockets [ 344.255687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.413264][T15423] FAULT_INJECTION: forcing a failure. [ 344.413264][T15423] name failslab, interval 1, probability 0, space 0, times 0 [ 344.482039][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.8.2886 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 344.482070][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 344.482082][T15423] Call Trace: [ 344.482090][T15423] [ 344.482099][T15423] dump_stack_lvl+0x189/0x250 [ 344.482135][T15423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.482164][T15423] ? __pfx__printk+0x10/0x10 [ 344.482190][T15423] ? __pfx___might_resched+0x10/0x10 [ 344.482207][T15423] ? fs_reclaim_acquire+0x7d/0x100 [ 344.482239][T15423] should_fail_ex+0x414/0x560 [ 344.482274][T15423] should_failslab+0xa8/0x100 [ 344.482300][T15423] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 344.482324][T15423] ? __d_alloc+0x31/0x6f0 [ 344.482356][T15423] __d_alloc+0x31/0x6f0 [ 344.482389][T15423] d_alloc_pseudo+0x1f/0xb0 [ 344.482422][T15423] alloc_file_pseudo+0xcc/0x210 [ 344.482455][T15423] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 344.482498][T15423] anon_inode_getfd+0xca/0x1b0 [ 344.482527][T15423] map_create+0xdb6/0x1150 [ 344.482556][T15423] ? security_bpf+0x7e/0x300 [ 344.482578][T15423] __sys_bpf+0x67e/0x860 [ 344.482603][T15423] ? __pfx___sys_bpf+0x10/0x10 [ 344.482640][T15423] ? ksys_write+0x1f0/0x250 [ 344.482669][T15423] ? rcu_is_watching+0x15/0xb0 [ 344.482710][T15423] __x64_sys_bpf+0x7c/0x90 [ 344.482731][T15423] do_syscall_64+0xf6/0x210 [ 344.482762][T15423] ? clear_bhb_loop+0x45/0xa0 [ 344.482786][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.482805][T15423] RIP: 0033:0x7f1e2a38e969 [ 344.482821][T15423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.482838][T15423] RSP: 002b:00007f1e2b2cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.482859][T15423] RAX: ffffffffffffffda RBX: 00007f1e2a5b5fa0 RCX: 00007f1e2a38e969 [ 344.482873][T15423] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 344.482886][T15423] RBP: 00007f1e2b2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 344.482898][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.482908][T15423] R13: 0000000000000000 R14: 00007f1e2a5b5fa0 R15: 00007ffe789c2538 [ 344.482939][T15423] [ 344.723067][T15426] tun0: tun_chr_ioctl cmd 1074812117 [ 345.070203][T15445] can: request_module (can-proto-5) failed. [ 345.084566][T15450] netlink: 'syz.6.2896': attribute type 10 has an invalid length. [ 345.168826][T15455] netlink: 'syz.6.2899': attribute type 13 has an invalid length. [ 345.187355][T15455] gretap0: refused to change device tx_queue_len [ 345.204385][T15455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 345.242402][T15460] bridge20: entered allmulticast mode [ 345.295821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.326700][T15471] sch_fq: defrate 0 ignored. [ 345.750064][T15485] netlink: 'syz.5.2909': attribute type 10 has an invalid length. [ 346.120472][T15510] __nla_validate_parse: 5 callbacks suppressed [ 346.120565][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2915'. [ 346.129443][T15506] bridge22: entered allmulticast mode [ 346.177468][T15512] batman_adv: batadv0: Adding interface: dummy0 [ 346.183962][T15512] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.261096][T15512] batman_adv: batadv0: Interface activated: dummy0 [ 346.301082][T15502] batadv0: mtu less than device minimum [ 346.313849][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.326167][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.338143][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.350083][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.362020][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.373747][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.379258][T15523] FAULT_INJECTION: forcing a failure. [ 346.379258][T15523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.385733][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.399072][T15523] CPU: 1 UID: 0 PID: 15523 Comm: syz.5.2923 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 346.399104][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 346.399119][T15523] Call Trace: [ 346.399127][T15523] [ 346.399136][T15523] dump_stack_lvl+0x189/0x250 [ 346.399172][T15523] ? __lock_acquire+0xaac/0xd20 [ 346.399204][T15523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.399235][T15523] ? __pfx__printk+0x10/0x10 [ 346.399261][T15523] ? __might_fault+0xb0/0x130 [ 346.399303][T15523] should_fail_ex+0x414/0x560 [ 346.399342][T15523] _copy_from_user+0x2d/0xb0 [ 346.399373][T15523] __sys_bpf+0x1ed/0x860 [ 346.399402][T15523] ? __pfx___sys_bpf+0x10/0x10 [ 346.399444][T15523] ? ksys_write+0x1f0/0x250 [ 346.399481][T15523] __x64_sys_bpf+0x7c/0x90 [ 346.399506][T15523] do_syscall_64+0xf6/0x210 [ 346.399546][T15523] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.399567][T15523] ? clear_bhb_loop+0x45/0xa0 [ 346.399593][T15523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.399613][T15523] RIP: 0033:0x7fed1df8e969 [ 346.399632][T15523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.399651][T15523] RSP: 002b:00007fed1eeba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.399674][T15523] RAX: ffffffffffffffda RBX: 00007fed1e1b5fa0 RCX: 00007fed1df8e969 [ 346.399690][T15523] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 346.399703][T15523] RBP: 00007fed1eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 346.399715][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.399729][T15523] R13: 0000000000000001 R14: 00007fed1e1b5fa0 R15: 00007ffc9aa21808 [ 346.399762][T15523] [ 346.586431][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.597891][T15502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.802546][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2925'. [ 346.827035][T15528] team0 (unregistering): Port device team_slave_0 removed [ 346.839849][T15528] team0 (unregistering): Port device team_slave_1 removed [ 346.905074][T15535] FAULT_INJECTION: forcing a failure. [ 346.905074][T15535] name failslab, interval 1, probability 0, space 0, times 0 [ 346.922321][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.6.2925 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 346.922347][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 346.922359][T15535] Call Trace: [ 346.922366][T15535] [ 346.922374][T15535] dump_stack_lvl+0x189/0x250 [ 346.922407][T15535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.922434][T15535] ? __pfx__printk+0x10/0x10 [ 346.922457][T15535] ? __pfx___might_resched+0x10/0x10 [ 346.922480][T15535] should_fail_ex+0x414/0x560 [ 346.922522][T15535] should_failslab+0xa8/0x100 [ 346.922549][T15535] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 346.922572][T15535] ? __alloc_skb+0x112/0x2d0 [ 346.922597][T15535] __alloc_skb+0x112/0x2d0 [ 346.922620][T15535] tc_ctl_tclass+0xbe0/0x1500 [ 346.922663][T15535] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 346.922690][T15535] ? rcu_is_watching+0x15/0xb0 [ 346.922717][T15535] ? trace_contention_end+0x39/0x120 [ 346.922737][T15535] ? __mutex_lock+0x330/0xe80 [ 346.922767][T15535] ? __kernel_text_address+0xd/0x40 [ 346.922822][T15535] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 346.922847][T15535] rtnetlink_rcv_msg+0x779/0xb70 [ 346.922866][T15535] ? kasan_save_track+0x4f/0x80 [ 346.922887][T15535] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 346.922905][T15535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.922925][T15535] ? __lock_acquire+0xaac/0xd20 [ 346.922962][T15535] netlink_rcv_skb+0x219/0x490 [ 346.922983][T15535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.923004][T15535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.923041][T15535] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.923060][T15535] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.923084][T15535] netlink_unicast+0x758/0x8d0 [ 346.923129][T15535] netlink_sendmsg+0x805/0xb30 [ 346.923160][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.923189][T15535] ? aa_sock_msg_perm+0x94/0x160 [ 346.923212][T15535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.923234][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.923257][T15535] __sock_sendmsg+0x219/0x270 [ 346.923292][T15535] ____sys_sendmsg+0x505/0x830 [ 346.923322][T15535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.923357][T15535] ? import_iovec+0x74/0xa0 [ 346.923388][T15535] ___sys_sendmsg+0x21f/0x2a0 [ 346.923415][T15535] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.923478][T15535] ? __fget_files+0x2a/0x420 [ 346.923500][T15535] ? __fget_files+0x3a0/0x420 [ 346.923545][T15535] __x64_sys_sendmsg+0x19b/0x260 [ 346.923573][T15535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.923616][T15535] ? do_syscall_64+0xba/0x210 [ 346.923648][T15535] do_syscall_64+0xf6/0x210 [ 346.923677][T15535] ? clear_bhb_loop+0x45/0xa0 [ 346.923701][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.923720][T15535] RIP: 0033:0x7f699ab8e969 [ 346.923738][T15535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.923755][T15535] RSP: 002b:00007f699ba34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.923775][T15535] RAX: ffffffffffffffda RBX: 00007f699adb6160 RCX: 00007f699ab8e969 [ 346.923789][T15535] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 346.923802][T15535] RBP: 00007f699ba34090 R08: 0000000000000000 R09: 0000000000000000 [ 346.923814][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.923825][T15535] R13: 0000000000000001 R14: 00007f699adb6160 R15: 00007ffe973cbe48 [ 346.923858][T15535] [ 346.943794][T15537] bridge15: entered allmulticast mode [ 347.391414][T15545] bridge4: entered allmulticast mode [ 347.485079][T15550] lo speed is unknown, defaulting to 1000 [ 347.850867][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2938'. [ 347.874713][T15566] IPVS: Scheduler module ip_vs_sip not found [ 348.180823][T15593] bridge21: entered allmulticast mode [ 348.294146][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 348.454875][T15615] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 348.592427][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 348.612438][T15621] No such timeout policy "syz0" [ 348.629184][T15623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2952'. [ 348.688672][T15623] FAULT_INJECTION: forcing a failure. [ 348.688672][T15623] name failslab, interval 1, probability 0, space 0, times 0 [ 348.702322][T15623] CPU: 1 UID: 0 PID: 15623 Comm: syz.6.2952 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 348.702347][T15623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 348.702358][T15623] Call Trace: [ 348.702365][T15623] [ 348.702372][T15623] dump_stack_lvl+0x189/0x250 [ 348.702407][T15623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.702434][T15623] ? __pfx__printk+0x10/0x10 [ 348.702458][T15623] ? __pfx___might_resched+0x10/0x10 [ 348.702474][T15623] ? fs_reclaim_acquire+0x7d/0x100 [ 348.702507][T15623] should_fail_ex+0x414/0x560 [ 348.702541][T15623] should_failslab+0xa8/0x100 [ 348.702567][T15623] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 348.702592][T15623] ? __alloc_skb+0x112/0x2d0 [ 348.702617][T15623] __alloc_skb+0x112/0x2d0 [ 348.702642][T15623] netlink_ack+0x146/0xa50 [ 348.702659][T15623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.702679][T15623] ? __lock_acquire+0xaac/0xd20 [ 348.702715][T15623] netlink_rcv_skb+0x2a0/0x490 [ 348.702735][T15623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.702755][T15623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.702793][T15623] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.702813][T15623] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.702838][T15623] netlink_unicast+0x758/0x8d0 [ 348.702867][T15623] netlink_sendmsg+0x805/0xb30 [ 348.702897][T15623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.702921][T15623] ? aa_sock_msg_perm+0x94/0x160 [ 348.702943][T15623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.702963][T15623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.702984][T15623] __sock_sendmsg+0x219/0x270 [ 348.703015][T15623] ____sys_sendmsg+0x505/0x830 [ 348.703044][T15623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.703076][T15623] ? import_iovec+0x74/0xa0 [ 348.703104][T15623] ___sys_sendmsg+0x21f/0x2a0 [ 348.703129][T15623] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.703189][T15623] ? __fget_files+0x2a/0x420 [ 348.703212][T15623] ? __fget_files+0x3a0/0x420 [ 348.703252][T15623] __x64_sys_sendmsg+0x19b/0x260 [ 348.703279][T15623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.703314][T15623] ? rcu_is_watching+0x15/0xb0 [ 348.703351][T15623] do_syscall_64+0xf6/0x210 [ 348.703379][T15623] ? clear_bhb_loop+0x45/0xa0 [ 348.703402][T15623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.703419][T15623] RIP: 0033:0x7f699ab8e969 [ 348.703435][T15623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.703451][T15623] RSP: 002b:00007f699ba76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.703470][T15623] RAX: ffffffffffffffda RBX: 00007f699adb5fa0 RCX: 00007f699ab8e969 [ 348.703483][T15623] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 348.703494][T15623] RBP: 00007f699ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 348.703505][T15623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.703516][T15623] R13: 0000000000000000 R14: 00007f699adb5fa0 R15: 00007ffe973cbe48 [ 348.703545][T15623] [ 349.161620][T15634] bridge22: entered allmulticast mode [ 349.254852][T15637] netlink: 'syz.8.2958': attribute type 5 has an invalid length. [ 349.285808][T15641] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2960'. [ 349.455301][T15648] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 349.812388][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2966'. [ 349.858953][T15659] FAULT_INJECTION: forcing a failure. [ 349.858953][T15659] name failslab, interval 1, probability 0, space 0, times 0 [ 349.867626][T15657] pim6reg1: entered promiscuous mode [ 349.872406][T15659] CPU: 1 UID: 0 PID: 15659 Comm: syz.4.2966 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 349.872449][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 349.872463][T15659] Call Trace: [ 349.872472][T15659] [ 349.872481][T15659] dump_stack_lvl+0x189/0x250 [ 349.872523][T15659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.872555][T15659] ? __pfx__printk+0x10/0x10 [ 349.872583][T15659] ? __pfx___might_resched+0x10/0x10 [ 349.872603][T15659] ? fs_reclaim_acquire+0x7d/0x100 [ 349.872640][T15659] should_fail_ex+0x414/0x560 [ 349.872681][T15659] should_failslab+0xa8/0x100 [ 349.872711][T15659] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 349.872739][T15659] ? __alloc_skb+0x112/0x2d0 [ 349.872768][T15659] __alloc_skb+0x112/0x2d0 [ 349.872797][T15659] netlink_ack+0x146/0xa50 [ 349.872817][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.872845][T15659] ? ref_tracker_free+0x63a/0x7d0 [ 349.872865][T15659] ? __copy_skb_header+0xa7/0x550 [ 349.872904][T15659] netlink_rcv_skb+0x2a0/0x490 [ 349.872927][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.872952][T15659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.872999][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.873022][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.873052][T15659] netlink_unicast+0x758/0x8d0 [ 349.873085][T15659] netlink_sendmsg+0x805/0xb30 [ 349.873121][T15659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.873148][T15659] ? aa_sock_msg_perm+0x94/0x160 [ 349.873232][T15659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.873270][T15659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.873298][T15659] __sock_sendmsg+0x219/0x270 [ 349.873338][T15659] ____sys_sendmsg+0x505/0x830 [ 349.873386][T15659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.873435][T15659] ? import_iovec+0x74/0xa0 [ 349.873468][T15659] ___sys_sendmsg+0x21f/0x2a0 [ 349.873497][T15659] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.873579][T15659] ? __fget_files+0x2a/0x420 [ 349.873602][T15659] ? __fget_files+0x3a0/0x420 [ 349.873638][T15659] __x64_sys_sendmsg+0x19b/0x260 [ 349.873666][T15659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.873703][T15659] ? rcu_is_watching+0x15/0xb0 [ 349.873741][T15659] do_syscall_64+0xf6/0x210 [ 349.873772][T15659] ? clear_bhb_loop+0x45/0xa0 [ 349.873795][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.873815][T15659] RIP: 0033:0x7ffb6498e969 [ 349.873834][T15659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.873868][T15659] RSP: 002b:00007ffb65839038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.873890][T15659] RAX: ffffffffffffffda RBX: 00007ffb64bb5fa0 RCX: 00007ffb6498e969 [ 349.873905][T15659] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 349.873917][T15659] RBP: 00007ffb65839090 R08: 0000000000000000 R09: 0000000000000000 [ 349.873930][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.873942][T15659] R13: 0000000000000000 R14: 00007ffb64bb5fa0 R15: 00007ffebd9637b8 [ 349.873975][T15659] [ 350.194991][T15657] pim6reg1: entered allmulticast mode [ 350.249847][T15668] bridge21: entered allmulticast mode [ 350.271816][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2971'. [ 350.338378][T15666] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2967'. [ 350.411961][T15679] bridge5: entered allmulticast mode [ 350.504815][T15657] bond4 (unregistering): Released all slaves [ 350.848868][T15698] IPVS: Scheduler module ip_vs_sip not found [ 350.959741][T15708] lo speed is unknown, defaulting to 1000 [ 351.166459][T15718] __nla_validate_parse: 2 callbacks suppressed [ 351.166479][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'. [ 351.235227][T15716] bridge22: entered allmulticast mode [ 351.454696][T15724] tipc: Started in network mode [ 351.500002][T15724] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 351.553921][T15724] tipc: Enabling of bearer rejected, failed to enable media [ 351.855592][ C0] net_ratelimit: 16 callbacks suppressed [ 351.855612][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.100661][T15734] bridge23: entered allmulticast mode [ 352.173134][T15749] lo speed is unknown, defaulting to 1000 [ 352.381578][T15761] bridge6: entered allmulticast mode [ 352.598817][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3003'. [ 352.622633][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3003'. [ 352.700692][T15781] bridge23: entered allmulticast mode [ 352.783177][T15784] IPVS: Scheduler module ip_vs_sip not found [ 352.815274][T15782] lo speed is unknown, defaulting to 1000 [ 352.895588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.063711][T15793] can: request_module (can-proto-3) failed. [ 353.484718][T15822] ------------[ cut here ]------------ [ 353.490750][T15822] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 353.498299][T15822] index 255 is out of range for type 'const int[12]' [ 353.505014][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.4.3016 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 353.505063][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.505075][T15822] Call Trace: [ 353.505084][T15822] [ 353.505097][T15822] dump_stack_lvl+0x189/0x250 [ 353.505136][T15822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.505183][T15822] ? __pfx__printk+0x10/0x10 [ 353.505208][T15822] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 353.505230][T15822] ? __sctp_connect+0x5ba/0xd50 [ 353.505252][T15822] ? __sys_connect+0x313/0x440 [ 353.505272][T15822] ? __x64_sys_connect+0x7a/0x90 [ 353.505291][T15822] ? do_syscall_64+0xf6/0x210 [ 353.505333][T15822] ubsan_epilogue+0xa/0x40 [ 353.505353][T15822] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 353.505386][T15822] ip6_rt_copy_init+0x8e7/0x970 [ 353.505423][T15822] ip6_pol_route+0xbac/0x1180 [ 353.505443][T15822] ? ip6_pol_route+0x162/0x1180 [ 353.505467][T15822] ? __pfx_ip6_pol_route+0x10/0x10 [ 353.505501][T15822] ? chacha_permute+0x4e6/0xf00 [ 353.505530][T15822] fib6_rule_lookup+0x348/0x6f0 [ 353.505552][T15822] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 353.505573][T15822] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 353.505600][T15822] ? ip6_route_output_flags+0x2e/0x5d0 [ 353.505642][T15822] ip6_route_output_flags+0x364/0x5d0 [ 353.505663][T15822] ? ip6_route_output_flags+0x2e/0x5d0 [ 353.505687][T15822] ip6_dst_lookup_tail+0x1ae/0x1510 [ 353.505738][T15822] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 353.505759][T15822] ? __lock_acquire+0xaac/0xd20 [ 353.505806][T15822] ip6_dst_lookup_flow+0x47/0xe0 [ 353.505829][T15822] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 353.505848][T15822] sctp_v6_get_dst+0x7cc/0x1bc0 [ 353.505865][T15822] ? crng_make_state+0x13a/0x700 [ 353.505890][T15822] ? __pfx_crng_make_state+0x10/0x10 [ 353.505924][T15822] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 353.505941][T15822] ? __asan_memset+0x22/0x50 [ 353.505984][T15822] ? dst_release+0x72/0x1b0 [ 353.506013][T15822] sctp_transport_route+0x115/0x2f0 [ 353.506052][T15822] sctp_assoc_add_peer+0x657/0x13b0 [ 353.506086][T15822] sctp_connect_new_asoc+0x30a/0x690 [ 353.506111][T15822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 353.506135][T15822] ? __ipv6_addr_type+0x14d/0x2f0 [ 353.506163][T15822] ? sctp_inet6_send_verify+0x6e/0x300 [ 353.506181][T15822] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 353.506206][T15822] __sctp_connect+0x5ba/0xd50 [ 353.506241][T15822] ? __pfx___sctp_connect+0x10/0x10 [ 353.506275][T15822] sctp_inet_connect+0x12e/0x1e0 [ 353.506298][T15822] __sys_connect+0x313/0x440 [ 353.506321][T15822] ? __pfx___sys_connect+0x10/0x10 [ 353.506365][T15822] __x64_sys_connect+0x7a/0x90 [ 353.506387][T15822] do_syscall_64+0xf6/0x210 [ 353.506416][T15822] ? clear_bhb_loop+0x45/0xa0 [ 353.506440][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.506457][T15822] RIP: 0033:0x7ffb6498e969 [ 353.506475][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.506490][T15822] RSP: 002b:00007ffb65818038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 353.506509][T15822] RAX: ffffffffffffffda RBX: 00007ffb64bb6080 RCX: 00007ffb6498e969 [ 353.506523][T15822] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000006 [ 353.506534][T15822] RBP: 00007ffb64a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 353.506545][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.506555][T15822] R13: 0000000000000000 R14: 00007ffb64bb6080 R15: 00007ffebd9637b8 [ 353.506585][T15822] [ 353.852412][T15822] ---[ end trace ]--- [ 353.856459][T15822] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 353.863679][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.4.3016 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 353.875780][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.885861][T15822] Call Trace: [ 353.889169][T15822] [ 353.892107][T15822] dump_stack_lvl+0x99/0x250 [ 353.896716][T15822] ? __asan_memcpy+0x40/0x70 [ 353.901342][T15822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.906571][T15822] ? __pfx__printk+0x10/0x10 [ 353.911191][T15822] panic+0x2db/0x790 [ 353.915115][T15822] ? __pfx_panic+0x10/0x10 [ 353.919548][T15822] ? _printk+0xcf/0x120 [ 353.923750][T15822] ? __pfx__printk+0x10/0x10 [ 353.928446][T15822] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 353.933481][T15822] ? __sctp_connect+0x5ba/0xd50 [ 353.938350][T15822] ? __sys_connect+0x313/0x440 [ 353.943126][T15822] ? __x64_sys_connect+0x7a/0x90 [ 353.948070][T15822] ? do_syscall_64+0xf6/0x210 [ 353.952771][T15822] check_panic_on_warn+0x89/0xb0 [ 353.957723][T15822] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 353.963463][T15822] ip6_rt_copy_init+0x8e7/0x970 [ 353.968341][T15822] ip6_pol_route+0xbac/0x1180 [ 353.973027][T15822] ? ip6_pol_route+0x162/0x1180 [ 353.977895][T15822] ? __pfx_ip6_pol_route+0x10/0x10 [ 353.983029][T15822] ? chacha_permute+0x4e6/0xf00 [ 353.987903][T15822] fib6_rule_lookup+0x348/0x6f0 [ 353.992769][T15822] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 353.998499][T15822] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 354.003888][T15822] ? ip6_route_output_flags+0x2e/0x5d0 [ 354.009369][T15822] ip6_route_output_flags+0x364/0x5d0 [ 354.014755][T15822] ? ip6_route_output_flags+0x2e/0x5d0 [ 354.020225][T15822] ip6_dst_lookup_tail+0x1ae/0x1510 [ 354.025444][T15822] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 354.031084][T15822] ? __lock_acquire+0xaac/0xd20 [ 354.035977][T15822] ip6_dst_lookup_flow+0x47/0xe0 [ 354.040935][T15822] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 354.045971][T15822] sctp_v6_get_dst+0x7cc/0x1bc0 [ 354.050825][T15822] ? crng_make_state+0x13a/0x700 [ 354.055782][T15822] ? __pfx_crng_make_state+0x10/0x10 [ 354.061090][T15822] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 354.066378][T15822] ? __asan_memset+0x22/0x50 [ 354.070992][T15822] ? dst_release+0x72/0x1b0 [ 354.075508][T15822] sctp_transport_route+0x115/0x2f0 [ 354.080741][T15822] sctp_assoc_add_peer+0x657/0x13b0 [ 354.085985][T15822] sctp_connect_new_asoc+0x30a/0x690 [ 354.091287][T15822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 354.097121][T15822] ? __ipv6_addr_type+0x14d/0x2f0 [ 354.102187][T15822] ? sctp_inet6_send_verify+0x6e/0x300 [ 354.107671][T15822] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 354.113502][T15822] __sctp_connect+0x5ba/0xd50 [ 354.118206][T15822] ? __pfx___sctp_connect+0x10/0x10 [ 354.123426][T15822] sctp_inet_connect+0x12e/0x1e0 [ 354.128388][T15822] __sys_connect+0x313/0x440 [ 354.133009][T15822] ? __pfx___sys_connect+0x10/0x10 [ 354.138150][T15822] __x64_sys_connect+0x7a/0x90 [ 354.142950][T15822] do_syscall_64+0xf6/0x210 [ 354.147472][T15822] ? clear_bhb_loop+0x45/0xa0 [ 354.152153][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.158048][T15822] RIP: 0033:0x7ffb6498e969 [ 354.162469][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.182098][T15822] RSP: 002b:00007ffb65818038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 354.190534][T15822] RAX: ffffffffffffffda RBX: 00007ffb64bb6080 RCX: 00007ffb6498e969 [ 354.198523][T15822] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000006 [ 354.206504][T15822] RBP: 00007ffb64a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 354.214484][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.222476][T15822] R13: 0000000000000000 R14: 00007ffb64bb6080 R15: 00007ffebd9637b8 [ 354.230469][T15822] [ 354.233855][T15822] Kernel Offset: disabled [ 354.238257][T15822] Rebooting in 86400 seconds..