last executing test programs: 3.395286969s ago: executing program 3 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 3.22717024s ago: executing program 3 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0xcc, 0xac, &(0x7f0000000300)="73f94b40ad33dd3f403f8ff6e8306dc07b6897401ac843fe5151b18ee40ce4b5111f81976550c5ce3aad35ebf188c402cb00356a633b64fb1adc524cf576079360be2c782041d169673edef6b2434adbdbcd97f661e275dbd92fdc7523bd85911548dee07bd3f30897218f0b99f8a5ffc163783e39c108cd16f035d816bafe22e262703a388d377640f1188a7947134fc0d875106a8287f4c7f189c15c682416272c20075f63335e3776261cbedd959b100c365e2589bc42cd2f7bc92455f12e1c557393b68736f2807eb0f7", &(0x7f0000000400)=""/172, 0x5, 0x0, 0x10, 0x6f, &(0x7f0000000080)="f9202b4038a9efe348f1bbf3be8d03af", &(0x7f0000000500)="e9f9974324a125e79a9c746798b1b54cb2b720b2fa1fa2845b4e8704d0fed465f72108679066c74c3b561806eaa719d685eee1c00a5ab6a6a61cc3177d2cb5b7dc2b3a16fdaf34cb2e69ff91c1c190d59e7c0f11c49480c18dfc0db923e9acbca2dd827aee5e382aee2cce2ed8c1b7", 0x6, 0x0, 0x5}, 0x50) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)={0x134, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1650, @private2, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000001}, 0x40880) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="ed3eb2bdffad", 0x6, 0x4000004, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a6970"], 0x5c}}, 0x0) 2.934383624s ago: executing program 3 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 2.832704437s ago: executing program 2 (id=655): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800004c4, 0x0, 0x0) 2.739415475s ago: executing program 2 (id=656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000057b000/0x4000)=nil, 0x4000, 0x0, 0xc3072, 0xffffffffffffffff, 0xf028e000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f00005da000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0xffffd000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x9, 0xff, 0x9}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100800500010000000000"], 0x38}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000001400)=0x6c3a, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000200)="63d024a7526bc3e082869b1aad59867968636fff0fa4af04031d5cf476c5020f29ed0a0293958121c969dcfc1fbccfa1b78db910ac6229d303856dd6fa1b9740a837198dff03f212a8bc27164b611e952b16ffd2b02df01828eee8a16746d0800e514ee834cb2c364fbc068ee1a3711160a925309a49159f969c9eea92f08eae6bc4798c9a4c077a1dec54651d1e0efe78b361aa7b9d18741e0a99653de53a0f5aadbfb601bd0fa96455860e27f910fd9a295e325b9a28ea96b136e634c0e758a4ba", &(0x7f0000000080)=@tcp6=r0, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.302734415s ago: executing program 1 (id=658): syz_80211_inject_frame(0x0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000ccb00a689efbd8d4841b9c960000"], 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r4, 0x0) write(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r2, 0x0, &(0x7f0000001480)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1802", @ANYRES32], 0x218}}, 0x0) ioctl$int_in(r6, 0x5452, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x1ec, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x4}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x80}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xfffffffb}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa6, 0x7, 0x36a, 0x8, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}, {{0x1c, 0x1, {0x3, 0x2, 0xe, 0x8, 0x2, 0x1e74, 0x0, 0x8}}, {0x14, 0x2, [0x800, 0xc8e9, 0x800, 0x4, 0x3, 0x4, 0x0, 0x9]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0xa, 0x84c9, 0x0, 0xf, 0x7, 0x8}}]}}]}, 0x1ec}}, 0x4004) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) 2.234811653s ago: executing program 3 (id=660): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x26000400) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x8, 0x4) unshare(0x40000200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x1a4, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x38, 0x25}, {0x8, 0x18}, {0x38, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x80000000}, {0x38, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_BRIDGE, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x3}, @AF_BRIDGE]}]}, 0x1c8}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c02000010000b0500000200000000006f6d8864d22a3e2f00a46c887c090200002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f28"], 0x22c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0x28}]}}]}, 0x3c}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400000000000000050000cf0400f87c"], 0x18, 0x2400c030}], 0x1, 0x200000d0) 2.17989105s ago: executing program 0 (id=661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x8, 0x3, 0x1, 0x1, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xfba5, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001140)={0x3, 0x0, 0x635dee08, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001180)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000011c0)=[{0x5, 0x5, 0xc, 0x5}, {0x5, 0x4, 0xe, 0x2}, {0x1, 0x2, 0x0, 0x4}, {0x4, 0x2, 0x0, 0x7}, {0x4, 0x2, 0x1, 0xc}, {0x3, 0x2, 0x847, 0x9}, {0x2, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xa, 0x5}], 0x10, 0x600, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000000)='ext4_ext_convert_to_initialized_fastpath\x00', r0, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)={r0}) syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r1) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000001400)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9577, 0x52}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001580)="7cb8b548ef46e7a20e35d386491625fe45ad3fcac91e24690bd6a6441b29770caf2a55674cf4bb6bcb6a2c067f98972bfb530a572152d9726651fce01d31751af48b8c069ee56a7b190fcfd3f3a80a53525302801d817d58e3ae92ef3354490033aeb2f5d499df62426a0095d140c0538be3a7d0bc02de42edeef4eef918b75704f52b46183c5100ac8d5cf4ac0709b70b919084db432bcb98165d8d2a2a6e7372ecd2571fac6ac22d474b6da6239ba52dfa4a1735d44afe1039", 0xba) sendmsg$NFT_BATCH(r1, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_USERDATA={0x63, 0xc, "61196002be53de4bf229112cbf957f661d653b1877ae31824a2d24a648023c20c890be4672c4bdba4c1dd021964a10fb08bf970d7e7165f7b0a38aabb7ae0bd6b2673b1dd343958d24109901a361d57b00d80543dc4af68b150742a64c3315"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xb}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x24000000}, 0x8081) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000001800)="c1472c99ca98ab625111c6659509d194747882916d2aaf017456de73723addb2973944697f68a956e61a7719011b4bf8ed3a396c389dc52b7e554f5128503468169ae8486371cfd3725ea3bdcaf32d5e21cb589dbd491465a5844f2283abf22fe6a586241a9ea36fd13ca7d2ff6ebbe5829185db2209a3c06ff5abe1dc26700bea9a3a3ac80ff16a0f6b03cd3ee2", 0x8e) sendmsg$kcm(r1, &(0x7f0000002b80)={&(0x7f00000018c0)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001940)="a24bbc7470d7179a6950902631da1e810a8ca71a0e08bb473c8eade4089d41452033420d1574d62d7cfb81ec05efeb7e23abec5bf4c2155c033dcad97b962e52bb6cc2d5f114d601fbd714e39e059c6ea4fbe5ce126341d427b0bf787c48e57880239288ecec557b53330d13a5a782f7c5826e9139e8721fda488c922f731ec839a644404d218a", 0x87}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="eb40a45725dcc2ddb2cc890760d651b793d34c253fa715d0bfdb995948a61723021ae40575f6a4fc49c5a2049e6adf0b5af4d72f885e0ab83e26f4d30916d0b623ea11a90e6e3df87f2ea84cefbc6afa544202c7aa5f804897f7402d6327c804c4d260e5b9511f301f49819898d000c2d4aa41667b6d602f7a632f9e6bd57f4238c147c4f9785edad9f54aacfc5d5d8734379effe77b10bee5ef061c34ce7eb9e932e0509d39a6e1206e14f947ae069ba5d8cb7935415ff1a8cf7ddd3ee53099befa7435b3f2aa", 0xc7}, {&(0x7f0000002b00)="d72213fad0e64fdf8893eaafb986655d4741f55afebd921a7c95863863e0aa2af69d39e38dc704d596d7ca4985", 0x2d}], 0x4}, 0x2f9b0fca87487a46) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002bc0)={0xffffffffffffffff, 0x95, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002c80)={r5, &(0x7f0000002c00)="43817d6b072ad0e5f26f915cad082dc4e697a5e395e74588e7a59f84a41a5b7f18e2707ba7819b526cddca0ead498b6c21783a88cca1720358378b9dee6836c2746f419d9847b0eb94efc6adb7aa09a04bfa87856219bc3aecd22629edd3ef6e4964c1cfb9ae943b54642a96fdad"}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), r1) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10c, r7, 0x100, 0xff, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66a7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fe0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5565}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2b6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000045) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002f40)={@empty, @broadcast, 0x0}, &(0x7f0000002f80)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000003080)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)=@newqdisc={0x54, 0x24, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x9, 0x8}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x9f}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x20, r10, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000033c0)={r5, &(0x7f0000003200)="516b9a748ab9b3b66c593398f03fd75e28415a914060a1dacfa15d4ff24af0de0fc43d3fa11dd415ac453c47e65f157a99f81cb033d75066f49976d1a8942475556520aeb97ee4339e47f54fe590fa1ab6be244e2824009839105d3a8201a4ebf9c5b958c4d76298a94a82ad2898f7fac4e60a86e152a12dcbe48f0b0d60f0a8234872e6b3c452ea2b86ce433d01dca3bb0ed18c23ec63a2a78269", &(0x7f00000032c0)=""/213}, 0x20) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0xb4, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x880}, 0x40080) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000036c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, r5, 0x80000001, '\x00', r8, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003780)={0x11, 0x4, &(0x7f0000003580)=@raw=[@exit, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r5}], &(0x7f00000035c0)='syzkaller\x00', 0x9e, 0x5, &(0x7f0000003600)=""/5, 0x41000, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003640)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000003680)={0x2, 0x6, 0xeb49, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003740)=[r5, r5, r11], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000038c0)={{r11, 0xffffffffffffffff}, &(0x7f0000003840), &(0x7f0000003880)=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000004d00)={0x5e07b7317993bfc2, 0xe, &(0x7f0000003900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff5e13}, [@call={0x85, 0x0, 0x0, 0x93}, @call={0x85, 0x0, 0x0, 0x5f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x0, 0x1, 0x4, 0x4, 0x7, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r13}]}, &(0x7f0000003980)='syzkaller\x00', 0x2, 0x9f, &(0x7f00000039c0)=""/159, 0x41000, 0x1, '\x00', r8, @fallback=0x11, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a80)={0x1, 0x4, 0x6, 0xfffffffd}, 0x10, 0x0, r0, 0x7, &(0x7f0000004c40), &(0x7f0000004c80)=[{0x4, 0x80000, 0x9, 0x6}, {0x1, 0x2, 0x5, 0xa}, {0x1, 0x4, 0xa, 0x8}, {0x4, 0x1, 0x7, 0x5}, {0x2, 0x2, 0xe, 0x2}, {0x0, 0x5, 0x1, 0xc}, {0x3, 0x4, 0xf}], 0x10, 0x9, @void, @value}, 0x94) 2.016128504s ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1400000010ef010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003007665bb8541346d6163767461700000000800014000000005"], 0xe8}}, 0x0) 1.85128232s ago: executing program 4 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0xf0ffffff, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x0) 1.818145679s ago: executing program 0 (id=665): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0xb074739e4276a0a0}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) 1.692093549s ago: executing program 4 (id=666): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800004c4, 0x0, 0x0) 1.690891494s ago: executing program 3 (id=667): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e0000000400000004000000030000000000", @ANYRES32, @ANYBLOB="00c663000000000000000211a8ae59859cd481540000000000000000", @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6d", 0x9) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0300000000000000000000000000e3cd347e9d08", @ANYRES32=0x0, @ANYBLOB="030000000500"/27], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.640739549s ago: executing program 0 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000040)=0xfffffffb, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x172c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x16fc, 0x2, [@TCA_ROUTE4_ACT={0x16c0, 0x6, [@m_sample={0x104, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x8, 0x3, 0x1, 0x80010001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xb0, 0x6, "fee1c9fe20ce3f13d221af57718ac64cdc3e4e9273939eea156cddeb82214b9987b0c7633e43ee816afabc59b740a074393c4ee9ba6fd63f9234fdcee20f17e79d3d1e4698839cd8f5ea84519a35beefa349d1d31d365cd2009d4afb34ae410570a94dfe48855b688def02efda1d0d377681099ce21d19c92c1a5343251d71c02687553d79008a5e72bafc223d4c194062ba9e034b5cd592aab74c2f4c360a46448bdb27cb79d9fcbd4d21cb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x13c, 0xe, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x400}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0xd}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x19a, 0x1000, 0x6, 0x1, 0x401}}]}, {0xbe, 0x6, "85501044246929885beea95e84affa4432d6beeaad11921206664cd8aff93270447fddbec6666e56b1b2403b454a2c22d2ed1ee348422519c1c0ecdd897c3f08da2fd1ebe60fee8151ef7c7d294b456895379064a0f81fa2375c2fb1e06beb77b5e26750fb52114bc1a88767bcfe8182c2c37f6e8da751aa50bd3d707ed5412bbae369d689adf95ef1e2e293d5627bc2e255727f88e437680b38ff4c684b1007ba4a749125db86216c6490eeb6cb1d10e80947f7735cd882d2ad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x4, 0x100}, 0xc}}]}, {0xbc, 0x6, "63c9ae09f0234af2867cbce97257d0a99ba4618437894fe1a47af9eac3c5650f5cc7a129584d1735baf0f52fbcb045e97c8a2ebf57817f74027c2fc31d1cb13dd6bd3ee8d2844c0cc7e97219551e36caba306d4f544342f17655938c84e0093673e991a8566cfb5e4a092ee2d04aee83729ce18ca503295a4732db563aaaef946ee000db96b0344e9c6be36cf1471d78e51fa28cbfeb9fd56b5694d4df12025d3607807fd76966614937dd69eb73193fdc3e976349936060"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x11c, 0xf, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xeb, 0x6, "d17061825284f795ea3e5d1ed913ea2da712255da1d1babe936c745dccf53c9bc2be2344f64394b62588e0b9f24884d82b2fdebe3983483f6802178bdcfc7fda7c0bbd1e5e9194979b04f7f361c07916377823726bd6368de7016351fc0ca7fa7148f6c84f6369a0781a1a60e7554957c22d4285b6514db650a8570fc5c3ad118b45732dfd6dc071907f29cfca1ceb1b330f65d379b3c9c33fcbe7ea8531853d19e80cb837b0b2af76844285df8dd7329b087440cb8ab83f9d587bd1e9b5270ad09f9a686cf6db025bac250a9b3db01e16d1dd4d26148258fd54accb5d153901519e6272749645"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x7c, 0xa, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc0d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9ba}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb90}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x28, 0x6, "39ff3cf1f2869cee9324b75aba4d98f9ff0d01fd52a3b0c8fac350acf107ebc6ae14577a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x90, 0xb, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x56, 0x6, "2834f585e3f96d0b873cba826359d8eb5c00abb1a4e4be90aa8fec7c651aaa12dbbc400fecab03640402300f0ec27cb6b3e22ce98eb9016abfb4ef2acba86ee3c3e1bc404bd6827c6e9236b1500acdf88ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1150, 0xb, 0x0, 0x0, {{0xb}, {0x1078, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x2800, 0x872, 0x1000, 0x1, 0xcd5, 0x200, 0x4, 0x8, 0x38000, 0x8, 0x7ff, 0x27, 0x3, 0x6, 0x6, 0x6, 0x0, 0x5, 0x10000, 0x8, 0xd5, 0xc, 0x0, 0x7ff, 0x37cc, 0x5, 0xfffffff9, 0x1, 0x3, 0x8, 0x6, 0x5, 0x101, 0x2, 0x5, 0xc0b3, 0xff, 0xd6e, 0x7, 0x8, 0x4, 0x7, 0x10, 0x1, 0x5, 0x5, 0xfffffffb, 0x1, 0x4721, 0x1, 0x80000001, 0xff, 0x4, 0x1, 0x2, 0x0, 0x9, 0x4, 0x4, 0x3, 0x7fff, 0xed, 0x0, 0xe, 0x5, 0x2, 0xe1a, 0x9, 0x5, 0xd8e, 0x9, 0x3, 0x5, 0x8, 0x5, 0x8, 0x81, 0x2, 0x3, 0x6, 0x4, 0x2, 0x2, 0x80000001, 0x9, 0x5, 0x1, 0x1c83158, 0x10, 0x6, 0x800, 0x1, 0xffffffff, 0x3e, 0x32879451, 0x1000, 0xa, 0x0, 0x6, 0x5e5, 0x3, 0x9, 0x5, 0x0, 0x5, 0x3, 0x2, 0xe, 0xa5, 0x7, 0x34, 0x1, 0x2, 0x4, 0x5, 0x9, 0x2, 0x2, 0xfffffffe, 0x0, 0x9, 0x8, 0x800, 0x3, 0x6, 0x8, 0x5, 0x100, 0x60aee404, 0x7fffffff, 0x5, 0x5, 0x3, 0x7fffffff, 0x5, 0x7, 0x1, 0xfda0, 0x100001, 0x8, 0x2, 0x1, 0x18af3d88, 0xffffffff, 0x100, 0x7, 0xa, 0xef84, 0x7, 0x3, 0x6, 0xffffffff, 0xffff, 0x0, 0x400, 0x0, 0x10, 0x8, 0x2, 0xffffb50f, 0x13f, 0x1, 0x8, 0x18a, 0x3, 0x0, 0x9, 0x0, 0x9ad, 0xb, 0xf14, 0x101, 0x8, 0x8, 0x7, 0x7, 0x8001, 0x6, 0xb1a8, 0x4, 0xfffff800, 0x0, 0x94f8389, 0x4, 0xe, 0x6, 0x1, 0x10, 0x1, 0x2f0ffe5, 0x1, 0xe9af, 0x200, 0xfffffffc, 0x5a, 0xffff, 0x5, 0x963, 0xd, 0xb, 0x7fffffff, 0x7, 0x3, 0x3, 0xb, 0x400, 0xa21, 0xb, 0x7, 0x401, 0x5, 0x6000000, 0x4, 0x9008, 0x4, 0x7, 0xff, 0x315b, 0xfffffff7, 0xed, 0x3, 0xcb, 0x7, 0x4, 0xe, 0x81, 0x40, 0x8, 0xffffff97, 0x101, 0x7, 0x9, 0x7f, 0x9, 0x2, 0x4, 0x1, 0x26d, 0x8, 0xb0, 0x153, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x7ff, 0x5, 0x5, 0x1, 0x0, 0x6, 0x3ab2, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6754}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4df9}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x9, 0x10, 0xd, 0x0, 0x460, 0x608, 0x3, 0x4, 0x2, 0xe9, 0x2, 0x81, 0xfff, 0x5, 0x9, 0xfffffff8, 0x9, 0x8001, 0x9, 0x2, 0x7, 0x0, 0x7, 0x6, 0x80000001, 0xb1, 0xfffffffe, 0x6, 0x0, 0x8a72, 0xfff, 0x2, 0x1000, 0x9, 0x200, 0x4, 0x18b3, 0x8, 0x49, 0x3, 0x1, 0x7, 0x80000001, 0x3, 0x200, 0x1800000, 0x1ff, 0x7ffc, 0x862, 0x4, 0x0, 0xf5, 0x3fdc, 0xfff, 0x5, 0x7ff, 0xff, 0x8, 0x31, 0xc5, 0x2, 0x6, 0x10000, 0x101, 0x1, 0x6, 0x8, 0x5, 0x1, 0x6c, 0x4, 0x7fff, 0x4, 0x9, 0x5, 0x2, 0x9, 0xeea, 0x10000, 0x101, 0x10000, 0xfffffff8, 0x1ff, 0xd, 0x6, 0x8, 0x9, 0x4, 0xfffffffa, 0x5, 0xb5f, 0x8, 0x5, 0x4e68, 0xfff, 0x3ff, 0x4, 0xfffffe01, 0x9, 0x7fff, 0xfffffffc, 0x2, 0xe, 0xf5, 0x4, 0x8, 0x6, 0x5e3, 0xfffffffa, 0xa8, 0x5, 0x8, 0x3, 0x100, 0x2, 0xfffff421, 0x4, 0x3, 0x6, 0x8, 0x9, 0x8, 0x9, 0x5, 0x4, 0x7, 0xfffffffc, 0x7, 0x0, 0xfffffff7, 0x2e1f, 0x3, 0x9, 0x7, 0xd5, 0x6, 0x9, 0x1, 0x9, 0x6, 0x8, 0x200, 0x5, 0x1, 0x2000000, 0x6, 0x5, 0xfc, 0x80, 0x5, 0xd5, 0x1000, 0x7, 0x8, 0x840f, 0x405000, 0x1, 0x40000000, 0x7, 0x2, 0x80000001, 0x200, 0x8, 0x9, 0x3, 0x100, 0x80000001, 0x0, 0xffff8000, 0x9, 0x2, 0x4, 0x8, 0x3, 0x9, 0x2, 0x7, 0xa, 0x3, 0xfff, 0x6, 0xfffffffd, 0x0, 0x8, 0x81, 0x800, 0x9, 0x9, 0x9, 0x8, 0x5, 0x7, 0x4, 0x6, 0x1fffc00, 0x4, 0xd22, 0x11dc000, 0x2, 0x2a4f, 0x44, 0x1, 0x9, 0x3, 0x0, 0xf, 0x2df9, 0xfff, 0xffffffff, 0x400, 0x13ca, 0x22, 0xd2, 0x6, 0x5, 0x9695, 0x4, 0x1, 0x3, 0x8001, 0x81, 0x7f, 0x7f, 0x326eb379, 0xb, 0x3, 0x80, 0x1ff, 0x8001, 0x2, 0x7, 0x3, 0x0, 0x2, 0x1a, 0x1, 0x140, 0x8, 0xfff, 0xfffffff8, 0xda, 0x0, 0x21cc, 0xfffffff8, 0x4ae, 0x8, 0x3ff, 0x9, 0x3, 0x5, 0x2, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb007, 0x4e40, 0x1, 0x8, 0x14e, 0x1, 0x5, 0xfffffff5, 0x0, 0x7, 0x2, 0x7, 0x4b4, 0x4, 0x6, 0x38, 0x7, 0x9, 0x10, 0x4, 0x9, 0x6, 0x14b2, 0x400, 0x8001, 0x10000, 0x0, 0x7, 0x4, 0x101, 0x4, 0x18, 0x58, 0x1, 0x0, 0x2, 0xfef2, 0x8, 0x6, 0x0, 0xf8c, 0xc00000, 0x5, 0x6, 0x5, 0x80, 0x3ff, 0x4, 0x7, 0x3, 0x2, 0xd, 0x6, 0x3, 0x0, 0x4, 0x8, 0xa, 0x3, 0x1, 0x8, 0xffffff1e, 0x3, 0x100, 0x4, 0x9, 0x8000, 0x8, 0x2, 0x78c, 0x1, 0x9, 0xe589, 0x2, 0xeb4, 0xb, 0x400, 0x9, 0x8f5d, 0x4, 0x3, 0x1b4, 0x101, 0xffffff7f, 0x0, 0x9, 0x40, 0x1df1364d, 0x9, 0x88baf63, 0xf, 0x0, 0x80000000, 0x8bce, 0x0, 0x8, 0x4, 0x10, 0x9, 0x101, 0x9, 0x5, 0x9, 0x9, 0xdd83, 0xfffffffe, 0x80000000, 0x4, 0xfffffa6e, 0xb4a3, 0x2, 0x8f, 0x80000001, 0x4, 0x0, 0x6, 0x2, 0x4, 0x10001, 0x6, 0xa, 0x9, 0x3, 0x1000, 0xd, 0xf2, 0x1, 0x5, 0x2, 0x140, 0xfffffffc, 0xfffffffe, 0xd, 0x2, 0x2, 0xa9840, 0x1, 0x400, 0x0, 0x3, 0x2, 0x7ff, 0x8, 0x1, 0x3ff, 0x8, 0x101, 0x8001, 0x6, 0x6, 0x1ff, 0x0, 0x4, 0x8, 0x9, 0x6, 0xffff8db7, 0x7, 0x0, 0x9, 0x8, 0x6, 0x9, 0x6000, 0x7, 0x2, 0x6, 0x5, 0x20, 0x3, 0xd, 0x0, 0x54c, 0x1, 0x0, 0x9, 0x5, 0xfffffff9, 0xb, 0x4, 0x3ff, 0xadb, 0x2, 0x4, 0x200, 0xfffffce7, 0x1, 0x0, 0x3da, 0x9, 0x1, 0x2, 0x2, 0x6, 0xffff, 0x2, 0xb, 0x8, 0x5, 0xfc, 0x1000, 0xcd3, 0x1, 0x69f0, 0x7, 0x81, 0x0, 0x2, 0x7, 0x3, 0x0, 0xe7f4, 0xffffff32, 0xe, 0x40, 0x4665, 0x0, 0x8, 0x8, 0x80000001, 0xe79, 0x5, 0x7f, 0x9, 0x8, 0x3e9, 0x8, 0x6, 0x5, 0x6, 0x35, 0x3d380000, 0x89, 0x400, 0x4, 0x1010000, 0x3, 0xfffffff8, 0x5538, 0xe, 0xd, 0x64b, 0x0, 0x7, 0xfff, 0x5, 0x7, 0x0, 0x1, 0x8000, 0x2, 0x7fffffff, 0xe43d, 0x5, 0x80, 0x8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4d448ef7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x10, 0x2, 0x1, 0x2be, 0x7ff, 0x5, 0xffff, 0xa43, 0x8, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x5b7baedc, 0x3, 0x15, 0x2, 0x1, 0x8, 0x8, 0x9104, 0x1, 0x80000000, 0x7f, 0x2, 0x1ff, 0x7fffffff, 0xb, 0x3, 0x6, 0x5, 0x3, 0x0, 0x9, 0x3, 0x400, 0x1, 0x1, 0x40, 0x7fffffff, 0xe3, 0x1, 0x1, 0xfffffffe, 0x9, 0xfffffffe, 0xefd, 0x6, 0x4, 0x4fb, 0x1, 0x7, 0xfffffffb, 0xe, 0xfffffffa, 0xf9, 0xa3f, 0xfffffff8, 0x9, 0x1, 0x8, 0xffff0001, 0x10000, 0x2, 0xa9e, 0x5d4, 0x1, 0x9, 0x2, 0xffffffc0, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x520e, 0x1, 0x7, 0x8000, 0x1, 0x10, 0x9, 0x6, 0x10, 0xe, 0x7, 0xb, 0x401, 0x9, 0xffffffff, 0xbb6, 0x81af, 0x56f3252d, 0x6, 0x7fffffff, 0x7, 0x2, 0x3, 0x6, 0xcd, 0x1, 0x1, 0x101, 0xb985, 0x8, 0x8, 0xa6, 0x69e2cd4a, 0xfffffaf4, 0x1, 0xfffffffa, 0x0, 0x5, 0xf, 0x2, 0x0, 0x0, 0x1, 0x9, 0x3ff, 0x10001, 0x3, 0xa60, 0x6, 0x7, 0x0, 0x401, 0x7, 0x2, 0x16d7, 0x7, 0x3, 0xa580, 0x8, 0x2, 0x7, 0x7fff, 0x4, 0x4, 0xf9a2, 0x6, 0x3d, 0x6, 0xd, 0x1, 0x1, 0x80000000, 0x0, 0x9, 0x4, 0x4, 0x7a, 0x3, 0x8, 0x5, 0xa, 0xf, 0x3, 0x4d74, 0x59b, 0x10001, 0xcd20, 0x5, 0x62e, 0x4, 0x3, 0x5, 0xa4, 0x54be, 0x2, 0xfffffff8, 0x7, 0x6, 0xffff, 0x4, 0x80000001, 0x1000, 0x2, 0x100, 0x101, 0x2, 0x3, 0x1000, 0x80000001, 0x7, 0x7f, 0x0, 0x80000000, 0x3, 0x3d1, 0x3, 0x3ff, 0x3, 0x3, 0x5a81, 0x9, 0x2, 0x81, 0xffff, 0x0, 0x7ff, 0xcb86, 0x7, 0xffffffff, 0x8, 0x4, 0x1e0cf0bf, 0xe6, 0x4, 0xe, 0x2, 0x8697, 0x1c99, 0x4, 0x6, 0x6, 0x72, 0x8001, 0x80000001, 0x11f, 0x8, 0x0, 0x9, 0x3, 0x7, 0x6, 0x7fff, 0xfffffff4, 0x80000000, 0x18d, 0x80, 0x5, 0x8, 0x7fffffff, 0x80, 0x9, 0x7, 0x2, 0xf, 0x2192, 0x0, 0x32a, 0x0, 0x200000, 0x8001, 0x7, 0xe5, 0x10, 0x47d4, 0x80000000, 0x9, 0x6, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0xc, 0x3c75, 0x1, {0x5, 0x0, 0xffff, 0x7, 0x10, 0x2e7}, {0x3, 0x0, 0x2, 0x1e, 0xa, 0x2d2}, 0x6, 0x101, 0x19}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0xae, 0x6, "b2c2320bb0a255e50c12469f0816c6a343c9fc34895d61b217924d43e276de2be3e3060f7515010030d5c2582fa288f9ddcacdf4b46eada3ea54661f61c91bd032e55102fe6b2a9194d901ac8855644b8cc173a3738724e28aa83506a208db9b92789696cb0c87aed3f5a38a9151f9ff3c3e8a07ce34dd1fe7bb830548b72790929526163b066a0d3c23ee7896d449f60fa2fe1a2be086980fe2b7ac6f3ea4e18534df796d505d1e5314"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x90}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xaa}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc7}]}}]}, 0x172c}}, 0x24040084) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x20060400) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x48) 1.571589073s ago: executing program 4 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e0001006970366772657461700000001000028006000200090000000400120008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x44812}, 0x4008010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10, 0x5, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0x79, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4014) 1.564163386s ago: executing program 2 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [@hopopts={0x62, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x400) writev(r1, &(0x7f0000000040), 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0xffffd000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x20) 1.441661581s ago: executing program 1 (id=671): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 1.203875355s ago: executing program 4 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0xcc, 0xac, &(0x7f0000000300)="73f94b40ad33dd3f403f8ff6e8306dc07b6897401ac843fe5151b18ee40ce4b5111f81976550c5ce3aad35ebf188c402cb00356a633b64fb1adc524cf576079360be2c782041d169673edef6b2434adbdbcd97f661e275dbd92fdc7523bd85911548dee07bd3f30897218f0b99f8a5ffc163783e39c108cd16f035d816bafe22e262703a388d377640f1188a7947134fc0d875106a8287f4c7f189c15c682416272c20075f63335e3776261cbedd959b100c365e2589bc42cd2f7bc92455f12e1c557393b68736f2807eb0f7", &(0x7f0000000400)=""/172, 0x5, 0x0, 0x10, 0x6f, &(0x7f0000000080)="f9202b4038a9efe348f1bbf3be8d03af", &(0x7f0000000500)="e9f9974324a125e79a9c746798b1b54cb2b720b2fa1fa2845b4e8704d0fed465f72108679066c74c3b561806eaa719d685eee1c00a5ab6a6a61cc3177d2cb5b7dc2b3a16fdaf34cb2e69ff91c1c190d59e7c0f11c49480c18dfc0db923e9acbca2dd827aee5e382aee2cce2ed8c1b7", 0x6, 0x0, 0x5}, 0x50) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)={0x134, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1650, @private2, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000001}, 0x40880) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="ed3eb2bdffad", 0x6, 0x4000004, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a6970"], 0x5c}}, 0x0) 1.12978797s ago: executing program 1 (id=673): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00eb9e05000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffd7b, 0x0}}, 0x10) 1.081652441s ago: executing program 4 (id=674): socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x2000000, 0x2}}]}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=0xffffffffffffffff, 0xe, 0x1, 0x7f, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x6c00, 0x0, 0x4000000}, 0x4040) r11 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000080)={0x800, 0x9, 0x3, 0xd}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRES16=r13, @ANYBLOB="04002cbd7000fcdbdf25060000003c00018008000100", @ANYRESHEX=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r6, @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030002000000"], 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000a3a1000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000158bf654cdbacf7a7578bab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000930a000010000000bf91000000000000b7020000020000008500000084000000b700"/111], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) 1.020128228s ago: executing program 2 (id=675): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000a80)=""/261, 0x105}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000001a80)=""/4119, 0x1017}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000600)=""/228, 0xe4}], 0x7}, 0x1}], 0x4, 0x40000030, 0x0) 1.008009707s ago: executing program 2 (id=676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x48, 0x1}) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001500)={&(0x7f00000003c0), 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x70, 0x7, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x89}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104010100000000ee3bbdbc000004000500408401000000"], 0x1c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000008100000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000d00"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, &(0x7f0000000440)="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", &(0x7f0000000300)=""/156}, 0x20) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) 947.244364ms ago: executing program 1 (id=677): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x2}, @alu={0x7, 0x1, 0xa, 0xb, 0x1, 0xfffffffffffffffc, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x58f, 0x8d, &(0x7f0000000200)=""/141, 0x41000, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0x1, 0x5c8}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x81, 0x1}, 0x10, 0x16963, r2, 0x9, 0x0, &(0x7f0000000440)=[{0x4, 0x4, 0xc, 0x3}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x5, 0x9, 0x3}, {0x5, 0x3, 0x2, 0x5}, {0x3, 0x2, 0x4, 0x2}, {0x2, 0x5, 0xd, 0x12}, {0x3, 0x7c4f, 0xc, 0x2}, {0x5, 0x1, 0x1, 0x7}, {0x0, 0x1, 0x0, 0xc}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000005c0)=0xefa, 0x4) r4 = accept4$tipc(r0, &(0x7f0000000600)=@id, &(0x7f0000000640)=0x10, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000680)=0x1, 0x4) bind$llc(r1, &(0x7f00000006c0)={0x1a, 0x321, 0x9, 0x7, 0x2, 0x40, @remote}, 0x10) close(r0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, 0x464, 0x300, 0x70bd27, 0x25dfdbfd, "4f1bb8d75830bf804973ae3f13c6a1ded88b00ae4167699b8f9d254037848ed4cbf44cd8089e12e1aed76bb2d1f01db6f41ee96795863edd4b4c50c2bf81cb8a247f5e08984380da4af98b4fc66cc4dd5f8c0f7b3a579b5537b5b87f2e6456913a54e4e39ca40d843c7cda9ed3b82539d0cdc423d2f1af9ddd2d4c8731bd40282ac82501ce3b087cd454e942a6d612ae7b0f95d8c384061cfb34854065b89bdf283ed2", ["", "", "", "", "", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x8747, 0x80, 0x8001, 0x2, {{0xc, 0x4, 0x0, 0x3, 0x30, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0xf, 0x55, [@loopback, @loopback, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x81, 0x0, 0x7, [0x9]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r3, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000c80)=[{}], 0x8, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000ec0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001040)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xe0, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001080)={'batadv_slave_0\x00', 0x8000}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_SET_REG(r14, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, r15, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$nl_generic(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x410040}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, 0x39, 0x4, 0x70bd25, 0x25dfdbfb, {0xf}, [@generic="cddd95d2c074555e37a28a130ea980944d4f610ed26812e1ac6eb8f13f025cb5803fb1ae675fd9519a7a9a3e48ac70869e323ffe035cf722f0e5c82c8e1597f956b05aafa231d8a26a015ab1780e560bfab83888dd136dd0ddbc582bb6255759d1d0b77b4d4638ccdc20fb8cfaef4a2119c0af14e36d6e6ffeaaec98"]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)=@deltclass={0x50, 0x29, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xe, 0xf}, {0xb, 0xf}, {0x2, 0x1}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}, @tclass_kind_options=@c_netem={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f00000014c0), &(0x7f0000001500)=0x4) connect$inet6(r1, &(0x7f0000001540)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x185f}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x7, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5}, {0x7, 0x5}, {0x9}, {0xc}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x3}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x3, 0x401}, {0x3, 0x4}, {0x0, 0x101}, {0xe, 0x2}, {0x4, 0x5}, {0x7, 0xfffffffb}]}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x2b, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4, 0x4}, @struct={0x8, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x9, 0x0, 0x6}, {0x1, 0x5, 0x1}]}, @var={0x7, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e, 0x2e]}}, &(0x7f00000016c0)=""/32, 0x117, 0x20, 0x0, 0x2, 0x10000, @value}, 0x28) 787.876544ms ago: executing program 1 (id=678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000d5e98f1fb0ebf87a1d8628f38d81ce39be0b5660a3623ef7ef6be396b38386efe484543b109a6c587b6e9e9932fbf0f59a05ed0b376857", @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf251a000000040022800700210061610000"], 0x20}, 0x1, 0x0, 0x0, 0x20004014}, 0x44) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r5 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r5) getsockname$qrtr(r5, &(0x7f0000000200), &(0x7f00000002c0)=0xc) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffe, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r4) ppoll(&(0x7f0000000180)=[{r0, 0xd4d8}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='X', 0x19, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x66, 0xfe, 0x4, 0x0, 0x41, 0x0, 0x9, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000440)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$802154_dgram(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x64040082}, 0x40) shutdown(r0, 0x1) 736.073467ms ago: executing program 3 (id=679): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b7d8d840bb5020004000000094000d03d78ca8dff84baee74000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}]}}}}}}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x304) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 731.711043ms ago: executing program 4 (id=680): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b7d8d840bb5020004000000094000d03d78ca8dff84baee74000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}]}}}}}}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x304) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 592.177603ms ago: executing program 0 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (fail_nth: 1) 303.293951ms ago: executing program 0 (id=682): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000800"], 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x41}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x200000000000000) 291.491728ms ago: executing program 1 (id=683): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 0s ago: executing program 2 (id=684): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000001e1e95ea9183f56f"], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a905000000007464000100000004", 0xe}], 0x1}}], 0x1, 0x2800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f00000000c0)="5f316cd5ed4669c1c4508b32e127586068ad31ad98eda53a1dd1bae1950d95591d86d02433f69a70744598f4c36f8f495436d3ec17412e0a6fc7f5f082edcd559105e517db9062ff93852d4cbb73acf308f407c18d5487168b494f37dc", &(0x7f00000003c0)=""/71, 0x4}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2808c0018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, 0x0, 0x0, 0xe, 0x0, "11f891951fd802a1e7f973b5aab4fe38c21b4764f163e986c86614ad26d498372a943ebea0262099d66380a7cd464fa1af2690e311a734d7272d8766f2cb8be6e00348af83f7e972031f6b999551b3be"}, 0xd8) kernel console output (not intermixed with test programs): [ 100.665312][ T6040] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 100.666079][ T6020] team0: Port device team_slave_1 removed [ 100.690539][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.700762][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.742356][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.754890][ T6045] openvswitch: netlink: IP tunnel dst address not specified [ 100.794784][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.354065][ T6051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 101.359761][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 101.490175][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.571942][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40'. [ 101.606997][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.39'. [ 101.785107][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.173852][ T6084] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 102.207261][ T6084] warning: `syz.3.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.581741][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.615199][ T6099] 8021q: VLANs not supported on ip6tnl0 [ 103.097677][ T6109] netlink: 'syz.3.54': attribute type 13 has an invalid length. [ 103.102111][ T6108] __nla_validate_parse: 2 callbacks suppressed [ 103.102131][ T6108] netlink: 56 bytes leftover after parsing attributes in process `syz.1.53'. [ 103.127214][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 103.214984][ T6109] geneve2: entered promiscuous mode [ 103.349154][ T6115] Cannot find add_set index 3 as target [ 103.366588][ T6115] netlink: zone id is out of range [ 103.408006][ T6115] netlink: zone id is out of range [ 103.414214][ T6115] netlink: set zone limit has 8 unknown bytes [ 103.483895][ T6122] pimreg3: entered allmulticast mode [ 103.495305][ T6121] FAULT_INJECTION: forcing a failure. [ 103.495305][ T6121] name failslab, interval 1, probability 0, space 0, times 1 [ 103.521125][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.2.59 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 103.521155][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.521167][ T6121] Call Trace: [ 103.521175][ T6121] [ 103.521185][ T6121] dump_stack_lvl+0x189/0x250 [ 103.521224][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.521254][ T6121] ? __pfx__printk+0x10/0x10 [ 103.521272][ T6121] ? __lock_acquire+0xaac/0xd20 [ 103.521316][ T6121] should_fail_ex+0x414/0x560 [ 103.521343][ T6121] should_failslab+0xa8/0x100 [ 103.521373][ T6121] kmem_cache_alloc_noprof+0x73/0x3c0 [ 103.521398][ T6121] ? skb_clone+0x212/0x3a0 [ 103.521433][ T6121] skb_clone+0x212/0x3a0 [ 103.521466][ T6121] __netlink_deliver_tap+0x404/0x850 [ 103.521505][ T6121] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.521532][ T6121] netlink_deliver_tap+0x19c/0x1b0 [ 103.521559][ T6121] netlink_sendskb+0x68/0x140 [ 103.521584][ T6121] nfnetlink_rcv+0x22a0/0x2530 [ 103.521650][ T6121] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 103.521742][ T6121] ? skb_clone+0x246/0x3a0 [ 103.521788][ T6121] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.521813][ T6121] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.521844][ T6121] netlink_unicast+0x758/0x8d0 [ 103.521879][ T6121] netlink_sendmsg+0x805/0xb30 [ 103.521914][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.521944][ T6121] ? aa_sock_msg_perm+0x94/0x160 [ 103.521969][ T6121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.522005][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.522030][ T6121] __sock_sendmsg+0x219/0x270 [ 103.522053][ T6121] ____sys_sendmsg+0x505/0x830 [ 103.522085][ T6121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.522121][ T6121] ? import_iovec+0x74/0xa0 [ 103.522151][ T6121] ___sys_sendmsg+0x21f/0x2a0 [ 103.522180][ T6121] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.522244][ T6121] ? __fget_files+0x2a/0x420 [ 103.522267][ T6121] ? __fget_files+0x3a0/0x420 [ 103.522302][ T6121] __x64_sys_sendmsg+0x19b/0x260 [ 103.522331][ T6121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.522376][ T6121] ? do_syscall_64+0xba/0x210 [ 103.522399][ T6121] do_syscall_64+0xf6/0x210 [ 103.522419][ T6121] ? clear_bhb_loop+0x45/0xa0 [ 103.522442][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.522460][ T6121] RIP: 0033:0x7f096698e969 [ 103.522494][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.522510][ T6121] RSP: 002b:00007f09678c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.522531][ T6121] RAX: ffffffffffffffda RBX: 00007f0966bb5fa0 RCX: 00007f096698e969 [ 103.522545][ T6121] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 103.522558][ T6121] RBP: 00007f09678c4090 R08: 0000000000000000 R09: 0000000000000000 [ 103.522570][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.522581][ T6121] R13: 0000000000000000 R14: 00007f0966bb5fa0 R15: 00007ffd7fa696a8 [ 103.522612][ T6121] [ 104.010423][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 104.078646][ T6130] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 104.193933][ T6136] netlink: 264 bytes leftover after parsing attributes in process `syz.2.64'. [ 104.305852][ T6144] FAULT_INJECTION: forcing a failure. [ 104.305852][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 104.342874][ T6138] netlink: 264 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.351774][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.4.67 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 104.351801][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.351814][ T6144] Call Trace: [ 104.351821][ T6144] [ 104.351829][ T6144] dump_stack_lvl+0x189/0x250 [ 104.351864][ T6144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.351893][ T6144] ? __pfx__printk+0x10/0x10 [ 104.351917][ T6144] ? __pfx___might_resched+0x10/0x10 [ 104.351941][ T6144] should_fail_ex+0x414/0x560 [ 104.351966][ T6144] should_failslab+0xa8/0x100 [ 104.351995][ T6144] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 104.352021][ T6144] ? __alloc_skb+0x112/0x2d0 [ 104.352050][ T6144] __alloc_skb+0x112/0x2d0 [ 104.352078][ T6144] netlink_sendmsg+0x5c6/0xb30 [ 104.352111][ T6144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.352139][ T6144] ? aa_sock_msg_perm+0x94/0x160 [ 104.352162][ T6144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.352184][ T6144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.352210][ T6144] __sock_sendmsg+0x219/0x270 [ 104.352234][ T6144] ____sys_sendmsg+0x505/0x830 [ 104.352266][ T6144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.352304][ T6144] ? import_iovec+0x74/0xa0 [ 104.352338][ T6144] ___sys_sendmsg+0x21f/0x2a0 [ 104.352372][ T6144] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.352441][ T6144] ? __fget_files+0x2a/0x420 [ 104.352468][ T6144] ? __fget_files+0x3a0/0x420 [ 104.352506][ T6144] __x64_sys_sendmsg+0x19b/0x260 [ 104.352539][ T6144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.352588][ T6144] ? do_syscall_64+0xba/0x210 [ 104.352614][ T6144] do_syscall_64+0xf6/0x210 [ 104.352645][ T6144] ? clear_bhb_loop+0x45/0xa0 [ 104.352671][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.352691][ T6144] RIP: 0033:0x7effb218e969 [ 104.352710][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.352729][ T6144] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.352751][ T6144] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 104.352766][ T6144] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.352779][ T6144] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.352797][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.352809][ T6144] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 104.352842][ T6144] [ 104.479703][ T6148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.66'. [ 104.589071][ T5892] IPVS: starting estimator thread 0... [ 104.624871][ T6138] FAULT_INJECTION: forcing a failure. [ 104.624871][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 104.641390][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.1.65 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 104.641419][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.641430][ T6138] Call Trace: [ 104.641438][ T6138] [ 104.641446][ T6138] dump_stack_lvl+0x189/0x250 [ 104.641482][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.641510][ T6138] ? __pfx__printk+0x10/0x10 [ 104.641533][ T6138] ? __pfx___might_resched+0x10/0x10 [ 104.641553][ T6138] ? fs_reclaim_acquire+0x7d/0x100 [ 104.641599][ T6138] should_fail_ex+0x414/0x560 [ 104.641626][ T6138] ? nf_hook_entries_grow+0x27c/0x6d0 [ 104.641645][ T6138] should_failslab+0xa8/0x100 [ 104.641671][ T6138] __kvmalloc_node_noprof+0x168/0x5e0 [ 104.641701][ T6138] ? nf_hook_entries_grow+0x27c/0x6d0 [ 104.641722][ T6138] ? __pfx___mutex_lock+0x10/0x10 [ 104.641747][ T6138] nf_hook_entries_grow+0x27c/0x6d0 [ 104.641785][ T6138] __nf_register_net_hook+0x2c9/0x930 [ 104.641821][ T6138] nf_register_net_hook+0xb2/0x190 [ 104.641846][ T6138] nf_register_net_hooks+0x44/0x1b0 [ 104.641874][ T6138] ip_vs_register_hooks+0xc8/0x140 [ 104.641900][ T6138] ip_vs_add_service+0x2c5/0x1340 [ 104.641942][ T6138] ? rcu_read_unlock+0x87/0xa0 [ 104.641976][ T6138] do_ip_vs_set_ctl+0x7f2/0xa60 [ 104.642012][ T6138] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 104.642039][ T6138] ? rcu_is_watching+0x15/0xb0 [ 104.642086][ T6138] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 104.642113][ T6138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.642130][ T6138] ? aa_sk_perm+0x81e/0x950 [ 104.642154][ T6138] ? vfs_write+0x8d8/0xa90 [ 104.642174][ T6138] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.642191][ T6138] ? kasan_quarantine_put+0xdd/0x220 [ 104.642213][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.642247][ T6138] nf_setsockopt+0x26c/0x290 [ 104.642276][ T6138] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.642302][ T6138] do_sock_setsockopt+0x257/0x3e0 [ 104.642332][ T6138] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.642366][ T6138] ? ksys_write+0x1e1/0x250 [ 104.642397][ T6138] __x64_sys_setsockopt+0x18b/0x220 [ 104.642431][ T6138] do_syscall_64+0xf6/0x210 [ 104.642452][ T6138] ? clear_bhb_loop+0x45/0xa0 [ 104.642477][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.642495][ T6138] RIP: 0033:0x7fe8a278e969 [ 104.642514][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.642530][ T6138] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.642551][ T6138] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 104.642565][ T6138] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000009 [ 104.642576][ T6138] RBP: 00007fe8a3596090 R08: 000000000000002c R09: 0000000000000000 [ 104.642595][ T6138] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 104.642607][ T6138] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 104.642639][ T6138] [ 104.969816][ T6151] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.066388][ T6156] netlink: zone id is out of range [ 105.071709][ T6156] netlink: zone id is out of range [ 105.086114][ T6157] bridge0: port 3(ipvlan2) entered blocking state [ 105.092737][ T6157] bridge0: port 3(ipvlan2) entered disabled state [ 105.099749][ T6157] ipvlan2: entered allmulticast mode [ 105.105078][ T6157] bridge0: entered allmulticast mode [ 105.113452][ T6157] ipvlan2: left allmulticast mode [ 105.119524][ T6157] bridge0: left allmulticast mode [ 105.125037][ T6156] netlink: set zone limit has 8 unknown bytes [ 105.213474][ T6163] FAULT_INJECTION: forcing a failure. [ 105.213474][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.226617][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.2.72 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 105.226642][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.226654][ T6163] Call Trace: [ 105.226661][ T6163] [ 105.226669][ T6163] dump_stack_lvl+0x189/0x250 [ 105.226699][ T6163] ? __lock_acquire+0xaac/0xd20 [ 105.226729][ T6163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.226756][ T6163] ? __pfx__printk+0x10/0x10 [ 105.226776][ T6163] ? __might_fault+0xb0/0x130 [ 105.226812][ T6163] should_fail_ex+0x414/0x560 [ 105.226837][ T6163] _copy_from_user+0x2d/0xb0 [ 105.226865][ T6163] smc_setsockopt+0x3b8/0xab0 [ 105.226902][ T6163] ? __pfx_smc_setsockopt+0x10/0x10 [ 105.226935][ T6163] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 105.226957][ T6163] ? __pfx_smc_setsockopt+0x10/0x10 [ 105.226987][ T6163] do_sock_setsockopt+0x257/0x3e0 [ 105.227017][ T6163] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.227040][ T6163] ? __fget_files+0x2a/0x420 [ 105.227069][ T6163] ? __fget_files+0x3a0/0x420 [ 105.227092][ T6163] ? __fget_files+0x2a/0x420 [ 105.227124][ T6163] __x64_sys_setsockopt+0x18b/0x220 [ 105.227156][ T6163] do_syscall_64+0xf6/0x210 [ 105.227176][ T6163] ? clear_bhb_loop+0x45/0xa0 [ 105.227200][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.227218][ T6163] RIP: 0033:0x7f096698e969 [ 105.227240][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.227255][ T6163] RSP: 002b:00007f09678c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.227274][ T6163] RAX: ffffffffffffffda RBX: 00007f0966bb5fa0 RCX: 00007f096698e969 [ 105.227288][ T6163] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000005 [ 105.227299][ T6163] RBP: 00007f09678c4090 R08: 000000000000000c R09: 0000000000000000 [ 105.227311][ T6163] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 105.227322][ T6163] R13: 0000000000000000 R14: 00007f0966bb5fa0 R15: 00007ffd7fa696a8 [ 105.227351][ T6163] [ 105.531523][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.548209][ T6167] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 105.555860][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.625406][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.726428][ T6163] batman_adv: batadv0: Adding interface: ip6gretap1 [ 105.733154][ T6163] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.772072][ T6163] batman_adv: batadv0: Interface activated: ip6gretap1 [ 105.908731][ T6173] FAULT_INJECTION: forcing a failure. [ 105.908731][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.946094][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.1.74 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 105.946124][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.946135][ T6173] Call Trace: [ 105.946143][ T6173] [ 105.946151][ T6173] dump_stack_lvl+0x189/0x250 [ 105.946190][ T6173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.946219][ T6173] ? __pfx__printk+0x10/0x10 [ 105.946253][ T6173] should_fail_ex+0x414/0x560 [ 105.946278][ T6173] _copy_from_user+0x2d/0xb0 [ 105.946308][ T6173] __copy_msghdr+0x3c5/0x5b0 [ 105.946340][ T6173] ___sys_sendmsg+0x1a5/0x2a0 [ 105.946371][ T6173] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.946436][ T6173] ? __fget_files+0x2a/0x420 [ 105.946460][ T6173] ? __fget_files+0x3a0/0x420 [ 105.946506][ T6173] __sys_sendmmsg+0x227/0x430 [ 105.946540][ T6173] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.946578][ T6173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.946618][ T6173] ? ksys_write+0x1f0/0x250 [ 105.946639][ T6173] ? rcu_is_watching+0x15/0xb0 [ 105.946680][ T6173] __x64_sys_sendmmsg+0xa0/0xc0 [ 105.946710][ T6173] do_syscall_64+0xf6/0x210 [ 105.946732][ T6173] ? clear_bhb_loop+0x45/0xa0 [ 105.946756][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.946776][ T6173] RIP: 0033:0x7fe8a278e969 [ 105.946793][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.946809][ T6173] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.946829][ T6173] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 105.946844][ T6173] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000003 [ 105.946856][ T6173] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 105.946868][ T6173] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 105.946880][ T6173] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 105.946910][ T6173] [ 106.347695][ T6187] FAULT_INJECTION: forcing a failure. [ 106.347695][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 106.368024][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.4.77 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 106.368052][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.368064][ T6187] Call Trace: [ 106.368072][ T6187] [ 106.368080][ T6187] dump_stack_lvl+0x189/0x250 [ 106.368117][ T6187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.368145][ T6187] ? __pfx__printk+0x10/0x10 [ 106.368171][ T6187] ? __pfx___might_resched+0x10/0x10 [ 106.368194][ T6187] should_fail_ex+0x414/0x560 [ 106.368220][ T6187] should_failslab+0xa8/0x100 [ 106.368248][ T6187] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 106.368274][ T6187] ? __alloc_skb+0x112/0x2d0 [ 106.368303][ T6187] __alloc_skb+0x112/0x2d0 [ 106.368331][ T6187] netlink_sendmsg+0x5c6/0xb30 [ 106.368366][ T6187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.368395][ T6187] ? aa_sock_msg_perm+0x94/0x160 [ 106.368418][ T6187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.368449][ T6187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.368475][ T6187] __sock_sendmsg+0x219/0x270 [ 106.368499][ T6187] ____sys_sendmsg+0x505/0x830 [ 106.368532][ T6187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.368569][ T6187] ? import_iovec+0x74/0xa0 [ 106.368600][ T6187] ___sys_sendmsg+0x21f/0x2a0 [ 106.368630][ T6187] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.368695][ T6187] ? __fget_files+0x2a/0x420 [ 106.368720][ T6187] ? __fget_files+0x3a0/0x420 [ 106.368756][ T6187] __x64_sys_sendmsg+0x19b/0x260 [ 106.368786][ T6187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.368832][ T6187] ? do_syscall_64+0xba/0x210 [ 106.368856][ T6187] do_syscall_64+0xf6/0x210 [ 106.368876][ T6187] ? clear_bhb_loop+0x45/0xa0 [ 106.368900][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.368919][ T6187] RIP: 0033:0x7effb218e969 [ 106.368937][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.368952][ T6187] RSP: 002b:00007effaffd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.368973][ T6187] RAX: ffffffffffffffda RBX: 00007effb23b6080 RCX: 00007effb218e969 [ 106.368988][ T6187] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 106.368999][ T6187] RBP: 00007effaffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 106.369011][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.369022][ T6187] R13: 0000000000000000 R14: 00007effb23b6080 R15: 00007ffdb86eaad8 [ 106.369053][ T6187] [ 106.726344][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 106.740248][ T6193] Illegal XDP return value 4294967274 on prog (id 44) dev N/A, expect packet loss! [ 106.844109][ T6193] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 106.918025][ T6193] netlink: 224 bytes leftover after parsing attributes in process `syz.2.80'. [ 107.196868][ T6200] bridge_slave_1: left allmulticast mode [ 107.238051][ T6200] bridge_slave_1: left promiscuous mode [ 107.244036][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.307824][ T6200] bridge_slave_0: left allmulticast mode [ 107.323117][ T6200] bridge_slave_0: left promiscuous mode [ 107.341968][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.348794][ T6208] FAULT_INJECTION: forcing a failure. [ 107.348794][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.369395][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.0.85 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 107.369423][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.369435][ T6208] Call Trace: [ 107.369443][ T6208] [ 107.369451][ T6208] dump_stack_lvl+0x189/0x250 [ 107.369482][ T6208] ? __lock_acquire+0xaac/0xd20 [ 107.369513][ T6208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.369542][ T6208] ? __pfx__printk+0x10/0x10 [ 107.369562][ T6208] ? __might_fault+0xb0/0x130 [ 107.369599][ T6208] should_fail_ex+0x414/0x560 [ 107.369634][ T6208] _copy_from_user+0x2d/0xb0 [ 107.369663][ T6208] bpf_obj_get_info_by_fd+0x506/0x2f30 [ 107.369708][ T6208] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 107.369745][ T6208] ? get_pid_task+0x20/0x1f0 [ 107.369814][ T6208] ? bpf_lsm_bpf+0x9/0x20 [ 107.369839][ T6208] ? security_bpf+0x7e/0x300 [ 107.369861][ T6208] __sys_bpf+0x77a/0x860 [ 107.369888][ T6208] ? __pfx___sys_bpf+0x10/0x10 [ 107.369926][ T6208] ? ksys_write+0x1f0/0x250 [ 107.369946][ T6208] ? rcu_is_watching+0x15/0xb0 [ 107.369988][ T6208] __x64_sys_bpf+0x7c/0x90 [ 107.370011][ T6208] do_syscall_64+0xf6/0x210 [ 107.370032][ T6208] ? clear_bhb_loop+0x45/0xa0 [ 107.370057][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.370076][ T6208] RIP: 0033:0x7f21e958e969 [ 107.370093][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.370109][ T6208] RSP: 002b:00007f21ea388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.370130][ T6208] RAX: ffffffffffffffda RBX: 00007f21e97b5fa0 RCX: 00007f21e958e969 [ 107.370144][ T6208] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 107.370156][ T6208] RBP: 00007f21ea388090 R08: 0000000000000000 R09: 0000000000000000 [ 107.370167][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.370178][ T6208] R13: 0000000000000000 R14: 00007f21e97b5fa0 R15: 00007ffd3178ff18 [ 107.370209][ T6208] [ 107.741989][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.658801][ T6223] block nbd0: server does not support multiple connections per device. [ 108.713673][ T6223] block nbd0: shutting down sockets [ 109.094144][ T6238] __nla_validate_parse: 4 callbacks suppressed [ 109.094165][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 109.212319][ T6241] netlink: 148 bytes leftover after parsing attributes in process `syz.3.96'. [ 109.263992][ T6247] FAULT_INJECTION: forcing a failure. [ 109.263992][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 109.302043][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.1.99 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 109.302072][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.302084][ T6247] Call Trace: [ 109.302092][ T6247] [ 109.302100][ T6247] dump_stack_lvl+0x189/0x250 [ 109.302138][ T6247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.302167][ T6247] ? __pfx__printk+0x10/0x10 [ 109.302192][ T6247] ? __pfx___might_resched+0x10/0x10 [ 109.302216][ T6247] should_fail_ex+0x414/0x560 [ 109.302242][ T6247] should_failslab+0xa8/0x100 [ 109.302269][ T6247] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 109.302295][ T6247] ? __alloc_skb+0x112/0x2d0 [ 109.302324][ T6247] __alloc_skb+0x112/0x2d0 [ 109.302352][ T6247] netlink_sendmsg+0x5c6/0xb30 [ 109.302386][ T6247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.302414][ T6247] ? aa_sock_msg_perm+0x94/0x160 [ 109.302437][ T6247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.302459][ T6247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.302491][ T6247] __sock_sendmsg+0x219/0x270 [ 109.302515][ T6247] ____sys_sendmsg+0x505/0x830 [ 109.302548][ T6247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.302585][ T6247] ? import_iovec+0x74/0xa0 [ 109.302616][ T6247] ___sys_sendmsg+0x21f/0x2a0 [ 109.302645][ T6247] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.302711][ T6247] ? __fget_files+0x2a/0x420 [ 109.302735][ T6247] ? __fget_files+0x3a0/0x420 [ 109.302770][ T6247] __x64_sys_sendmsg+0x19b/0x260 [ 109.302799][ T6247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.302841][ T6247] ? do_syscall_64+0xba/0x210 [ 109.302865][ T6247] do_syscall_64+0xf6/0x210 [ 109.302884][ T6247] ? clear_bhb_loop+0x45/0xa0 [ 109.302907][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.302926][ T6247] RIP: 0033:0x7fe8a278e969 [ 109.302942][ T6247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.302958][ T6247] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.302979][ T6247] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 109.302993][ T6247] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 109.303005][ T6247] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 109.303016][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.303027][ T6247] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 109.303058][ T6247] [ 109.884505][ T6264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'. [ 110.146516][ T6276] netlink: 'syz.1.107': attribute type 7 has an invalid length. [ 110.897851][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.963634][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 111.258521][ T6315] netlink: 452 bytes leftover after parsing attributes in process `syz.0.121'. [ 111.664758][ T6331] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 111.675701][ T6339] netlink: 'syz.4.127': attribute type 39 has an invalid length. [ 111.719350][ T6331] netlink: 2 bytes leftover after parsing attributes in process `syz.0.125'. [ 111.778886][ T6331] team0: left allmulticast mode [ 111.783989][ T6331] team_slave_0: left allmulticast mode [ 111.796893][ T6331] team_slave_1: left allmulticast mode [ 111.821465][ T6331] bridge0: port 3(team0) entered disabled state [ 111.930160][ T6342] bond0: (slave bond_slave_0): Releasing backup interface [ 111.944858][ T6345] openvswitch: netlink: IP tunnel dst address not specified [ 111.968630][ T6342] bond0: (slave bond_slave_1): Releasing backup interface [ 112.028470][ T6342] team0: Port device team_slave_0 removed [ 112.053568][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 112.057151][ T6342] team0: Port device team_slave_1 removed [ 112.081040][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.089208][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.107141][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.155212][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.406856][ T6356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 112.503344][ T6362] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 112.504065][ T6355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.511464][ T6362] netlink: 'syz.0.136': attribute type 11 has an invalid length. [ 112.529983][ T6362] netlink: 220 bytes leftover after parsing attributes in process `syz.0.136'. [ 112.862355][ T6358] syzkaller0: entered promiscuous mode [ 112.908792][ T6358] syzkaller0: entered allmulticast mode [ 113.104524][ T6379] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 113.112406][ T6379] netlink: 2 bytes leftover after parsing attributes in process `syz.4.142'. [ 113.464186][ T6388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.505233][ T30] audit: type=1800 audit(1747107221.958:2): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.143" name="memory.events" dev="tmpfs" ino=141 res=0 errno=0 [ 114.388820][ T6379] team0: entered promiscuous mode [ 114.393884][ T6379] team_slave_0: entered promiscuous mode [ 114.400384][ T6379] team_slave_1: entered promiscuous mode [ 114.406165][ T6379] FAULT_INJECTION: forcing a failure. [ 114.406165][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 114.419243][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.4.142 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 114.419270][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.419281][ T6379] Call Trace: [ 114.419290][ T6379] [ 114.419298][ T6379] dump_stack_lvl+0x189/0x250 [ 114.419336][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.419365][ T6379] ? __pfx__printk+0x10/0x10 [ 114.419382][ T6379] ? __lock_acquire+0xaac/0xd20 [ 114.419424][ T6379] should_fail_ex+0x414/0x560 [ 114.419450][ T6379] should_failslab+0xa8/0x100 [ 114.419479][ T6379] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 114.419504][ T6379] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 114.419523][ T6379] ? __alloc_skb+0x112/0x2d0 [ 114.419552][ T6379] __alloc_skb+0x112/0x2d0 [ 114.419582][ T6379] rtmsg_ifinfo_build_skb+0x84/0x260 [ 114.419612][ T6379] rtmsg_ifinfo+0x8c/0x1a0 [ 114.419638][ T6379] __dev_notify_flags+0xf4/0x2e0 [ 114.419669][ T6379] ? __pfx___dev_notify_flags+0x10/0x10 [ 114.419695][ T6379] ? __pfx_netdev_info+0x10/0x10 [ 114.419727][ T6379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.419746][ T6379] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.419784][ T6379] __dev_set_promiscuity+0x152/0x590 [ 114.419811][ T6379] ? do_raw_spin_unlock+0x122/0x240 [ 114.419840][ T6379] netif_set_promiscuity+0x50/0xe0 [ 114.419880][ T6379] dev_set_promiscuity+0x126/0x260 [ 114.419912][ T6379] team_change_rx_flags+0x1b3/0x330 [ 114.419943][ T6379] ? team_change_rx_flags+0x29/0x330 [ 114.419975][ T6379] ? __pfx_team_change_rx_flags+0x10/0x10 [ 114.420004][ T6379] __dev_set_promiscuity+0x3f5/0x590 [ 114.420040][ T6379] __dev_change_flags+0x41b/0x6d0 [ 114.420073][ T6379] ? __pfx___dev_change_flags+0x10/0x10 [ 114.420114][ T6379] netif_change_flags+0x88/0x1a0 [ 114.420147][ T6379] do_setlink+0xcb9/0x40d0 [ 114.420187][ T6379] ? irqentry_exit+0x74/0x90 [ 114.420206][ T6379] ? __pfx_do_setlink+0x10/0x10 [ 114.420248][ T6379] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 114.420279][ T6379] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 114.420307][ T6379] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.420342][ T6379] ? rcu_is_watching+0x15/0xb0 [ 114.420377][ T6379] ? __mutex_lock+0xa6d/0xe80 [ 114.420398][ T6379] ? __mutex_lock+0x51b/0xe80 [ 114.420424][ T6379] ? rtnl_newlink+0x8db/0x1c70 [ 114.420450][ T6379] ? __pfx___mutex_lock+0x10/0x10 [ 114.420482][ T6379] ? ns_capable+0x8a/0xf0 [ 114.420502][ T6379] ? rtnl_link_get_net_capable+0x16a/0x350 [ 114.420532][ T6379] rtnl_newlink+0x160b/0x1c70 [ 114.420553][ T6379] ? __kasan_slab_free+0x62/0x70 [ 114.420591][ T6379] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.420648][ T6379] ? kasan_quarantine_put+0xdd/0x220 [ 114.420671][ T6379] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.420708][ T6379] ? nlmon_xmit+0xb0/0x100 [ 114.420734][ T6379] ? kmem_cache_free+0x192/0x3f0 [ 114.420768][ T6379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.420787][ T6379] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.420818][ T6379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.420836][ T6379] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 114.420872][ T6379] ? aa_get_newest_label+0xf7/0x5d0 [ 114.420899][ T6379] ? __lock_acquire+0xaac/0xd20 [ 114.420953][ T6379] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.420977][ T6379] rtnetlink_rcv_msg+0x7cc/0xb70 [ 114.421004][ T6379] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 114.421027][ T6379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.421054][ T6379] ? ref_tracker_free+0x63a/0x7d0 [ 114.421074][ T6379] ? __copy_skb_header+0xa7/0x550 [ 114.421114][ T6379] netlink_rcv_skb+0x219/0x490 [ 114.421141][ T6379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.421166][ T6379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.421213][ T6379] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.421237][ T6379] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.421268][ T6379] netlink_unicast+0x758/0x8d0 [ 114.421303][ T6379] netlink_sendmsg+0x805/0xb30 [ 114.421340][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.421368][ T6379] ? aa_sock_msg_perm+0x94/0x160 [ 114.421392][ T6379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.421415][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.421441][ T6379] __sock_sendmsg+0x219/0x270 [ 114.421466][ T6379] ____sys_sendmsg+0x505/0x830 [ 114.421500][ T6379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.421540][ T6379] ? import_iovec+0x74/0xa0 [ 114.421572][ T6379] ___sys_sendmsg+0x21f/0x2a0 [ 114.421603][ T6379] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.421673][ T6379] ? __fget_files+0x2a/0x420 [ 114.421698][ T6379] ? __fget_files+0x3a0/0x420 [ 114.421736][ T6379] __x64_sys_sendmsg+0x19b/0x260 [ 114.421768][ T6379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.421809][ T6379] ? rcu_is_watching+0x15/0xb0 [ 114.421850][ T6379] do_syscall_64+0xf6/0x210 [ 114.421877][ T6379] ? clear_bhb_loop+0x45/0xa0 [ 114.421903][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.421922][ T6379] RIP: 0033:0x7effb218e969 [ 114.421940][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.421955][ T6379] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.421976][ T6379] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 114.421990][ T6379] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000d [ 114.422002][ T6379] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.422014][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.422025][ T6379] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 114.422058][ T6379] [ 114.422391][ T6379] bridge0: port 3(team0) entered blocking state [ 115.006146][ T6379] bridge0: port 3(team0) entered disabled state [ 115.036585][ T6379] team0: entered allmulticast mode [ 115.058856][ T6379] team_slave_0: entered allmulticast mode [ 115.078007][ T6379] team_slave_1: entered allmulticast mode [ 115.102493][ T6379] bridge0: port 3(team0) entered blocking state [ 115.109059][ T6379] bridge0: port 3(team0) entered forwarding state [ 115.164910][ T6387] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 115.173795][ T6387] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 115.270522][ T6396] xfrm1: entered promiscuous mode [ 115.275840][ T6396] xfrm1: entered allmulticast mode [ 115.400171][ T6400] __nla_validate_parse: 1 callbacks suppressed [ 115.400190][ T6400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.146'. [ 115.919487][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 115.965052][ T6418] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 116.194484][ T6423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 116.237026][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 116.567788][ T6436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'. [ 116.940725][ T6449] FAULT_INJECTION: forcing a failure. [ 116.940725][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 116.953947][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.2.163 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 116.953974][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.953985][ T6449] Call Trace: [ 116.953993][ T6449] [ 116.954001][ T6449] dump_stack_lvl+0x189/0x250 [ 116.954047][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.954076][ T6449] ? __pfx__printk+0x10/0x10 [ 116.954102][ T6449] ? __pfx___might_resched+0x10/0x10 [ 116.954126][ T6449] should_fail_ex+0x414/0x560 [ 116.954152][ T6449] should_failslab+0xa8/0x100 [ 116.954180][ T6449] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 116.954207][ T6449] ? bpf_insn_prepare_dump+0xbb/0x920 [ 116.954242][ T6449] kmemdup_noprof+0x2b/0x70 [ 116.954264][ T6449] bpf_insn_prepare_dump+0xbb/0x920 [ 116.954299][ T6449] ? rcu_is_watching+0x15/0xb0 [ 116.954334][ T6449] ? __pfx_bpf_insn_prepare_dump+0x10/0x10 [ 116.954364][ T6449] ? bpf_lsm_capable+0x9/0x20 [ 116.954392][ T6449] ? security_capable+0x7e/0x2e0 [ 116.954420][ T6449] bpf_obj_get_info_by_fd+0x1799/0x2f30 [ 116.954465][ T6449] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 116.954502][ T6449] ? get_pid_task+0x20/0x1f0 [ 116.954571][ T6449] ? bpf_lsm_bpf+0x9/0x20 [ 116.954595][ T6449] ? security_bpf+0x7e/0x300 [ 116.954616][ T6449] __sys_bpf+0x77a/0x860 [ 116.954642][ T6449] ? __pfx___sys_bpf+0x10/0x10 [ 116.954680][ T6449] ? ksys_write+0x1f0/0x250 [ 116.954701][ T6449] ? rcu_is_watching+0x15/0xb0 [ 116.954741][ T6449] __x64_sys_bpf+0x7c/0x90 [ 116.954764][ T6449] do_syscall_64+0xf6/0x210 [ 116.954785][ T6449] ? clear_bhb_loop+0x45/0xa0 [ 116.954821][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.954839][ T6449] RIP: 0033:0x7f096698e969 [ 116.954856][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.954871][ T6449] RSP: 002b:00007f09678c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.954891][ T6449] RAX: ffffffffffffffda RBX: 00007f0966bb5fa0 RCX: 00007f096698e969 [ 116.954905][ T6449] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 116.954916][ T6449] RBP: 00007f09678c4090 R08: 0000000000000000 R09: 0000000000000000 [ 116.954927][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.954938][ T6449] R13: 0000000000000000 R14: 00007f0966bb5fa0 R15: 00007ffd7fa696a8 [ 116.954967][ T6449] [ 117.405256][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 117.605396][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 117.658201][ T6463] netlink: 104 bytes leftover after parsing attributes in process `syz.3.168'. [ 118.014550][ T6480] Bluetooth: MGMT ver 1.23 [ 118.238655][ T6470] pim6reg1: entered promiscuous mode [ 118.254419][ T6470] pim6reg1: entered allmulticast mode [ 118.683265][ T6488] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 119.086506][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 119.473933][ T6522] FAULT_INJECTION: forcing a failure. [ 119.473933][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 119.518084][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.185 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 119.518130][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.518148][ T6522] Call Trace: [ 119.518156][ T6522] [ 119.518163][ T6522] dump_stack_lvl+0x189/0x250 [ 119.518210][ T6522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.518239][ T6522] ? __pfx__printk+0x10/0x10 [ 119.518262][ T6522] ? __pfx___might_resched+0x10/0x10 [ 119.518280][ T6522] ? fs_reclaim_acquire+0x7d/0x100 [ 119.518314][ T6522] should_fail_ex+0x414/0x560 [ 119.518339][ T6522] should_failslab+0xa8/0x100 [ 119.518367][ T6522] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 119.518393][ T6522] ? __alloc_skb+0x112/0x2d0 [ 119.518421][ T6522] __alloc_skb+0x112/0x2d0 [ 119.518448][ T6522] alloc_skb_with_frags+0xca/0x890 [ 119.518474][ T6522] ? __might_fault+0xb0/0x130 [ 119.518512][ T6522] sock_alloc_send_pskb+0x857/0x990 [ 119.518572][ T6522] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 119.518607][ T6522] ? is_bpf_text_address+0x26/0x2b0 [ 119.518639][ T6522] ? iov_iter_advance+0x8b/0x1c0 [ 119.518664][ T6522] tun_get_user+0x9c9/0x3c20 [ 119.518711][ T6522] ? aa_file_perm+0x11f/0xed0 [ 119.518736][ T6522] ? __pfx_tun_get_user+0x10/0x10 [ 119.518763][ T6522] ? aa_file_perm+0x11f/0xed0 [ 119.518785][ T6522] ? aa_file_perm+0x3e7/0xed0 [ 119.518821][ T6522] ? ref_tracker_alloc+0x318/0x460 [ 119.518847][ T6522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.518879][ T6522] ? tun_get+0x1c/0x2f0 [ 119.518912][ T6522] ? tun_get+0x1c/0x2f0 [ 119.518939][ T6522] ? tun_get+0x1c/0x2f0 [ 119.518972][ T6522] tun_chr_write_iter+0x113/0x200 [ 119.519004][ T6522] vfs_write+0x548/0xa90 [ 119.519032][ T6522] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.519061][ T6522] ? __pfx_vfs_write+0x10/0x10 [ 119.519095][ T6522] ? __fget_files+0x2a/0x420 [ 119.519131][ T6522] ksys_write+0x145/0x250 [ 119.519157][ T6522] ? __pfx_ksys_write+0x10/0x10 [ 119.519184][ T6522] ? do_syscall_64+0xba/0x210 [ 119.519209][ T6522] do_syscall_64+0xf6/0x210 [ 119.519230][ T6522] ? clear_bhb_loop+0x45/0xa0 [ 119.519255][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.519273][ T6522] RIP: 0033:0x7f21e958e969 [ 119.519304][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.519320][ T6522] RSP: 002b:00007f21ea367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.519349][ T6522] RAX: ffffffffffffffda RBX: 00007f21e97b6080 RCX: 00007f21e958e969 [ 119.519364][ T6522] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 119.519376][ T6522] RBP: 00007f21ea367090 R08: 0000000000000000 R09: 0000000000000000 [ 119.519388][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.519399][ T6522] R13: 0000000000000001 R14: 00007f21e97b6080 R15: 00007ffd3178ff18 [ 119.519431][ T6522] [ 120.013541][ T6528] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 120.341786][ T6524] pim6reg1: entered promiscuous mode [ 120.388143][ T6524] pim6reg1: entered allmulticast mode [ 120.568851][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 120.717190][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 120.807296][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 120.844579][ T6540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.904680][ T6540] netlink: 'syz.0.189': attribute type 14 has an invalid length. [ 120.931391][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 121.706568][ T6589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.199'. [ 122.376705][ T6589] bridge0: port 3(team0) entered disabled state [ 122.384197][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.391979][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.483460][ T6632] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 122.846933][ T6645] Bluetooth: MGMT ver 1.23 [ 123.157839][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.191401][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.402680][ T6589] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.412248][ T6589] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.421260][ T6589] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.430794][ T6589] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.776993][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 123.814764][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.887410][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.915839][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.946482][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.956755][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.268280][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 124.363119][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 124.391634][ T6682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 124.413821][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.477671][ T6684] team0: left allmulticast mode [ 124.521374][ T6684] team_slave_0: left allmulticast mode [ 124.526988][ T6684] team_slave_1: left allmulticast mode [ 124.533010][ T6684] team0: left promiscuous mode [ 124.541667][ T6684] team_slave_0: left promiscuous mode [ 124.547507][ T6684] team_slave_1: left promiscuous mode [ 124.555171][ T6684] bridge0: port 3(team0) entered disabled state [ 124.569789][ T6684] bridge_slave_1: left allmulticast mode [ 124.604576][ T6684] bridge_slave_1: left promiscuous mode [ 124.617860][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.641100][ T6684] bridge_slave_0: left allmulticast mode [ 124.670446][ T6684] bridge_slave_0: left promiscuous mode [ 124.676606][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.121296][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 125.174797][ T6706] netlink: zone id is out of range [ 125.191533][ T6706] netlink: zone id is out of range [ 125.202017][ T6706] netlink: set zone limit has 8 unknown bytes [ 125.356811][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 125.415978][ T6711] trusted_key: syz.3.224 sent an empty control message without MSG_MORE. [ 125.542815][ T6714] netlink: 'syz.4.225': attribute type 11 has an invalid length. [ 125.702910][ T6708] __nla_validate_parse: 1 callbacks suppressed [ 125.702929][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 125.737824][ T6717] FAULT_INJECTION: forcing a failure. [ 125.737824][ T6717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.789136][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.4.226 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 125.789165][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.789177][ T6717] Call Trace: [ 125.789185][ T6717] [ 125.789194][ T6717] dump_stack_lvl+0x189/0x250 [ 125.789226][ T6717] ? __lock_acquire+0xaac/0xd20 [ 125.789258][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.789286][ T6717] ? __pfx__printk+0x10/0x10 [ 125.789307][ T6717] ? __might_fault+0xb0/0x130 [ 125.789343][ T6717] should_fail_ex+0x414/0x560 [ 125.789368][ T6717] _copy_from_user+0x2d/0xb0 [ 125.789394][ T6717] ____sys_sendmsg+0x2fe/0x830 [ 125.789434][ T6717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.789472][ T6717] ? import_iovec+0x74/0xa0 [ 125.789502][ T6717] ___sys_sendmsg+0x21f/0x2a0 [ 125.789532][ T6717] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.789597][ T6717] ? __fget_files+0x2a/0x420 [ 125.789621][ T6717] ? __fget_files+0x3a0/0x420 [ 125.789655][ T6717] __sys_sendmmsg+0x227/0x430 [ 125.789688][ T6717] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.789726][ T6717] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.789764][ T6717] ? ksys_write+0x1f0/0x250 [ 125.789785][ T6717] ? rcu_is_watching+0x15/0xb0 [ 125.789825][ T6717] __x64_sys_sendmmsg+0xa0/0xc0 [ 125.789855][ T6717] do_syscall_64+0xf6/0x210 [ 125.789876][ T6717] ? clear_bhb_loop+0x45/0xa0 [ 125.789899][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.789917][ T6717] RIP: 0033:0x7effb218e969 [ 125.789934][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.789949][ T6717] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.789970][ T6717] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 125.789984][ T6717] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000003 [ 125.789995][ T6717] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.790007][ T6717] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 125.790019][ T6717] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 125.790048][ T6717] [ 126.035061][ T6721] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 126.220738][ T6719] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 126.314317][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 126.360663][ T6723] netdevsim netdevsim0: Direct firmware load for . [ 126.360663][ T6723] failed with error -2 [ 126.406640][ T6723] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 126.406640][ T6723] [ 126.461017][ T6737] FAULT_INJECTION: forcing a failure. [ 126.461017][ T6737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.470563][ T6729] bond1: (slave gretap1): making interface the new active one [ 126.483469][ T6729] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 126.492269][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.1.233 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 126.492298][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.492310][ T6737] Call Trace: [ 126.492317][ T6737] [ 126.492326][ T6737] dump_stack_lvl+0x189/0x250 [ 126.492358][ T6737] ? __lock_acquire+0xaac/0xd20 [ 126.492390][ T6737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.492420][ T6737] ? __pfx__printk+0x10/0x10 [ 126.492442][ T6737] ? __might_fault+0xb0/0x130 [ 126.492484][ T6737] should_fail_ex+0x414/0x560 [ 126.492514][ T6737] _copy_from_iter+0x3f5/0x15a0 [ 126.492556][ T6737] ? __pfx__copy_from_iter+0x10/0x10 [ 126.492584][ T6737] ? policy_nodemask+0x27c/0x720 [ 126.492625][ T6737] ip_generic_getfrag+0xeb/0x2b0 [ 126.492663][ T6737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 126.492694][ T6737] ? skb_page_frag_refill+0x199/0x320 [ 126.492738][ T6737] __ip_append_data+0x20ae/0x40f0 [ 126.492797][ T6737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 126.492852][ T6737] ? __pfx___ip_append_data+0x10/0x10 [ 126.492910][ T6737] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.492931][ T6737] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.492967][ T6737] ip_append_data+0x10e/0x190 [ 126.493003][ T6737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 126.493038][ T6737] udp_sendmsg+0x534/0x22e0 [ 126.493063][ T6737] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.493141][ T6737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 126.493173][ T6737] ? __pfx_udp_sendmsg+0x10/0x10 [ 126.493229][ T6737] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.493246][ T6737] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 126.493278][ T6737] ? sock_rps_record_flow+0x19/0x410 [ 126.493304][ T6737] ? inet_sendmsg+0x29c/0x370 [ 126.493322][ T6737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.493351][ T6737] __sock_sendmsg+0x19c/0x270 [ 126.493376][ T6737] ____sys_sendmsg+0x505/0x830 [ 126.493413][ T6737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.493453][ T6737] ? import_iovec+0x74/0xa0 [ 126.493487][ T6737] ___sys_sendmsg+0x21f/0x2a0 [ 126.493519][ T6737] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.493591][ T6737] ? __fget_files+0x2a/0x420 [ 126.493617][ T6737] ? __fget_files+0x3a0/0x420 [ 126.493657][ T6737] __x64_sys_sendmsg+0x19b/0x260 [ 126.493689][ T6737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.493739][ T6737] ? do_syscall_64+0xba/0x210 [ 126.493765][ T6737] do_syscall_64+0xf6/0x210 [ 126.493787][ T6737] ? clear_bhb_loop+0x45/0xa0 [ 126.493814][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.493834][ T6737] RIP: 0033:0x7fe8a278e969 [ 126.493854][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.493873][ T6737] RSP: 002b:00007fe8a3575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.493895][ T6737] RAX: ffffffffffffffda RBX: 00007fe8a29b6080 RCX: 00007fe8a278e969 [ 126.493911][ T6737] RDX: 0000000000040080 RSI: 00002000000009c0 RDI: 0000000000000009 [ 126.493925][ T6737] RBP: 00007fe8a3575090 R08: 0000000000000000 R09: 0000000000000000 [ 126.493938][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.493950][ T6737] R13: 0000000000000000 R14: 00007fe8a29b6080 R15: 00007ffce8e3c868 [ 126.493985][ T6737] [ 126.824409][ T6736] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 126.968317][ T6741] netlink: 56 bytes leftover after parsing attributes in process `syz.4.234'. [ 127.160374][ T6746] syzkaller0: entered allmulticast mode [ 127.195883][ T6744] syzkaller0: left allmulticast mode [ 127.236973][ T6753] FAULT_INJECTION: forcing a failure. [ 127.236973][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.265067][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 127.290262][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.0.238 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 127.290291][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.290313][ T6753] Call Trace: [ 127.290321][ T6753] [ 127.290329][ T6753] dump_stack_lvl+0x189/0x250 [ 127.290360][ T6753] ? __lock_acquire+0xaac/0xd20 [ 127.290391][ T6753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.290420][ T6753] ? __pfx__printk+0x10/0x10 [ 127.290439][ T6753] ? __might_fault+0xb0/0x130 [ 127.290475][ T6753] should_fail_ex+0x414/0x560 [ 127.290501][ T6753] _copy_from_iter+0x1db/0x15a0 [ 127.290534][ T6753] ? trace_kmalloc+0x1f/0xd0 [ 127.290555][ T6753] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 127.290583][ T6753] ? __pfx__copy_from_iter+0x10/0x10 [ 127.290610][ T6753] ? __build_skb_around+0x257/0x3e0 [ 127.290639][ T6753] ? netlink_sendmsg+0x642/0xb30 [ 127.290663][ T6753] ? skb_put+0x11b/0x210 [ 127.290692][ T6753] netlink_sendmsg+0x6b2/0xb30 [ 127.290727][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.290756][ T6753] ? aa_sock_msg_perm+0x94/0x160 [ 127.290780][ T6753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.290802][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.290828][ T6753] __sock_sendmsg+0x219/0x270 [ 127.290852][ T6753] ____sys_sendmsg+0x505/0x830 [ 127.290886][ T6753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.290924][ T6753] ? import_iovec+0x74/0xa0 [ 127.290955][ T6753] ___sys_sendmsg+0x21f/0x2a0 [ 127.290985][ T6753] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.291052][ T6753] ? __fget_files+0x2a/0x420 [ 127.291077][ T6753] ? __fget_files+0x3a0/0x420 [ 127.291114][ T6753] __x64_sys_sendmsg+0x19b/0x260 [ 127.291144][ T6753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.291189][ T6753] ? do_syscall_64+0xba/0x210 [ 127.291214][ T6753] do_syscall_64+0xf6/0x210 [ 127.291234][ T6753] ? clear_bhb_loop+0x45/0xa0 [ 127.291259][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.291278][ T6753] RIP: 0033:0x7f21e958e969 [ 127.291296][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.291317][ T6753] RSP: 002b:00007f21ea367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.291337][ T6753] RAX: ffffffffffffffda RBX: 00007f21e97b6080 RCX: 00007f21e958e969 [ 127.291351][ T6753] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 127.291363][ T6753] RBP: 00007f21ea367090 R08: 0000000000000000 R09: 0000000000000000 [ 127.291374][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.291384][ T6753] R13: 0000000000000000 R14: 00007f21e97b6080 R15: 00007ffd3178ff18 [ 127.291412][ T6753] [ 127.695306][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 127.816802][ T6763] FAULT_INJECTION: forcing a failure. [ 127.816802][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 127.899989][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.4.242 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 127.900019][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.900031][ T6763] Call Trace: [ 127.900039][ T6763] [ 127.900047][ T6763] dump_stack_lvl+0x189/0x250 [ 127.900084][ T6763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.900114][ T6763] ? __pfx__printk+0x10/0x10 [ 127.900141][ T6763] ? __pfx___might_resched+0x10/0x10 [ 127.900157][ T6763] ? fs_reclaim_acquire+0x7d/0x100 [ 127.900193][ T6763] should_fail_ex+0x414/0x560 [ 127.900220][ T6763] should_failslab+0xa8/0x100 [ 127.900248][ T6763] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 127.900274][ T6763] ? __alloc_skb+0x112/0x2d0 [ 127.900305][ T6763] __alloc_skb+0x112/0x2d0 [ 127.900335][ T6763] mgmt_cmd_status+0x41/0x4c0 [ 127.900359][ T6763] ? __add_adv_patterns_monitor+0xee/0x220 [ 127.900387][ T6763] add_adv_patterns_monitor+0x214/0x360 [ 127.900419][ T6763] hci_mgmt_cmd+0x9c6/0xef0 [ 127.900461][ T6763] hci_sock_sendmsg+0x6ca/0xee0 [ 127.900495][ T6763] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 127.900521][ T6763] ? aa_sock_msg_perm+0x94/0x160 [ 127.900546][ T6763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.900568][ T6763] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 127.900595][ T6763] __sock_sendmsg+0x219/0x270 [ 127.900620][ T6763] sock_write_iter+0x258/0x330 [ 127.900641][ T6763] ? __pfx_sock_write_iter+0x10/0x10 [ 127.900673][ T6763] ? bpf_lsm_file_permission+0x9/0x20 [ 127.900697][ T6763] ? security_file_permission+0x75/0x290 [ 127.900737][ T6763] vfs_write+0x548/0xa90 [ 127.900766][ T6763] ? __pfx_sock_write_iter+0x10/0x10 [ 127.900785][ T6763] ? __pfx_vfs_write+0x10/0x10 [ 127.900820][ T6763] ? __fget_files+0x2a/0x420 [ 127.900857][ T6763] ksys_write+0x145/0x250 [ 127.900878][ T6763] ? rcu_is_watching+0x15/0xb0 [ 127.900910][ T6763] ? __pfx_ksys_write+0x10/0x10 [ 127.900943][ T6763] ? do_syscall_64+0xba/0x210 [ 127.900968][ T6763] do_syscall_64+0xf6/0x210 [ 127.900988][ T6763] ? clear_bhb_loop+0x45/0xa0 [ 127.901013][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.901032][ T6763] RIP: 0033:0x7effb218e969 [ 127.901050][ T6763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.901065][ T6763] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.901086][ T6763] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 127.901100][ T6763] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000006 [ 127.901112][ T6763] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.901124][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.901135][ T6763] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 127.901168][ T6763] [ 129.166959][ T6794] sctp: [Deprecated]: syz.4.247 (pid 6794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.166959][ T6794] Use struct sctp_sack_info instead [ 129.212517][ T6792] tipc: Started in network mode [ 129.217445][ T6792] tipc: Node identity , cluster identity 4711 [ 129.228255][ T6792] tipc: Failed to obtain node identity [ 129.238665][ T6792] tipc: Enabling of bearer rejected, failed to enable media [ 129.361120][ T6802] FAULT_INJECTION: forcing a failure. [ 129.361120][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.398299][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.1.250 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 129.398328][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.398340][ T6802] Call Trace: [ 129.398348][ T6802] [ 129.398356][ T6802] dump_stack_lvl+0x189/0x250 [ 129.398387][ T6802] ? __lock_acquire+0xaac/0xd20 [ 129.398418][ T6802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.398445][ T6802] ? __pfx__printk+0x10/0x10 [ 129.398464][ T6802] ? __might_fault+0xb0/0x130 [ 129.398501][ T6802] should_fail_ex+0x414/0x560 [ 129.398525][ T6802] _copy_from_iter+0x1db/0x15a0 [ 129.398557][ T6802] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 129.398579][ T6802] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 129.398605][ T6802] ? __pfx__copy_from_iter+0x10/0x10 [ 129.398630][ T6802] ? __build_skb_around+0x257/0x3e0 [ 129.398658][ T6802] ? netlink_sendmsg+0x642/0xb30 [ 129.398680][ T6802] ? skb_put+0x11b/0x210 [ 129.398708][ T6802] netlink_sendmsg+0x6b2/0xb30 [ 129.398741][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.398769][ T6802] ? aa_sock_msg_perm+0x94/0x160 [ 129.398791][ T6802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.398813][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.398839][ T6802] __sock_sendmsg+0x219/0x270 [ 129.398862][ T6802] ____sys_sendmsg+0x505/0x830 [ 129.398895][ T6802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.398931][ T6802] ? import_iovec+0x74/0xa0 [ 129.398961][ T6802] ___sys_sendmsg+0x21f/0x2a0 [ 129.398990][ T6802] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.399055][ T6802] ? __fget_files+0x2a/0x420 [ 129.399088][ T6802] ? __fget_files+0x3a0/0x420 [ 129.399123][ T6802] __x64_sys_sendmsg+0x19b/0x260 [ 129.399152][ T6802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.399196][ T6802] ? do_syscall_64+0xba/0x210 [ 129.399220][ T6802] do_syscall_64+0xf6/0x210 [ 129.399240][ T6802] ? clear_bhb_loop+0x45/0xa0 [ 129.399264][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.399281][ T6802] RIP: 0033:0x7fe8a278e969 [ 129.399298][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.399313][ T6802] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.399333][ T6802] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 129.399347][ T6802] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 129.399358][ T6802] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 129.399370][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.399381][ T6802] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 129.399411][ T6802] [ 130.368878][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 130.463198][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 130.777821][ T6840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.262'. [ 130.783495][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.232600][ T6853] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 131.272383][ T6853] netlink: 2 bytes leftover after parsing attributes in process `syz.3.266'. [ 131.319451][ T6853] team0: entered promiscuous mode [ 131.339916][ T6853] team_slave_0: entered promiscuous mode [ 131.345859][ T6853] team_slave_1: entered promiscuous mode [ 131.431985][ T6859] netlink: 80 bytes leftover after parsing attributes in process `syz.1.268'. [ 131.708340][ T6866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.028393][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 132.076006][ T6877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.090656][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 132.478204][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 132.755453][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 132.814076][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.825316][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.838303][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 133.326526][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 133.361271][ T6908] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 133.369279][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.626447][ T6920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 133.669249][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.121534][ T6940] FAULT_INJECTION: forcing a failure. [ 134.121534][ T6940] name failslab, interval 1, probability 0, space 0, times 0 [ 134.134460][ T6940] CPU: 1 UID: 0 PID: 6940 Comm: syz.1.295 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 134.134485][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.134498][ T6940] Call Trace: [ 134.134506][ T6940] [ 134.134514][ T6940] dump_stack_lvl+0x189/0x250 [ 134.134548][ T6940] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.134580][ T6940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.134607][ T6940] ? __pfx__printk+0x10/0x10 [ 134.134642][ T6940] should_fail_ex+0x414/0x560 [ 134.134668][ T6940] should_failslab+0xa8/0x100 [ 134.134696][ T6940] kmem_cache_alloc_noprof+0x73/0x3c0 [ 134.134720][ T6940] ? sctp_get_port_local+0x6bb/0x1610 [ 134.134759][ T6940] sctp_get_port_local+0x6bb/0x1610 [ 134.134800][ T6940] ? __pfx_sctp_get_port_local+0x10/0x10 [ 134.134831][ T6940] ? sctp_bind_addr_match+0x28b/0x2b0 [ 134.134858][ T6940] sctp_do_bind+0x4ea/0x940 [ 134.134899][ T6940] sctp_connect_new_asoc+0x25c/0x690 [ 134.134929][ T6940] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.134953][ T6940] ? __local_bh_enable_ip+0x12d/0x1c0 [ 134.134980][ T6940] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 134.135005][ T6940] ? security_sctp_bind_connect+0x7e/0x2e0 [ 134.135039][ T6940] sctp_sendmsg+0x155c/0x2810 [ 134.135078][ T6940] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.135108][ T6940] ? aa_sk_perm+0x81e/0x950 [ 134.135132][ T6940] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.135156][ T6940] ? sock_rps_record_flow+0x19/0x410 [ 134.135180][ T6940] ? inet_sendmsg+0x2f4/0x370 [ 134.135204][ T6940] __sock_sendmsg+0x19c/0x270 [ 134.135230][ T6940] ____sys_sendmsg+0x52d/0x830 [ 134.135263][ T6940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.135301][ T6940] ? import_iovec+0x74/0xa0 [ 134.135333][ T6940] ___sys_sendmsg+0x21f/0x2a0 [ 134.135364][ T6940] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.135433][ T6940] ? __fget_files+0x2a/0x420 [ 134.135458][ T6940] ? __fget_files+0x3a0/0x420 [ 134.135496][ T6940] __sys_sendmmsg+0x227/0x430 [ 134.135531][ T6940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.135569][ T6940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.135611][ T6940] ? ksys_write+0x1f0/0x250 [ 134.135631][ T6940] ? rcu_is_watching+0x15/0xb0 [ 134.135673][ T6940] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.135704][ T6940] do_syscall_64+0xf6/0x210 [ 134.135726][ T6940] ? clear_bhb_loop+0x45/0xa0 [ 134.135755][ T6940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.135772][ T6940] RIP: 0033:0x7fe8a278e969 [ 134.135787][ T6940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.135801][ T6940] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.135819][ T6940] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 134.135831][ T6940] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000003 [ 134.135841][ T6940] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 134.135851][ T6940] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 134.135861][ T6940] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 134.135889][ T6940] [ 134.597929][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 134.697698][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 134.705517][ T6949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.725140][ T6949] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.548547][ T6954] pim6reg1: entered promiscuous mode [ 135.564193][ T6954] pim6reg1: entered allmulticast mode [ 135.723274][ T6975] 8021q: VLANs not supported on ip6tnl0 [ 135.732878][ T6975] tipc: Enabling of bearer rejected, failed to enable media [ 136.144150][ T6966] FAULT_INJECTION: forcing a failure. [ 136.144150][ T6966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.237709][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.259695][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.2.303 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 136.259729][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.259741][ T6966] Call Trace: [ 136.259749][ T6966] [ 136.259757][ T6966] dump_stack_lvl+0x189/0x250 [ 136.259803][ T6966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.259831][ T6966] ? __pfx__printk+0x10/0x10 [ 136.259865][ T6966] should_fail_ex+0x414/0x560 [ 136.259891][ T6966] _copy_to_user+0x31/0xb0 [ 136.259928][ T6966] simple_read_from_buffer+0xe1/0x170 [ 136.259965][ T6966] proc_fail_nth_read+0x1df/0x250 [ 136.259997][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.260029][ T6966] ? rw_verify_area+0x258/0x650 [ 136.260050][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.260086][ T6966] vfs_read+0x1fd/0x980 [ 136.260114][ T6966] ? __pfx___mutex_lock+0x10/0x10 [ 136.260135][ T6966] ? __pfx_vfs_read+0x10/0x10 [ 136.260166][ T6966] ? __fget_files+0x2a/0x420 [ 136.260196][ T6966] ? __fget_files+0x3a0/0x420 [ 136.260220][ T6966] ? __fget_files+0x2a/0x420 [ 136.260256][ T6966] ksys_read+0x145/0x250 [ 136.260281][ T6966] ? __pfx_ksys_read+0x10/0x10 [ 136.260314][ T6966] ? do_syscall_64+0xba/0x210 [ 136.260337][ T6966] do_syscall_64+0xf6/0x210 [ 136.260358][ T6966] ? clear_bhb_loop+0x45/0xa0 [ 136.260383][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.260410][ T6966] RIP: 0033:0x7f096698d37c [ 136.260427][ T6966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.260443][ T6966] RSP: 002b:00007f09678a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.260464][ T6966] RAX: ffffffffffffffda RBX: 00007f0966bb6080 RCX: 00007f096698d37c [ 136.260478][ T6966] RDX: 000000000000000f RSI: 00007f09678a30a0 RDI: 0000000000000004 [ 136.260490][ T6966] RBP: 00007f09678a3090 R08: 0000000000000000 R09: 0000000000000000 [ 136.260502][ T6966] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 136.260514][ T6966] R13: 0000000000000000 R14: 00007f0966bb6080 R15: 00007ffd7fa696a8 [ 136.260545][ T6966] [ 136.549212][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 136.682928][ T6985] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 136.692090][ T6985] netlink: 'syz.3.310': attribute type 12 has an invalid length. [ 136.700443][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 136.733557][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 137.326858][ T7007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.351319][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.423275][ T7016] netlink: 14 bytes leftover after parsing attributes in process `syz.2.319'. [ 137.517226][ T7007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.615716][ T7022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.320'. [ 137.622070][ T7016] bond0 (unregistering): Released all slaves [ 137.725258][ T7007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.798782][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.818078][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.900531][ T7007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.952788][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.322'. [ 138.291691][ T7007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.355804][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 138.359871][ T7007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.400533][ T7007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.414277][ T7050] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 138.459573][ T7007] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.497137][ T7047] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 138.634849][ T7047] netlink: zone id is out of range [ 138.651137][ T7047] netlink: zone id is out of range [ 138.678782][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.854361][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 139.106263][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.325195][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.675991][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.339'. [ 139.721301][ T7096] netlink: 'syz.4.338': attribute type 39 has an invalid length. [ 140.177011][ T7111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.317527][ T7118] openvswitch: netlink: IP tunnel dst address not specified [ 140.357867][ T7111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.473808][ T7111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.531467][ T7124] netlink: 264 bytes leftover after parsing attributes in process `syz.2.347'. [ 140.626680][ T7111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.921763][ T7135] netlink: 'syz.4.349': attribute type 303 has an invalid length. [ 141.241876][ T7142] netlink: 'syz.3.354': attribute type 32 has an invalid length. [ 141.272768][ T7111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.297852][ T7111] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.313947][ T7142] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 141.350732][ T7111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.396309][ T7111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.406796][ T7127] syz.4.349 (7127) used greatest stack depth: 18168 bytes left [ 141.441659][ T7142] nbd: couldn't find a device at index 135 [ 141.694863][ T7164] __nla_validate_parse: 3 callbacks suppressed [ 141.694882][ T7164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.361'. [ 141.711231][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'. [ 141.745522][ T7166] netlink: 'syz.0.359': attribute type 39 has an invalid length. [ 141.802865][ T7167] netlink: 'syz.3.361': attribute type 39 has an invalid length. [ 141.877457][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 142.035904][ T7168] pim6reg1: entered promiscuous mode [ 142.050483][ T7168] pim6reg1: entered allmulticast mode [ 142.258288][ T7176] pim6reg1: entered promiscuous mode [ 142.279142][ T7176] pim6reg1: entered allmulticast mode [ 142.622658][ T7186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 142.665535][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.101087][ T52] IPVS: starting estimator thread 0... [ 143.111305][ T7203] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.209316][ T7205] IPVS: using max 28 ests per chain, 67200 per kthread [ 143.221691][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'. [ 143.344972][ T7212] FAULT_INJECTION: forcing a failure. [ 143.344972][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.387274][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.4.373 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 143.387302][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.387314][ T7212] Call Trace: [ 143.387321][ T7212] [ 143.387330][ T7212] dump_stack_lvl+0x189/0x250 [ 143.387361][ T7212] ? __lock_acquire+0xaac/0xd20 [ 143.387392][ T7212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.387421][ T7212] ? __pfx__printk+0x10/0x10 [ 143.387440][ T7212] ? __might_fault+0xb0/0x130 [ 143.387477][ T7212] should_fail_ex+0x414/0x560 [ 143.387502][ T7212] _copy_from_user+0x2d/0xb0 [ 143.387529][ T7212] ___sys_recvmsg+0x12e/0x510 [ 143.387564][ T7212] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.387625][ T7212] ? __might_fault+0xb0/0x130 [ 143.387653][ T7212] do_recvmmsg+0x307/0x760 [ 143.387692][ T7212] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.387733][ T7212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.387772][ T7212] __x64_sys_recvmmsg+0x190/0x240 [ 143.387800][ T7212] ? rcu_is_watching+0x15/0xb0 [ 143.387830][ T7212] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.387868][ T7212] ? do_syscall_64+0xba/0x210 [ 143.387890][ T7212] do_syscall_64+0xf6/0x210 [ 143.387910][ T7212] ? clear_bhb_loop+0x45/0xa0 [ 143.387934][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.387952][ T7212] RIP: 0033:0x7effb218e969 [ 143.387970][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.387987][ T7212] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.388008][ T7212] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 143.388022][ T7212] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 143.388033][ T7212] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.388044][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.388055][ T7212] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 143.388093][ T7212] [ 143.951024][ T7229] netlink: zone id is out of range [ 143.971712][ T7229] netlink: zone id is out of range [ 143.977225][ T7229] netlink: set zone limit has 8 unknown bytes [ 144.133641][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.380'. [ 144.158934][ T7231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.378'. [ 144.172373][ T7235] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 144.300183][ T7240] FAULT_INJECTION: forcing a failure. [ 144.300183][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 144.366597][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.1.381 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 144.366625][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.366637][ T7240] Call Trace: [ 144.366645][ T7240] [ 144.366654][ T7240] dump_stack_lvl+0x189/0x250 [ 144.366691][ T7240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.366721][ T7240] ? __pfx__printk+0x10/0x10 [ 144.366738][ T7240] ? __local_bh_enable_ip+0x12d/0x1c0 [ 144.366767][ T7240] ? sctp_get_port_local+0xe4c/0x1610 [ 144.366799][ T7240] should_fail_ex+0x414/0x560 [ 144.366826][ T7240] should_failslab+0xa8/0x100 [ 144.366855][ T7240] __kmalloc_cache_noprof+0x70/0x3d0 [ 144.366880][ T7240] ? sctp_add_bind_addr+0x8c/0x370 [ 144.366905][ T7240] sctp_add_bind_addr+0x8c/0x370 [ 144.366924][ T7240] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 144.366955][ T7240] sctp_do_bind+0x5ab/0x940 [ 144.366996][ T7240] sctp_connect_new_asoc+0x25c/0x690 [ 144.367034][ T7240] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 144.367060][ T7240] ? __local_bh_enable_ip+0x12d/0x1c0 [ 144.367084][ T7240] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 144.367108][ T7240] ? security_sctp_bind_connect+0x7e/0x2e0 [ 144.367142][ T7240] sctp_sendmsg+0x155c/0x2810 [ 144.367181][ T7240] ? __pfx_sctp_sendmsg+0x10/0x10 [ 144.367211][ T7240] ? aa_sk_perm+0x81e/0x950 [ 144.367235][ T7240] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.367264][ T7240] ? sock_rps_record_flow+0x19/0x410 [ 144.367287][ T7240] ? inet_sendmsg+0x2f4/0x370 [ 144.367310][ T7240] __sock_sendmsg+0x19c/0x270 [ 144.367335][ T7240] ____sys_sendmsg+0x52d/0x830 [ 144.367370][ T7240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.367408][ T7240] ? import_iovec+0x74/0xa0 [ 144.367440][ T7240] ___sys_sendmsg+0x21f/0x2a0 [ 144.367470][ T7240] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.367539][ T7240] ? __fget_files+0x2a/0x420 [ 144.367564][ T7240] ? __fget_files+0x3a0/0x420 [ 144.367602][ T7240] __sys_sendmmsg+0x227/0x430 [ 144.367636][ T7240] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.367675][ T7240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.367717][ T7240] ? ksys_write+0x1f0/0x250 [ 144.367738][ T7240] ? rcu_is_watching+0x15/0xb0 [ 144.367780][ T7240] __x64_sys_sendmmsg+0xa0/0xc0 [ 144.367811][ T7240] do_syscall_64+0xf6/0x210 [ 144.367832][ T7240] ? clear_bhb_loop+0x45/0xa0 [ 144.367857][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.367880][ T7240] RIP: 0033:0x7fe8a278e969 [ 144.367897][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.367912][ T7240] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.367933][ T7240] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 144.367946][ T7240] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000003 [ 144.367958][ T7240] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 144.367970][ T7240] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 144.367981][ T7240] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 144.368020][ T7240] [ 144.938154][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 145.315282][ T7257] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.323854][ T7257] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.332693][ T7257] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.341167][ T7257] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.672838][ T7274] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 145.797682][ T7277] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 145.895864][ T7279] FAULT_INJECTION: forcing a failure. [ 145.895864][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 145.913207][ T7279] CPU: 1 UID: 0 PID: 7279 Comm: syz.1.393 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 145.913236][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.913249][ T7279] Call Trace: [ 145.913257][ T7279] [ 145.913266][ T7279] dump_stack_lvl+0x189/0x250 [ 145.913304][ T7279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.913334][ T7279] ? __pfx__printk+0x10/0x10 [ 145.913354][ T7279] ? __local_bh_enable_ip+0x12d/0x1c0 [ 145.913373][ T7279] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 145.913393][ T7279] ? ipt_do_table+0x13dd/0x1610 [ 145.913422][ T7279] should_fail_ex+0x414/0x560 [ 145.913448][ T7279] should_failslab+0xa8/0x100 [ 145.913477][ T7279] __kmalloc_noprof+0xcb/0x4f0 [ 145.913501][ T7279] ? ___neigh_create+0x6d5/0x2260 [ 145.913528][ T7279] ___neigh_create+0x6d5/0x2260 [ 145.913575][ T7279] ip_neigh_gw4+0x289/0x3b0 [ 145.913597][ T7279] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 145.913617][ T7279] ? __lock_acquire+0xaac/0xd20 [ 145.913651][ T7279] ip_finish_output2+0x57a/0x1160 [ 145.913676][ T7279] ? skb_gso_transport_seglen+0x33d/0x520 [ 145.913704][ T7279] ? ip_finish_output2+0x452/0x1160 [ 145.913730][ T7279] ? ip_skb_dst_mtu+0x147/0xc50 [ 145.913759][ T7279] ? __pfx_ip_finish_output2+0x10/0x10 [ 145.913778][ T7279] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 145.913811][ T7279] ? __ip_finish_output+0x1a6/0x3f0 [ 145.913833][ T7279] ip_send_skb+0x74/0x100 [ 145.913865][ T7279] udp_send_skb+0xaf1/0x14c0 [ 145.913906][ T7279] udp_sendmsg+0x6ca/0x22e0 [ 145.913926][ T7279] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 145.913968][ T7279] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 145.913999][ T7279] ? __pfx_udp_sendmsg+0x10/0x10 [ 145.914052][ T7279] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.914069][ T7279] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 145.914098][ T7279] ? sock_rps_record_flow+0x19/0x410 [ 145.914122][ T7279] ? inet_sendmsg+0x29c/0x370 [ 145.914139][ T7279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.914166][ T7279] __sock_sendmsg+0x19c/0x270 [ 145.914190][ T7279] ____sys_sendmsg+0x505/0x830 [ 145.914225][ T7279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.914263][ T7279] ? import_iovec+0x74/0xa0 [ 145.914294][ T7279] ___sys_sendmsg+0x21f/0x2a0 [ 145.914325][ T7279] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.914393][ T7279] ? __fget_files+0x2a/0x420 [ 145.914417][ T7279] ? __fget_files+0x3a0/0x420 [ 145.914455][ T7279] __x64_sys_sendmsg+0x19b/0x260 [ 145.914486][ T7279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.914532][ T7279] ? do_syscall_64+0xba/0x210 [ 145.914557][ T7279] do_syscall_64+0xf6/0x210 [ 145.914578][ T7279] ? clear_bhb_loop+0x45/0xa0 [ 145.914602][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.914621][ T7279] RIP: 0033:0x7fe8a278e969 [ 145.914639][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.914655][ T7279] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.914676][ T7279] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 145.914691][ T7279] RDX: 0000000000040080 RSI: 00002000000009c0 RDI: 0000000000000009 [ 145.914703][ T7279] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 145.914722][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.914733][ T7279] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 145.914765][ T7279] [ 146.483344][ T7291] FAULT_INJECTION: forcing a failure. [ 146.483344][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 146.565608][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.4.396 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 146.565638][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.565649][ T7291] Call Trace: [ 146.565657][ T7291] [ 146.565666][ T7291] dump_stack_lvl+0x189/0x250 [ 146.565704][ T7291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.565734][ T7291] ? __pfx__printk+0x10/0x10 [ 146.565779][ T7291] should_fail_ex+0x414/0x560 [ 146.565809][ T7291] should_failslab+0xa8/0x100 [ 146.565838][ T7291] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 146.565865][ T7291] ? __alloc_skb+0x112/0x2d0 [ 146.565900][ T7291] __alloc_skb+0x112/0x2d0 [ 146.565930][ T7291] create_monitor_ctrl_event+0x38/0x480 [ 146.565956][ T7291] ? skb_put+0x11b/0x210 [ 146.565986][ T7291] mgmt_cmd_status+0x1cb/0x4c0 [ 146.566018][ T7291] add_adv_patterns_monitor+0x214/0x360 [ 146.566051][ T7291] hci_mgmt_cmd+0x9c6/0xef0 [ 146.566093][ T7291] hci_sock_sendmsg+0x6ca/0xee0 [ 146.566127][ T7291] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 146.566154][ T7291] ? aa_sock_msg_perm+0x94/0x160 [ 146.566178][ T7291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.566200][ T7291] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 146.566227][ T7291] __sock_sendmsg+0x219/0x270 [ 146.566253][ T7291] sock_write_iter+0x258/0x330 [ 146.566275][ T7291] ? __pfx_sock_write_iter+0x10/0x10 [ 146.566307][ T7291] ? bpf_lsm_file_permission+0x9/0x20 [ 146.566330][ T7291] ? security_file_permission+0x75/0x290 [ 146.566371][ T7291] vfs_write+0x548/0xa90 [ 146.566400][ T7291] ? __pfx_sock_write_iter+0x10/0x10 [ 146.566419][ T7291] ? __pfx_vfs_write+0x10/0x10 [ 146.566454][ T7291] ? __fget_files+0x2a/0x420 [ 146.566491][ T7291] ksys_write+0x145/0x250 [ 146.566512][ T7291] ? rcu_is_watching+0x15/0xb0 [ 146.566542][ T7291] ? __pfx_ksys_write+0x10/0x10 [ 146.566568][ T7291] ? do_syscall_64+0xba/0x210 [ 146.566593][ T7291] do_syscall_64+0xf6/0x210 [ 146.566614][ T7291] ? clear_bhb_loop+0x45/0xa0 [ 146.566639][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.566658][ T7291] RIP: 0033:0x7effb218e969 [ 146.566675][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.566691][ T7291] RSP: 002b:00007effafff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.566712][ T7291] RAX: ffffffffffffffda RBX: 00007effb23b5fa0 RCX: 00007effb218e969 [ 146.566726][ T7291] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000006 [ 146.566738][ T7291] RBP: 00007effafff6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.566750][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.566761][ T7291] R13: 0000000000000000 R14: 00007effb23b5fa0 R15: 00007ffdb86eaad8 [ 146.566792][ T7291] [ 146.578447][ T7282] netlink: 248 bytes leftover after parsing attributes in process `syz.2.394'. [ 147.331906][ T7309] pim6reg1: entered promiscuous mode [ 147.337269][ T7309] pim6reg1: entered allmulticast mode [ 147.841529][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.402'. [ 148.190977][ T7340] netlink: 'syz.0.406': attribute type 39 has an invalid length. [ 148.419033][ T7346] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 148.469261][ T7345] netlink: 100 bytes leftover after parsing attributes in process `syz.2.408'. [ 148.494368][ T7345] netlink: 100 bytes leftover after parsing attributes in process `syz.2.408'. [ 148.729795][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 148.741260][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 149.199257][ T7377] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 149.281453][ T7382] xt_cluster: node mask cannot exceed total number of nodes [ 149.687503][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 150.216317][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 150.300161][ T7418] netlink: 'syz.4.426': attribute type 39 has an invalid length. [ 150.367708][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 150.390792][ T7423] bridge_slave_1: left allmulticast mode [ 150.396500][ T7423] bridge_slave_1: left promiscuous mode [ 150.414888][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.449545][ T7423] bridge_slave_0: left allmulticast mode [ 150.455268][ T7423] bridge_slave_0: left promiscuous mode [ 150.464365][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.566817][ T7420] smc: net device bond0 applied user defined pnetid SYZ0 [ 150.618342][ T7414] smc: net device bond0 erased user defined pnetid SYZ0 [ 150.827041][ T7439] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 151.539143][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 151.823389][ T7471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 151.949134][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.022062][ T7481] netlink: 'syz.2.439': attribute type 39 has an invalid length. [ 152.166167][ T7483] openvswitch: netlink: IP tunnel dst address not specified [ 152.375398][ T7490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.488323][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 152.563248][ T7465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.664685][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.750802][ T7484] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 152.771751][ T7484] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 152.950802][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.446'. [ 153.232599][ T7519] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 153.312948][ T7519] netlink: 'syz.2.451': attribute type 11 has an invalid length. [ 153.596828][ T7534] netlink: 'syz.2.455': attribute type 39 has an invalid length. [ 153.635619][ T7536] netlink: 264 bytes leftover after parsing attributes in process `syz.4.456'. [ 153.863200][ T7540] 8021q: VLANs not supported on ip6tnl0 [ 153.881238][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 153.922471][ T7546] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 153.937126][ T7546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.462'. [ 154.069165][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.464'. [ 154.107399][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 154.216953][ T7556] FAULT_INJECTION: forcing a failure. [ 154.216953][ T7556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.242477][ T7556] CPU: 1 UID: 0 PID: 7556 Comm: syz.4.463 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 154.242507][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.242519][ T7556] Call Trace: [ 154.242527][ T7556] [ 154.242536][ T7556] dump_stack_lvl+0x189/0x250 [ 154.242572][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.242600][ T7556] ? __pfx__printk+0x10/0x10 [ 154.242633][ T7556] should_fail_ex+0x414/0x560 [ 154.242658][ T7556] _copy_to_user+0x31/0xb0 [ 154.242689][ T7556] simple_read_from_buffer+0xe1/0x170 [ 154.242720][ T7556] proc_fail_nth_read+0x1df/0x250 [ 154.242752][ T7556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.242784][ T7556] ? rw_verify_area+0x258/0x650 [ 154.242806][ T7556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.242836][ T7556] vfs_read+0x1fd/0x980 [ 154.242864][ T7556] ? __pfx___mutex_lock+0x10/0x10 [ 154.242886][ T7556] ? __pfx_vfs_read+0x10/0x10 [ 154.242910][ T7556] ? __fget_files+0x2a/0x420 [ 154.242940][ T7556] ? __fget_files+0x3a0/0x420 [ 154.242965][ T7556] ? __fget_files+0x2a/0x420 [ 154.243000][ T7556] ksys_read+0x145/0x250 [ 154.243021][ T7556] ? rcu_is_watching+0x15/0xb0 [ 154.243052][ T7556] ? __pfx_ksys_read+0x10/0x10 [ 154.243077][ T7556] ? do_syscall_64+0xba/0x210 [ 154.243102][ T7556] do_syscall_64+0xf6/0x210 [ 154.243130][ T7556] ? clear_bhb_loop+0x45/0xa0 [ 154.243156][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.243176][ T7556] RIP: 0033:0x7effb218d37c [ 154.243193][ T7556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.243211][ T7556] RSP: 002b:00007effaffd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.243231][ T7556] RAX: ffffffffffffffda RBX: 00007effb23b6080 RCX: 00007effb218d37c [ 154.243244][ T7556] RDX: 000000000000000f RSI: 00007effaffd50a0 RDI: 0000000000000005 [ 154.243256][ T7556] RBP: 00007effaffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 154.243267][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.243278][ T7556] R13: 0000000000000001 R14: 00007effb23b6080 R15: 00007ffdb86eaad8 [ 154.243307][ T7556] [ 154.250400][ T7561] FAULT_INJECTION: forcing a failure. [ 154.250400][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 154.559742][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.1.466 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 154.559771][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.559783][ T7561] Call Trace: [ 154.559791][ T7561] [ 154.559800][ T7561] dump_stack_lvl+0x189/0x250 [ 154.559837][ T7561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.559867][ T7561] ? __pfx__printk+0x10/0x10 [ 154.559891][ T7561] ? __pfx___might_resched+0x10/0x10 [ 154.559910][ T7561] ? fs_reclaim_acquire+0x7d/0x100 [ 154.559945][ T7561] should_fail_ex+0x414/0x560 [ 154.559971][ T7561] should_failslab+0xa8/0x100 [ 154.559999][ T7561] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 154.560026][ T7561] ? __kernfs_new_node+0x9c/0x7f0 [ 154.560068][ T7561] ? is_bpf_text_address+0x292/0x2b0 [ 154.560100][ T7561] kstrdup+0x42/0x100 [ 154.560123][ T7561] __kernfs_new_node+0x9c/0x7f0 [ 154.560153][ T7561] ? __lock_acquire+0xaac/0xd20 [ 154.560187][ T7561] ? __pfx___kernfs_new_node+0x10/0x10 [ 154.560217][ T7561] ? kernfs_root+0x1c/0x230 [ 154.560251][ T7561] ? kernfs_root+0x1c/0x230 [ 154.560277][ T7561] ? kernfs_root+0x1c/0x230 [ 154.560301][ T7561] ? kernfs_root+0x1c/0x230 [ 154.560333][ T7561] kernfs_new_node+0x102/0x210 [ 154.560367][ T7561] kernfs_create_dir_ns+0x44/0x130 [ 154.560402][ T7561] sysfs_create_dir_ns+0x123/0x280 [ 154.560432][ T7561] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 154.560461][ T7561] ? do_raw_spin_unlock+0x122/0x240 [ 154.560490][ T7561] kobject_add_internal+0x59f/0xb40 [ 154.560522][ T7561] kobject_add+0x155/0x220 [ 154.560550][ T7561] ? __pfx_kobject_add+0x10/0x10 [ 154.560579][ T7561] ? get_device_parent+0x366/0x3a0 [ 154.560608][ T7561] device_add+0x408/0xb50 [ 154.560630][ T7561] ? device_initialize+0x24b/0x440 [ 154.560655][ T7561] netdev_register_kobject+0x156/0x2f0 [ 154.560691][ T7561] register_netdevice+0x126c/0x1ae0 [ 154.560743][ T7561] ? __pfx_register_netdevice+0x10/0x10 [ 154.560777][ T7561] ? __asan_memset+0x22/0x50 [ 154.560797][ T7561] ? dev_addr_mod+0x2ce/0x3d0 [ 154.560831][ T7561] ip6gre_newlink_common+0x3dd/0x590 [ 154.560864][ T7561] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 154.560891][ T7561] ? lockdep_rtnl_is_held+0x26/0x40 [ 154.560919][ T7561] ? ip6gre_tunnel_find+0x501/0x5a0 [ 154.560959][ T7561] ip6gre_newlink+0x228/0x360 [ 154.560985][ T7561] ? __pfx_ip6gre_newlink+0x10/0x10 [ 154.561012][ T7561] rtnl_newlink_create+0x30d/0xb00 [ 154.561051][ T7561] ? __pfx_aa_get_newest_label+0x10/0x10 [ 154.561077][ T7561] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 154.561101][ T7561] ? rtnl_newlink+0x8db/0x1c70 [ 154.561126][ T7561] ? __pfx___mutex_lock+0x10/0x10 [ 154.561158][ T7561] ? ns_capable+0x8a/0xf0 [ 154.561181][ T7561] rtnl_newlink+0x16d6/0x1c70 [ 154.561221][ T7561] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.561245][ T7561] ? is_bpf_text_address+0x26/0x2b0 [ 154.561278][ T7561] ? is_bpf_text_address+0x292/0x2b0 [ 154.561312][ T7561] ? __lock_acquire+0xaac/0xd20 [ 154.561359][ T7561] ? __lock_acquire+0xaac/0xd20 [ 154.561407][ T7561] ? is_bpf_text_address+0x26/0x2b0 [ 154.561439][ T7561] ? is_bpf_text_address+0x292/0x2b0 [ 154.561466][ T7561] ? is_bpf_text_address+0x26/0x2b0 [ 154.561501][ T7561] ? aa_get_newest_label+0xf7/0x5d0 [ 154.561526][ T7561] ? __lock_acquire+0xaac/0xd20 [ 154.561579][ T7561] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.561602][ T7561] rtnetlink_rcv_msg+0x7cc/0xb70 [ 154.561625][ T7561] ? kasan_save_track+0x4f/0x80 [ 154.561649][ T7561] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 154.561671][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.561695][ T7561] ? __lock_acquire+0xaac/0xd20 [ 154.561737][ T7561] netlink_rcv_skb+0x219/0x490 [ 154.561762][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.561787][ T7561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.561833][ T7561] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.561855][ T7561] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.561885][ T7561] netlink_unicast+0x758/0x8d0 [ 154.561920][ T7561] netlink_sendmsg+0x805/0xb30 [ 154.561955][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.561983][ T7561] ? aa_sock_msg_perm+0x94/0x160 [ 154.562006][ T7561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.562027][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.562058][ T7561] __sock_sendmsg+0x219/0x270 [ 154.562082][ T7561] ____sys_sendmsg+0x505/0x830 [ 154.562116][ T7561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.562154][ T7561] ? import_iovec+0x74/0xa0 [ 154.562186][ T7561] ___sys_sendmsg+0x21f/0x2a0 [ 154.562216][ T7561] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.562284][ T7561] ? __fget_files+0x2a/0x420 [ 154.562308][ T7561] ? __fget_files+0x3a0/0x420 [ 154.562345][ T7561] __x64_sys_sendmsg+0x19b/0x260 [ 154.562376][ T7561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.562423][ T7561] ? do_syscall_64+0xba/0x210 [ 154.562447][ T7561] do_syscall_64+0xf6/0x210 [ 154.562468][ T7561] ? clear_bhb_loop+0x45/0xa0 [ 154.562492][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.562511][ T7561] RIP: 0033:0x7fe8a278e969 [ 154.562529][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.562546][ T7561] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.562567][ T7561] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 154.562582][ T7561] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 154.562595][ T7561] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 154.562606][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.562618][ T7561] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 154.562650][ T7561] [ 154.563686][ T7561] kobject: kobject_add_internal failed for ip6gretap2 (error: -12 parent: net) [ 155.373014][ T7579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.595388][ T7598] netlink: 264 bytes leftover after parsing attributes in process `syz.1.477'. [ 155.703333][ T7598] FAULT_INJECTION: forcing a failure. [ 155.703333][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 155.748728][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 155.770377][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 155.785785][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 155.818123][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.1.477 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 155.818154][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.818166][ T7598] Call Trace: [ 155.818174][ T7598] [ 155.818183][ T7598] dump_stack_lvl+0x189/0x250 [ 155.818221][ T7598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.818251][ T7598] ? __pfx__printk+0x10/0x10 [ 155.818274][ T7598] ? __pfx___might_resched+0x10/0x10 [ 155.818293][ T7598] ? fs_reclaim_acquire+0x7d/0x100 [ 155.818328][ T7598] should_fail_ex+0x414/0x560 [ 155.818354][ T7598] ? nf_hook_entries_grow+0x27c/0x6d0 [ 155.818375][ T7598] should_failslab+0xa8/0x100 [ 155.818403][ T7598] __kvmalloc_node_noprof+0x168/0x5e0 [ 155.818430][ T7598] ? nf_hook_entries_grow+0x27c/0x6d0 [ 155.818451][ T7598] ? __pfx___mutex_lock+0x10/0x10 [ 155.818475][ T7598] nf_hook_entries_grow+0x27c/0x6d0 [ 155.818515][ T7598] __nf_register_net_hook+0x2c9/0x930 [ 155.818551][ T7598] nf_register_net_hook+0xb2/0x190 [ 155.818577][ T7598] nf_register_net_hooks+0x44/0x1b0 [ 155.818604][ T7598] ip_vs_register_hooks+0xc8/0x140 [ 155.818631][ T7598] ip_vs_add_service+0x2c5/0x1340 [ 155.818673][ T7598] ? rcu_read_unlock+0x87/0xa0 [ 155.818707][ T7598] do_ip_vs_set_ctl+0x7f2/0xa60 [ 155.818742][ T7598] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 155.818769][ T7598] ? rcu_is_watching+0x15/0xb0 [ 155.818818][ T7598] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 155.818846][ T7598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.818865][ T7598] ? aa_sk_perm+0x81e/0x950 [ 155.818888][ T7598] ? vfs_write+0x8d8/0xa90 [ 155.818910][ T7598] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.818929][ T7598] ? kasan_quarantine_put+0xdd/0x220 [ 155.818958][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.819002][ T7598] nf_setsockopt+0x26c/0x290 [ 155.819031][ T7598] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.819058][ T7598] do_sock_setsockopt+0x257/0x3e0 [ 155.819088][ T7598] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 155.819123][ T7598] ? ksys_write+0x1e1/0x250 [ 155.819154][ T7598] __x64_sys_setsockopt+0x18b/0x220 [ 155.819187][ T7598] do_syscall_64+0xf6/0x210 [ 155.819208][ T7598] ? asm_sysvec_call_function_single+0x1a/0x20 [ 155.819229][ T7598] ? clear_bhb_loop+0x45/0xa0 [ 155.819253][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.819272][ T7598] RIP: 0033:0x7fe8a278e969 [ 155.819290][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.819306][ T7598] RSP: 002b:00007fe8a3575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.819327][ T7598] RAX: ffffffffffffffda RBX: 00007fe8a29b6080 RCX: 00007fe8a278e969 [ 155.819342][ T7598] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000a [ 155.819353][ T7598] RBP: 00007fe8a3575090 R08: 000000000000002c R09: 0000000000000000 [ 155.819366][ T7598] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 155.819378][ T7598] R13: 0000000000000000 R14: 00007fe8a29b6080 R15: 00007ffce8e3c868 [ 155.819411][ T7598] [ 156.406551][ T7594] syzkaller1: entered promiscuous mode [ 156.428128][ T7594] syzkaller1: entered allmulticast mode [ 156.675079][ T7613] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.955925][ T7631] netlink: 264 bytes leftover after parsing attributes in process `syz.0.486'. [ 157.099145][ T5892] IPVS: starting estimator thread 0... [ 157.208034][ T7634] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.686185][ T7654] netlink: 'syz.2.493': attribute type 39 has an invalid length. [ 157.839314][ T7656] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 158.386208][ T7668] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 158.984145][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.615963][ T7705] __nla_validate_parse: 3 callbacks suppressed [ 159.615988][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 159.689689][ T7705] FAULT_INJECTION: forcing a failure. [ 159.689689][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.718490][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.1.511 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 159.718520][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.718532][ T7705] Call Trace: [ 159.718540][ T7705] [ 159.718548][ T7705] dump_stack_lvl+0x189/0x250 [ 159.718584][ T7705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.718613][ T7705] ? __pfx__printk+0x10/0x10 [ 159.718645][ T7705] should_fail_ex+0x414/0x560 [ 159.718689][ T7705] _copy_from_user+0x2d/0xb0 [ 159.718717][ T7705] vmemdup_user+0x59/0xd0 [ 159.718743][ T7705] map_lookup_and_delete_elem+0x349/0x870 [ 159.718775][ T7705] ? bpf_lsm_bpf+0x9/0x20 [ 159.718807][ T7705] __sys_bpf+0x4ca/0x860 [ 159.718833][ T7705] ? __pfx___sys_bpf+0x10/0x10 [ 159.718884][ T7705] ? ksys_write+0x1f0/0x250 [ 159.718904][ T7705] ? rcu_is_watching+0x15/0xb0 [ 159.718962][ T7705] __x64_sys_bpf+0x7c/0x90 [ 159.718994][ T7705] do_syscall_64+0xf6/0x210 [ 159.719015][ T7705] ? clear_bhb_loop+0x45/0xa0 [ 159.719040][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.719059][ T7705] RIP: 0033:0x7fe8a278e969 [ 159.719076][ T7705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.719093][ T7705] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.719114][ T7705] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 159.719128][ T7705] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 159.719141][ T7705] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 159.719154][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.719166][ T7705] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 159.719197][ T7705] [ 159.719441][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 160.099417][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 160.101875][ T7719] netlink: 'syz.4.516': attribute type 5 has an invalid length. [ 160.135756][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 160.181427][ T7708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 160.208674][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 160.251936][ T7721] netlink: 'syz.1.517': attribute type 4 has an invalid length. [ 160.771881][ T7736] netlink: 'syz.1.522': attribute type 7 has an invalid length. [ 161.071555][ T7740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 161.072299][ T7744] FAULT_INJECTION: forcing a failure. [ 161.072299][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 161.149075][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.3.526 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 161.149105][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.149118][ T7744] Call Trace: [ 161.149126][ T7744] [ 161.149135][ T7744] dump_stack_lvl+0x189/0x250 [ 161.149174][ T7744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.149204][ T7744] ? __pfx__printk+0x10/0x10 [ 161.149220][ T7744] ? __mutex_trylock_common+0x153/0x260 [ 161.149245][ T7744] ? __pfx___mutex_trylock_common+0x10/0x10 [ 161.149277][ T7744] should_fail_ex+0x414/0x560 [ 161.149303][ T7744] should_failslab+0xa8/0x100 [ 161.149332][ T7744] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 161.149359][ T7744] ? __alloc_skb+0x112/0x2d0 [ 161.149382][ T7744] ? hci_sock_sendmsg+0x549/0xee0 [ 161.149413][ T7744] __alloc_skb+0x112/0x2d0 [ 161.149442][ T7744] hci_mgmt_cmd+0x1ca/0xef0 [ 161.149469][ T7744] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.149502][ T7744] hci_sock_sendmsg+0x6ca/0xee0 [ 161.149536][ T7744] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 161.149563][ T7744] ? aa_sock_msg_perm+0x94/0x160 [ 161.149598][ T7744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.149621][ T7744] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 161.149649][ T7744] __sock_sendmsg+0x219/0x270 [ 161.149674][ T7744] sock_write_iter+0x258/0x330 [ 161.149696][ T7744] ? __pfx_sock_write_iter+0x10/0x10 [ 161.149728][ T7744] ? bpf_lsm_file_permission+0x9/0x20 [ 161.149752][ T7744] ? security_file_permission+0x75/0x290 [ 161.149792][ T7744] vfs_write+0x548/0xa90 [ 161.149820][ T7744] ? __pfx_sock_write_iter+0x10/0x10 [ 161.149840][ T7744] ? __pfx_vfs_write+0x10/0x10 [ 161.149876][ T7744] ? __fget_files+0x2a/0x420 [ 161.149912][ T7744] ksys_write+0x145/0x250 [ 161.149934][ T7744] ? rcu_is_watching+0x15/0xb0 [ 161.149966][ T7744] ? __pfx_ksys_write+0x10/0x10 [ 161.149992][ T7744] ? do_syscall_64+0xba/0x210 [ 161.150018][ T7744] do_syscall_64+0xf6/0x210 [ 161.150039][ T7744] ? clear_bhb_loop+0x45/0xa0 [ 161.150063][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.150083][ T7744] RIP: 0033:0x7efc0138e969 [ 161.150101][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.150118][ T7744] RSP: 002b:00007efc02127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.150140][ T7744] RAX: ffffffffffffffda RBX: 00007efc015b5fa0 RCX: 00007efc0138e969 [ 161.150155][ T7744] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004 [ 161.150167][ T7744] RBP: 00007efc02127090 R08: 0000000000000000 R09: 0000000000000000 [ 161.150179][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.150191][ T7744] R13: 0000000000000000 R14: 00007efc015b5fa0 R15: 00007fff7854dbb8 [ 161.150224][ T7744] [ 161.519173][ T7739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.562626][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 161.742320][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 162.098094][ T7778] tipc: Started in network mode [ 162.114165][ T7778] tipc: Node identity , cluster identity 4711 [ 162.139086][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 162.139170][ T7778] tipc: Failed to obtain node identity [ 162.158622][ T7778] tipc: Enabling of bearer rejected, failed to enable media [ 162.718640][ T7781] team0: left promiscuous mode [ 162.723674][ T7781] team_slave_0: left promiscuous mode [ 162.748207][ T7781] team_slave_1: left promiscuous mode [ 163.162095][ T7809] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 163.233005][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 163.766317][ T7836] netlink: 'syz.1.553': attribute type 11 has an invalid length. [ 164.753703][ T7871] openvswitch: netlink: IP tunnel dst address not specified [ 165.001132][ T7875] netlink: 'syz.0.563': attribute type 7 has an invalid length. [ 165.030859][ T7875] __nla_validate_parse: 4 callbacks suppressed [ 165.030878][ T7875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.563'. [ 165.461628][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 165.486792][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 165.967703][ T7912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 166.635192][ T7929] netlink: 27 bytes leftover after parsing attributes in process `syz.4.574'. [ 166.777488][ T55] block nbd0: Receive control failed (result -32) [ 166.803013][ T7932] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 166.951389][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.578'. [ 167.123289][ T55] Bluetooth: hci2: link tx timeout [ 167.129076][ T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.306193][ T7950] 8021q: VLANs not supported on ip6tnl0 [ 167.394191][ T7955] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.651609][ T7968] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 168.272445][ T7985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 168.328683][ T7983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.839761][ T8005] netlink: 816 bytes leftover after parsing attributes in process `syz.4.602'. [ 169.072927][ T8014] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 169.198134][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 169.449640][ T8031] netlink: 'syz.4.610': attribute type 4 has an invalid length. [ 169.483620][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 170.067447][ T8054] netlink: 'syz.2.617': attribute type 4 has an invalid length. [ 170.211494][ T8061] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 170.246228][ T8064] netlink: 'syz.4.618': attribute type 39 has an invalid length. [ 170.388945][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 170.389890][ T8068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.622'. [ 170.403422][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 170.437762][ T8071] netlink: 88 bytes leftover after parsing attributes in process `syz.0.622'. [ 170.870065][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 170.899014][ T8093] ipip0: entered promiscuous mode [ 170.904153][ T8093] ipip0: entered allmulticast mode [ 170.946119][ T8095] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 170.992817][ T8099] netlink: 72 bytes leftover after parsing attributes in process `syz.0.631'. [ 171.044706][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 171.090964][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.134647][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.266877][ T8098] syzkaller0: entered promiscuous mode [ 171.291443][ T8098] syzkaller0: entered allmulticast mode [ 172.455317][ T8111] netlink: 'syz.2.636': attribute type 7 has an invalid length. [ 172.674775][ T8115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.017233][ T8127] tipc: Started in network mode [ 173.022552][ T8127] tipc: Node identity 8a406aea3053, cluster identity 4711 [ 173.032630][ T8127] tipc: Enabled bearer , priority 0 [ 173.050690][ T8127] syzkaller0: entered promiscuous mode [ 173.059948][ T8130] netlink: 'syz.4.644': attribute type 39 has an invalid length. [ 173.069172][ T8127] syzkaller0: entered allmulticast mode [ 173.086457][ T8127] hsr0: entered promiscuous mode [ 173.103427][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 173.127554][ T8127] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 173.282290][ T8132] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 173.414967][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 173.442900][ T8143] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 173.466321][ T8144] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 173.631764][ T8144] netlink: 'syz.0.648': attribute type 39 has an invalid length. [ 173.754318][ T8139] netlink: 80 bytes leftover after parsing attributes in process `syz.0.648'. [ 173.770291][ T8153] openvswitch: netlink: IP tunnel dst address not specified [ 173.803092][ T8153] FAULT_INJECTION: forcing a failure. [ 173.803092][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 173.818820][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.1.654 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 173.818849][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.818867][ T8153] Call Trace: [ 173.818875][ T8153] [ 173.818883][ T8153] dump_stack_lvl+0x189/0x250 [ 173.818921][ T8153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.818950][ T8153] ? __pfx__printk+0x10/0x10 [ 173.818983][ T8153] ? __pfx___might_resched+0x10/0x10 [ 173.819001][ T8153] ? fs_reclaim_acquire+0x7d/0x100 [ 173.819034][ T8153] should_fail_ex+0x414/0x560 [ 173.819065][ T8153] should_failslab+0xa8/0x100 [ 173.819092][ T8153] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 173.819118][ T8153] ? __alloc_skb+0x112/0x2d0 [ 173.819147][ T8153] __alloc_skb+0x112/0x2d0 [ 173.819176][ T8153] netlink_ack+0x146/0xa50 [ 173.819197][ T8153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.819244][ T8153] netlink_rcv_skb+0x2a0/0x490 [ 173.819269][ T8153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.819299][ T8153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.819347][ T8153] ? down_read+0x1ad/0x2e0 [ 173.819370][ T8153] genl_rcv+0x28/0x40 [ 173.819397][ T8153] netlink_unicast+0x758/0x8d0 [ 173.819430][ T8153] netlink_sendmsg+0x805/0xb30 [ 173.819466][ T8153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.819495][ T8153] ? aa_sock_msg_perm+0x94/0x160 [ 173.819520][ T8153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.819542][ T8153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.819569][ T8153] __sock_sendmsg+0x219/0x270 [ 173.819593][ T8153] ____sys_sendmsg+0x505/0x830 [ 173.819627][ T8153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.819666][ T8153] ? import_iovec+0x74/0xa0 [ 173.819697][ T8153] ___sys_sendmsg+0x21f/0x2a0 [ 173.819728][ T8153] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.819796][ T8153] ? __fget_files+0x2a/0x420 [ 173.819821][ T8153] ? __fget_files+0x3a0/0x420 [ 173.819858][ T8153] __x64_sys_sendmsg+0x19b/0x260 [ 173.819889][ T8153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.819936][ T8153] ? do_syscall_64+0xba/0x210 [ 173.819971][ T8153] do_syscall_64+0xf6/0x210 [ 173.819992][ T8153] ? clear_bhb_loop+0x45/0xa0 [ 173.820017][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.820036][ T8153] RIP: 0033:0x7fe8a278e969 [ 173.820054][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.820071][ T8153] RSP: 002b:00007fe8a3596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.820092][ T8153] RAX: ffffffffffffffda RBX: 00007fe8a29b5fa0 RCX: 00007fe8a278e969 [ 173.820106][ T8153] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 173.820119][ T8153] RBP: 00007fe8a3596090 R08: 0000000000000000 R09: 0000000000000000 [ 173.820132][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.820144][ T8153] R13: 0000000000000000 R14: 00007fe8a29b5fa0 R15: 00007ffce8e3c868 [ 173.820175][ T8153] [ 174.149436][ T5853] tipc: Node number set to 3121834730 [ 174.439341][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.972496][ T8195] netlink: 'syz.3.667': attribute type 39 has an invalid length. [ 175.158670][ T8202] openvswitch: netlink: Flow key attr not present in new flow. [ 175.981401][ T8233] FAULT_INJECTION: forcing a failure. [ 175.981401][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.998126][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.0.681 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 175.998153][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.998166][ T8233] Call Trace: [ 175.998174][ T8233] [ 175.998183][ T8233] dump_stack_lvl+0x189/0x250 [ 175.998215][ T8233] ? __lock_acquire+0xaac/0xd20 [ 175.998246][ T8233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.998275][ T8233] ? __pfx__printk+0x10/0x10 [ 175.998295][ T8233] ? __might_fault+0xb0/0x130 [ 175.998332][ T8233] should_fail_ex+0x414/0x560 [ 175.998357][ T8233] _copy_from_user+0x2d/0xb0 [ 175.998386][ T8233] __sys_sendto+0x25c/0x520 [ 175.998414][ T8233] ? __pfx___sys_sendto+0x10/0x10 [ 175.998436][ T8233] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 175.998468][ T8233] ? __fget_files+0x3a0/0x420 [ 175.998505][ T8233] ? ksys_write+0x1f0/0x250 [ 175.998525][ T8233] ? rcu_is_watching+0x15/0xb0 [ 175.998564][ T8233] __x64_sys_sendto+0xde/0x100 [ 175.998593][ T8233] do_syscall_64+0xf6/0x210 [ 175.998613][ T8233] ? asm_sysvec_call_function_single+0x1a/0x20 [ 175.998633][ T8233] ? clear_bhb_loop+0x45/0xa0 [ 175.998657][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.998675][ T8233] RIP: 0033:0x7f21e958e969 [ 175.998694][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.998711][ T8233] RSP: 002b:00007f21ea388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.998732][ T8233] RAX: ffffffffffffffda RBX: 00007f21e97b5fa0 RCX: 00007f21e958e969 [ 175.998745][ T8233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.998765][ T8233] RBP: 00007f21ea388090 R08: 00002000000001c0 R09: 000000000000001c [ 175.998778][ T8233] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000001 [ 175.998791][ T8233] R13: 0000000000000000 R14: 00007f21e97b5fa0 R15: 00007ffd3178ff18 [ 175.998822][ T8233] [ 176.172206][ T8235] pim6reg1: entered promiscuous mode [ 176.388085][ T8235] pim6reg1: entered allmulticast mode [ 176.394035][ T8246] __nla_validate_parse: 10 callbacks suppressed [ 176.394053][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 176.495400][ T8246] ------------[ cut here ]------------ [ 176.501501][ T8246] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 176.586310][ T8246] WARNING: CPU: 0 PID: 8246 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 176.599549][ T8246] Modules linked in: [ 176.603723][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.0.682 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 176.615747][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.622935][ T8239] pim6reg1: entered promiscuous mode [ 176.625923][ T8246] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 176.638381][ T8246] Code: 71 17 00 00 48 c7 c7 60 f8 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 48 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 2d ec d7 fa 90 0f 0b 90 e9 fe fe ff [ 176.658327][ T8246] RSP: 0018:ffffc90005156fb0 EFLAGS: 00010282 [ 176.664464][ T8246] RAX: bdf3540220fb5200 RBX: 0000000000000014 RCX: 0000000000080000 [ 176.672558][ T8246] RDX: ffffc9000d50e000 RSI: 0000000000005821 RDI: 0000000000005822 [ 176.680682][ T8246] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 176.688824][ T8246] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 176.696954][ T8246] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 176.705043][ T8246] FS: 00007f21ea3676c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 176.714100][ T8246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.720862][ T8246] CR2: 00007fa1e8181000 CR3: 000000002ff00000 CR4: 00000000003526f0 [ 176.729043][ T8246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.737326][ T8246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.745419][ T8246] Call Trace: [ 176.748837][ T8246] [ 176.751812][ T8246] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 176.758020][ T8246] mac80211_hwsim_sta_add+0xa3/0x310 [ 176.763369][ T8246] drv_sta_state+0x8be/0x1840 [ 176.768188][ T8246] sta_info_insert_rcu+0xd32/0x1940 [ 176.773441][ T8246] ? sta_info_insert_rcu+0x2ce/0x1940 [ 176.779031][ T8246] sta_info_insert+0x16/0xc0 [ 176.783679][ T8246] rdev_add_station+0x105/0x290 [ 176.788671][ T8246] nl80211_new_station+0x1723/0x1b40 [ 176.794027][ T8246] ? __pfx_nl80211_new_station+0x10/0x10 [ 176.799775][ T8246] ? netdev_run_todo+0xe1d/0xea0 [ 176.804817][ T8246] ? nl80211_pre_doit+0x4f1/0x930 [ 176.810112][ T8246] genl_family_rcv_msg_doit+0x212/0x300 [ 176.815741][ T8246] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.816904][ T8239] pim6reg1: entered allmulticast mode [ 176.821917][ T8246] ? bpf_lsm_capable+0x9/0x20 [ 176.821957][ T8246] ? security_capable+0x7e/0x2e0 [ 176.821989][ T8246] genl_rcv_msg+0x60e/0x790 [ 176.822030][ T8246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.847061][ T8246] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 176.852576][ T8246] ? __pfx_nl80211_new_station+0x10/0x10 [ 176.858327][ T8246] ? __pfx_nl80211_post_doit+0x10/0x10 [ 176.863849][ T8246] ? ref_tracker_free+0x63a/0x7d0 [ 176.868986][ T8246] ? __copy_skb_header+0xa7/0x550 [ 176.874166][ T8246] netlink_rcv_skb+0x219/0x490 [ 176.879308][ T8246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.884497][ T8246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.889920][ T8246] ? down_read+0x1ad/0x2e0 [ 176.894389][ T8246] genl_rcv+0x28/0x40 [ 176.898512][ T8246] netlink_unicast+0x758/0x8d0 [ 176.903345][ T8246] netlink_sendmsg+0x805/0xb30 [ 176.908245][ T8246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.913593][ T8246] ? aa_sock_msg_perm+0x94/0x160 [ 176.918640][ T8246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.923971][ T8246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.929439][ T8246] __sock_sendmsg+0x219/0x270 [ 176.934215][ T8246] ____sys_sendmsg+0x505/0x830 [ 176.939433][ T8246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.944836][ T8246] ? import_iovec+0x74/0xa0 [ 176.949583][ T8246] ___sys_sendmsg+0x21f/0x2a0 [ 176.954339][ T8246] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.960231][ T8246] ? __fget_files+0x2a/0x420 [ 176.964910][ T8246] ? __fget_files+0x3a0/0x420 [ 176.969828][ T8246] __x64_sys_sendmsg+0x19b/0x260 [ 176.974845][ T8246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.980459][ T8246] do_syscall_64+0xf6/0x210 [ 176.985123][ T8246] ? clear_bhb_loop+0x45/0xa0 [ 176.989965][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.995908][ T8246] RIP: 0033:0x7f21e958e969 [ 177.000446][ T8246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.020241][ T8246] RSP: 002b:00007f21ea367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.028802][ T8246] RAX: ffffffffffffffda RBX: 00007f21e97b6080 RCX: 00007f21e958e969 [ 177.036821][ T8246] RDX: 0200000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 177.045073][ T8246] RBP: 00007f21e9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 177.053175][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.061271][ T8246] R13: 0000000000000000 R14: 00007f21e97b6080 R15: 00007ffd3178ff18 [ 177.069356][ T8246] [ 177.072433][ T8246] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.079765][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.0.682 Not tainted 6.15.0-rc5-syzkaller-01032-g6b466efc6365 #0 PREEMPT(full) [ 177.091722][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.101813][ T8246] Call Trace: [ 177.105111][ T8246] [ 177.108057][ T8246] dump_stack_lvl+0x99/0x250 [ 177.112671][ T8246] ? __asan_memcpy+0x40/0x70 [ 177.117301][ T8246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.122539][ T8246] ? __pfx__printk+0x10/0x10 [ 177.127254][ T8246] panic+0x2db/0x790 [ 177.131186][ T8246] ? __pfx_panic+0x10/0x10 [ 177.135645][ T8246] __warn+0x31b/0x4b0 [ 177.139667][ T8246] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 177.145791][ T8246] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 177.151890][ T8246] report_bug+0x2be/0x4f0 [ 177.156250][ T8246] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 177.162433][ T8246] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 177.168515][ T8246] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 177.174594][ T8246] handle_bug+0x84/0x160 [ 177.178859][ T8246] exc_invalid_op+0x1a/0x50 [ 177.183378][ T8246] asm_exc_invalid_op+0x1a/0x20 [ 177.188236][ T8246] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 177.194930][ T8246] Code: 71 17 00 00 48 c7 c7 60 f8 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 48 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 2d ec d7 fa 90 0f 0b 90 e9 fe fe ff [ 177.214559][ T8246] RSP: 0018:ffffc90005156fb0 EFLAGS: 00010282 [ 177.220650][ T8246] RAX: bdf3540220fb5200 RBX: 0000000000000014 RCX: 0000000000080000 [ 177.228642][ T8246] RDX: ffffc9000d50e000 RSI: 0000000000005821 RDI: 0000000000005822 [ 177.236643][ T8246] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 177.244634][ T8246] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 177.252623][ T8246] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 177.260631][ T8246] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 177.266729][ T8246] mac80211_hwsim_sta_add+0xa3/0x310 [ 177.272032][ T8246] drv_sta_state+0x8be/0x1840 [ 177.276734][ T8246] sta_info_insert_rcu+0xd32/0x1940 [ 177.281945][ T8246] ? sta_info_insert_rcu+0x2ce/0x1940 [ 177.287426][ T8246] sta_info_insert+0x16/0xc0 [ 177.292029][ T8246] rdev_add_station+0x105/0x290 [ 177.296899][ T8246] nl80211_new_station+0x1723/0x1b40 [ 177.302211][ T8246] ? __pfx_nl80211_new_station+0x10/0x10 [ 177.307851][ T8246] ? netdev_run_todo+0xe1d/0xea0 [ 177.312834][ T8246] ? nl80211_pre_doit+0x4f1/0x930 [ 177.317890][ T8246] genl_family_rcv_msg_doit+0x212/0x300 [ 177.323465][ T8246] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.329560][ T8246] ? bpf_lsm_capable+0x9/0x20 [ 177.334253][ T8246] ? security_capable+0x7e/0x2e0 [ 177.339203][ T8246] genl_rcv_msg+0x60e/0x790 [ 177.343728][ T8246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.348787][ T8246] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.354173][ T8246] ? __pfx_nl80211_new_station+0x10/0x10 [ 177.359816][ T8246] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.365291][ T8246] ? ref_tracker_free+0x63a/0x7d0 [ 177.370324][ T8246] ? __copy_skb_header+0xa7/0x550 [ 177.375374][ T8246] netlink_rcv_skb+0x219/0x490 [ 177.380156][ T8246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.385205][ T8246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.390543][ T8246] ? down_read+0x1ad/0x2e0 [ 177.395001][ T8246] genl_rcv+0x28/0x40 [ 177.399030][ T8246] netlink_unicast+0x758/0x8d0 [ 177.403834][ T8246] netlink_sendmsg+0x805/0xb30 [ 177.408630][ T8246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.413943][ T8246] ? aa_sock_msg_perm+0x94/0x160 [ 177.418920][ T8246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.424217][ T8246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.429622][ T8246] __sock_sendmsg+0x219/0x270 [ 177.434341][ T8246] ____sys_sendmsg+0x505/0x830 [ 177.439128][ T8246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.444439][ T8246] ? import_iovec+0x74/0xa0 [ 177.448964][ T8246] ___sys_sendmsg+0x21f/0x2a0 [ 177.453693][ T8246] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.458955][ T8246] ? __fget_files+0x2a/0x420 [ 177.463602][ T8246] ? __fget_files+0x3a0/0x420 [ 177.468347][ T8246] __x64_sys_sendmsg+0x19b/0x260 [ 177.473391][ T8246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.478928][ T8246] do_syscall_64+0xf6/0x210 [ 177.483463][ T8246] ? clear_bhb_loop+0x45/0xa0 [ 177.488164][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.494079][ T8246] RIP: 0033:0x7f21e958e969 [ 177.498513][ T8246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.518146][ T8246] RSP: 002b:00007f21ea367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.526589][ T8246] RAX: ffffffffffffffda RBX: 00007f21e97b6080 RCX: 00007f21e958e969 [ 177.534584][ T8246] RDX: 0200000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 177.542576][ T8246] RBP: 00007f21e9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 177.550571][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.558568][ T8246] R13: 0000000000000000 R14: 00007f21e97b6080 R15: 00007ffd3178ff18 [ 177.566574][ T8246] [ 177.569887][ T8246] Kernel Offset: disabled [ 177.574228][ T8246] Rebooting in 86400 seconds..