last executing test programs: 8m26.037777055s ago: executing program 4 (id=435): r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x9, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r0, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 8m25.647525963s ago: executing program 4 (id=439): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffc1, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0800270067d14067f0f1426852a21a96a269"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m25.398198251s ago: executing program 4 (id=443): r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/32, 0x37, 0x20, 0x1, 0x101, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd555}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x9, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x3, 0x6, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0x10, 0xfffffffffffffffc}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0xaf, &(0x7f0000000580)=""/175, 0x40f00, 0x6, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xb, 0xf8bd, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r1], &(0x7f0000000800)=[{0x5, 0x5, 0xb, 0x5}, {0x0, 0x2, 0xf, 0x5}, {0x1, 0x5, 0x5, 0xb}], 0x10, 0xfc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x2d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r8, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m25.167681363s ago: executing program 4 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10000000ed03fb022bbd7000fbdbdf25878fd4ffff50f641661e57e1bf97c3349d3a964fbc20a334bc2700525385cc2c5233bd103fc12519eb189a0931e943b797e7b1dc070dbbc0477b6d930280bf997244fa776950b728162f015849f734964e9b257b6e81b6a734bafc81a1974e"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000440)='rxrpc_propose_ack\x00', r5}, 0x18) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000206010200000000000000000000000004000780c72d94a3fbfa3759e200a5e234f829c08f1876b2"], 0x18}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000203050000000000000000000000000108000100018aa971ea208b3cd4c4308af369bdc113bcf3bdf3ae03b541dac0f5a514ba70aae14388aa117b6febe7102038276ddcb3553016004036c195b49ee8cfa2bf90340e8320392b07fc6c1e742e5346c73b758319d789e962b663ef6cdb59eed058ed9aa7"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030103000000000000000000000001090002000000004806"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bridge_slave_0\x00', @random="01300140ffff"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x1}, 0x81}) accept4(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000480)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 8m25.034328867s ago: executing program 4 (id=451): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) close(0x3) close(0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8m24.78428731s ago: executing program 4 (id=455): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRESOCT=r6, @ANYRESOCT=r7], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1edfeb4d174ac78d17cfee823bf63f53a587b0981273651f2cd985bfbc5f1f1a9e", @ANYRES64=r4, @ANYRES32=r1, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) 8m9.651919257s ago: executing program 32 (id=455): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRESOCT=r6, @ANYRESOCT=r7], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1edfeb4d174ac78d17cfee823bf63f53a587b0981273651f2cd985bfbc5f1f1a9e", @ANYRES64=r4, @ANYRES32=r1, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) 6.665527588s ago: executing program 5 (id=5554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x19, &(0x7f0000000240)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r3, 0xa6, "d991576276606961239592e6137e12532897c32d5959c35b2c8a7631ec8b80601fedae95382a777f6ea783edfd3d75f27994d265e39c227994e6c7d225678088563a47892fde20adcf18a4c7e3e76f6f21621a87cba9bd075e85391440ec682acdb400d1da19f9d4ef1e02929daf79c04aea3cd934fae8997504dcd26435170ad37f066b53dcb846a06316d8ece4d7b0605f60144bb121d9840f214f5dff87913d660da74880"}, &(0x7f0000000040)=0xae) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r3, 0xa6, "d991576276606961239592e6137e12532897c32d5959c35b2c8a7631ec8b80601fedae95382a777f6ea783edfd3d75f27994d265e39c227994e6c7d225678088563a47892fde20adcf18a4c7e3e76f6f21621a87cba9bd075e85391440ec682acdb400d1da19f9d4ef1e02929daf79c04aea3cd934fae8997504dcd26435170ad37f066b53dcb846a06316d8ece4d7b0605f60144bb121d9840f214f5dff87913d660da74880"}, &(0x7f0000000040)=0xae) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000340)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x3}, {0x5, 0x60, 0x6, 0x5}, {0x6, 0x7, 0x1, 0x414}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7) (async) write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7) unshare(0x62040200) (async) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040080) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0xc850}, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000400002c000000030a0101000000000000000003000000090001007a30000000000900030073797a31000000007c000000060a0104000000000000000001000000080009400000000054000480100001800b0001006578746864720000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001005060dbe708000640000000020900010073797a3000000000140000001100010000000000000000000700000a0000"], 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000005080)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) (async) bind$802154_dgram(r7, &(0x7f0000005080)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) write$cgroup_int(r6, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000b000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15, 0xc3072, 0xffffffffffffffff, 0x0) 4.657159264s ago: executing program 2 (id=5570): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000280)=@null) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @private1, 0x10}, @in6={0xa, 0x4e24, 0x2, @local, 0xa}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x48) close(r0) 4.380487238s ago: executing program 3 (id=5574): r0 = socket(0xa, 0x3, 0x3a) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x24000895) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) mmap(&(0x7f0000b01000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x73aa0000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f522ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df785315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x16, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000280), 0x10) (async) connect$can_bcm(r7, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000009a3c5514"], 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0x2, 0x1, 0x0, r6, 0xfffffffd}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0x2, 0x1, 0x0, r6, 0xfffffffd}, 0xc) 4.230494683s ago: executing program 2 (id=5577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x218, 0x218, 0xe8, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff000000, 0xff000000], [0x2642e9eeaa571092, 0xff000000, 0xff000000, 0xffffffff], 'pimreg\x00', 'syzkaller1\x00', {}, {}, 0x5e, 0x8, 0x1, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'team_slave_0\x00', {}, {0xff}, 0x3b, 0x0, 0x4}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xd}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0xa24f03adc74aef50, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x10, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x523) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0xe4da4bea6626a30d, 0x0, 0x2, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 4.017719461s ago: executing program 2 (id=5578): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[], 0x9}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}}, 0x800) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40004140) 3.979996609s ago: executing program 3 (id=5580): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000064845b41db90e0730d0001007564703a73797a3000000038000400140001000a0000007f00001100000000002dc600200002000a00000000000000ff010000000000000000000000004316037c0000"], 0x60}}, 0x0) 3.013146479s ago: executing program 3 (id=5588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x2, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x7, 0x80000008, 0x3ffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r4) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000040)=0x3) r7 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) clock_gettime(0x0, 0x0) nanosleep(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 2.360180783s ago: executing program 1 (id=5590): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a010300000000000000000700000620000000120a01080000000000000000070000050c000640000000000000000540000000160a010200002000000000000000000108000740000000020c00038008000240000000020900020073797a31000000000900010073797a3100000000140000001100010000000000000000000200000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="f3be52063448412ba800000000000000b5ad76edfefbc3e182c8e7a1a00e2543e2d32d6122524eebe2ded050c2c0458da39d9e3a37bc7d9087c340c64fce7a2c71", 0x41}], 0x1, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000600)=""/237, 0xed}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000012c0), &(0x7f0000001300)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000002f80)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003240)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x7fffffff}], 0x4, 0x20, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x20}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x5}, 0x8) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) close(r6) 1.951959499s ago: executing program 5 (id=5591): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) close(r3) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e22, 0xa3, 0xa, 0x30, 0x20, 0x2b}, {0x10, 0x1, 0xa173, 0x2000000000000006, 0x6, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x101}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) r8 = socket(0x2c, 0x4, 0x7) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="470d00000000000000000aab3889d124e32593370000", @ANYRESDEC, @ANYRESDEC=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x2000a011}, 0x0) 1.700578193s ago: executing program 3 (id=5594): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, [0xb0, 0x1, 0x0, 0x38, 0x2320, 0xa5, 0x101, 0x1, 0x1, 0x1, 0x74, 0x5, 0x0, 0xf]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x400, 0x8}, 0x8) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 1.620875407s ago: executing program 1 (id=5596): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES8], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r6, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.410242725s ago: executing program 0 (id=5597): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x2, &(0x7f0000000680)=[{&(0x7f0000000400)="0800b644aecf9b84", 0x8}], 0x1, &(0x7f0000000740), 0x20}, 0x24008004) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x40, 0x40, 0xffffffb8, 0x10000, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x4, 0x4, 0x0, @empty, @empty}}}}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491cea0cfe26d4eef23248000000f858dbb8a19052343fb0411549823ccea08d", 0x3e}, {&(0x7f0000000200)="c67f", 0x2}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000880)={r5, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="a20c", 0x2}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r6, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000240)=""/62, 0x3e}, 0x9}], 0x1, 0x40010103, 0x0) 1.206139863s ago: executing program 1 (id=5598): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x24000010) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={r2, 0x9, 0x3, 0xfff8, 0xfff, 0x99, 0x9, 0xc99b, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xdb, 0x1, 0x8, 0x5}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x9, 0x5}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r3) 1.145681744s ago: executing program 3 (id=5599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000021c0)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x2e}]}, 0x14}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1.130888751s ago: executing program 5 (id=5600): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x10, 0x3, 0x2, 0x30, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x10, 0x6, 0x101}}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x340, 0x13, 0x800, 0x70bd28, 0x25dfdbfc, {0x18, 0x1, 0x7, 0x8, {0x4e22, 0x4e23, [0x7ff, 0xa36, 0x4, 0x1], [0xe606, 0x2, 0x1ff], r1, [0x7, 0x4e1b]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "5a35f598f9162f64cc84a03bbea32aaabedf7efc5a325d4846ec6f87a9cc7d824fd5e231298edf64f447c81bfe26a86eb5e6515ab7db607ee53aea7adc969bb382249d9e402cfd38b901b11acc27897b73117912efadb6590082643efb1267f3115ce04f8be63a50cdcce3ceb3b66cdf726d47f3468bd001626adda76ad0cd804c82d9bc76108f23da015439ead41fcc057e7ea23bd58293e1f41f2b19471bf789a2e226974afb2ebe23017098962f697a0bbc2296a992c3ba7c100090e143568af3bfb275588998cbb594ef8a7d1072e5e3"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "998565a890d99e147121f674295847c5d6aa0bc50a2032fd047b52d50be1100e4bc6539e0fe6687263c524854b2bb1456cbbb78f9c63fa79afb91c873a"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "91fa28d10716a4f796a7908cc73cefe63b843302f07f21dd3efa6543f48a08bff79f3e445fb2895aa7e02c75063bcbf72ffa7620bfa964d81b11ef923a38b74f9e7e697796d7995ea44181792ea901c14e539db7aa301aab8cb1fd39328a6f7a59c51dc29f5abb0aee8b347c7976e504d32ad9c6a1e85e03d9aa4362aa20ca2d404f1ce1f8c9091ae095dab41b9a546e782893f3702b306c7cabc93d1fe0a624dcfab8c6b3741bf8c0d5627d0d9914b8360637325c68198556eb98dffc0000999263cfab1af712ac36434a7bafe8cc8630c35d803d643e7cc9a8340a2b6700c9cae5"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "a9a754e0f69a97eada0b24"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "5dc6eb8b0e9618ca34d3a2d4d4feac33e3197fdb0c5ad0829ca93b4a017d7670540590ecca423d782f1b74cbcc4bb5c563c5da19ef50bc04766c0c77803f6886026ffb0cae1e6b2b2e5b487af49efdd13241545fbed9f20e42a81335765695b9d69fc9bf1a19896a1bd01f067f124bd41b90612e7a528a787f6e8c7886ac15c1caecb362b36060e06ac68d49c685fd4405a77c1cacd2e4fa68d897550a421b098d4c34b59efe93698b908604cd0c80f862e51a0becc475d79267983921bb0f3e4ca664df7776bc2207d4b77fde41d5fc667bbbbafd553a8467829c"}]}, 0x340}, 0x1, 0x0, 0x0, 0x80010}, 0x48001) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000400)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f0000001880)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="66a42e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)='$`^', 0x3}], 0x1}}], 0x2, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x120, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0xa4, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10000}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)={r8}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r10}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x8, 0x1c, &(0x7f0000001340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2800}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff4, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r12}, 0x10) getgid() sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0x35}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b28c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f43799200"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdaf, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c4867599a5bd8d7abd06bd74"}, 0x24}, 0x1, 0x0, 0x0, 0x48055}, 0x400c040) 1.077919774s ago: executing program 1 (id=5601): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0xfffe, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x7}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x80, 0x4, 0xfe, 0x0, 0xfe, 0x2, 0x800}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400200, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f00000001c0)=0x3) 1.001625206s ago: executing program 2 (id=5602): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000008040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x0, 0x7}) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000008040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x0, 0x7}) (async) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) (async) 964.325211ms ago: executing program 0 (id=5603): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f3537d5d2cca700000000000000000506060748ef010200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000001) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$llc(r5, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0xf6, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x9fccca57a32e910d, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2571, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000440)={0xe161, 0x1}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r10, @ANYRES64=r7, @ANYBLOB="6e099024aec2ddcf5009d958150bce73116791b5db9296b386cc946e467b2d3fd89b1696c8df7dc12db98e2592a83497a619ce6f7e270f751145cbb3d2028d", @ANYRESDEC=r2, @ANYRESHEX], 0xa0}, 0x1, 0x0, 0x0, 0xd24f4d5758669583}, 0x40844) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 958.553407ms ago: executing program 3 (id=5604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x2, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x7, 0x80000008, 0x3ffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r4) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000040)=0x3) r7 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) clock_gettime(0x0, 0x0) nanosleep(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) 858.350139ms ago: executing program 5 (id=5605): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8000, 0x4, 0x80000001}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) close(0x4) 805.514632ms ago: executing program 1 (id=5606): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'syz_tun\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x227}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40013}, 0x1) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f00000005c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc6a8eb07aaa917e31a6f8e10a53bbf9c73e5d07"}}}}}, 0xd9) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a5654664601e3b70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)=@getstats={0x1c, 0x5e, 0x101, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r8}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f0000000280)}, 0x10) 804.826839ms ago: executing program 2 (id=5607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83b"], 0xffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r9, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000003480)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="f4", 0x1}], 0x1}}], 0x1, 0x24040800) 715.895703ms ago: executing program 0 (id=5608): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffc1, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0xb8}}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0800270067d14067f0f1426852a21a96a269"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 493.645803ms ago: executing program 0 (id=5609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@flushpolicy={0xa0, 0x1d, 0x3, 0x70bd2d, 0x25dfdbfc}, 0xa0}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb012d18"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb4, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x28050}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000"], 0x18}}], 0x1, 0x4c0c0) 320.181647ms ago: executing program 1 (id=5610): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) close(r3) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e22, 0xa3, 0xa, 0x30, 0x20, 0x2b}, {0x10, 0x1, 0xa173, 0x2000000000000006, 0x6, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x101}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) r8 = socket(0x2c, 0x4, 0x7) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="470d00000000000000000aab3889d124e32593370000", @ANYRESDEC, @ANYRESDEC=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x2000a011}, 0x0) 319.818868ms ago: executing program 5 (id=5611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 231.558026ms ago: executing program 0 (id=5612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) 165.91659ms ago: executing program 5 (id=5613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="7b4a59ecf2ad7b3875b7d8990befc84bbc4bc14bd8c8d6e185491c26f3f018f8c30344ac51b5765c5763377955d6c52e978a9f6f901a680c491a6bc61ac8d158f5e26d9f65954af48a0e53799ab49e3b0f82b161a6201e4e7cced1cc8a85ab72d54917fbfb4853d9b1bc7d2b982de868d64bac7fa6cbcf6d374137a567a823d958a69ba75521b0e360"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10000000ed03fb022bbd7000fbdbdf25878fd4ffff50f641661e57e1bf97c3349d3a964fbc20a334bc2700525385cc2c5233bd103fc12519eb189a0931e943b797e7b1dc070dbbc0477b6d930280bf997244fa776950b728162f015849f734964e9b257b6e81b6a734bafc81a1974e"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x200}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="c2000000bbbbbbbbbbbbbaaaaaaaaad0009c210000000000003727d8e967749a187c604c4c7f5c828473e77e26627a0a8dd783521363a7ba0d2c88bc626daa7cc9c04f8b0143469f8b8d312b6c65c6aed3fda8ad035fd1eec84f00c4a265c0fc5f41de5396170400000000dfc37a3f59e233fada36c01a8ba379105a039816f1b0cda82f2f0d19b4"], 0xd6) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0x7, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x200048d1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000440)='rxrpc_propose_ack\x00', r7}, 0x18) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000206010200000000000000000000000004000780c72d94a3fbfa3759e200a5e234f829c08f1876b2"], 0x18}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000203050000000000000000000000000108000100018aa971ea208b3cd4c4308af369bdc113bcf3bdf3ae03b541dac0f5a514ba70aae14388aa117b6febe7102038276ddcb3553016004036c195b49ee8cfa2bf90340e8320392b07fc6c1e742e5346c73b758319d789e962b663ef6cdb59eed058ed9aa7"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030103000000000000000000000001090002000000004806"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bridge_slave_0\x00', @random}) 1.736522ms ago: executing program 0 (id=5614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xa8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000600)={@local, @multicast1, 0x0}, &(0x7f0000000640)=0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x20008040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x7c, 0x2, 0x40, @empty, @mcast2, 0x7800, 0x20, 0x9, 0x7f}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x8, 0x20, 0xa, 0x9, {{0x3f, 0x4, 0x0, 0x3, 0xfc, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1b, 0x91, [@multicast1, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x14, 0x3, 0x3, [{@multicast2}, {@loopback, 0x7}, {@private=0xa010101, 0x611}, {@multicast2, 0x6}, {@remote, 0x361}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "6d7f6ea1ed21e3233e4cdd59aaf86490"}, {0x0, 0x6, "1788d0dc"}, {0x0, 0x10, "08fab2906334049a07598dc8e3fa"}, {0x0, 0x5, "99d73e"}, {0x2, 0x9, "361f42f78c3cf0"}, {0x3, 0x6, "81323bc5"}]}, @timestamp_prespec={0x44, 0x1c, 0x11, 0x3, 0xd, [{@local, 0x1bc}, {@private=0xa010100, 0xe6a}, {@loopback, 0x9}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@private=0xa010100, 0x7}, {@private=0xa010101, 0x80}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x15}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x401, 0x5, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@generic={0x86, 0x3, 'O'}, @timestamp={0x44, 0x18, 0xd9, 0x0, 0x5, [0x8, 0x8, 0x6, 0x2, 0x7]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'tunl0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a00)={@multicast2, @multicast2, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xf4, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) 0s ago: executing program 2 (id=5615): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x4, 0x6, @vifc_lcl_addr=@empty, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xff00) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000810) sendto$inet6(r3, &(0x7f0000000240)="72611fa88cccd0c64a7a8f3fe5c1cfeab6", 0x11, 0x2004c804, &(0x7f00000003c0)={0xa, 0x4e22, 0x4, @mcast2, 0x8}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): les+0x2a/0x420 [ 554.063287][T20145] ? __fget_files+0x3a0/0x420 [ 554.063325][T20145] __x64_sys_sendmsg+0x19b/0x260 [ 554.063360][T20145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.063408][T20145] ? do_syscall_64+0xba/0x210 [ 554.063439][T20145] do_syscall_64+0xf6/0x210 [ 554.063460][T20145] ? clear_bhb_loop+0x60/0xb0 [ 554.063482][T20145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.063502][T20145] RIP: 0033:0x7ff2c4b8e969 [ 554.063521][T20145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.063539][T20145] RSP: 002b:00007ff2c5a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.063561][T20145] RAX: ffffffffffffffda RBX: 00007ff2c4db5fa0 RCX: 00007ff2c4b8e969 [ 554.063576][T20145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 554.063589][T20145] RBP: 00007ff2c5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.063602][T20145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.063614][T20145] R13: 0000000000000000 R14: 00007ff2c4db5fa0 R15: 00007ffc33a569e8 [ 554.063647][T20145] [ 554.442276][T20155] netlink: 'syz.2.4819': attribute type 10 has an invalid length. [ 554.532386][T20158] netlink: 'syz.5.4818': attribute type 10 has an invalid length. [ 554.567481][T20158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4818'. [ 554.585343][T20161] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4821'. [ 554.675754][T20163] : entered promiscuous mode [ 555.008619][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4828'. [ 555.037950][T20177] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4829'. [ 555.082579][T20180] FAULT_INJECTION: forcing a failure. [ 555.082579][T20180] name failslab, interval 1, probability 0, space 0, times 0 [ 555.100360][T20177] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4829'. [ 555.109547][T20180] CPU: 1 UID: 0 PID: 20180 Comm: syz.0.4827 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 555.109577][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.109591][T20180] Call Trace: [ 555.109604][T20180] [ 555.109614][T20180] dump_stack_lvl+0x189/0x250 [ 555.109653][T20180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.109683][T20180] ? __pfx__printk+0x10/0x10 [ 555.109712][T20180] ? ref_tracker_alloc+0x318/0x460 [ 555.109740][T20180] should_fail_ex+0x414/0x560 [ 555.109768][T20180] should_failslab+0xa8/0x100 [ 555.109799][T20180] kmem_cache_alloc_noprof+0x73/0x3c0 [ 555.109825][T20180] ? skb_clone+0x212/0x3a0 [ 555.109851][T20180] skb_clone+0x212/0x3a0 [ 555.109876][T20180] __netlink_deliver_tap+0x404/0x850 [ 555.109921][T20180] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.109960][T20180] netlink_deliver_tap+0x19c/0x1b0 [ 555.109990][T20180] netlink_unicast+0x72f/0x8d0 [ 555.110029][T20180] netlink_sendmsg+0x805/0xb30 [ 555.110070][T20180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.110116][T20180] ? aa_sock_msg_perm+0x94/0x160 [ 555.110141][T20180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.110164][T20180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.110194][T20180] __sock_sendmsg+0x219/0x270 [ 555.110222][T20180] ____sys_sendmsg+0x52d/0x830 [ 555.110257][T20180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.110297][T20180] ? import_iovec+0x74/0xa0 [ 555.110329][T20180] ___sys_sendmsg+0x21f/0x2a0 [ 555.110362][T20180] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.110430][T20180] ? __fget_files+0x2a/0x420 [ 555.110457][T20180] ? __fget_files+0x3a0/0x420 [ 555.110495][T20180] __sys_sendmmsg+0x227/0x430 [ 555.110532][T20180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 555.110574][T20180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 555.110619][T20180] ? ksys_write+0x1f0/0x250 [ 555.110641][T20180] ? rcu_is_watching+0x15/0xb0 [ 555.110672][T20180] __x64_sys_sendmmsg+0xa0/0xc0 [ 555.110706][T20180] do_syscall_64+0xf6/0x210 [ 555.110731][T20180] ? clear_bhb_loop+0x60/0xb0 [ 555.110756][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.110775][T20180] RIP: 0033:0x7ff2c4b8e969 [ 555.110791][T20180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.110808][T20180] RSP: 002b:00007ff2c5a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 555.110827][T20180] RAX: ffffffffffffffda RBX: 00007ff2c4db5fa0 RCX: 00007ff2c4b8e969 [ 555.110839][T20180] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 555.110849][T20180] RBP: 00007ff2c5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 555.110860][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.110869][T20180] R13: 0000000000000000 R14: 00007ff2c4db5fa0 R15: 00007ffc33a569e8 [ 555.110895][T20180] [ 555.428752][T20171] syzkaller1: entered promiscuous mode [ 555.438203][T20171] syzkaller1: entered allmulticast mode [ 555.468609][T20187] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 555.510735][T20188] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 555.695278][T20196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4831'. [ 555.758170][T20187] bond1: entered promiscuous mode [ 555.764190][T20187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.809205][T20189] bond1: (slave bridge20): making interface the new active one [ 555.818359][T20189] bridge20: entered promiscuous mode [ 555.849418][T20189] bond1: (slave bridge20): Enslaving as an active interface with an up link [ 555.867469][T20196] vlan0: entered allmulticast mode [ 555.874111][T20196] bridge_slave_0: entered allmulticast mode [ 556.100538][T20213] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4839'. [ 556.142771][T20214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4838'. [ 556.218332][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.422540][T20223] netlink: 'syz.3.4842': attribute type 10 has an invalid length. [ 556.581061][T20234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4846'. [ 556.948764][T20251] wg2: entered promiscuous mode [ 556.964650][T20251] wg2: entered allmulticast mode [ 557.129152][T20242] lo speed is unknown, defaulting to 1000 [ 557.488809][T20262] lo speed is unknown, defaulting to 1000 [ 557.575309][T20275] macvtap1: entered promiscuous mode [ 557.582214][T20275] macvtap1: entered allmulticast mode [ 557.593961][T20275] team0: entered allmulticast mode [ 557.607334][T20275] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 557.638514][T20277] team0: left allmulticast mode [ 557.834844][T20242] dummy0 speed is unknown, defaulting to 1000 [ 558.006765][T20287] FAULT_INJECTION: forcing a failure. [ 558.006765][T20287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.048847][T20287] CPU: 1 UID: 0 PID: 20287 Comm: syz.5.4863 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 558.048878][T20287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.048891][T20287] Call Trace: [ 558.048900][T20287] [ 558.048909][T20287] dump_stack_lvl+0x189/0x250 [ 558.048942][T20287] ? __lock_acquire+0xaac/0xd20 [ 558.049008][T20287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.049038][T20287] ? __pfx__printk+0x10/0x10 [ 558.049060][T20287] ? __might_fault+0xb0/0x130 [ 558.049101][T20287] should_fail_ex+0x414/0x560 [ 558.049130][T20287] _copy_from_user+0x2d/0xb0 [ 558.049161][T20287] ___sys_recvmsg+0x12e/0x510 [ 558.049189][T20287] ? __pfx____sys_recvmsg+0x10/0x10 [ 558.049244][T20287] ? __might_fault+0xb0/0x130 [ 558.049275][T20287] do_recvmmsg+0x307/0x760 [ 558.049305][T20287] ? __pfx_do_recvmmsg+0x10/0x10 [ 558.049340][T20287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.049385][T20287] __x64_sys_recvmmsg+0x190/0x240 [ 558.049404][T20287] ? rcu_is_watching+0x15/0xb0 [ 558.049423][T20287] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 558.049444][T20287] ? do_syscall_64+0xba/0x210 [ 558.049467][T20287] do_syscall_64+0xf6/0x210 [ 558.049491][T20287] ? clear_bhb_loop+0x60/0xb0 [ 558.049516][T20287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.049536][T20287] RIP: 0033:0x7f180ed8e969 [ 558.049555][T20287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.049573][T20287] RSP: 002b:00007f180fb6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 558.049595][T20287] RAX: ffffffffffffffda RBX: 00007f180efb5fa0 RCX: 00007f180ed8e969 [ 558.049610][T20287] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000004 [ 558.049625][T20287] RBP: 00007f180fb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 558.049638][T20287] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 558.049651][T20287] R13: 0000000000000000 R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 558.049682][T20287] [ 558.465327][T20298] netlink: 'syz.0.4866': attribute type 1 has an invalid length. [ 558.698063][T20307] netlink: 'syz.5.4868': attribute type 1 has an invalid length. [ 558.816830][T20310] __nla_validate_parse: 7 callbacks suppressed [ 558.816851][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4869'. [ 558.849237][T20310] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4869'. [ 558.921480][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4869'. [ 559.191866][T20262] dummy0 speed is unknown, defaulting to 1000 [ 559.206773][T20321] netlink: 'syz.2.4873': attribute type 5 has an invalid length. [ 559.244127][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 559.446387][T20327] geneve2: entered allmulticast mode [ 559.696424][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'. [ 560.949885][T20355] lo speed is unknown, defaulting to 1000 [ 561.071020][T20367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4890'. [ 561.092126][T20365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4889'. [ 561.103870][T20367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4890'. [ 561.366153][T20355] dummy0 speed is unknown, defaulting to 1000 [ 561.415489][T20375] FAULT_INJECTION: forcing a failure. [ 561.415489][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 561.451015][T20375] CPU: 0 UID: 0 PID: 20375 Comm: syz.2.4892 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 561.451044][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.451056][T20375] Call Trace: [ 561.451064][T20375] [ 561.451073][T20375] dump_stack_lvl+0x189/0x250 [ 561.451106][T20375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.451132][T20375] ? __pfx__printk+0x10/0x10 [ 561.451153][T20375] ? __pfx___might_resched+0x10/0x10 [ 561.451171][T20375] ? fs_reclaim_acquire+0x7d/0x100 [ 561.451202][T20375] should_fail_ex+0x414/0x560 [ 561.451227][T20375] should_failslab+0xa8/0x100 [ 561.451253][T20375] __kmalloc_noprof+0xcb/0x4f0 [ 561.451275][T20375] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 561.451292][T20375] ? sock_kmalloc+0xd6/0x160 [ 561.451314][T20375] sock_kmalloc+0xd6/0x160 [ 561.451334][T20375] af_alg_sendmsg+0x103a/0x22d0 [ 561.451374][T20375] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 561.451393][T20375] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.451410][T20375] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 561.451465][T20375] ? aa_sock_msg_perm+0x94/0x160 [ 561.451489][T20375] ? skcipher_sendmsg+0x26/0xf0 [ 561.451509][T20375] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 561.451533][T20375] __sock_sendmsg+0x219/0x270 [ 561.451559][T20375] ____sys_sendmsg+0x505/0x830 [ 561.451594][T20375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.451632][T20375] ? import_iovec+0x74/0xa0 [ 561.451664][T20375] ___sys_sendmsg+0x21f/0x2a0 [ 561.451694][T20375] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.451761][T20375] ? __fget_files+0x2a/0x420 [ 561.451785][T20375] ? __fget_files+0x3a0/0x420 [ 561.451821][T20375] __x64_sys_sendmsg+0x19b/0x260 [ 561.451853][T20375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.451899][T20375] ? do_syscall_64+0xba/0x210 [ 561.451926][T20375] do_syscall_64+0xf6/0x210 [ 561.451949][T20375] ? clear_bhb_loop+0x60/0xb0 [ 561.451972][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.451991][T20375] RIP: 0033:0x7f449c78e969 [ 561.452008][T20375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.452025][T20375] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.452045][T20375] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 561.452060][T20375] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000009 [ 561.452072][T20375] RBP: 00007f449d595090 R08: 0000000000000000 R09: 0000000000000000 [ 561.452085][T20375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.452096][T20375] R13: 0000000000000000 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 561.452127][T20375] [ 562.167305][T20382] netlink: 'syz.2.4895': attribute type 7 has an invalid length. [ 562.457644][T20393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4899'. [ 562.669028][T20401] FAULT_INJECTION: forcing a failure. [ 562.669028][T20401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.689073][T20401] CPU: 1 UID: 0 PID: 20401 Comm: syz.0.4901 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 562.689105][T20401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.689118][T20401] Call Trace: [ 562.689134][T20401] [ 562.689144][T20401] dump_stack_lvl+0x189/0x250 [ 562.689177][T20401] ? __lock_acquire+0xaac/0xd20 [ 562.689210][T20401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.689241][T20401] ? __pfx__printk+0x10/0x10 [ 562.689263][T20401] ? __might_fault+0xb0/0x130 [ 562.689303][T20401] should_fail_ex+0x414/0x560 [ 562.689341][T20401] _copy_from_user+0x2d/0xb0 [ 562.689373][T20401] ___sys_sendmsg+0x158/0x2a0 [ 562.689408][T20401] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.689476][T20401] ? __fget_files+0x2a/0x420 [ 562.689503][T20401] ? __fget_files+0x3a0/0x420 [ 562.689540][T20401] __x64_sys_sendmsg+0x19b/0x260 [ 562.689574][T20401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.689623][T20401] ? do_syscall_64+0xba/0x210 [ 562.689652][T20401] do_syscall_64+0xf6/0x210 [ 562.689677][T20401] ? clear_bhb_loop+0x60/0xb0 [ 562.689711][T20401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.689731][T20401] RIP: 0033:0x7ff2c4b8e969 [ 562.689751][T20401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.689768][T20401] RSP: 002b:00007ff2c5a6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.689791][T20401] RAX: ffffffffffffffda RBX: 00007ff2c4db6080 RCX: 00007ff2c4b8e969 [ 562.689805][T20401] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 562.689819][T20401] RBP: 00007ff2c5a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 562.689832][T20401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.689845][T20401] R13: 0000000000000001 R14: 00007ff2c4db6080 R15: 00007ffc33a569e8 [ 562.689884][T20401] [ 563.002169][T20404] 8021q: VLANs not supported on gre0 [ 563.039756][T20406] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4903'. [ 563.148018][T20408] FAULT_INJECTION: forcing a failure. [ 563.148018][T20408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.198181][T20408] CPU: 0 UID: 0 PID: 20408 Comm: syz.5.4907 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 563.198214][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.198227][T20408] Call Trace: [ 563.198236][T20408] [ 563.198245][T20408] dump_stack_lvl+0x189/0x250 [ 563.198277][T20408] ? __lock_acquire+0xaac/0xd20 [ 563.198310][T20408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.198340][T20408] ? __pfx__printk+0x10/0x10 [ 563.198361][T20408] ? __might_fault+0xb0/0x130 [ 563.198401][T20408] should_fail_ex+0x414/0x560 [ 563.198430][T20408] _copy_from_user+0x2d/0xb0 [ 563.198467][T20408] sctp_getsockopt_pr_assocstatus+0xca/0x690 [ 563.198499][T20408] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.198528][T20408] ? __pfx_sctp_getsockopt_pr_assocstatus+0x10/0x10 [ 563.198556][T20408] ? __local_bh_enable_ip+0x12d/0x1c0 [ 563.198593][T20408] sctp_getsockopt+0xb06/0xb60 [ 563.198627][T20408] do_sock_getsockopt+0x35d/0x650 [ 563.198661][T20408] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 563.198690][T20408] ? do_syscall_64+0x40/0x210 [ 563.198712][T20408] ? __fget_files+0x2a/0x420 [ 563.198739][T20408] ? __fget_files+0x3a0/0x420 [ 563.198765][T20408] ? __fget_files+0x2a/0x420 [ 563.198800][T20408] __x64_sys_getsockopt+0x1a5/0x250 [ 563.198829][T20408] ? do_syscall_64+0x40/0x210 [ 563.198854][T20408] ? do_syscall_64+0x40/0x210 [ 563.198881][T20408] do_syscall_64+0xf6/0x210 [ 563.198905][T20408] ? clear_bhb_loop+0x60/0xb0 [ 563.198931][T20408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.198951][T20408] RIP: 0033:0x7f180ed8e969 [ 563.198987][T20408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.199006][T20408] RSP: 002b:00007f180fb6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 563.199028][T20408] RAX: ffffffffffffffda RBX: 00007f180efb5fa0 RCX: 00007f180ed8e969 [ 563.199043][T20408] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 563.199056][T20408] RBP: 00007f180fb6c090 R08: 0000200000000240 R09: 0000000000000000 [ 563.199071][T20408] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 563.199084][T20408] R13: 0000000000000000 R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 563.199118][T20408] [ 563.588932][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.597077][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.598386][T20423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4912'. [ 563.619687][T20425] netlink: 'syz.5.4911': attribute type 1 has an invalid length. [ 563.696504][T20426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.517969][T20460] netlink: 'syz.5.4923': attribute type 1 has an invalid length. [ 564.576759][T20462] __nla_validate_parse: 1 callbacks suppressed [ 564.576847][T20462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4923'. [ 564.612791][T20460] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4923'. [ 564.617076][T20464] FAULT_INJECTION: forcing a failure. [ 564.617076][T20464] name failslab, interval 1, probability 0, space 0, times 0 [ 564.639646][T20464] CPU: 0 UID: 0 PID: 20464 Comm: syz.2.4926 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 564.639669][T20464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.639679][T20464] Call Trace: [ 564.639686][T20464] [ 564.639694][T20464] dump_stack_lvl+0x189/0x250 [ 564.639723][T20464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.639745][T20464] ? __pfx__printk+0x10/0x10 [ 564.639765][T20464] ? __pfx___might_resched+0x10/0x10 [ 564.639784][T20464] should_fail_ex+0x414/0x560 [ 564.639804][T20464] should_failslab+0xa8/0x100 [ 564.639826][T20464] kmem_cache_alloc_noprof+0x73/0x3c0 [ 564.639846][T20464] ? skb_clone+0x212/0x3a0 [ 564.639864][T20464] skb_clone+0x212/0x3a0 [ 564.639876][T20464] ? netlink_broadcast_filtered+0x64b/0x1140 [ 564.639899][T20464] netlink_broadcast_filtered+0x659/0x1140 [ 564.639925][T20464] ? __build_skb_around+0x257/0x3e0 [ 564.639948][T20464] ? netlink_sendmsg+0x642/0xb30 [ 564.639973][T20464] netlink_sendmsg+0x7ae/0xb30 [ 564.640002][T20464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.640026][T20464] ? aa_sock_msg_perm+0x94/0x160 [ 564.640046][T20464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.640064][T20464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.640086][T20464] __sock_sendmsg+0x219/0x270 [ 564.640122][T20464] ____sys_sendmsg+0x505/0x830 [ 564.640149][T20464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.640177][T20464] ? import_iovec+0x74/0xa0 [ 564.640213][T20464] ___sys_sendmsg+0x21f/0x2a0 [ 564.640236][T20464] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.640293][T20464] ? __fget_files+0x2a/0x420 [ 564.640322][T20464] ? __fget_files+0x3a0/0x420 [ 564.640367][T20464] __x64_sys_sendmsg+0x19b/0x260 [ 564.640397][T20464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.640442][T20464] ? do_syscall_64+0xba/0x210 [ 564.640469][T20464] do_syscall_64+0xf6/0x210 [ 564.640492][T20464] ? clear_bhb_loop+0x60/0xb0 [ 564.640516][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.640537][T20464] RIP: 0033:0x7f449c78e969 [ 564.640550][T20464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.640561][T20464] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.640575][T20464] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 564.640585][T20464] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 564.640594][T20464] RBP: 00007f449d595090 R08: 0000000000000000 R09: 0000000000000000 [ 564.640603][T20464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.640611][T20464] R13: 0000000000000000 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 564.640632][T20464] [ 565.353751][T20485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4935'. [ 565.364063][T20485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4935'. [ 565.376490][T20485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4935'. [ 565.409164][T20488] tipc: Enabling of bearer rejected, already enabled [ 565.420100][T20489] syz_tun: entered allmulticast mode [ 565.485242][T20489] dvmrp1: entered allmulticast mode [ 565.493103][T20489] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4934'. [ 565.542654][T20494] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 565.562680][T20489] syz_tun (unregistering): left allmulticast mode [ 565.932949][T20507] bond0: (slave bond_slave_0): Releasing backup interface [ 565.947874][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4945'. [ 565.959796][T20507] bond0: (slave bond_slave_1): Releasing backup interface [ 566.018160][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4944'. [ 566.080885][T20507] team0: Port device team_slave_0 removed [ 566.142814][T20507] team0: Port device team_slave_1 removed [ 566.164453][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.176829][T20507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.191136][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.198879][T20507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.268167][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4946'. [ 566.282212][T20518] tipc: Started in network mode [ 566.287212][T20518] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 566.298696][T20518] tipc: Enabling of bearer rejected, failed to enable media [ 566.441800][T20528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4950'. [ 566.485336][T20528] IPVS: Error connecting to the multicast addr [ 566.780444][T20549] 8021q: VLANs not supported on gre0 [ 566.912047][T20555] FAULT_INJECTION: forcing a failure. [ 566.912047][T20555] name failslab, interval 1, probability 0, space 0, times 0 [ 566.929525][T20555] CPU: 0 UID: 0 PID: 20555 Comm: syz.3.4961 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 566.929558][T20555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.929572][T20555] Call Trace: [ 566.929581][T20555] [ 566.929590][T20555] dump_stack_lvl+0x189/0x250 [ 566.929629][T20555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.929659][T20555] ? __pfx__printk+0x10/0x10 [ 566.929688][T20555] ? ref_tracker_alloc+0x318/0x460 [ 566.929718][T20555] should_fail_ex+0x414/0x560 [ 566.929746][T20555] should_failslab+0xa8/0x100 [ 566.929776][T20555] kmem_cache_alloc_noprof+0x73/0x3c0 [ 566.929803][T20555] ? skb_clone+0x212/0x3a0 [ 566.929827][T20555] skb_clone+0x212/0x3a0 [ 566.929850][T20555] __netlink_deliver_tap+0x404/0x850 [ 566.929894][T20555] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.929925][T20555] netlink_deliver_tap+0x19c/0x1b0 [ 566.929956][T20555] netlink_unicast+0x72f/0x8d0 [ 566.930010][T20555] netlink_sendmsg+0x805/0xb30 [ 566.930049][T20555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.930082][T20555] ? aa_sock_msg_perm+0x94/0x160 [ 566.930110][T20555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.930136][T20555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.930168][T20555] __sock_sendmsg+0x219/0x270 [ 566.930207][T20555] ____sys_sendmsg+0x505/0x830 [ 566.930243][T20555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.930286][T20555] ? import_iovec+0x74/0xa0 [ 566.930319][T20555] ___sys_sendmsg+0x21f/0x2a0 [ 566.930351][T20555] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.930422][T20555] ? __fget_files+0x2a/0x420 [ 566.930449][T20555] ? __fget_files+0x3a0/0x420 [ 566.930487][T20555] __x64_sys_sendmsg+0x19b/0x260 [ 566.930520][T20555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.930569][T20555] ? do_syscall_64+0xba/0x210 [ 566.930597][T20555] do_syscall_64+0xf6/0x210 [ 566.930622][T20555] ? clear_bhb_loop+0x60/0xb0 [ 566.930648][T20555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.930667][T20555] RIP: 0033:0x7f2e7958e969 [ 566.930686][T20555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.930703][T20555] RSP: 002b:00007f2e7a47c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.930724][T20555] RAX: ffffffffffffffda RBX: 00007f2e797b5fa0 RCX: 00007f2e7958e969 [ 566.930738][T20555] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 566.930751][T20555] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 566.930763][T20555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.930774][T20555] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 566.930804][T20555] [ 567.203924][T20561] netlink: 'syz.5.4962': attribute type 1 has an invalid length. [ 567.270535][T20555] tipc: Started in network mode [ 567.275682][T20555] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 567.290693][T20555] tipc: Enabling of bearer rejected, failed to enable media [ 567.483617][T20573] tipc: Enabling of bearer rejected, already enabled [ 567.855869][T20593] netlink: 'syz.0.4972': attribute type 11 has an invalid length. [ 567.946678][T20597] FAULT_INJECTION: forcing a failure. [ 567.946678][T20597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.972021][T20597] CPU: 0 UID: 0 PID: 20597 Comm: syz.5.4973 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 567.972065][T20597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.972078][T20597] Call Trace: [ 567.972086][T20597] [ 567.972096][T20597] dump_stack_lvl+0x189/0x250 [ 567.972126][T20597] ? __lock_acquire+0xaac/0xd20 [ 567.972156][T20597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.972183][T20597] ? __pfx__printk+0x10/0x10 [ 567.972203][T20597] ? __might_fault+0xb0/0x130 [ 567.972240][T20597] should_fail_ex+0x414/0x560 [ 567.972267][T20597] _copy_from_user+0x2d/0xb0 [ 567.972296][T20597] ___sys_sendmsg+0x158/0x2a0 [ 567.972326][T20597] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.972388][T20597] ? __fget_files+0x2a/0x420 [ 567.972412][T20597] ? __fget_files+0x3a0/0x420 [ 567.972447][T20597] __x64_sys_sendmsg+0x19b/0x260 [ 567.972478][T20597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.972521][T20597] ? do_syscall_64+0xba/0x210 [ 567.972547][T20597] do_syscall_64+0xf6/0x210 [ 567.972569][T20597] ? clear_bhb_loop+0x60/0xb0 [ 567.972592][T20597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.972611][T20597] RIP: 0033:0x7f180ed8e969 [ 567.972628][T20597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.972644][T20597] RSP: 002b:00007f180fb6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.972665][T20597] RAX: ffffffffffffffda RBX: 00007f180efb5fa0 RCX: 00007f180ed8e969 [ 567.972679][T20597] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 567.972691][T20597] RBP: 00007f180fb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 567.972703][T20597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.972714][T20597] R13: 0000000000000000 R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 567.972744][T20597] [ 568.587450][T20616] FAULT_INJECTION: forcing a failure. [ 568.587450][T20616] name failslab, interval 1, probability 0, space 0, times 0 [ 568.603279][T20616] CPU: 0 UID: 0 PID: 20616 Comm: syz.1.4980 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 568.603308][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.603319][T20616] Call Trace: [ 568.603326][T20616] [ 568.603335][T20616] dump_stack_lvl+0x189/0x250 [ 568.603368][T20616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.603394][T20616] ? __pfx__printk+0x10/0x10 [ 568.603418][T20616] ? __pfx___might_resched+0x10/0x10 [ 568.603441][T20616] should_fail_ex+0x414/0x560 [ 568.603465][T20616] should_failslab+0xa8/0x100 [ 568.603491][T20616] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 568.603516][T20616] ? __get_vm_area_node+0x13f/0x300 [ 568.603545][T20616] __get_vm_area_node+0x13f/0x300 [ 568.603574][T20616] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 568.603600][T20616] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.603647][T20616] ? aa_get_newest_label+0xf7/0x5d0 [ 568.603670][T20616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 568.603696][T20616] ? _parse_integer_limit+0x1ae/0x1f0 [ 568.603719][T20616] ? rcu_is_watching+0x15/0xb0 [ 568.603738][T20616] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.603761][T20616] __vmalloc_noprof+0x7a/0x90 [ 568.603786][T20616] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.603810][T20616] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.603839][T20616] bpf_prog_alloc+0x3c/0x1a0 [ 568.603865][T20616] bpf_prog_load+0x735/0x1930 [ 568.603897][T20616] ? __lock_acquire+0xaac/0xd20 [ 568.603924][T20616] ? __pfx_bpf_prog_load+0x10/0x10 [ 568.603988][T20616] ? bpf_lsm_bpf+0x9/0x20 [ 568.604024][T20616] ? security_bpf+0x7e/0x300 [ 568.604047][T20616] __sys_bpf+0x5f1/0x860 [ 568.604073][T20616] ? __pfx___sys_bpf+0x10/0x10 [ 568.604111][T20616] ? ksys_write+0x1f0/0x250 [ 568.604131][T20616] ? rcu_is_watching+0x15/0xb0 [ 568.604159][T20616] __x64_sys_bpf+0x7c/0x90 [ 568.604182][T20616] do_syscall_64+0xf6/0x210 [ 568.604205][T20616] ? clear_bhb_loop+0x60/0xb0 [ 568.604228][T20616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.604247][T20616] RIP: 0033:0x7f74cb38e969 [ 568.604265][T20616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.604282][T20616] RSP: 002b:00007f74c91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.604302][T20616] RAX: ffffffffffffffda RBX: 00007f74cb5b5fa0 RCX: 00007f74cb38e969 [ 568.604316][T20616] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 568.604328][T20616] RBP: 00007f74c91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 568.604340][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.604351][T20616] R13: 0000000000000000 R14: 00007f74cb5b5fa0 R15: 00007ffcb639a948 [ 568.604381][T20616] [ 568.604392][T20616] syz.1.4980: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 568.914573][T20616] CPU: 0 UID: 0 PID: 20616 Comm: syz.1.4980 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 568.914602][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.914616][T20616] Call Trace: [ 568.914625][T20616] [ 568.914634][T20616] dump_stack_lvl+0x189/0x250 [ 568.914670][T20616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.914700][T20616] ? __pfx__printk+0x10/0x10 [ 568.914720][T20616] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 568.914742][T20616] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 568.914766][T20616] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 568.914790][T20616] warn_alloc+0x214/0x310 [ 568.914837][T20616] ? __pfx_warn_alloc+0x10/0x10 [ 568.914866][T20616] ? __get_vm_area_node+0x13f/0x300 [ 568.914896][T20616] ? __get_vm_area_node+0x2b5/0x300 [ 568.914925][T20616] __vmalloc_node_range_noprof+0x316/0x12c0 [ 568.914966][T20616] ? aa_get_newest_label+0xf7/0x5d0 [ 568.914993][T20616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 568.915015][T20616] ? _parse_integer_limit+0x1ae/0x1f0 [ 568.915035][T20616] ? rcu_is_watching+0x15/0xb0 [ 568.915051][T20616] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.915072][T20616] __vmalloc_noprof+0x7a/0x90 [ 568.915094][T20616] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.915115][T20616] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 568.915139][T20616] bpf_prog_alloc+0x3c/0x1a0 [ 568.915164][T20616] bpf_prog_load+0x735/0x1930 [ 568.915193][T20616] ? __lock_acquire+0xaac/0xd20 [ 568.915217][T20616] ? __pfx_bpf_prog_load+0x10/0x10 [ 568.915258][T20616] ? bpf_lsm_bpf+0x9/0x20 [ 568.915279][T20616] ? security_bpf+0x7e/0x300 [ 568.915300][T20616] __sys_bpf+0x5f1/0x860 [ 568.915321][T20616] ? __pfx___sys_bpf+0x10/0x10 [ 568.915350][T20616] ? ksys_write+0x1f0/0x250 [ 568.915367][T20616] ? rcu_is_watching+0x15/0xb0 [ 568.915388][T20616] __x64_sys_bpf+0x7c/0x90 [ 568.915406][T20616] do_syscall_64+0xf6/0x210 [ 568.915426][T20616] ? clear_bhb_loop+0x60/0xb0 [ 568.915444][T20616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.915459][T20616] RIP: 0033:0x7f74cb38e969 [ 568.915473][T20616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.915486][T20616] RSP: 002b:00007f74c91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.915506][T20616] RAX: ffffffffffffffda RBX: 00007f74cb5b5fa0 RCX: 00007f74cb38e969 [ 568.915521][T20616] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005 [ 568.915531][T20616] RBP: 00007f74c91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 568.915541][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.915550][T20616] R13: 0000000000000000 R14: 00007f74cb5b5fa0 R15: 00007ffcb639a948 [ 568.915574][T20616] [ 568.915584][T20616] Mem-Info: [ 569.209991][T20616] active_anon:5558 inactive_anon:0 isolated_anon:0 [ 569.209991][T20616] active_file:2144 inactive_file:40033 isolated_file:0 [ 569.209991][T20616] unevictable:768 dirty:335 writeback:0 [ 569.209991][T20616] slab_reclaimable:11471 slab_unreclaimable:115481 [ 569.209991][T20616] mapped:32686 shmem:1362 pagetables:672 [ 569.209991][T20616] sec_pagetables:0 bounce:0 [ 569.209991][T20616] kernel_misc_reclaimable:0 [ 569.209991][T20616] free:1330172 free_pcp:524 free_cma:0 [ 569.256780][T20616] Node 0 active_anon:22432kB inactive_anon:0kB active_file:8576kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130744kB dirty:1336kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11288kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 569.292812][T20616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 569.390367][T20616] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.456448][T20616] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 569.464101][T20616] Node 0 DMA32 free:1395632kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:22824kB inactive_anon:0kB active_file:8576kB inactive_file:159840kB unevictable:1536kB writepending:1336kB present:3129332kB managed:2563940kB mlocked:0kB bounce:0kB free_pcp:1432kB local_pcp:644kB free_cma:0kB [ 569.567401][T20616] lowmem_reserve[]: 0 0 0 0 0 [ 569.602434][T20616] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 569.670382][T20616] lowmem_reserve[]: 0 0 0 0 0 [ 569.676299][T20616] Node 1 Normal free:3910512kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.713045][T20632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 569.727216][T20632] batadv1: entered promiscuous mode [ 569.740841][T20616] lowmem_reserve[]: 0 0 0 0 0 [ 569.741855][T20632] team0: Port device batadv1 added [ 569.755891][T20616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 569.785505][T20616] Node 0 DMA32: 622*4kB (UME) 373*8kB (UME) 797*16kB (UME) 331*32kB (UME) 356*64kB (UME) 225*128kB (UME) 145*256kB (UME) 76*512kB (UM) 33*1024kB (UM) 15*2048kB (UM) 286*4096kB (UM) = 1392400kB [ 569.835488][T20616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 569.862359][T20616] Node 1 Normal: 224*4kB (UME) 54*8kB (UME) 46*16kB (UME) 213*32kB (UME) 91*64kB (UME) 30*128kB (UME) 17*256kB (UME) 11*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3910512kB [ 569.907064][T20616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.940024][T20616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 569.972711][T20616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.017946][T20616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 570.046221][T20616] 44411 total pagecache pages [ 570.061585][T20616] 0 pages in swap cache [ 570.072727][T20616] Free swap = 124996kB [ 570.084724][T20616] Total swap = 124996kB [ 570.094580][T20616] 2097051 pages RAM [ 570.107670][T20616] 0 pages HighMem/MovableOnly [ 570.119688][T20616] 424408 pages reserved [ 570.128641][T20616] 0 pages cma reserved [ 570.397131][T20651] lo speed is unknown, defaulting to 1000 [ 570.843538][T20664] batadv1: left promiscuous mode [ 570.899706][T20664] team0: Port device batadv1 removed [ 570.962038][T20651] dummy0 speed is unknown, defaulting to 1000 [ 571.343719][T20677] __nla_validate_parse: 11 callbacks suppressed [ 571.343740][T20677] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4999'. [ 571.409543][T20674] lo speed is unknown, defaulting to 1000 [ 571.515930][T20680] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5000'. [ 571.765638][T20687] Bluetooth: MGMT ver 1.23 [ 572.066450][T20674] dummy0 speed is unknown, defaulting to 1000 [ 572.569800][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5004'. [ 573.123804][T20704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5011'. [ 573.433585][T20716] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5014'. [ 573.467054][T20720] netlink: 'syz.3.5016': attribute type 1 has an invalid length. [ 573.510217][T20720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.552249][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5017'. [ 573.575490][T20720] bond3: entered promiscuous mode [ 573.675553][T20726] lo speed is unknown, defaulting to 1000 [ 574.234978][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5023'. [ 574.270700][T20739] nbd: must specify at least one socket [ 574.458272][T20726] dummy0 speed is unknown, defaulting to 1000 [ 574.794811][T20753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5027'. [ 575.329281][ T47] IPVS: starting estimator thread 0... [ 575.430556][T20770] IPVS: using max 27 ests per chain, 64800 per kthread [ 575.615693][T20774] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 575.943435][T20784] FAULT_INJECTION: forcing a failure. [ 575.943435][T20784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.966891][T20784] CPU: 1 UID: 0 PID: 20784 Comm: syz.1.5038 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 575.966922][T20784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.966935][T20784] Call Trace: [ 575.966944][T20784] [ 575.966953][T20784] dump_stack_lvl+0x189/0x250 [ 575.966984][T20784] ? __lock_acquire+0xaac/0xd20 [ 575.967015][T20784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.967044][T20784] ? __pfx__printk+0x10/0x10 [ 575.967065][T20784] ? __might_fault+0xb0/0x130 [ 575.967104][T20784] should_fail_ex+0x414/0x560 [ 575.967132][T20784] _copy_from_user+0x2d/0xb0 [ 575.967166][T20784] __sys_bpf+0x1ed/0x860 [ 575.967194][T20784] ? __pfx___sys_bpf+0x10/0x10 [ 575.967234][T20784] ? ksys_write+0x1f0/0x250 [ 575.967256][T20784] ? rcu_is_watching+0x15/0xb0 [ 575.967285][T20784] __x64_sys_bpf+0x7c/0x90 [ 575.967310][T20784] do_syscall_64+0xf6/0x210 [ 575.967334][T20784] ? clear_bhb_loop+0x60/0xb0 [ 575.967367][T20784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.967386][T20784] RIP: 0033:0x7f74cb38e969 [ 575.967404][T20784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.967420][T20784] RSP: 002b:00007f74c91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.967441][T20784] RAX: ffffffffffffffda RBX: 00007f74cb5b5fa0 RCX: 00007f74cb38e969 [ 575.967456][T20784] RDX: 000000000000004c RSI: 0000200000000040 RDI: 000000000000000a [ 575.967469][T20784] RBP: 00007f74c91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.967482][T20784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.967494][T20784] R13: 0000000000000000 R14: 00007f74cb5b5fa0 R15: 00007ffcb639a948 [ 575.967526][T20784] [ 576.248556][T20788] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5041'. [ 576.830732][T20809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5046'. [ 577.493766][T20832] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5054'. [ 577.636878][T20839] FAULT_INJECTION: forcing a failure. [ 577.636878][T20839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.687040][T20839] CPU: 0 UID: 0 PID: 20839 Comm: syz.3.5059 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 577.687084][T20839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.687097][T20839] Call Trace: [ 577.687105][T20839] [ 577.687114][T20839] dump_stack_lvl+0x189/0x250 [ 577.687149][T20839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.687183][T20839] ? __pfx__printk+0x10/0x10 [ 577.687216][T20839] should_fail_ex+0x414/0x560 [ 577.687244][T20839] _copy_to_user+0x31/0xb0 [ 577.687275][T20839] simple_read_from_buffer+0xe1/0x170 [ 577.687305][T20839] proc_fail_nth_read+0x1df/0x250 [ 577.687337][T20839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.687368][T20839] ? rw_verify_area+0x258/0x650 [ 577.687390][T20839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.687419][T20839] vfs_read+0x1fd/0x980 [ 577.687447][T20839] ? __pfx___mutex_lock+0x10/0x10 [ 577.687471][T20839] ? __pfx_vfs_read+0x10/0x10 [ 577.687495][T20839] ? __fget_files+0x2a/0x420 [ 577.687525][T20839] ? __fget_files+0x3a0/0x420 [ 577.687549][T20839] ? __fget_files+0x2a/0x420 [ 577.687584][T20839] ksys_read+0x145/0x250 [ 577.687604][T20839] ? __fget_files+0x2a/0x420 [ 577.687630][T20839] ? __pfx_ksys_read+0x10/0x10 [ 577.687656][T20839] ? do_syscall_64+0xba/0x210 [ 577.687682][T20839] do_syscall_64+0xf6/0x210 [ 577.687706][T20839] ? clear_bhb_loop+0x60/0xb0 [ 577.687730][T20839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.687748][T20839] RIP: 0033:0x7f2e7958d37c [ 577.687765][T20839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 577.687781][T20839] RSP: 002b:00007f2e7a47c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.687801][T20839] RAX: ffffffffffffffda RBX: 00007f2e797b5fa0 RCX: 00007f2e7958d37c [ 577.687815][T20839] RDX: 000000000000000f RSI: 00007f2e7a47c0a0 RDI: 0000000000000004 [ 577.687827][T20839] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 577.687840][T20839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.687851][T20839] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 577.687883][T20839] [ 578.082376][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5062'. [ 578.122133][T20854] 8021q: VLANs not supported on gre0 [ 578.322883][T20859] lo speed is unknown, defaulting to 1000 [ 578.667209][T20877] FAULT_INJECTION: forcing a failure. [ 578.667209][T20877] name failslab, interval 1, probability 0, space 0, times 0 [ 578.704111][T20877] CPU: 0 UID: 0 PID: 20877 Comm: syz.5.5069 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 578.704150][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.704164][T20877] Call Trace: [ 578.704172][T20877] [ 578.704182][T20877] dump_stack_lvl+0x189/0x250 [ 578.704220][T20877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.704250][T20877] ? __pfx__printk+0x10/0x10 [ 578.704277][T20877] ? __pfx___might_resched+0x10/0x10 [ 578.704295][T20877] ? fs_reclaim_acquire+0x7d/0x100 [ 578.704331][T20877] should_fail_ex+0x414/0x560 [ 578.704360][T20877] should_failslab+0xa8/0x100 [ 578.704389][T20877] kmem_cache_alloc_noprof+0x73/0x3c0 [ 578.704415][T20877] ? create_new_namespaces+0x34/0x700 [ 578.704451][T20877] create_new_namespaces+0x34/0x700 [ 578.704483][T20877] ? __fget_files+0x3a0/0x420 [ 578.704510][T20877] ? __fget_files+0x2a/0x420 [ 578.704542][T20877] __se_sys_setns+0x2dc/0x1790 [ 578.704570][T20877] ? fd_install+0x97/0x540 [ 578.704595][T20877] ? __pfx___se_sys_setns+0x10/0x10 [ 578.704621][T20877] ? do_syscall_64+0xba/0x210 [ 578.704647][T20877] do_syscall_64+0xf6/0x210 [ 578.704670][T20877] ? clear_bhb_loop+0x60/0xb0 [ 578.704693][T20877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.704712][T20877] RIP: 0033:0x7f180ed90197 [ 578.704729][T20877] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.704747][T20877] RSP: 002b:00007f180fb6bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 578.704767][T20877] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f180ed90197 [ 578.704781][T20877] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000042 [ 578.704792][T20877] RBP: 0000000000000043 R08: 0000000000000000 R09: 0000000000000000 [ 578.704803][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f180fb6c668 [ 578.704815][T20877] R13: 000000000000000e R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 578.704846][T20877] [ 579.513102][T20895] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5074'. [ 579.539254][T20895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.584599][T20899] 8021q: VLANs not supported on gre0 [ 579.590185][T20859] dummy0 speed is unknown, defaulting to 1000 [ 579.751174][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5079'. [ 579.790430][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5079'. [ 579.811527][T20909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5080'. [ 579.953185][T20909] lo speed is unknown, defaulting to 1000 [ 580.605335][T20909] dummy0 speed is unknown, defaulting to 1000 [ 580.935285][T20930] sctp: [Deprecated]: syz.1.5086 (pid 20930) Use of int in max_burst socket option. [ 580.935285][T20930] Use struct sctp_assoc_value instead [ 581.119124][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5089'. [ 581.224702][T20940] netlink: 'syz.1.5089': attribute type 303 has an invalid length. [ 581.245065][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 581.303596][T20943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5089'. [ 581.882601][T20961] netlink: 'syz.5.5099': attribute type 4 has an invalid length. [ 581.902866][T20961] __nla_validate_parse: 3 callbacks suppressed [ 581.902884][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5099'. [ 582.535954][T20986] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5106'. [ 582.632462][T20980] lo speed is unknown, defaulting to 1000 [ 583.228127][T21011] FAULT_INJECTION: forcing a failure. [ 583.228127][T21011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.256217][T21011] CPU: 0 UID: 0 PID: 21011 Comm: syz.2.5112 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 583.256249][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.256261][T21011] Call Trace: [ 583.256269][T21011] [ 583.256299][T21011] dump_stack_lvl+0x189/0x250 [ 583.256348][T21011] ? __lock_acquire+0xaac/0xd20 [ 583.256382][T21011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.256411][T21011] ? __pfx__printk+0x10/0x10 [ 583.256433][T21011] ? __might_fault+0xb0/0x130 [ 583.256472][T21011] should_fail_ex+0x414/0x560 [ 583.256508][T21011] _copy_from_user+0x2d/0xb0 [ 583.256538][T21011] do_sock_getsockopt+0x1cd/0x650 [ 583.256572][T21011] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 583.256601][T21011] ? do_syscall_64+0x40/0x210 [ 583.256624][T21011] ? __fget_files+0x2a/0x420 [ 583.256651][T21011] ? __fget_files+0x3a0/0x420 [ 583.256676][T21011] ? __fget_files+0x2a/0x420 [ 583.256711][T21011] __x64_sys_getsockopt+0x1a5/0x250 [ 583.256740][T21011] ? do_syscall_64+0x40/0x210 [ 583.256765][T21011] ? do_syscall_64+0x40/0x210 [ 583.256793][T21011] do_syscall_64+0xf6/0x210 [ 583.256817][T21011] ? clear_bhb_loop+0x60/0xb0 [ 583.256842][T21011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.256862][T21011] RIP: 0033:0x7f449c78e969 [ 583.256880][T21011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.256899][T21011] RSP: 002b:00007f449d574038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 583.256920][T21011] RAX: ffffffffffffffda RBX: 00007f449c9b6080 RCX: 00007f449c78e969 [ 583.256935][T21011] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 583.256948][T21011] RBP: 00007f449d574090 R08: 0000200000000180 R09: 0000000000000000 [ 583.256962][T21011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.256975][T21011] R13: 0000000000000001 R14: 00007f449c9b6080 R15: 00007ffeaf1d34f8 [ 583.257007][T21011] [ 583.371420][T21010] netlink: 'syz.3.5113': attribute type 30 has an invalid length. [ 583.472099][T20980] dummy0 speed is unknown, defaulting to 1000 [ 583.499327][T21010] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.508451][T21010] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.517468][T21010] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.527632][T21010] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.566886][T21010] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.576149][T21010] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.586421][T21010] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.595469][T21010] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.810944][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5118'. [ 583.838492][T21022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5117'. [ 583.849402][T21022] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5117'. [ 583.937345][T21028] netlink: 'syz.5.5119': attribute type 10 has an invalid length. [ 584.173714][T21032] netlink: 'syz.5.5120': attribute type 10 has an invalid length. [ 584.337161][T21035] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 584.346475][T21035] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 584.355338][T21035] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 584.365635][T21035] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 584.505058][T21038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.527242][T21038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.709942][T21043] lo speed is unknown, defaulting to 1000 [ 584.830062][T21050] lo speed is unknown, defaulting to 1000 [ 584.838447][T21052] 8021q: VLANs not supported on gre0 [ 584.897047][T21055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5128'. [ 585.091559][T21061] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5131'. [ 585.116228][T21061] FAULT_INJECTION: forcing a failure. [ 585.116228][T21061] name failslab, interval 1, probability 0, space 0, times 0 [ 585.137617][T21061] CPU: 0 UID: 0 PID: 21061 Comm: syz.3.5131 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 585.137651][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.137666][T21061] Call Trace: [ 585.137675][T21061] [ 585.137686][T21061] dump_stack_lvl+0x189/0x250 [ 585.137728][T21061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.137759][T21061] ? __pfx__printk+0x10/0x10 [ 585.137783][T21061] ? __alloc_skb+0x142/0x2d0 [ 585.137815][T21061] ? rcu_is_watching+0x15/0xb0 [ 585.137840][T21061] should_fail_ex+0x414/0x560 [ 585.137870][T21061] should_failslab+0xa8/0x100 [ 585.137913][T21061] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 585.137942][T21061] ? __alloc_skb+0x112/0x2d0 [ 585.137973][T21061] __alloc_skb+0x112/0x2d0 [ 585.138006][T21061] xfrm_alloc_compat+0x1a6/0x16f0 [ 585.138033][T21061] ? xfrm_get_translator+0x1b/0x240 [ 585.138067][T21061] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 585.138087][T21061] xfrm_alloc_userspi+0x905/0xca0 [ 585.138117][T21061] ? __pfx_aa_get_newest_label+0x10/0x10 [ 585.138157][T21061] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 585.138190][T21061] ? __nla_parse+0x40/0x60 [ 585.138221][T21061] xfrm_user_rcv_msg+0x7a3/0xab0 [ 585.138269][T21061] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 585.138335][T21061] ? __mutex_trylock_common+0x153/0x260 [ 585.138362][T21061] ? __pfx___mutex_trylock_common+0x10/0x10 [ 585.138390][T21061] ? rcu_is_watching+0x15/0xb0 [ 585.138420][T21061] ? trace_contention_end+0x39/0x120 [ 585.138448][T21061] netlink_rcv_skb+0x205/0x470 [ 585.138477][T21061] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 585.138506][T21061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.138551][T21061] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.138577][T21061] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.138606][T21061] xfrm_netlink_rcv+0x79/0x90 [ 585.138634][T21061] netlink_unicast+0x758/0x8d0 [ 585.138670][T21061] netlink_sendmsg+0x805/0xb30 [ 585.138707][T21061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.138738][T21061] ? aa_sock_msg_perm+0x94/0x160 [ 585.138762][T21061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.138785][T21061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.138813][T21061] __sock_sendmsg+0x219/0x270 [ 585.138839][T21061] ____sys_sendmsg+0x505/0x830 [ 585.138874][T21061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.138917][T21061] ? import_iovec+0x74/0xa0 [ 585.138949][T21061] ___sys_sendmsg+0x21f/0x2a0 [ 585.139000][T21061] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.139092][T21061] ? __fget_files+0x2a/0x420 [ 585.139119][T21061] ? __fget_files+0x3a0/0x420 [ 585.139160][T21061] __x64_sys_sendmsg+0x19b/0x260 [ 585.139195][T21061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.139247][T21061] ? do_syscall_64+0xba/0x210 [ 585.139283][T21061] do_syscall_64+0xf6/0x210 [ 585.139309][T21061] ? clear_bhb_loop+0x60/0xb0 [ 585.139335][T21061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.139356][T21061] RIP: 0033:0x7f2e7958e969 [ 585.139375][T21061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.139393][T21061] RSP: 002b:00007f2e7a47c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.139416][T21061] RAX: ffffffffffffffda RBX: 00007f2e797b5fa0 RCX: 00007f2e7958e969 [ 585.139432][T21061] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 585.139446][T21061] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 585.139458][T21061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.139471][T21061] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 585.139505][T21061] [ 585.561131][T21062] netlink: 'syz.2.5130': attribute type 10 has an invalid length. [ 585.567646][ T7567] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.680053][T21067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5133'. [ 585.971737][T21073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5135'. [ 585.992763][T21073] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5135'. [ 586.013110][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.041585][T21043] dummy0 speed is unknown, defaulting to 1000 [ 586.210791][ T7569] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.331451][T21050] dummy0 speed is unknown, defaulting to 1000 [ 586.997134][T21082] FAULT_INJECTION: forcing a failure. [ 586.997134][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 587.033578][T21082] CPU: 0 UID: 0 PID: 21082 Comm: syz.2.5138 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 587.033610][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.033624][T21082] Call Trace: [ 587.033632][T21082] [ 587.033642][T21082] dump_stack_lvl+0x189/0x250 [ 587.033681][T21082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.033709][T21082] ? __pfx__printk+0x10/0x10 [ 587.033738][T21082] ? __pfx___might_resched+0x10/0x10 [ 587.033759][T21082] ? fs_reclaim_acquire+0x7d/0x100 [ 587.033795][T21082] should_fail_ex+0x414/0x560 [ 587.033836][T21082] should_failslab+0xa8/0x100 [ 587.033863][T21082] kmem_cache_alloc_noprof+0x73/0x3c0 [ 587.033887][T21082] ? __kernfs_new_node+0xd7/0x7f0 [ 587.033920][T21082] __kernfs_new_node+0xd7/0x7f0 [ 587.033948][T21082] ? __lock_acquire+0xaac/0xd20 [ 587.033982][T21082] ? __pfx___kernfs_new_node+0x10/0x10 [ 587.034009][T21082] ? kernfs_root+0x1c/0x230 [ 587.034039][T21082] ? kernfs_root+0x1c/0x230 [ 587.034066][T21082] ? kernfs_root+0x1c/0x230 [ 587.034097][T21082] kernfs_new_node+0x102/0x210 [ 587.034130][T21082] kernfs_create_link+0xa7/0x200 [ 587.034156][T21082] sysfs_do_create_link_sd+0x83/0x110 [ 587.034186][T21082] device_add_class_symlinks+0x1cf/0x240 [ 587.034215][T21082] device_add+0x475/0xb50 [ 587.034243][T21082] tty_register_device_attr+0x3fe/0x8f0 [ 587.034276][T21082] ? __pfx_tty_register_device_attr+0x10/0x10 [ 587.034313][T21082] ? tty_port_register_device+0x5a/0x100 [ 587.034341][T21082] rfcomm_dev_ioctl+0x1788/0x1d40 [ 587.034384][T21082] ? kasan_quarantine_put+0xdd/0x220 [ 587.034407][T21082] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 587.034442][T21082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.034482][T21082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.034507][T21082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.034530][T21082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.034562][T21082] sock_do_ioctl+0xdc/0x300 [ 587.034592][T21082] ? __pfx_sock_do_ioctl+0x10/0x10 [ 587.034616][T21082] ? __lock_acquire+0xaac/0xd20 [ 587.034660][T21082] sock_ioctl+0x576/0x790 [ 587.034685][T21082] ? __pfx_sock_ioctl+0x10/0x10 [ 587.034720][T21082] ? __fget_files+0x3a0/0x420 [ 587.034761][T21082] ? __fget_files+0x2a/0x420 [ 587.034790][T21082] ? bpf_lsm_file_ioctl+0x9/0x20 [ 587.034817][T21082] ? __pfx_sock_ioctl+0x10/0x10 [ 587.034838][T21082] __se_sys_ioctl+0xf9/0x170 [ 587.034861][T21082] do_syscall_64+0xf6/0x210 [ 587.034884][T21082] ? clear_bhb_loop+0x60/0xb0 [ 587.034907][T21082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.034925][T21082] RIP: 0033:0x7f449c78e969 [ 587.034941][T21082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.034958][T21082] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.034978][T21082] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 587.034992][T21082] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 587.035005][T21082] RBP: 00007f449d595090 R08: 0000000000000000 R09: 0000000000000000 [ 587.035016][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.035029][T21082] R13: 0000000000000000 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 587.035059][T21082] [ 587.093661][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 587.153856][ T1148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.388631][T21090] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 587.491992][ T1148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.817221][T21098] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5145'. [ 588.171412][T21108] xt_hashlimit: size too large, truncated to 1048576 [ 588.180867][T21110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5149'. [ 588.218936][T21110] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5149'. [ 588.261660][ T7560] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.645314][T21121] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5153'. [ 588.701706][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5153'. [ 588.776208][T21119] lo speed is unknown, defaulting to 1000 [ 588.987623][T21135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5157'. [ 589.171157][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5159'. [ 589.303674][T21144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5160'. [ 589.311480][T21119] dummy0 speed is unknown, defaulting to 1000 [ 589.585984][T21154] 8021q: VLANs not supported on gre0 [ 589.608434][T21150] lo speed is unknown, defaulting to 1000 [ 589.820770][T21163] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 590.266013][T21172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5168'. [ 590.411846][T21174] xt_CT: No such helper "snmp" [ 590.442930][T21150] dummy0 speed is unknown, defaulting to 1000 [ 591.132816][T21186] lo speed is unknown, defaulting to 1000 [ 591.216814][T21189] netlink: 'syz.0.5174': attribute type 14 has an invalid length. [ 591.225125][T21189] netlink: 'syz.0.5174': attribute type 11 has an invalid length. [ 591.270874][T21189] netlink: 'syz.0.5174': attribute type 10 has an invalid length. [ 591.381060][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.454432][T21191] FAULT_INJECTION: forcing a failure. [ 591.454432][T21191] name failslab, interval 1, probability 0, space 0, times 0 [ 591.468494][T21191] CPU: 0 UID: 0 PID: 21191 Comm: syz.0.5175 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 591.468526][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.468540][T21191] Call Trace: [ 591.468550][T21191] [ 591.468560][T21191] dump_stack_lvl+0x189/0x250 [ 591.468600][T21191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.468632][T21191] ? __pfx__printk+0x10/0x10 [ 591.468660][T21191] ? __pfx___might_resched+0x10/0x10 [ 591.468690][T21191] ? fs_reclaim_acquire+0x7d/0x100 [ 591.468728][T21191] should_fail_ex+0x414/0x560 [ 591.468758][T21191] should_failslab+0xa8/0x100 [ 591.468789][T21191] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 591.468818][T21191] ? __alloc_skb+0x112/0x2d0 [ 591.468852][T21191] __alloc_skb+0x112/0x2d0 [ 591.468886][T21191] netlink_ack+0x146/0xa50 [ 591.468913][T21191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.468943][T21191] ? ref_tracker_free+0x63a/0x7d0 [ 591.468966][T21191] ? __copy_skb_header+0xa7/0x550 [ 591.468988][T21191] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.469025][T21191] netlink_rcv_skb+0x28c/0x470 [ 591.469056][T21191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.469085][T21191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.469128][T21191] ? netlink_deliver_tap+0x2e/0x1b0 [ 591.469158][T21191] ? netlink_deliver_tap+0x2e/0x1b0 [ 591.469193][T21191] netlink_unicast+0x758/0x8d0 [ 591.469232][T21191] netlink_sendmsg+0x805/0xb30 [ 591.469272][T21191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.469307][T21191] ? aa_sock_msg_perm+0x94/0x160 [ 591.469334][T21191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.469359][T21191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.469390][T21191] __sock_sendmsg+0x219/0x270 [ 591.469419][T21191] ____sys_sendmsg+0x52d/0x830 [ 591.469457][T21191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.469499][T21191] ? import_iovec+0x74/0xa0 [ 591.469534][T21191] ___sys_sendmsg+0x21f/0x2a0 [ 591.469568][T21191] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.469640][T21191] ? __fget_files+0x2a/0x420 [ 591.469668][T21191] ? __fget_files+0x3a0/0x420 [ 591.469716][T21191] __sys_sendmmsg+0x227/0x430 [ 591.469755][T21191] ? __pfx___sys_sendmmsg+0x10/0x10 [ 591.469797][T21191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 591.469843][T21191] ? ksys_write+0x1f0/0x250 [ 591.469867][T21191] ? rcu_is_watching+0x15/0xb0 [ 591.469898][T21191] __x64_sys_sendmmsg+0xa0/0xc0 [ 591.469933][T21191] do_syscall_64+0xf6/0x210 [ 591.469960][T21191] ? clear_bhb_loop+0x60/0xb0 [ 591.469987][T21191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.470008][T21191] RIP: 0033:0x7ff2c4b8e969 [ 591.470027][T21191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.470047][T21191] RSP: 002b:00007ff2c5a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.470069][T21191] RAX: ffffffffffffffda RBX: 00007ff2c4db5fa0 RCX: 00007ff2c4b8e969 [ 591.470085][T21191] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 591.470112][T21191] RBP: 00007ff2c5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 591.470125][T21191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.470137][T21191] R13: 0000000000000000 R14: 00007ff2c4db5fa0 R15: 00007ffc33a569e8 [ 591.470171][T21191] [ 592.181172][T21203] __nla_validate_parse: 4 callbacks suppressed [ 592.181191][T21203] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5178'. [ 592.470047][T21186] dummy0 speed is unknown, defaulting to 1000 [ 592.553442][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5183'. [ 592.714635][T21216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5184'. [ 592.750504][T21216] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5184'. [ 592.926671][T21221] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 593.303545][T21225] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 593.669265][T21232] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 593.946217][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 594.196848][T21250] IPVS: Error joining to the multicast group [ 594.274770][T21252] lo speed is unknown, defaulting to 1000 [ 594.324795][T21229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5188'. [ 594.479909][T21258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5200'. [ 594.529954][T21258] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5200'. [ 594.694776][T21256] lo speed is unknown, defaulting to 1000 [ 595.430012][T21252] dummy0 speed is unknown, defaulting to 1000 [ 595.826692][T21277] netlink: 'syz.1.5205': attribute type 10 has an invalid length. [ 596.050922][T21282] netlink: 'syz.0.5204': attribute type 16 has an invalid length. [ 596.059164][T21282] netlink: 'syz.0.5204': attribute type 17 has an invalid length. [ 596.107981][T21282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.146530][T21256] dummy0 speed is unknown, defaulting to 1000 [ 596.345357][T21289] vlan2: entered promiscuous mode [ 596.352440][T21289] team0: entered promiscuous mode [ 596.790495][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'. [ 596.951639][T21305] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5211'. [ 597.144284][T21312] netlink: 'syz.5.5213': attribute type 29 has an invalid length. [ 597.169274][T21312] netlink: 'syz.5.5213': attribute type 29 has an invalid length. [ 597.349696][T21315] netlink: 'syz.1.5215': attribute type 29 has an invalid length. [ 597.360076][T21315] netlink: 'syz.1.5215': attribute type 29 has an invalid length. [ 597.376906][T21315] __nla_validate_parse: 2 callbacks suppressed [ 597.376929][T21315] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5215'. [ 597.794600][T21328] netlink: 'syz.3.5220': attribute type 29 has an invalid length. [ 597.811297][T21328] netlink: 'syz.3.5220': attribute type 29 has an invalid length. [ 597.837081][T21328] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5220'. [ 597.920843][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5222'. [ 597.980106][T21332] dvmrp8: entered allmulticast mode [ 597.994229][T21330] dvmrp8: left allmulticast mode [ 598.295197][T21353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5232'. [ 598.308823][T21353] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5232'. [ 598.442425][T21358] lo speed is unknown, defaulting to 1000 [ 598.491303][T21365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5234'. [ 598.639984][T21370] FAULT_INJECTION: forcing a failure. [ 598.639984][T21370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.686707][T21370] CPU: 1 UID: 0 PID: 21370 Comm: syz.0.5236 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 598.686739][T21370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.686753][T21370] Call Trace: [ 598.686761][T21370] [ 598.686771][T21370] dump_stack_lvl+0x189/0x250 [ 598.686804][T21370] ? __lock_acquire+0xaac/0xd20 [ 598.686837][T21370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.686866][T21370] ? __pfx__printk+0x10/0x10 [ 598.686887][T21370] ? __might_fault+0xb0/0x130 [ 598.686926][T21370] should_fail_ex+0x414/0x560 [ 598.686955][T21370] _copy_from_user+0x2d/0xb0 [ 598.686986][T21370] ___sys_recvmsg+0x12e/0x510 [ 598.687012][T21370] ? __pfx____sys_recvmsg+0x10/0x10 [ 598.687074][T21370] ? __might_fault+0xb0/0x130 [ 598.687105][T21370] do_recvmmsg+0x307/0x760 [ 598.687135][T21370] ? __pfx_do_recvmmsg+0x10/0x10 [ 598.687167][T21370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 598.687211][T21370] __x64_sys_recvmmsg+0x190/0x240 [ 598.687230][T21370] ? rcu_is_watching+0x15/0xb0 [ 598.687251][T21370] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 598.687276][T21370] ? do_syscall_64+0xba/0x210 [ 598.687315][T21370] do_syscall_64+0xf6/0x210 [ 598.687337][T21370] ? clear_bhb_loop+0x60/0xb0 [ 598.687360][T21370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.687379][T21370] RIP: 0033:0x7ff2c4b8e969 [ 598.687396][T21370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.687412][T21370] RSP: 002b:00007ff2c5a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 598.687432][T21370] RAX: ffffffffffffffda RBX: 00007ff2c4db5fa0 RCX: 00007ff2c4b8e969 [ 598.687446][T21370] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 598.687459][T21370] RBP: 00007ff2c5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 598.687472][T21370] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 598.687484][T21370] R13: 0000000000000000 R14: 00007ff2c4db5fa0 R15: 00007ffc33a569e8 [ 598.687517][T21370] [ 598.928754][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5237'. [ 599.108192][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 599.177805][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5239'. [ 599.187551][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5239'. [ 599.199696][T21358] dummy0 speed is unknown, defaulting to 1000 [ 599.310495][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 599.919875][T21414] FAULT_INJECTION: forcing a failure. [ 599.919875][T21414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.036216][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.2.5250 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 600.036249][T21414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.036262][T21414] Call Trace: [ 600.036270][T21414] [ 600.036279][T21414] dump_stack_lvl+0x189/0x250 [ 600.036312][T21414] ? __lock_acquire+0xaac/0xd20 [ 600.036363][T21414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.036393][T21414] ? __pfx__printk+0x10/0x10 [ 600.036414][T21414] ? __might_fault+0xb0/0x130 [ 600.036455][T21414] should_fail_ex+0x414/0x560 [ 600.036484][T21414] _copy_from_iter+0x1db/0x15a0 [ 600.036521][T21414] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 600.036546][T21414] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 600.036576][T21414] ? __pfx__copy_from_iter+0x10/0x10 [ 600.036605][T21414] ? __build_skb_around+0x257/0x3e0 [ 600.036638][T21414] ? netlink_sendmsg+0x642/0xb30 [ 600.036665][T21414] ? skb_put+0x11b/0x210 [ 600.036699][T21414] netlink_sendmsg+0x6b2/0xb30 [ 600.036740][T21414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.036774][T21414] ? aa_sock_msg_perm+0x94/0x160 [ 600.036801][T21414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.036826][T21414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.036856][T21414] __sock_sendmsg+0x219/0x270 [ 600.036884][T21414] ____sys_sendmsg+0x505/0x830 [ 600.036922][T21414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.036964][T21414] ? import_iovec+0x74/0xa0 [ 600.037000][T21414] ___sys_sendmsg+0x21f/0x2a0 [ 600.037034][T21414] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.037106][T21414] ? __fget_files+0x2a/0x420 [ 600.037133][T21414] ? __fget_files+0x3a0/0x420 [ 600.037174][T21414] __x64_sys_sendmsg+0x19b/0x260 [ 600.037218][T21414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.037269][T21414] ? do_syscall_64+0xba/0x210 [ 600.037298][T21414] do_syscall_64+0xf6/0x210 [ 600.037323][T21414] ? clear_bhb_loop+0x60/0xb0 [ 600.037350][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.037369][T21414] RIP: 0033:0x7f449c78e969 [ 600.037388][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.037406][T21414] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.037428][T21414] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 600.037443][T21414] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 600.037456][T21414] RBP: 00007f449d595090 R08: 0000000000000000 R09: 0000000000000000 [ 600.037469][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.037481][T21414] R13: 0000000000000000 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 600.037516][T21414] [ 601.015281][T21436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.034242][T21436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.106413][T21436] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.116956][T21436] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.126468][T21436] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.135737][T21436] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.208960][T21436] vlan2: left allmulticast mode [ 601.220557][T21436] veth1: left allmulticast mode [ 601.235299][T21436] vlan0: left allmulticast mode [ 601.240681][T21436] bridge_slave_0: left allmulticast mode [ 601.260672][T21435] lo speed is unknown, defaulting to 1000 [ 601.470788][T21456] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 601.478986][ T7554] IPVS: starting estimator thread 0... [ 601.583095][T21457] IPVS: using max 28 ests per chain, 67200 per kthread [ 601.686002][T21435] dummy0 speed is unknown, defaulting to 1000 [ 602.058530][T21468] siw: device registration error -23 [ 602.333566][T21470] 8021q: VLANs not supported on gre0 [ 602.565459][T21474] __nla_validate_parse: 8 callbacks suppressed [ 602.565503][T21474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5269'. [ 602.590439][T21474] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5269'. [ 602.852502][T21489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5271'. [ 602.974154][T21495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5274'. [ 603.777284][T21510] bridge8: entered allmulticast mode [ 604.214389][T21521] lo speed is unknown, defaulting to 1000 [ 604.345491][ T55] Bluetooth: hci3: link tx timeout [ 604.354572][ T55] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 604.503482][T21527] x_tables: duplicate underflow at hook 4 [ 604.754581][T21530] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5286'. [ 605.179426][T21521] dummy0 speed is unknown, defaulting to 1000 [ 605.228035][T21543] FAULT_INJECTION: forcing a failure. [ 605.228035][T21543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 605.380391][T21543] CPU: 1 UID: 0 PID: 21543 Comm: syz.5.5292 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 605.380419][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.380432][T21543] Call Trace: [ 605.380440][T21543] [ 605.380448][T21543] dump_stack_lvl+0x189/0x250 [ 605.380491][T21543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.380519][T21543] ? __pfx__printk+0x10/0x10 [ 605.380540][T21543] ? fs_reclaim_acquire+0x7d/0x100 [ 605.380578][T21543] should_fail_ex+0x414/0x560 [ 605.380604][T21543] prepare_alloc_pages+0x213/0x610 [ 605.380629][T21543] __alloc_frozen_pages_noprof+0x123/0x370 [ 605.380653][T21543] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 605.380681][T21543] ? policy_nodemask+0x27c/0x720 [ 605.380705][T21543] ? __lock_acquire+0xaac/0xd20 [ 605.380735][T21543] alloc_pages_mpol+0x232/0x4a0 [ 605.380766][T21543] vma_alloc_folio_noprof+0xe4/0x200 [ 605.380795][T21543] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 605.380834][T21543] folio_prealloc+0x30/0x180 [ 605.380862][T21543] __handle_mm_fault+0x2b28/0x5380 [ 605.380886][T21543] ? __lock_acquire+0xaac/0xd20 [ 605.380929][T21543] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.380954][T21543] ? lock_vma_under_rcu+0xf8/0x710 [ 605.380989][T21543] ? lock_vma_under_rcu+0xf8/0x710 [ 605.381014][T21543] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 605.381046][T21543] handle_mm_fault+0x40a/0x8e0 [ 605.381081][T21543] do_user_addr_fault+0xa81/0x1390 [ 605.381109][T21543] ? rcu_is_watching+0x15/0xb0 [ 605.381128][T21543] ? trace_irq_disable+0x37/0x110 [ 605.381172][T21543] exc_page_fault+0x68/0x110 [ 605.381198][T21543] asm_exc_page_fault+0x26/0x30 [ 605.381217][T21543] RIP: 0033:0x7f180ec5a35b [ 605.381253][T21543] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 605.381272][T21543] RSP: 002b:00007f180fb6afb0 EFLAGS: 00010202 [ 605.381292][T21543] RAX: 0000000000000000 RBX: 00007f180efb5fa0 RCX: 0000000000000000 [ 605.381307][T21543] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000180 [ 605.381320][T21543] RBP: 00007f180fb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 605.381333][T21543] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 605.381345][T21543] R13: 0000000000000000 R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 605.381380][T21543] [ 605.381699][T21543] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 605.547815][T21556] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.430417][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 606.580870][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5303'. [ 606.793558][T21587] lo speed is unknown, defaulting to 1000 [ 607.189274][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5312'. [ 607.464192][T21611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5315'. [ 607.558465][T21614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5316'. [ 607.600675][T21614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5316'. [ 607.709946][T21614] batadv_slave_1: entered promiscuous mode [ 607.731311][T21614] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.758858][T21616] tipc: Enabled bearer , priority 10 [ 607.800894][T21617] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5316'. [ 608.027967][T21587] dummy0 speed is unknown, defaulting to 1000 [ 608.385620][T21632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5323'. [ 608.852425][T21647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5327'. [ 608.948897][T21649] 8021q: VLANs not supported on gre0 [ 609.254759][T21659] Cannot find del_set index 152 as target [ 609.704375][T21663] FAULT_INJECTION: forcing a failure. [ 609.704375][T21663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.740516][T21663] CPU: 1 UID: 0 PID: 21663 Comm: syz.2.5334 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 609.740548][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.740561][T21663] Call Trace: [ 609.740569][T21663] [ 609.740579][T21663] dump_stack_lvl+0x189/0x250 [ 609.740611][T21663] ? __lock_acquire+0xaac/0xd20 [ 609.740641][T21663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.740672][T21663] ? __pfx__printk+0x10/0x10 [ 609.740692][T21663] ? __might_fault+0xb0/0x130 [ 609.740728][T21663] should_fail_ex+0x414/0x560 [ 609.740754][T21663] _copy_from_user+0x2d/0xb0 [ 609.740783][T21663] __sys_bpf+0x1ed/0x860 [ 609.740830][T21663] ? __pfx___sys_bpf+0x10/0x10 [ 609.740867][T21663] ? ksys_write+0x1f0/0x250 [ 609.740902][T21663] __x64_sys_bpf+0x7c/0x90 [ 609.740925][T21663] do_syscall_64+0xf6/0x210 [ 609.740948][T21663] ? clear_bhb_loop+0x60/0xb0 [ 609.740972][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.740989][T21663] RIP: 0033:0x7f449c78e969 [ 609.741008][T21663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.741023][T21663] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.741044][T21663] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 609.741058][T21663] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 609.741070][T21663] RBP: 00007f449d595090 R08: 0000000000000000 R09: 0000000000000000 [ 609.741083][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.741094][T21663] R13: 0000000000000001 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 609.741121][T21663] [ 610.091598][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5337'. [ 610.179204][T21673] lo: left promiscuous mode [ 610.277816][T21679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5340'. [ 610.548217][T21673] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.559271][T21673] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.576009][T21673] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.585728][T21673] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.701012][T21673] vlan3: left allmulticast mode [ 610.705957][T21673] bridge_slave_0: left allmulticast mode [ 610.716508][T21673] macvtap1: left promiscuous mode [ 610.725778][T21673] macvtap1: left allmulticast mode [ 610.733737][T21673] bond3: left promiscuous mode [ 610.756288][T21681] 8021q: VLANs not supported on gre0 [ 611.007322][T21698] FAULT_INJECTION: forcing a failure. [ 611.007322][T21698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.094623][T21698] CPU: 0 UID: 0 PID: 21698 Comm: syz.0.5345 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 611.094660][T21698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.094673][T21698] Call Trace: [ 611.094682][T21698] [ 611.094692][T21698] dump_stack_lvl+0x189/0x250 [ 611.094727][T21698] ? __lock_acquire+0xaac/0xd20 [ 611.094761][T21698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.094791][T21698] ? __pfx__printk+0x10/0x10 [ 611.094813][T21698] ? __might_fault+0xb0/0x130 [ 611.094853][T21698] should_fail_ex+0x414/0x560 [ 611.094883][T21698] _copy_from_user+0x2d/0xb0 [ 611.094916][T21698] ___sys_recvmsg+0x12e/0x510 [ 611.094944][T21698] ? __pfx____sys_recvmsg+0x10/0x10 [ 611.095019][T21698] ? __might_fault+0xb0/0x130 [ 611.095050][T21698] do_recvmmsg+0x307/0x760 [ 611.095080][T21698] ? __pfx_do_recvmmsg+0x10/0x10 [ 611.095113][T21698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.095157][T21698] __x64_sys_recvmmsg+0x190/0x240 [ 611.095181][T21698] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 611.095206][T21698] ? do_syscall_64+0xba/0x210 [ 611.095235][T21698] do_syscall_64+0xf6/0x210 [ 611.095260][T21698] ? clear_bhb_loop+0x60/0xb0 [ 611.095285][T21698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.095305][T21698] RIP: 0033:0x7ff2c4b8e969 [ 611.095323][T21698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.095342][T21698] RSP: 002b:00007ff2c5a6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 611.095367][T21698] RAX: ffffffffffffffda RBX: 00007ff2c4db6080 RCX: 00007ff2c4b8e969 [ 611.095383][T21698] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 611.095397][T21698] RBP: 00007ff2c5a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 611.095410][T21698] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 611.095423][T21698] R13: 0000000000000001 R14: 00007ff2c4db6080 R15: 00007ffc33a569e8 [ 611.095455][T21698] [ 611.471085][T21707] Bluetooth: MGMT ver 1.23 [ 611.511310][T21696] lo speed is unknown, defaulting to 1000 [ 611.952129][T21717] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 612.216556][T21724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5355'. [ 612.467855][T21729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'. [ 612.729868][T21736] lo speed is unknown, defaulting to 1000 [ 612.806748][T21696] dummy0 speed is unknown, defaulting to 1000 [ 613.271615][T21751] netlink: 'syz.3.5362': attribute type 2 has an invalid length. [ 613.361842][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5362'. [ 613.425256][T21736] dummy0 speed is unknown, defaulting to 1000 [ 613.681649][T21756] 8021q: VLANs not supported on gre0 [ 613.946087][T21760] IPVS: Error joining to the multicast group [ 614.002259][T21762] netlink: 'syz.0.5368': attribute type 1 has an invalid length. [ 614.020647][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.332055][T21774] xt_hashlimit: max too large, truncated to 1048576 [ 614.472320][T21777] FAULT_INJECTION: forcing a failure. [ 614.472320][T21777] name failslab, interval 1, probability 0, space 0, times 0 [ 614.510240][T21777] CPU: 0 UID: 0 PID: 21777 Comm: syz.3.5373 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 614.510273][T21777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.510286][T21777] Call Trace: [ 614.510294][T21777] [ 614.510303][T21777] dump_stack_lvl+0x189/0x250 [ 614.510337][T21777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.510365][T21777] ? __pfx__printk+0x10/0x10 [ 614.510389][T21777] ? __pfx___might_resched+0x10/0x10 [ 614.510408][T21777] ? fs_reclaim_acquire+0x7d/0x100 [ 614.510440][T21777] should_fail_ex+0x414/0x560 [ 614.510467][T21777] should_failslab+0xa8/0x100 [ 614.510494][T21777] __kmalloc_cache_noprof+0x70/0x3d0 [ 614.510518][T21777] ? rtnl_newlink+0xed/0x1c70 [ 614.510547][T21777] rtnl_newlink+0xed/0x1c70 [ 614.510584][T21777] ? __pfx_rtnl_newlink+0x10/0x10 [ 614.510611][T21777] ? is_bpf_text_address+0x292/0x2b0 [ 614.510643][T21777] ? __lock_acquire+0xaac/0xd20 [ 614.510691][T21777] ? __lock_acquire+0xaac/0xd20 [ 614.510735][T21777] ? is_bpf_text_address+0x26/0x2b0 [ 614.510765][T21777] ? is_bpf_text_address+0x292/0x2b0 [ 614.510789][T21777] ? is_bpf_text_address+0x26/0x2b0 [ 614.510818][T21777] ? kernel_text_address+0xa5/0xe0 [ 614.510851][T21777] ? aa_get_newest_label+0xf7/0x5d0 [ 614.510875][T21777] ? __lock_acquire+0xaac/0xd20 [ 614.510914][T21777] ? __pfx_rtnl_newlink+0x10/0x10 [ 614.510934][T21777] rtnetlink_rcv_msg+0x7cc/0xb70 [ 614.510956][T21777] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 614.510975][T21777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 614.511007][T21777] netlink_rcv_skb+0x205/0x470 [ 614.511030][T21777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 614.511050][T21777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.511081][T21777] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.511102][T21777] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.511127][T21777] netlink_unicast+0x758/0x8d0 [ 614.511155][T21777] netlink_sendmsg+0x805/0xb30 [ 614.511184][T21777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.511208][T21777] ? aa_sock_msg_perm+0x94/0x160 [ 614.511226][T21777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.511244][T21777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.511267][T21777] __sock_sendmsg+0x219/0x270 [ 614.511287][T21777] ____sys_sendmsg+0x505/0x830 [ 614.511314][T21777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.511343][T21777] ? import_iovec+0x74/0xa0 [ 614.511368][T21777] ___sys_sendmsg+0x21f/0x2a0 [ 614.511392][T21777] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.511442][T21777] ? __fget_files+0x2a/0x420 [ 614.511462][T21777] ? __fget_files+0x3a0/0x420 [ 614.511490][T21777] __x64_sys_sendmsg+0x19b/0x260 [ 614.511514][T21777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.511550][T21777] ? do_syscall_64+0xba/0x210 [ 614.511571][T21777] do_syscall_64+0xf6/0x210 [ 614.511589][T21777] ? clear_bhb_loop+0x60/0xb0 [ 614.511607][T21777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.511622][T21777] RIP: 0033:0x7f2e7958e969 [ 614.511636][T21777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.511648][T21777] RSP: 002b:00007f2e7a47c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.511664][T21777] RAX: ffffffffffffffda RBX: 00007f2e797b5fa0 RCX: 00007f2e7958e969 [ 614.511685][T21777] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 614.511695][T21777] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 614.511704][T21777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.511713][T21777] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 614.511736][T21777] [ 615.180482][T21780] lo speed is unknown, defaulting to 1000 [ 615.266828][T21786] 8021q: VLANs not supported on gre0 [ 615.534293][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5379'. [ 615.549163][T21796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5379'. [ 615.563329][T21796] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20001 [ 616.327827][T21811] netlink: 'syz.5.5374': attribute type 4 has an invalid length. [ 617.905743][T21780] dummy0 speed is unknown, defaulting to 1000 [ 617.917399][T21820] FAULT_INJECTION: forcing a failure. [ 617.917399][T21820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.997051][T21820] CPU: 0 UID: 0 PID: 21820 Comm: syz.3.5384 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 617.997081][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.997094][T21820] Call Trace: [ 617.997101][T21820] [ 617.997109][T21820] dump_stack_lvl+0x189/0x250 [ 617.997145][T21820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.997172][T21820] ? __pfx__printk+0x10/0x10 [ 617.997192][T21820] ? fs_reclaim_acquire+0x7d/0x100 [ 617.997230][T21820] should_fail_ex+0x414/0x560 [ 617.997257][T21820] prepare_alloc_pages+0x213/0x610 [ 617.997282][T21820] __alloc_frozen_pages_noprof+0x123/0x370 [ 617.997306][T21820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 617.997335][T21820] ? policy_nodemask+0x27c/0x720 [ 617.997359][T21820] ? __lock_acquire+0xaac/0xd20 [ 617.997389][T21820] alloc_pages_mpol+0x232/0x4a0 [ 617.997420][T21820] vma_alloc_folio_noprof+0xe4/0x200 [ 617.997445][T21820] ? page_table_check_set+0x16b/0x710 [ 617.997472][T21820] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 617.997510][T21820] folio_prealloc+0x30/0x180 [ 617.997537][T21820] __handle_mm_fault+0x2b28/0x5380 [ 617.997578][T21820] ? __pfx___handle_mm_fault+0x10/0x10 [ 617.997628][T21820] ? find_vma+0xe7/0x160 [ 617.997652][T21820] ? __pfx_find_vma+0x10/0x10 [ 617.997680][T21820] handle_mm_fault+0x40a/0x8e0 [ 617.997715][T21820] do_user_addr_fault+0x764/0x1390 [ 617.997751][T21820] exc_page_fault+0x68/0x110 [ 617.997775][T21820] asm_exc_page_fault+0x26/0x30 [ 617.997793][T21820] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 617.997821][T21820] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f f2 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 617.997837][T21820] RSP: 0018:ffffc90003aef518 EFLAGS: 00050202 [ 617.997855][T21820] RAX: ffff888020f20e01 RBX: ffff888020f20f69 RCX: 00000000000009af [ 617.997869][T21820] RDX: 0000000000000000 RSI: ffff888020f21429 RDI: 0000200000002000 [ 617.997882][T21820] RBP: ffffc90003aef678 R08: ffff888020f21dd7 R09: 1ffff110041e43ba [ 617.997896][T21820] R10: dffffc0000000000 R11: ffffed10041e43bb R12: dffffc0000000000 [ 617.997909][T21820] R13: 0000000000000e6f R14: 00007ffffffff000 R15: 00002000000029af [ 617.997942][T21820] _copy_to_iter+0x5f6/0x15a0 [ 617.997980][T21820] ? __pfx__copy_to_iter+0x10/0x10 [ 617.998003][T21820] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 617.998029][T21820] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 617.998057][T21820] __skb_datagram_iter+0x100/0x960 [ 617.998078][T21820] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 617.998106][T21820] skb_copy_datagram_iter+0xc5/0x230 [ 617.998130][T21820] netlink_recvmsg+0x2ab/0xa30 [ 617.998169][T21820] ? __pfx_netlink_recvmsg+0x10/0x10 [ 617.998200][T21820] ? aa_sock_msg_perm+0x94/0x160 [ 617.998225][T21820] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 617.998249][T21820] ? __pfx_netlink_recvmsg+0x10/0x10 [ 617.998278][T21820] sock_recvmsg_nosec+0x186/0x1c0 [ 617.998305][T21820] ____sys_recvmsg+0x3aa/0x460 [ 617.998342][T21820] ? __pfx_____sys_recvmsg+0x10/0x10 [ 617.998386][T21820] ? import_iovec+0x74/0xa0 [ 617.998418][T21820] ___sys_recvmsg+0x1b5/0x510 [ 617.998419][T21827] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 617.998442][T21820] ? __pfx____sys_recvmsg+0x10/0x10 [ 617.998485][T21820] ? __might_fault+0xb0/0x130 [ 617.998511][T21820] do_recvmmsg+0x307/0x760 [ 617.998535][T21820] ? __pfx_do_recvmmsg+0x10/0x10 [ 617.998560][T21820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.998593][T21820] __x64_sys_recvmmsg+0x190/0x240 [ 617.998618][T21820] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 617.998636][T21820] ? do_syscall_64+0xba/0x210 [ 617.998658][T21820] do_syscall_64+0xf6/0x210 [ 617.998676][T21820] ? clear_bhb_loop+0x60/0xb0 [ 617.998694][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.998710][T21820] RIP: 0033:0x7f2e7958e969 [ 617.998724][T21820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.998739][T21820] RSP: 002b:00007f2e7a43a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 617.998758][T21820] RAX: ffffffffffffffda RBX: 00007f2e797b6160 RCX: 00007f2e7958e969 [ 617.998773][T21820] RDX: 0000000000000003 RSI: 0000200000000b00 RDI: 0000000000000003 [ 617.998786][T21820] RBP: 00007f2e7a43a090 R08: 0000000000000000 R09: 0000000000000000 [ 617.998799][T21820] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 617.998812][T21820] R13: 0000000000000001 R14: 00007f2e797b6160 R15: 00007ffd66f11a68 [ 617.998847][T21820] [ 618.466707][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'. [ 618.476638][T21840] 8021q: VLANs not supported on gre0 [ 618.674590][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'. [ 618.767397][T21843] netdevsim netdevsim3 »»»»»»: renamed from netdevsim0 [ 618.826103][T21848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5391'. [ 619.259324][T21867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5398'. [ 619.301466][T21867] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5398'. [ 619.312594][T21870] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5397'. [ 619.322142][T21870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5397'. [ 619.335233][T21870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5397'. [ 619.367898][T21869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5399'. [ 619.397929][T21869] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5399'. [ 619.651801][T21886] xt_hashlimit: max too large, truncated to 1048576 [ 619.658733][T21886] No such timeout policy "syz1" [ 620.158761][T21908] netlink: 'syz.0.5411': attribute type 1 has an invalid length. [ 620.329093][T21914] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 620.890046][T21931] IPVS: Error joining to the multicast group [ 621.004906][T21928] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 621.696016][T21951] FAULT_INJECTION: forcing a failure. [ 621.696016][T21951] name failslab, interval 1, probability 0, space 0, times 0 [ 621.740803][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.2.5430 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 621.740835][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.740847][T21951] Call Trace: [ 621.740855][T21951] [ 621.740864][T21951] dump_stack_lvl+0x189/0x250 [ 621.740900][T21951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.740945][T21951] ? __pfx__printk+0x10/0x10 [ 621.740982][T21951] ? __pfx___might_resched+0x10/0x10 [ 621.741002][T21951] ? fs_reclaim_acquire+0x7d/0x100 [ 621.741039][T21951] should_fail_ex+0x414/0x560 [ 621.741068][T21951] should_failslab+0xa8/0x100 [ 621.741097][T21951] kmem_cache_alloc_noprof+0x73/0x3c0 [ 621.741122][T21951] ? __kernfs_new_node+0xd7/0x7f0 [ 621.741158][T21951] __kernfs_new_node+0xd7/0x7f0 [ 621.741189][T21951] ? __lock_acquire+0xaac/0xd20 [ 621.741225][T21951] ? __pfx___kernfs_new_node+0x10/0x10 [ 621.741255][T21951] ? kernfs_root+0x1c/0x230 [ 621.741291][T21951] ? kernfs_root+0x1c/0x230 [ 621.741324][T21951] ? kernfs_root+0x1c/0x230 [ 621.741350][T21951] ? kernfs_root+0x1c/0x230 [ 621.741384][T21951] kernfs_new_node+0x102/0x210 [ 621.741420][T21951] __kernfs_create_file+0x4b/0x2e0 [ 621.741447][T21951] sysfs_add_file_mode_ns+0x238/0x300 [ 621.741482][T21951] internal_create_group+0x66d/0x1110 [ 621.741530][T21951] ? __pfx_internal_create_group+0x10/0x10 [ 621.741561][T21951] ? kernfs_add_one+0xf0/0x520 [ 621.741597][T21951] sysfs_create_groups+0x59/0x120 [ 621.741630][T21951] device_add_attrs+0xe0/0x5a0 [ 621.741663][T21951] ? __pfx_device_add_attrs+0x10/0x10 [ 621.741694][T21951] ? device_add_class_symlinks+0x21f/0x240 [ 621.741723][T21951] device_add+0x496/0xb50 [ 621.741747][T21951] ? device_initialize+0x24b/0x440 [ 621.741775][T21951] netdev_register_kobject+0x156/0x2f0 [ 621.741801][T21951] register_netdevice+0x126c/0x1ae0 [ 621.741841][T21951] ? __pfx_register_netdevice+0x10/0x10 [ 621.741860][T21951] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 621.741887][T21951] ? alloc_netdev_mqs+0xe41/0x11e0 [ 621.741907][T21951] ? __ip_tunnel_create+0x3ba/0x560 [ 621.741938][T21951] __ip_tunnel_create+0x3e7/0x560 [ 621.741967][T21951] ? __pfx___ip_tunnel_create+0x10/0x10 [ 621.741993][T21951] ? bpf_lsm_capable+0x9/0x20 [ 621.742034][T21951] ip_tunnel_ctl+0x4dd/0xc30 [ 621.742063][T21951] vif_add+0x335/0x1420 [ 621.742104][T21951] ? __pfx_vif_add+0x10/0x10 [ 621.742174][T21951] ip_mroute_setsockopt+0xe12/0xf60 [ 621.742215][T21951] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 621.742279][T21951] do_ip_setsockopt+0xf11/0x2d00 [ 621.742316][T21951] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 621.742339][T21951] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 621.742372][T21951] ? aa_sk_perm+0x81e/0x950 [ 621.742404][T21951] ? __pfx_aa_sk_perm+0x10/0x10 [ 621.742437][T21951] ip_setsockopt+0x66/0x110 [ 621.742460][T21951] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 621.742489][T21951] do_sock_setsockopt+0x257/0x3e0 [ 621.742522][T21951] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 621.742549][T21951] ? __fget_files+0x2a/0x420 [ 621.742582][T21951] ? __fget_files+0x3a0/0x420 [ 621.742608][T21951] ? __fget_files+0x2a/0x420 [ 621.742644][T21951] __x64_sys_setsockopt+0x18b/0x220 [ 621.742681][T21951] do_syscall_64+0xf6/0x210 [ 621.742706][T21951] ? clear_bhb_loop+0x60/0xb0 [ 621.742731][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.742751][T21951] RIP: 0033:0x7f449c78e969 [ 621.742770][T21951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.742789][T21951] RSP: 002b:00007f449d595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 621.742811][T21951] RAX: ffffffffffffffda RBX: 00007f449c9b5fa0 RCX: 00007f449c78e969 [ 621.742826][T21951] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 621.742839][T21951] RBP: 00007f449d595090 R08: 0000000000000010 R09: 0000000000000000 [ 621.742852][T21951] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 621.742865][T21951] R13: 0000000000000000 R14: 00007f449c9b5fa0 R15: 00007ffeaf1d34f8 [ 621.742898][T21951] [ 622.606072][T21974] batadv_slave_1: entered promiscuous mode [ 623.186561][T22003] netlink: 'syz.3.5453': attribute type 7 has an invalid length. [ 623.256397][T22005] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 623.343036][T22010] netlink: 'syz.3.5456': attribute type 10 has an invalid length. [ 623.433354][T21973] batadv_slave_1: left promiscuous mode [ 623.620831][T22023] __nla_validate_parse: 16 callbacks suppressed [ 623.620851][T22023] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5460'. [ 623.704180][T22029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5462'. [ 623.918601][T22017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5457'. [ 623.941083][T22040] ip6tnl1: entered promiscuous mode [ 623.946450][T22040] ip6tnl1: entered allmulticast mode [ 624.168284][T22049] ipt_ECN: cannot use operation on non-tcp rule [ 624.343702][T22058] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 624.365458][T22060] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 624.373628][T22060] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5473'. [ 624.389718][T22058] macvtap1: entered allmulticast mode [ 624.434382][T22058] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 624.453549][T22065] x_tables: duplicate underflow at hook 2 [ 624.472900][T22064] x_tables: duplicate underflow at hook 1 [ 624.473226][T22058] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 624.521327][T22067] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5475'. [ 624.537421][T22058] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 624.707082][T22077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5478'. [ 624.877658][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5481'. [ 624.887271][T22080] block nbd3: server does not support multiple connections per device. [ 624.896147][T22083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5481'. [ 624.908322][T22080] block nbd3: shutting down sockets [ 624.986529][T22086] netlink: 'syz.2.5482': attribute type 1 has an invalid length. [ 624.995728][T22086] netlink: 'syz.2.5482': attribute type 2 has an invalid length. [ 625.235151][T22098] xt_bpf: check failed: parse error [ 625.247860][T22098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 625.418116][T22104] netlink: 'syz.3.5490': attribute type 10 has an invalid length. [ 625.445519][T22104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5490'. [ 625.459644][T22104] batman_adv: batadv0: Adding interface: virt_wifi0 [ 625.469922][T22104] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.498447][T22104] batman_adv: batadv0: Interface activated: virt_wifi0 [ 625.623278][T22110] lo speed is unknown, defaulting to 1000 [ 625.704399][T22112] lo speed is unknown, defaulting to 1000 [ 625.727788][T22117] x_tables: duplicate underflow at hook 1 [ 625.746883][T22118] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 626.131223][T22132] FAULT_INJECTION: forcing a failure. [ 626.131223][T22132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.163105][T22132] CPU: 1 UID: 0 PID: 22132 Comm: syz.5.5500 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 626.163133][T22132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.163145][T22132] Call Trace: [ 626.163152][T22132] [ 626.163161][T22132] dump_stack_lvl+0x189/0x250 [ 626.163190][T22132] ? __lock_acquire+0xaac/0xd20 [ 626.163218][T22132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.163260][T22132] ? __pfx__printk+0x10/0x10 [ 626.163280][T22132] ? __might_fault+0xb0/0x130 [ 626.163317][T22132] should_fail_ex+0x414/0x560 [ 626.163343][T22132] _copy_from_user+0x2d/0xb0 [ 626.163371][T22132] ___sys_recvmsg+0x12e/0x510 [ 626.163397][T22132] ? __pfx____sys_recvmsg+0x10/0x10 [ 626.163448][T22132] ? __might_fault+0xb0/0x130 [ 626.163476][T22132] do_recvmmsg+0x307/0x760 [ 626.163504][T22132] ? __pfx_do_recvmmsg+0x10/0x10 [ 626.163535][T22132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 626.163576][T22132] __x64_sys_recvmmsg+0x190/0x240 [ 626.163594][T22132] ? rcu_is_watching+0x15/0xb0 [ 626.163614][T22132] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 626.163637][T22132] ? do_syscall_64+0xba/0x210 [ 626.163663][T22132] do_syscall_64+0xf6/0x210 [ 626.163686][T22132] ? clear_bhb_loop+0x60/0xb0 [ 626.163710][T22132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.163728][T22132] RIP: 0033:0x7f180ed8e969 [ 626.163745][T22132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.163761][T22132] RSP: 002b:00007f180fb6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.163782][T22132] RAX: ffffffffffffffda RBX: 00007f180efb5fa0 RCX: 00007f180ed8e969 [ 626.163796][T22132] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 626.163810][T22132] RBP: 00007f180fb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 626.163822][T22132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 626.163833][T22132] R13: 0000000000000000 R14: 00007f180efb5fa0 R15: 00007ffd8a4d5f28 [ 626.163864][T22132] [ 626.545588][T22110] dummy0 speed is unknown, defaulting to 1000 [ 627.678454][T22112] dummy0 speed is unknown, defaulting to 1000 [ 627.698941][T22166] FAULT_INJECTION: forcing a failure. [ 627.698941][T22166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.724877][T22166] CPU: 1 UID: 0 PID: 22166 Comm: syz.3.5510 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 627.724921][T22166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.724934][T22166] Call Trace: [ 627.724942][T22166] [ 627.724950][T22166] dump_stack_lvl+0x189/0x250 [ 627.724986][T22166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.725013][T22166] ? __pfx__printk+0x10/0x10 [ 627.725034][T22166] ? fs_reclaim_acquire+0x7d/0x100 [ 627.725073][T22166] should_fail_ex+0x414/0x560 [ 627.725099][T22166] prepare_alloc_pages+0x213/0x610 [ 627.725125][T22166] __alloc_frozen_pages_noprof+0x123/0x370 [ 627.725149][T22166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 627.725197][T22166] ? policy_nodemask+0x27c/0x720 [ 627.725223][T22166] ? __lock_acquire+0xaac/0xd20 [ 627.725256][T22166] alloc_pages_mpol+0x232/0x4a0 [ 627.725290][T22166] vma_alloc_folio_noprof+0xe4/0x200 [ 627.725320][T22166] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 627.725362][T22166] folio_prealloc+0x30/0x180 [ 627.725393][T22166] __handle_mm_fault+0x2b28/0x5380 [ 627.725418][T22166] ? __lock_acquire+0xaac/0xd20 [ 627.725464][T22166] ? __pfx___handle_mm_fault+0x10/0x10 [ 627.725490][T22166] ? lock_vma_under_rcu+0xf8/0x710 [ 627.725527][T22166] ? lock_vma_under_rcu+0xf8/0x710 [ 627.725553][T22166] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 627.725587][T22166] handle_mm_fault+0x40a/0x8e0 [ 627.725624][T22166] do_user_addr_fault+0xa81/0x1390 [ 627.725654][T22166] ? rcu_is_watching+0x15/0xb0 [ 627.725674][T22166] ? trace_irq_disable+0x37/0x110 [ 627.725702][T22166] exc_page_fault+0x68/0x110 [ 627.725728][T22166] asm_exc_page_fault+0x26/0x30 [ 627.725754][T22166] RIP: 0033:0x7f2e7945a35b [ 627.725772][T22166] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 627.725788][T22166] RSP: 002b:00007f2e7a47afb0 EFLAGS: 00010202 [ 627.725807][T22166] RAX: 0000000000000000 RBX: 00007f2e797b5fa0 RCX: 0000000000000000 [ 627.725820][T22166] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 627.725834][T22166] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 627.725847][T22166] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001 [ 627.725860][T22166] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 627.725893][T22166] [ 627.725909][T22166] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 628.419022][T22181] IPVS: Error joining to the multicast group [ 628.533678][T22183] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5517'. [ 628.568506][T22183] netlink: 'syz.5.5517': attribute type 5 has an invalid length. [ 628.670527][T22183] __nla_validate_parse: 2 callbacks suppressed [ 628.670548][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5517'. [ 628.819370][T22191] lo speed is unknown, defaulting to 1000 [ 629.222729][T22191] dummy0 speed is unknown, defaulting to 1000 [ 629.638830][T22219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5529'. [ 629.649357][T22219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5529'. [ 629.674761][T22219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5529'. [ 629.829115][T22224] FAULT_INJECTION: forcing a failure. [ 629.829115][T22224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.872367][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.3.5531 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 629.872399][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.872412][T22224] Call Trace: [ 629.872420][T22224] [ 629.872429][T22224] dump_stack_lvl+0x189/0x250 [ 629.872466][T22224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.872495][T22224] ? __pfx__printk+0x10/0x10 [ 629.872518][T22224] ? fs_reclaim_acquire+0x7d/0x100 [ 629.872559][T22224] should_fail_ex+0x414/0x560 [ 629.872594][T22224] prepare_alloc_pages+0x213/0x610 [ 629.872623][T22224] __alloc_frozen_pages_noprof+0x123/0x370 [ 629.872649][T22224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.872674][T22224] ? nl80211_msg_put_channel+0x674/0x14a0 [ 629.872707][T22224] ? policy_nodemask+0x27c/0x720 [ 629.872733][T22224] ? __lock_acquire+0xaac/0xd20 [ 629.872767][T22224] alloc_pages_mpol+0x232/0x4a0 [ 629.872800][T22224] vma_alloc_folio_noprof+0xe4/0x200 [ 629.872826][T22224] ? genlmsg_put+0x1cf/0x2e0 [ 629.872848][T22224] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 629.872889][T22224] folio_prealloc+0x30/0x180 [ 629.872920][T22224] __handle_mm_fault+0x2b28/0x5380 [ 629.872967][T22224] ? __pfx___handle_mm_fault+0x10/0x10 [ 629.873016][T22224] ? find_vma+0xe7/0x160 [ 629.873041][T22224] ? __pfx_find_vma+0x10/0x10 [ 629.873070][T22224] handle_mm_fault+0x40a/0x8e0 [ 629.873107][T22224] do_user_addr_fault+0x764/0x1390 [ 629.873147][T22224] exc_page_fault+0x68/0x110 [ 629.873172][T22224] asm_exc_page_fault+0x26/0x30 [ 629.873191][T22224] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 629.873221][T22224] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f f2 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 629.873239][T22224] RSP: 0018:ffffc900043a7518 EFLAGS: 00050206 [ 629.873257][T22224] RAX: ffffffff84b68d01 RBX: ffff8880289e7000 RCX: 0000000000000099 [ 629.873272][T22224] RDX: 0000000000000000 RSI: ffff8880289e7000 RDI: 0000200000001b40 [ 629.873286][T22224] RBP: ffffc900043a7678 R08: ffff8880289e7098 R09: 1ffff1100513ce13 [ 629.873300][T22224] R10: dffffc0000000000 R11: ffffed100513ce14 R12: dffffc0000000000 [ 629.873315][T22224] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000099 [ 629.873334][T22224] ? _copy_to_iter+0x401/0x15a0 [ 629.873366][T22224] _copy_to_iter+0x484/0x15a0 [ 629.873405][T22224] ? __pfx__copy_to_iter+0x10/0x10 [ 629.873429][T22224] ? __skb_try_recv_from_queue+0x58f/0x730 [ 629.873457][T22224] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 629.873486][T22224] __skb_datagram_iter+0x100/0x960 [ 629.873509][T22224] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 629.873540][T22224] skb_copy_datagram_iter+0xc5/0x230 [ 629.873574][T22224] netlink_recvmsg+0x2ab/0xa30 [ 629.873614][T22224] ? __pfx_netlink_recvmsg+0x10/0x10 [ 629.873649][T22224] ? aa_sock_msg_perm+0x94/0x160 [ 629.873676][T22224] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 629.873701][T22224] ? __pfx_netlink_recvmsg+0x10/0x10 [ 629.873731][T22224] sock_recvmsg_nosec+0x186/0x1c0 [ 629.873761][T22224] ____sys_recvmsg+0x3aa/0x460 [ 629.873802][T22224] ? __pfx_____sys_recvmsg+0x10/0x10 [ 629.873851][T22224] ? import_iovec+0x74/0xa0 [ 629.873884][T22224] ___sys_recvmsg+0x1b5/0x510 [ 629.873910][T22224] ? __pfx____sys_recvmsg+0x10/0x10 [ 629.873966][T22224] ? __might_fault+0xb0/0x130 [ 629.873997][T22224] do_recvmmsg+0x307/0x760 [ 629.874027][T22224] ? __pfx_do_recvmmsg+0x10/0x10 [ 629.874060][T22224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.874103][T22224] __x64_sys_recvmmsg+0x190/0x240 [ 629.874121][T22224] ? rcu_is_watching+0x15/0xb0 [ 629.874142][T22224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 629.874166][T22224] ? do_syscall_64+0xba/0x210 [ 629.874194][T22224] do_syscall_64+0xf6/0x210 [ 629.874218][T22224] ? clear_bhb_loop+0x60/0xb0 [ 629.874243][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.874262][T22224] RIP: 0033:0x7f2e7958e969 [ 629.874279][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.874294][T22224] RSP: 002b:00007f2e7a47c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 629.874313][T22224] RAX: ffffffffffffffda RBX: 00007f2e797b5fa0 RCX: 00007f2e7958e969 [ 629.874328][T22224] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 629.874341][T22224] RBP: 00007f2e7a47c090 R08: 0000000000000000 R09: 0000000000000000 [ 629.874353][T22224] R10: 0000000040008022 R11: 0000000000000246 R12: 0000000000000001 [ 629.874366][T22224] R13: 0000000000000000 R14: 00007f2e797b5fa0 R15: 00007ffd66f11a68 [ 629.874399][T22224] [ 630.513813][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5535'. [ 630.630420][T22239] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 630.948522][T22240] lo speed is unknown, defaulting to 1000 [ 631.311431][T22254] netlink: 'syz.3.5540': attribute type 10 has an invalid length. [ 631.399565][T22258] netlink: 'syz.2.5541': attribute type 1 has an invalid length. [ 631.435817][T22255] xt_CT: No such helper "snmp" [ 631.442484][T22258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5541'. [ 631.649948][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5544'. [ 631.688701][T22267] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5545'. [ 631.741389][T22271] netlink: 'syz.2.5544': attribute type 303 has an invalid length. [ 631.769947][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5544'. [ 631.795229][T22268] lo speed is unknown, defaulting to 1000 [ 631.896648][T22271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5544'. [ 631.938119][T22240] dummy0 speed is unknown, defaulting to 1000 [ 632.108476][T22277] IPVS: Error joining to the multicast group [ 632.619761][T22268] dummy0 speed is unknown, defaulting to 1000 [ 632.724473][T22293] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 633.684529][T22302] lo speed is unknown, defaulting to 1000 [ 634.040577][T22303] lo speed is unknown, defaulting to 1000 [ 634.511090][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5563'. [ 634.564128][T22327] FAULT_INJECTION: forcing a failure. [ 634.564128][T22327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.657591][T22327] CPU: 0 UID: 0 PID: 22327 Comm: syz.1.5564 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 634.657622][T22327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.657634][T22327] Call Trace: [ 634.657642][T22327] [ 634.657651][T22327] dump_stack_lvl+0x189/0x250 [ 634.657702][T22327] ? __lock_acquire+0xaac/0xd20 [ 634.657734][T22327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.657764][T22327] ? __pfx__printk+0x10/0x10 [ 634.657785][T22327] ? __might_fault+0xb0/0x130 [ 634.657824][T22327] should_fail_ex+0x414/0x560 [ 634.657853][T22327] _copy_from_user+0x2d/0xb0 [ 634.657884][T22327] ___sys_sendmsg+0x158/0x2a0 [ 634.657919][T22327] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.657989][T22327] ? __fget_files+0x2a/0x420 [ 634.658016][T22327] ? __fget_files+0x3a0/0x420 [ 634.658055][T22327] __x64_sys_sendmsg+0x19b/0x260 [ 634.658089][T22327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.658143][T22327] ? do_syscall_64+0xba/0x210 [ 634.658172][T22327] do_syscall_64+0xf6/0x210 [ 634.658196][T22327] ? clear_bhb_loop+0x60/0xb0 [ 634.658222][T22327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.658242][T22327] RIP: 0033:0x7f74cb38e969 [ 634.658260][T22327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.658278][T22327] RSP: 002b:00007f74c91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.658300][T22327] RAX: ffffffffffffffda RBX: 00007f74cb5b5fa0 RCX: 00007f74cb38e969 [ 634.658315][T22327] RDX: 0000000000000084 RSI: 0000200000000940 RDI: 0000000000000003 [ 634.658329][T22327] RBP: 00007f74c91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 634.658342][T22327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.658354][T22327] R13: 0000000000000000 R14: 00007f74cb5b5fa0 R15: 00007ffcb639a948 [ 634.658387][T22327] [ 634.927833][T22330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5565'. [ 635.060811][T22302] dummy0 speed is unknown, defaulting to 1000 [ 635.452100][T22340] netlink: 'syz.2.5570': attribute type 15 has an invalid length. [ 635.507512][T22348] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5573'. [ 635.718886][T22351] pim6reg: entered allmulticast mode [ 635.959318][T22303] dummy0 speed is unknown, defaulting to 1000 [ 636.155390][T22363] lo speed is unknown, defaulting to 1000 [ 636.268278][T22373] xt_hashlimit: size too large, truncated to 1048576 [ 636.660005][T22383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5586'. [ 636.869983][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5587'. [ 637.195520][T22389] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 637.211192][T22363] dummy0 speed is unknown, defaulting to 1000 [ 638.404738][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5596'. [ 638.908395][T22422] netlink: 'syz.3.5599': attribute type 32 has an invalid length. [ 638.956233][T22420] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5600'. [ 639.049908][T22432] sit0: entered promiscuous mode [ 639.057071][T22432] netlink: 'syz.0.5603': attribute type 1 has an invalid length. [ 639.084275][T22432] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5603'. [ 639.179246][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'. [ 639.298647][T22445] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 639.501548][T22449] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5609'. [ 639.829163][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5612'. [ 640.051950][T22464] macsec1: entered allmulticast mode [ 640.070381][T22464] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 640.107337][T22464] batman_adv: batadv0: Adding interface: macsec1 [ 640.160164][T22464] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.164469][T22470] FAULT_INJECTION: forcing a failure. [ 640.164469][T22470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.166274][T22470] [ 640.166286][T22470] ====================================================== [ 640.166296][T22470] WARNING: possible circular locking dependency detected [ 640.166313][T22470] 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 Not tainted [ 640.166326][T22470] ------------------------------------------------------ [ 640.166335][T22470] syz.2.5615/22470 is trying to acquire lock: [ 640.166346][T22470] ffffffff8df320a0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 640.166400][T22470] [ 640.166400][T22470] but task is already holding lock: [ 640.166407][T22470] ffff8880b883b5d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 640.166463][T22470] [ 640.166463][T22470] which lock already depends on the new lock. [ 640.166463][T22470] [ 640.166471][T22470] [ 640.166471][T22470] the existing dependency chain (in reverse order) is: [ 640.166479][T22470] [ 640.166479][T22470] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 640.166506][T22470] lock_acquire+0x120/0x360 [ 640.166535][T22470] _raw_spin_lock_nested+0x32/0x50 [ 640.166556][T22470] raw_spin_rq_lock_nested+0x2a/0x140 [ 640.166585][T22470] task_rq_lock+0xbc/0x470 [ 640.166601][T22470] cgroup_move_task+0x9a/0x590 [ 640.166622][T22470] css_set_move_task+0x658/0x9e0 [ 640.166642][T22470] cgroup_post_fork+0x1ef/0x790 [ 640.166661][T22470] copy_process+0x37e6/0x3b80 [ 640.166681][T22470] kernel_clone+0x21e/0x870 [ 640.166710][T22470] user_mode_thread+0xdd/0x140 [ 640.166730][T22470] rest_init+0x23/0x300 [ 640.166756][T22470] start_kernel+0x470/0x4f0 [ 640.166781][T22470] x86_64_start_reservations+0x2a/0x30 [ 640.166801][T22470] x86_64_start_kernel+0x66/0x70 [ 640.166819][T22470] common_startup_64+0x13e/0x147 [ 640.166848][T22470] [ 640.166848][T22470] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 640.166876][T22470] lock_acquire+0x120/0x360 [ 640.166901][T22470] _raw_spin_lock_irqsave+0xa7/0xf0 [ 640.166920][T22470] try_to_wake_up+0x6e/0x1290 [ 640.166943][T22470] __wake_up_common_lock+0x137/0x1f0 [ 640.166967][T22470] tty_port_default_wakeup+0xa2/0xf0 [ 640.166999][T22470] serial8250_tx_chars+0x72e/0x970 [ 640.167021][T22470] serial8250_handle_irq+0x633/0xbb0 [ 640.167043][T22470] serial8250_default_handle_irq+0xbf/0x1b0 [ 640.167070][T22470] serial8250_interrupt+0xa5/0x1d0 [ 640.167086][T22470] __handle_irq_event_percpu+0x28c/0x980 [ 640.167109][T22470] handle_irq_event+0x8b/0x1e0 [ 640.167131][T22470] handle_edge_irq+0x24d/0xb60 [ 640.167151][T22470] __common_interrupt+0x140/0x250 [ 640.167169][T22470] common_interrupt+0xb6/0xe0 [ 640.167195][T22470] asm_common_interrupt+0x26/0x40 [ 640.167219][T22470] pv_native_safe_halt+0x13/0x20 [ 640.167237][T22470] default_idle+0x13/0x20 [ 640.167262][T22470] default_idle_call+0x74/0xb0 [ 640.167287][T22470] do_idle+0x1e8/0x510 [ 640.167306][T22470] cpu_startup_entry+0x44/0x60 [ 640.167324][T22470] rest_init+0x2de/0x300 [ 640.167349][T22470] start_kernel+0x470/0x4f0 [ 640.167374][T22470] x86_64_start_reservations+0x2a/0x30 [ 640.167395][T22470] x86_64_start_kernel+0x66/0x70 [ 640.167413][T22470] common_startup_64+0x13e/0x147 [ 640.167440][T22470] [ 640.167440][T22470] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 640.167468][T22470] lock_acquire+0x120/0x360 [ 640.167494][T22470] _raw_spin_lock_irqsave+0xa7/0xf0 [ 640.167512][T22470] __wake_up_common_lock+0x2f/0x1f0 [ 640.167537][T22470] tty_port_default_wakeup+0xa2/0xf0 [ 640.167561][T22470] serial8250_tx_chars+0x72e/0x970 [ 640.167582][T22470] serial8250_handle_irq+0x633/0xbb0 [ 640.167604][T22470] serial8250_default_handle_irq+0xbf/0x1b0 [ 640.167631][T22470] serial8250_interrupt+0xa5/0x1d0 [ 640.167648][T22470] __handle_irq_event_percpu+0x28c/0x980 [ 640.167670][T22470] handle_irq_event+0x8b/0x1e0 [ 640.167698][T22470] handle_edge_irq+0x24d/0xb60 [ 640.167717][T22470] __common_interrupt+0x140/0x250 [ 640.167734][T22470] common_interrupt+0xb6/0xe0 [ 640.167759][T22470] asm_common_interrupt+0x26/0x40 [ 640.167778][T22470] pv_native_safe_halt+0x13/0x20 [ 640.167796][T22470] default_idle+0x13/0x20 [ 640.167820][T22470] default_idle_call+0x74/0xb0 [ 640.167843][T22470] do_idle+0x1e8/0x510 [ 640.167860][T22470] cpu_startup_entry+0x44/0x60 [ 640.167878][T22470] rest_init+0x2de/0x300 [ 640.167902][T22470] start_kernel+0x470/0x4f0 [ 640.167927][T22470] x86_64_start_reservations+0x2a/0x30 [ 640.167947][T22470] x86_64_start_kernel+0x66/0x70 [ 640.167964][T22470] common_startup_64+0x13e/0x147 [ 640.167992][T22470] [ 640.167992][T22470] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 640.168020][T22470] lock_acquire+0x120/0x360 [ 640.168045][T22470] _raw_spin_lock_irqsave+0xa7/0xf0 [ 640.168063][T22470] serial8250_console_write+0x17e/0x1ba0 [ 640.168087][T22470] console_flush_all+0x728/0xc40 [ 640.168108][T22470] console_unlock+0xc4/0x270 [ 640.168126][T22470] vprintk_emit+0x5b7/0x7a0 [ 640.168143][T22470] _printk+0xcf/0x120 [ 640.168161][T22470] register_console+0xa8b/0xf90 [ 640.168182][T22470] univ8250_console_init+0x52/0x90 [ 640.168208][T22470] console_init+0x1a1/0x670 [ 640.168234][T22470] start_kernel+0x2cb/0x4f0 [ 640.168259][T22470] x86_64_start_reservations+0x2a/0x30 [ 640.168277][T22470] x86_64_start_kernel+0x66/0x70 [ 640.168296][T22470] common_startup_64+0x13e/0x147 [ 640.168323][T22470] [ 640.168323][T22470] -> #0 (console_owner){-.-.}-{0:0}: [ 640.168349][T22470] validate_chain+0xb9b/0x2140 [ 640.168367][T22470] __lock_acquire+0xaac/0xd20 [ 640.168393][T22470] lock_acquire+0x120/0x360 [ 640.168418][T22470] vprintk_emit+0x460/0x7a0 [ 640.168436][T22470] _printk+0xcf/0x120 [ 640.168454][T22470] should_fail_ex+0x3f5/0x560 [ 640.168472][T22470] strncpy_from_user+0x36/0x290 [ 640.168489][T22470] strncpy_from_user_nofault+0x72/0x140 [ 640.168512][T22470] bpf_probe_read_compat_str+0xe2/0x180 [ 640.168540][T22470] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 640.168558][T22470] bpf_trace_run4+0x28e/0x4a0 [ 640.168578][T22470] __bpf_trace_sched_switch+0x17a/0x1e0 [ 640.168601][T22470] __traceiter_sched_switch+0x9d/0xd0 [ 640.168625][T22470] __schedule+0x2304/0x4cd0 [ 640.168642][T22470] preempt_schedule_common+0x83/0xd0 [ 640.168662][T22470] preempt_schedule+0xae/0xc0 [ 640.168681][T22470] preempt_schedule_thunk+0x16/0x30 [ 640.168715][T22470] __local_bh_enable_ip+0x13e/0x1c0 [ 640.168734][T22470] __dev_queue_xmit+0x1cd7/0x3a70 [ 640.168754][T22470] __netlink_deliver_tap+0x5ad/0x850 [ 640.168782][T22470] netlink_deliver_tap+0x19c/0x1b0 [ 640.168809][T22470] netlink_unicast+0x72f/0x8d0 [ 640.168831][T22470] netlink_sendmsg+0x805/0xb30 [ 640.168858][T22470] __sock_sendmsg+0x219/0x270 [ 640.168879][T22470] ____sys_sendmsg+0x52d/0x830 [ 640.168907][T22470] ___sys_sendmsg+0x21f/0x2a0 [ 640.168934][T22470] __sys_sendmmsg+0x227/0x430 [ 640.168961][T22470] __x64_sys_sendmmsg+0xa0/0xc0 [ 640.168990][T22470] do_syscall_64+0xf6/0x210 [ 640.169030][T22470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.169050][T22470] [ 640.169050][T22470] other info that might help us debug this: [ 640.169050][T22470] [ 640.169056][T22470] Chain exists of: [ 640.169056][T22470] console_owner --> &p->pi_lock --> &rq->__lock [ 640.169056][T22470] [ 640.169090][T22470] Possible unsafe locking scenario: [ 640.169090][T22470] [ 640.169097][T22470] CPU0 CPU1 [ 640.169105][T22470] ---- ---- [ 640.169112][T22470] lock(&rq->__lock); [ 640.169125][T22470] lock(&p->pi_lock); [ 640.169141][T22470] lock(&rq->__lock); [ 640.169156][T22470] lock(console_owner); [ 640.169170][T22470] [ 640.169170][T22470] *** DEADLOCK *** [ 640.169170][T22470] [ 640.169177][T22470] 3 locks held by syz.2.5615/22470: [ 640.169190][T22470] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 640.169247][T22470] #1: ffff8880b883b5d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 640.169307][T22470] #2: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 640.169357][T22470] [ 640.169357][T22470] stack backtrace: [ 640.169370][T22470] CPU: 0 UID: 0 PID: 22470 Comm: syz.2.5615 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 640.169396][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.169410][T22470] Call Trace: [ 640.169419][T22470] [ 640.169428][T22470] dump_stack_lvl+0x189/0x250 [ 640.169461][T22470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.169492][T22470] ? __pfx__printk+0x10/0x10 [ 640.169515][T22470] ? print_lock_name+0xde/0x100 [ 640.169538][T22470] print_circular_bug+0x2ee/0x310 [ 640.169564][T22470] check_noncircular+0x134/0x160 [ 640.169590][T22470] validate_chain+0xb9b/0x2140 [ 640.169626][T22470] __lock_acquire+0xaac/0xd20 [ 640.169658][T22470] ? vprintk_emit+0x444/0x7a0 [ 640.169677][T22470] lock_acquire+0x120/0x360 [ 640.169713][T22470] ? vprintk_emit+0x444/0x7a0 [ 640.169738][T22470] ? do_raw_spin_unlock+0x122/0x240 [ 640.169763][T22470] ? vprintk_emit+0x444/0x7a0 [ 640.169784][T22470] vprintk_emit+0x460/0x7a0 [ 640.169805][T22470] ? vprintk_emit+0x444/0x7a0 [ 640.169827][T22470] ? __pfx_vprintk_emit+0x10/0x10 [ 640.169847][T22470] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 640.169869][T22470] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.169892][T22470] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 640.169913][T22470] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 640.169940][T22470] _printk+0xcf/0x120 [ 640.169963][T22470] ? __pfx__printk+0x10/0x10 [ 640.169984][T22470] ? kasan_save_free_info+0x46/0x50 [ 640.170003][T22470] ? __kasan_slab_free+0x62/0x70 [ 640.170027][T22470] ? kmem_cache_free_bulk+0x2d1/0x520 [ 640.170057][T22470] ? kfree_skb_list_reason+0x3eb/0x460 [ 640.170089][T22470] ? __dev_queue_xmit+0x2148/0x3a70 [ 640.170111][T22470] ? ip6_finish_output+0x234/0x7d0 [ 640.170142][T22470] ? ip6_send_skb+0x1d5/0x390 [ 640.170159][T22470] ? udp_v6_send_skb+0xc17/0x1830 [ 640.170193][T22470] should_fail_ex+0x3f5/0x560 [ 640.170216][T22470] strncpy_from_user+0x36/0x290 [ 640.170239][T22470] strncpy_from_user_nofault+0x72/0x140 [ 640.170266][T22470] bpf_probe_read_compat_str+0xe2/0x180 [ 640.170300][T22470] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 640.170317][T22470] bpf_trace_run4+0x28e/0x4a0 [ 640.170343][T22470] ? bpf_trace_run4+0x19c/0x4a0 [ 640.170367][T22470] ? __pfx_bpf_trace_run4+0x10/0x10 [ 640.170389][T22470] ? kvm_sched_clock_read+0x11/0x20 [ 640.170410][T22470] ? sched_clock_cpu+0x74/0x430 [ 640.170432][T22470] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 640.170463][T22470] __bpf_trace_sched_switch+0x17a/0x1e0 [ 640.170490][T22470] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 640.170516][T22470] ? psi_group_change+0xbc7/0x1210 [ 640.170538][T22470] ? rcu_read_lock_sched_held+0x89/0x100 [ 640.170560][T22470] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 640.170583][T22470] ? psi_task_switch+0x314/0x6d0 [ 640.170609][T22470] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 640.170634][T22470] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 640.170661][T22470] __traceiter_sched_switch+0x9d/0xd0 [ 640.170703][T22470] __schedule+0x2304/0x4cd0 [ 640.170725][T22470] ? kasan_save_free_info+0x46/0x50 [ 640.170744][T22470] ? __kasan_slab_free+0x62/0x70 [ 640.170768][T22470] ? dev_hard_start_xmit+0x2d4/0x830 [ 640.170788][T22470] ? __dev_queue_xmit+0x1adf/0x3a70 [ 640.170809][T22470] ? netlink_unicast+0x72f/0x8d0 [ 640.170834][T22470] ? netlink_sendmsg+0x805/0xb30 [ 640.170864][T22470] ? __sys_sendmmsg+0x227/0x430 [ 640.170895][T22470] ? do_syscall_64+0xf6/0x210 [ 640.170918][T22470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.170941][T22470] ? preempt_schedule_common+0x83/0xd0 [ 640.170966][T22470] ? __pfx___schedule+0x10/0x10 [ 640.170996][T22470] ? preempt_schedule+0xae/0xc0 [ 640.171015][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 640.171037][T22470] preempt_schedule_common+0x83/0xd0 [ 640.171060][T22470] preempt_schedule+0xae/0xc0 [ 640.171081][T22470] ? __pfx_preempt_schedule+0x10/0x10 [ 640.171103][T22470] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 640.171130][T22470] preempt_schedule_thunk+0x16/0x30 [ 640.171158][T22470] __local_bh_enable_ip+0x13e/0x1c0 [ 640.171179][T22470] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 640.171202][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 640.171222][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 640.171243][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 640.171281][T22470] __dev_queue_xmit+0x1cd7/0x3a70 [ 640.171305][T22470] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 640.171334][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 640.171356][T22470] ? do_syscall_64+0xf6/0x210 [ 640.171387][T22470] ? __pfx___dev_queue_xmit+0x10/0x10 [ 640.171416][T22470] ? __copy_skb_header+0xa7/0x550 [ 640.171449][T22470] ? __asan_memcpy+0x40/0x70 [ 640.171482][T22470] ? skb_clone+0x246/0x3a0 [ 640.171504][T22470] __netlink_deliver_tap+0x5ad/0x850 [ 640.171542][T22470] ? netlink_deliver_tap+0x2e/0x1b0 [ 640.171571][T22470] netlink_deliver_tap+0x19c/0x1b0 [ 640.171600][T22470] netlink_unicast+0x72f/0x8d0 [ 640.171632][T22470] netlink_sendmsg+0x805/0xb30 [ 640.171666][T22470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.171703][T22470] ? aa_sock_msg_perm+0x94/0x160 [ 640.171729][T22470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.171764][T22470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.171791][T22470] __sock_sendmsg+0x219/0x270 [ 640.171815][T22470] ____sys_sendmsg+0x52d/0x830 [ 640.171846][T22470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.171880][T22470] ? import_iovec+0x74/0xa0 [ 640.171927][T22470] ___sys_sendmsg+0x21f/0x2a0 [ 640.171959][T22470] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.172010][T22470] ? __fget_files+0x2a/0x420 [ 640.172037][T22470] ? __fget_files+0x3a0/0x420 [ 640.172071][T22470] __sys_sendmmsg+0x227/0x430 [ 640.172104][T22470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 640.172140][T22470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 640.172175][T22470] ? ksys_write+0x1f0/0x250 [ 640.172197][T22470] ? rcu_is_watching+0x15/0xb0 [ 640.172222][T22470] __x64_sys_sendmmsg+0xa0/0xc0 [ 640.172255][T22470] do_syscall_64+0xf6/0x210 [ 640.172279][T22470] ? clear_bhb_loop+0x60/0xb0 [ 640.172302][T22470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.172322][T22470] RIP: 0033:0x7f449c78e969 [ 640.172341][T22470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.172360][T22470] RSP: 002b:00007f449d553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 640.172381][T22470] RAX: ffffffffffffffda RBX: 00007f449c9b6160 RCX: 00007f449c78e969 [ 640.172397][T22470] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 640.172412][T22470] RBP: 00007f449d553090 R08: 0000000000000000 R09: 0000000000000000 [ 640.172425][T22470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.172438][T22470] R13: 0000000000000000 R14: 00007f449c9b6160 R15: 00007ffeaf1d34f8 [ 640.172462][T22470] [ 641.660833][T22470] CPU: 0 UID: 0 PID: 22470 Comm: syz.2.5615 Not tainted 6.15.0-rc7-syzkaller-01788-g6682bfc1b227 #0 PREEMPT(full) [ 641.660854][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.660865][T22470] Call Trace: [ 641.660873][T22470] [ 641.660882][T22470] dump_stack_lvl+0x189/0x250 [ 641.660909][T22470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.660930][T22470] ? __pfx__printk+0x10/0x10 [ 641.660944][T22470] ? kasan_save_free_info+0x46/0x50 [ 641.660958][T22470] ? kmem_cache_free_bulk+0x2d1/0x520 [ 641.660978][T22470] ? kfree_skb_list_reason+0x3eb/0x460 [ 641.661001][T22470] ? __dev_queue_xmit+0x2148/0x3a70 [ 641.661015][T22470] ? ip6_finish_output+0x234/0x7d0 [ 641.661036][T22470] ? ip6_send_skb+0x1d5/0x390 [ 641.661048][T22470] ? udp_v6_send_skb+0xc17/0x1830 [ 641.661071][T22470] should_fail_ex+0x414/0x560 [ 641.661089][T22470] strncpy_from_user+0x36/0x290 [ 641.661119][T22470] strncpy_from_user_nofault+0x72/0x140 [ 641.661138][T22470] bpf_probe_read_compat_str+0xe2/0x180 [ 641.661162][T22470] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 641.661174][T22470] bpf_trace_run4+0x28e/0x4a0 [ 641.661191][T22470] ? bpf_trace_run4+0x19c/0x4a0 [ 641.661207][T22470] ? __pfx_bpf_trace_run4+0x10/0x10 [ 641.661222][T22470] ? kvm_sched_clock_read+0x11/0x20 [ 641.661237][T22470] ? sched_clock_cpu+0x74/0x430 [ 641.661252][T22470] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 641.661279][T22470] __bpf_trace_sched_switch+0x17a/0x1e0 [ 641.661298][T22470] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 641.661315][T22470] ? psi_group_change+0xbc7/0x1210 [ 641.661330][T22470] ? rcu_read_lock_sched_held+0x89/0x100 [ 641.661344][T22470] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 641.661360][T22470] ? psi_task_switch+0x314/0x6d0 [ 641.661381][T22470] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 641.661401][T22470] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 641.661419][T22470] __traceiter_sched_switch+0x9d/0xd0 [ 641.661440][T22470] __schedule+0x2304/0x4cd0 [ 641.661454][T22470] ? kasan_save_free_info+0x46/0x50 [ 641.661467][T22470] ? __kasan_slab_free+0x62/0x70 [ 641.661484][T22470] ? dev_hard_start_xmit+0x2d4/0x830 [ 641.661496][T22470] ? __dev_queue_xmit+0x1adf/0x3a70 [ 641.661510][T22470] ? netlink_unicast+0x72f/0x8d0 [ 641.661527][T22470] ? netlink_sendmsg+0x805/0xb30 [ 641.661547][T22470] ? __sys_sendmmsg+0x227/0x430 [ 641.661568][T22470] ? do_syscall_64+0xf6/0x210 [ 641.661583][T22470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.661598][T22470] ? preempt_schedule_common+0x83/0xd0 [ 641.661614][T22470] ? __pfx___schedule+0x10/0x10 [ 641.661634][T22470] ? preempt_schedule+0xae/0xc0 [ 641.661647][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 641.661661][T22470] preempt_schedule_common+0x83/0xd0 [ 641.661676][T22470] preempt_schedule+0xae/0xc0 [ 641.661689][T22470] ? __pfx_preempt_schedule+0x10/0x10 [ 641.661704][T22470] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 641.661722][T22470] preempt_schedule_thunk+0x16/0x30 [ 641.661740][T22470] __local_bh_enable_ip+0x13e/0x1c0 [ 641.661754][T22470] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 641.661769][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 641.661783][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 641.661796][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 641.661810][T22470] __dev_queue_xmit+0x1cd7/0x3a70 [ 641.661826][T22470] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 641.661845][T22470] ? __dev_queue_xmit+0x27e/0x3a70 [ 641.661859][T22470] ? do_syscall_64+0xf6/0x210 [ 641.661880][T22470] ? __pfx___dev_queue_xmit+0x10/0x10 [ 641.661900][T22470] ? __copy_skb_header+0xa7/0x550 [ 641.661913][T22470] ? __asan_memcpy+0x40/0x70 [ 641.661934][T22470] ? skb_clone+0x246/0x3a0 [ 641.661949][T22470] __netlink_deliver_tap+0x5ad/0x850 [ 641.661973][T22470] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.661993][T22470] netlink_deliver_tap+0x19c/0x1b0 [ 641.662013][T22470] netlink_unicast+0x72f/0x8d0 [ 641.662035][T22470] netlink_sendmsg+0x805/0xb30 [ 641.662059][T22470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.662081][T22470] ? aa_sock_msg_perm+0x94/0x160 [ 641.662098][T22470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.662115][T22470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.662136][T22470] __sock_sendmsg+0x219/0x270 [ 641.662153][T22470] ____sys_sendmsg+0x52d/0x830 [ 641.662176][T22470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.662200][T22470] ? import_iovec+0x74/0xa0 [ 641.662222][T22470] ___sys_sendmsg+0x21f/0x2a0 [ 641.662244][T22470] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.662286][T22470] ? __fget_files+0x2a/0x420 [ 641.662306][T22470] ? __fget_files+0x3a0/0x420 [ 641.662328][T22470] __sys_sendmmsg+0x227/0x430 [ 641.662352][T22470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 641.662376][T22470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.662400][T22470] ? ksys_write+0x1f0/0x250 [ 641.662416][T22470] ? rcu_is_watching+0x15/0xb0 [ 641.662432][T22470] __x64_sys_sendmmsg+0xa0/0xc0 [ 641.662458][T22470] do_syscall_64+0xf6/0x210 [ 641.662475][T22470] ? clear_bhb_loop+0x60/0xb0 [ 641.662491][T22470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.662505][T22470] RIP: 0033:0x7f449c78e969 [ 641.662519][T22470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.662531][T22470] RSP: 002b:00007f449d553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 641.662546][T22470] RAX: ffffffffffffffda RBX: 00007f449c9b6160 RCX: 00007f449c78e969 [ 641.662557][T22470] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 641.662567][T22470] RBP: 00007f449d553090 R08: 0000000000000000 R09: 0000000000000000 [ 641.662576][T22470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.662585][T22470] R13: 0000000000000000 R14: 00007f449c9b6160 R15: 00007ffeaf1d34f8 [ 641.662601][T22470] [ 642.312509][T22464] batman_adv: batadv0: Interface activated: macsec1 [ 643.460709][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!