last executing test programs: 55.207960693s ago: executing program 0 (id=590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a27030000000000000000000000000000fdffffffffffffff0000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x2f, 0x5, 0x76, 0x1, 0x24, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x1, 0xffff, 0x8}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x82, &(0x7f0000000200), 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000003600000000010000000900010073797a300000000014000000020a050000000000000000000000000020000000030a01080000000000000000010000070900010073797a30"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001440)="ff365be403944daa48e607340e38", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 55.036181268s ago: executing program 0 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f4, 0x0, 0x0, 0x0, 0x1}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc6}}, @jmp={0x5, 0x1, 0xc, 0x7, 0xa, 0xffffffffffffffe0, 0x3}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x899, 0x47, &(0x7f0000000240)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='xprtrdma_post_recvs\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000540)={"e97f2f04ae56a7da607605faf07fae4a", 0x0, 0x0, {0xb3, 0x5}, {0x5, 0x6}, 0x6, [0x2, 0xa5bc, 0x9, 0x2, 0x1, 0x5, 0x8, 0xfffffffffffffe00, 0x7, 0x566b, 0xe, 0x7, 0x7, 0xffff, 0x3, 0x6]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000006c0)={0x0, 0x1000, 0x3fa}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000ac0)={{}, r3, 0xe, @inherit={0x58, &(0x7f0000000640)={0x0, 0x2, 0xa76, 0xb, {0x20, 0x7, 0x3, 0x6, 0x3}, [0x0, 0x8000]}}, @devid=r4}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x20010, r2, 0x6985b000) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000001ac0)={r6}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c00)={@map=0x1, 0x2, 0x0, 0xd6, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001b40)=[0x0, 0x0], &(0x7f0000001b80)=[0x0], &(0x7f0000001bc0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)={@fallback=r2, r1, 0x8, 0x14, 0x0, @void, @value=r1, @void, @void, r8}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000001c80), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r6, 0x1, 0x0, &(0x7f0000001cc0)="481dfea178da8ee17ada89f1e022e5478d0305d9de095205e4a1bfc31902c0c8f8bf7624d9d10cfa0a65a24233807e00156c8a1f049cc98c89e51aa82b086c48e5e984a3c4d7f5f9b91c7e0813e793800dd511eb75216aa7066f2e73aa64685e43e73610b9dfebcd75d2945f259fc2f994e9dc5e6a5335ee35c2377273725a27b7a15a4caac3e3afe38bf35394edba4a5021e67d5cdb3b1d0888aa9393ea9253d71e7e0245158ccd", 0xa8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, r10, 0x400, 0x1, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048054}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f00)=0x14) bind$xdp(r6, &(0x7f0000001f40)={0x2c, 0xf, r11, 0x38}, 0x10) unshare(0x20000000) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x4c, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)=@ipv4_newaddr={0x44, 0x14, 0x800, 0x70bd2d, 0x25dfdbfd, {0x2, 0x8, 0x20, 0xff, r11}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffa7c4, 0x7fffffff, 0x9}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002200)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x6d, '\x00', r11, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_IOC_READY(r12, 0x9360, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000002280)=@l2tp6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x1}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002300)="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", 0x1000}], 0x1}, 0x20004090) 54.788018889s ago: executing program 0 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x541b, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a300000"], 0xcc}}, 0x0) 40.465240101s ago: executing program 0 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x541b, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a300000"], 0xcc}}, 0x0) 26.024930205s ago: executing program 0 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x541b, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a300000"], 0xcc}}, 0x0) 13.134134342s ago: executing program 0 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x541b, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a300000"], 0xcc}}, 0x0) 5.5104914s ago: executing program 4 (id=958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) epoll_create1(0x80000) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc081) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 5.335790331s ago: executing program 3 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r1, 0xb63}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x20000006}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in=@local, @in=@local}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) sendmsg$netlink(r0, &(0x7f0000000bc0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000300)={0x550, 0x2f, 0x400, 0x70bd2a, 0x259fdbff, "", [@nested={0x380, 0xb1, 0x0, 0x1, [@generic="cda35f85d21abc5993dc466373b4f3345408bf618434d4f3f192753d786ecaed273435ffa36886b63b40405762d691d6c16838ae14b9987f6ada02237347bbbdd02dfea842b9dc545053f75ccba3fae9abfc298f9adf72b525fdcb156fd3165ec6850aac5e4cbbaeea26884f420de0e0a7fcde10f57b45836cb4c447d6c6d99f73ec774456221e34610d1a15752b5197bba6535453737ff639cfed031fabf29c02c2a14762fc8ea17e227320bfbd58006ff78cc5d41a3bda57e39c438570bd1e8fe041ce899eac0aaab03e0da7e18db574855e7f4c8f5cdf6f3570f9", @generic="e309239d3c66eed954a8a8dffd59c35779133db5003b43cf62d9e3a05c9cc43a5abd3f88a3ac51adf668062ccc20896a67a3cebb1b2695ae6db631ace98f42ddbb5b653d9b39115e76289db2990bd4ee3cf8a9ede714c815c9145b7af29ce2e64af41bcc473110fe8b61c66198d9a1ee2f26bac1499f805b5d5e599045b72487a5ffc9c1ba53106aa3bf440a9d39299aa141846fb182d9f0cb8d96661fcb7b3de614bdb528359157ebb00a638cdd87158b6dd977c732fbcc759c7fd6629081b433319cac85de840a726152641589d0d74e27b33d", @typed={0x6d, 0xad, 0x0, 0x0, @binary="354156543553f2f107121ea3958e860b9cb57be463d884404fac1e79d62eb6ff5d269ca160cdc7e24a25ad591a85cdb47a83a9f248851067147952dac578fd5bbbd3a6ddc3febe42031a371137debf77018b350f6c3e293784fcccbf437eba8f3dcd652f73e0ae1a4d"}, @typed={0x8, 0x12a, 0x0, 0x0, @fd}, @typed={0x8, 0xc4, 0x0, 0x0, @fd}, @nested={0x4, 0xda}, @nested={0x4, 0x40}, @generic="353582830b0416c1d57784131a08902c0bceedc8f55d52ff4f4c6bcae1ce10c1c5b32ed6d49845e5b86b81ba800e4f1dc993dca1058b6b5f305a2c4764503a30702d68d3e89f2e9ed332609c26ef9e620ad37eb81d4a16e852334548", @typed={0xe8, 0x21, 0x0, 0x0, @binary="3b29675ca82fa65f840d2c94eba4e150f4e142f4b4203a61405f7c461da478a617866b9490e70cf5b5f7754ee638bab3bc429e6a89d3d97ddd721bad7b6430351f1a16503bc8c7e38fa67dfd50259b1cf341eb8df32c3d762c60dba48c752f1a9dd6cf8838f562ba87ebd4d4d700e0dcefe50ac4746d73eb34f1edbacccf475110bcdf08168c9e876a7d7e11aff76d845f218a8da1652912c89020e68e4c46d666b440eb5a63574d9d2bf9e8cf8d57fa410f6ac25e98db30d1a48785c08aaadca8461a1b949ddadf597188264c0778c3c86ca07ab4203adc6bae7659d894c68c306a29f2"}]}, @nested={0x1be, 0x96, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="75db680108fa2833e032a77e6d738b7fc0d94d291ba4c192ce33ca3ea6bf58ca848d327c0f980af2a5f1186629a8262fe81389e622dac63138cb269caca34f3ed9afa991ee7af85e05874af8796e9eee8342f4452246dd6f7c2dc3e6f0bdfb3b025aec67eb76e4d98b459f0f0ad2fc8312a85076f560de05f42d5e2169cf8408ec359e2bd4123228239437d24a2d0bb596b8350e2207c17b15241d4ac98e18f9a1351e4f510b09ec392352fe710536d31489fef36d63f4e7", @typed={0x10, 0x13c, 0x0, 0x0, @binary="3582cd3257ab4c10d195b3ad"}, @generic="e7b58beae0a22159e3c853c8a04b20bf9834fa11acc48c8a932878cc45ade25c8eaa0b8da819eeddc86b6ae016578d9ec6e96a569e539ec4a263129c19c085ce0158f1b0018d98a67c0238823a61e6263c9e5e39feb05ad76f76b7379a98a4f5af81af435738ca01ed9af3d6d14d9adbf318d8e767a0dc8ff522338e96e16a588b304d8b4ff6d0c619f50b932bdef4801f4e853c07b07a81bee08a967b41f0d193e915ec6d8c6c9eed17d065cb795dc384c273f03dee7dff6ff9da809d137e74ffdb7e93eae4ba2a5419c87e8b16faa9011b686b04ef32fb246a72870d0f", @nested={0x4, 0x133}, @typed={0x7, 0x37, 0x0, 0x0, @str='/t\x00'}]}]}, 0x550}, {&(0x7f0000000c00)={0x10, 0x24, 0x100, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x2, &(0x7f0000000b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x1}, 0x4000005) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 5.087650118s ago: executing program 3 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/89, 0x59, 0x0, &(0x7f0000000200)=""/250, 0xfa}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x4, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 4.979867575s ago: executing program 3 (id=962): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f00000000c0)=""/129, 0x0, &(0x7f00000001c0)="7473c198d645c404aa847ae0a2c692824055965149b37d8f07cc66e77ca539bd2199bd9175f7130451f7a4f2acebc5dfe985fb2d82db8b389bd39ff4d522f8", 0x8, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="030000000905000002000000000000005fdf75cf34980021367de6bec18e3d77cd6b89b8e9d71ee3bacd757a055015a46a5c79", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="040000c001000000000000a01b02000005966d65338b45d09f8ebf7fe0899b474a3214cdd33626a552a25bd6969c541db994d2d3777826eaf9303054a99b334ec673972f9b07145fd3cf3d49500a2604"], 0x80}}, 0x4000) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000480)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="40030000100010002cbd7000ffdbdf2500000000000000000000000000000000e00000010000000000000000000000004e2300054e230008020000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000b80)=@add_del={0x2, &(0x7f0000000180)='vcan0\x00'}) sendmsg$nl_xfrm(r4, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)=@flushpolicy={0x134, 0x1d, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10001}, @srcaddr={0x14, 0xd, @in=@empty}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_thresh={0x8, 0xb, 0x3ff}, @sa={0xe4, 0x6, {{@in=@empty, @in=@loopback, 0x4e23, 0xffff, 0x4e22, 0x8, 0xa, 0x20, 0xa0, 0x87, r5, r6}, {@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d6, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x4, 0x1001, 0x80, 0x100, 0x0, 0xbba, 0xfffffffffffffffa, 0xffffffffffffffff}, {0xc, 0x3, 0xf80, 0x5}, {0xf0000, 0x4, 0x10}, 0x70bd26, 0x3500, 0xa, 0x0, 0x5, 0x80}}, @lastused={0xc, 0xf, 0x6}, @tfcpad={0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x810) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000dc0)={@loopback, 0x4d}) openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000ec0)=@add_del={0x2, &(0x7f0000000e80)='pim6reg0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8042}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002380)={'syztnl0\x00', &(0x7f0000002300)={'gre0\x00', r3, 0x40, 0x10, 0x4000, 0x4, {{0xb, 0x4, 0x1, 0x1, 0x2c, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast1, @empty, {[@generic={0x88, 0xa, "e373f788d2e84072"}, @end, @end, @timestamp_addr={0x44, 0xc, 0x61, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x1}]}]}}}}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000090000000e000000000000010000000054000000003030005f2e0030006ecad522587ad750d2d0b608fcc6c45e4805adc7785d80c288445300f446e0d3f916168f986591be0d69e79b26fae3b35a405cdad4d3"], &(0x7f0000002400)=""/109, 0x31, 0x6d, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x2, 0x2b, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1aa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='GPL\x00', 0x10, 0x1000, &(0x7f0000001300)=""/4096, 0x41100, 0x4, '\x00', r9, @fallback=0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002500)={0x0, 0xf, 0x8, 0x1}, 0x10, 0x0, r11, 0x2, &(0x7f0000003980)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000039c0)=[{0x5, 0x2, 0x10, 0xc}, {0x4, 0x1, 0xb, 0x3}], 0x10, 0x100, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$RDS_CANCEL_SENT_TO(r12, 0x114, 0x1, &(0x7f0000003ac0)={0x2, 0x4e24, @empty}, 0x10) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r13) 4.487539347s ago: executing program 4 (id=966): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005d0800000000000000000000c0a200"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.363817221s ago: executing program 4 (id=967): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x10059, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @value}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4a480, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 3.402592776s ago: executing program 2 (id=971): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8109feffffff000000000300000008000100000000000c00060000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xd}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}]}}}]}, 0x4c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'batadv_slave_1\x00'}}, 0x1e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$phonet(r6, &(0x7f0000000340)={0x23, 0xfd, 0x6, 0x40}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)={0x50, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40a40, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, 0x0) 3.006992398s ago: executing program 1 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffe99, &(0x7f0000000100)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x10, 0x2}, {0xc, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 2.895793045s ago: executing program 1 (id=974): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c0000000000950000000000b7d3b65776243c59980000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f00000007c0)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xb, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44044480}, 0x48010) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fc000000000000000000000000000000ac1e00010000000000000000000000000000000000400000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003300000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x184}}, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x17}}, @printk={@u}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r13, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/181, 0xb5, 0x0, &(0x7f0000000480)=""/40, 0x28}}, 0x10) 1.527969437s ago: executing program 3 (id=975): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140b, 0x200, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x140d, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0xee0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x40054) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1412, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x20000051) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r1, &(0x7f0000000300)=""/11, 0xb, 0x40000100, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x10001, @private2, 0x7}}, 0x6, 0x7}, &(0x7f0000000440)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r3, 0xd2a38e78}, &(0x7f00000004c0)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000500)={r3, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000580)={r3, 0x5508}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000600)={r6, 0xb1}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000680)={'vlan1\x00', @broadcast}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000006c0)={r6, 0x29, "6f8096ff8a9a4f4fbe859dc9ac67b5aab5fbe7a9dc4c0e10447633be6c5fa7e4c4bdb41a2dead393c0"}, &(0x7f0000000700)=0x31) socket$can_bcm(0x1d, 0x2, 0x2) r9 = getpid() r10 = syz_open_procfs$namespace(r9, &(0x7f0000000740)='ns/pid_for_children\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r8, 0x3, 0x1}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@deltaction={0x98, 0x31, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff81}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8401}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000940)={r5, @in6={{0xa, 0x4e23, 0xec, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb}}, [0xfff, 0x6d, 0x8000000000000001, 0x5, 0xffffffffffff57eb, 0x0, 0x9, 0x0, 0x6, 0x7c5, 0x80000001, 0x0, 0x41, 0x3ff, 0xb7]}, &(0x7f0000000a40)=0x100) write$cgroup_pressure(r10, &(0x7f0000000a80)={'full', 0x20, 0x8000000000000000, 0x20, 0x8}, 0x2f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x8fd, 0x0, 0x1, 0x1, '\x00', r12, r7, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8) 1.470293822s ago: executing program 2 (id=976): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x100, &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socket(0x22, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) splice(r6, 0x0, r5, 0x0, 0x101, 0x6) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) 1.332166302s ago: executing program 1 (id=977): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r0, 0x0) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) 1.32645743s ago: executing program 4 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x7, 0x1, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.220929866s ago: executing program 1 (id=979): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2a, 0x2, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20048054) 1.169168508s ago: executing program 4 (id=980): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x87, "dd751f503b9880aeb08a9348d4a8b389247441e17310953753918a3896ad73f9b5a8e19a2ed2ac87c3951c0b107065930c3b17f386761a093c0a958c07a52ffea8b1adc0ed2d9949c1016d8345211540aa8f46f33531e80a620eee34c4d630e8d9e4376780d91df179b9bfedaf15b7e2fd0a28a22c15f8ed60fdbcfd617a1d290079365b97dce4"}, &(0x7f00000003c0)=0x8f) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x8, 0x10, 0x0, 0x5}, &(0x7f0000000100)=0x18) sendmmsg$inet_sctp(r0, &(0x7f0000001080)=[{&(0x7f0000000140)=@in={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="4ce9029694e15a4ce809b5032f802545563c820262f7cc3f7a9636446b9d1f81dad45f4b41c7164e52465d21", 0x2c}, {&(0x7f00000002c0)="bb7ed1416b5c94406a9cd18461d9a6bd1abe0e70f53a29aa292b3d4b2cc59e422a838df1c2a633a34f04901342cdd7fe23d7d2a35caa8a3fa80159afe157d456ae7a70cdbe3a73f3cba9f448", 0x4c}], 0x2, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x7f, 0x4, 0x1, 0x0, 0xff, 0x1, 0xeb, r1}}], 0x30}, {&(0x7f00000004c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000540)="3ec65c0c5f603b7d41c85e4610b662add1d11623e9c8761dffd90f6786c5a5", 0x1f}, {&(0x7f0000000a80)="c2e7c3e3fcf41bb741a3a44a1e8c1df3c4e9c63ac7a8764b36ba48d9d16fdd1ce6adebd65caedfba0599bcfb11c73bda63b5c9966630f0bd2f589a44761e391ce0e67dbfe923a0dfdfab", 0x4a}, {&(0x7f0000000580)}, {&(0x7f0000000b00)="e21003a2ecc92e686d8bd0badc2e3569d6ffc02c637011b255f7b50196a12552408877ec2d8720bda9252d427ac3ff96b32d6f2d5c3c8351aab79601ce263d82d9898b275f67953c69edee602f88aa09", 0x50}, {&(0x7f0000000b80)="d56ada0254a5c95221b594", 0xb}, {&(0x7f0000000bc0)="b7836ccd57838e82556debccee7c79dd6d709dd9999542649e7791ed031ba041aea149564bab5604914b0d2a2c34d58fc1f115a4f2a9f561f7cf5f9c14464fc5b9922ef7176c606ccbd914cb1989fdbd0910150fcc9dbc222f3ebb310693ea016b9e5869af43ba08a6243cb6b5d28bcc3aab159b37a5bb5ccb96d889e430d70827d7657e05e642ba580c64930c33e9ad8644f53740b8b9201c", 0x99}, {&(0x7f0000000c80)="88e104b12758f44fff5c81d161263c2133168019bf1291429c60e1fc033d0124bc84f52a8f3b190b70afca4190df32e6bd93294d064488dbd2ec7f36a37fe1ef8c8e51093bac1b9fd0f7dd2baf3dddb48ca4856e0fe0133e516988ca5f8f4e433518dae8590926651dc06f507171825f385a29bb217a1988d968f3f31562a902c075f393e6a97a3365a03b726347283eaef1493a8b70a2b7da90cc6b443cda541d6165be9a230003d8b67f2649d0b3970495206db6334cede4c782174ec8e43c6e469ff6aa690ed10d2e17d94b30b7f28d9d6fce7a7af4a0ee1aef6ba6e5d2a9", 0xe0}, {&(0x7f0000000d80)="e3ec797172a79606f6da0d5f37cff4e639b5f9a97ca2efafb9d858e673fa93f98e25778fb81f039bb615384cee842c2b233e454cb939c6974979d77173db7cef51889d2e78ef88363eabe2f806bd798006f1cb157cc13a453171809d623f57d8a06b3f6069c150ac6959435fc09a8ed4512935fdfdafd49ac9f4dda54a3f5d5e619c4449e93d1295eb3a7042a43beb19708a7f5c66ed94ad9dd8912e2c84659da47e2111ccb64995503099b454ba5677c1ba242c54bcf0c89adaf884922b9c5279c236793697f066", 0xc8}, {&(0x7f0000000e80)="907f1e70831b5375082ac6b52e3b00c76de0ee122ed8f12300a3707349d8853995d2b8e7230c664743a7674f92b651dc1ebb0e2ddf1e6fc4d13f4b441e81b7b310ffde79ee89", 0x46}, {&(0x7f0000000f00)="631c9df7fdc639a9737e1fb9a0cce4f0c0e9035b7b92ec24fffdf85002", 0x1d}], 0xa, &(0x7f0000001000)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0xd, 0x2, 0x280}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5, 0x8002, 0xfb, 0x6, 0x8, 0x9d, 0x0, r4}}], 0x70, 0x4054}], 0x2, 0x4) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0x7, r8}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r8}, 0x4) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r11) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv4_newaddr={0x2c, 0x14, 0x400, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x2c, 0x0, r10}, [@IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x200008c1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 1.151976278s ago: executing program 2 (id=981): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f00000000c0)=@routing={0x5c, 0x4, 0x1, 0x6, 0x0, [@private1, @remote]}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) mmap$xdp(&(0x7f0000d16000/0x1000)=nil, 0x1000, 0x6000007, 0x40010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r2 = socket(0x2a, 0x6, 0xf65a) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x0, 0x1, 0x3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0xffff, 0x12) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x0, 0x3, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) 951.935369ms ago: executing program 1 (id=982): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000a40)=ANY=[@ANYRES64=r0], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x41) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000c0007800800124000060000050001000600"], 0x4c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000010000000000000000000000006000000003061614f00"], &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000, @value}, 0x28) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000340)=ANY=[], 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x700}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000500)="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", 0x11c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 940.753785ms ago: executing program 2 (id=983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a0904000000000000810c0700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031080008400000000114000000110001"], 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) sendmsg$can_j1939(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}}, 0x18, &(0x7f0000000400)={&(0x7f0000000500)="8f8bce14d22892a68acf42dc6b6dfd1caa0d877d845939a5556cae406ec1dc4bc41c4150cfd2e8dce1d5007b7495f10e1234480b5b44b29a76fb3278a08d791602d701cde9c278b3c72b4a8bcd749407170aeb5a62e9eaca08e9b75a17765d8cd65dab0346640d1cd5c30a454b0e748558033d62bd5a7e22b6bf5966947db0dcace04c5746d74f6ff3c16d270dd9a28befc94e34f862bab85792663c13f906406f399f03564aee8ca90eb6a62d55e72e2175b3abb3980d27bd326fc089ef", 0xbe}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, r5, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002030136388872d124b3a0000b0000010800034000000007090002000000000200000000"], 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000300)=0x9, &(0x7f0000000340)=0x4) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 618.813152ms ago: executing program 3 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x6, @empty}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000005"], 0x65) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000740)={0x0, 0x0, 0xa2, 0x12000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) 504.039305ms ago: executing program 2 (id=985): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x37e, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x348, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r6, 0xfffffffc) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 245.937626ms ago: executing program 2 (id=986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{}, [@remote, @default, @netrom, @null, @bcast, @rose, @default, @netrom]}, &(0x7f0000000080)=0x48) write(0xffffffffffffffff, &(0x7f0000000380)="ac0ef2a3ccaaf8efe31c2dbb4cea2d46fc5be360affe6ec01b7cc895906a52db70e3ccaddf685f16721501000da70e6935c32a6f6b97435eb9050ce2176501f1fe203fefabe120bf257dd2cf17a0aa5cc651def30190046b764f5e2731c94cccf918251c88b9593d549ea1770f779aa117ef8c0e4f8b8e28ad45d3827ac2d5f9c3fc9e384049ef869ba9032cc403c8cd006f6c9756b2a1774af71d91a296ba1ad2587d44f16170ccdfe95e9809f0c3313a59b6fe3ba1510f1ebf6056806d1bc2400207c6a27b32914443a257607dd67ea0e665d325151ee802afe1d51d3623ff71135e9f5b89284eb804caed9a501600d1ed013b3a27724e61e579cfa8eba495e3a03671c6", 0x105) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000054}, 0xc001) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x2, 0x1, 0x43, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, 0x20, 0x1, 0x1, 0x1}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @fwd={0x7}, @typedef={0x10}]}, {0x0, [0x61]}}, &(0x7f0000000600)=""/247, 0x3f, 0xf7, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x1ff, 0x0, 0x5, 0x40000, r4, 0x5, '\x00', r5, r6, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x134}}, 0x0) 198.342209ms ago: executing program 4 (id=987): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@ipv6_newnexthop={0x18, 0x68, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x4, 0x0, 0x40}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x6) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x88, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r10, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) 150.9518ms ago: executing program 3 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1e2c, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x6e0, 0x8, 0x5, 0x4, 0x1, 0x8, 0x6]}]}, @NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x9}}]}, @NL80211_ATTR_FTM_RESPONDER={0x178, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x7b, 0x2, "d83c502f814f6bb77715fc13048f51933ceea19cf87a805cc439b2a2247e47d1dbb1fe284d6cfc224d028ede9de6326b370df6b86b2bbb058a3bb48c71358aa24d427784d139bfb12a0ca675587609018ddcedca85ff925117035b2362b9aa232e544b9849c8e8f1b85328e4a6dce477a1aa578cf553f3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "08a178e215e854653f1ba5295c8ce1f30be8a9d6288fe4ca35d5be7f941400a7aa089496d98a6d7e9130633dddc304122cf4cd986db6d5bdfada40f6a412ed33b2969127d51e6896859bf3f9074ed4148f84670fa6e7352ab23761e20416be09d9c617180cb2d982acdfc3ad75573fee5c6b4e1b33af1b0ee497393561046bc85910edb957fe6db21c3d4bd1b8412327439ff006ea2406874c7c8b779d6da2f4504ac6c423d8b881c3dfdcd41cd1f54777a19d357f2ac88ac38ca1c8efdf1612"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2e, 0x3, "61a2e3971addf0160603f57dd499b79e5c07f04c3f478e499493ed161234d4e79fe922d1a403a6295a3d"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x1]}]}, @NL80211_ATTR_CSA_IES={0x1b14, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x27, 0x80, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x7}, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1, 0xb0}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x9}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xcb, 0x7f, [@tim={0x5, 0xc5, {0x5, 0xa6, 0x7, "e5bee6f941a04f72e142c6bf59bf32ff4ae6fa80e990cae7c9775e8e91a50d2f33d2e352dc6cbcc5ab86fa7d8e9f28b84bda630377178610124a2f8745eecdf4c9798317dde0280f59d00718e6cf462c2fdfd8e2da653e2e2d46400a1711698d8e90ad2658b7a43e5fc7d49c23f4a44dec3e747b8773cb9e918972fdeddc315d06100f0ff21a4145885261354baeb3b1609642e07c362fe58d0e6d72d66d8789c3686aa380b5a451a8aa2f22656e50241c06c5b1f2bb54e0d7f36817360e007a9618"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x101c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x4000, 0x8, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7f, 0x9, 0xb, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x8, 0x9, 0x15d9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x9, 0x4f1, 0x9, 0x0, 0x72, 0x7, 0x6, 0x2, 0xc000, 0x7]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x31d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7a2a}, @device_a, @broadcast, @initial, {0x2, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random, 0x2, @void, @val={0x1, 0x1, [{0x24, 0x1}]}, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x4, 0x8, 0xa, 0x5}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x7, 0xae, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x69, 0x22, 0x3}}, [{0xdd, 0xaf, "1962f83f6ca75dac57b93ac83019ec61312d1b31128265138c6c15d237d2cd4bfb3c940dcc76425aaaaf970cc6d5432df0f2c1898eb30d8fafeb44e0c77daa56ca8c31e0193a046091a5406a6393968cb60c4662bd602a74e056710d1b076d8d5d42f48d007ec0cc1d50c324a09dd86d724a17490881be226af02c179fa9a4d1cb6661ca340c042a871d40ecee403d220064bf9c56c9830df116734feb48ad3b1745830e052c0d88d6a4c5494eaa4e"}, {0xdd, 0x9b, "e8019a76c42740e565d7fc035f0fb4c3cf5700f6cd96d400dd121aee5e32365b931d9da942e3fdbec071e3d01de92e1f9e60cb1a62201d41d942820900bf3badb9bcc9c40e82b87b5381c32b982e3a40ebe2d3e76b7afc0ebd100a8d427392410bbc17b719800e57f5e546addf1c2d4e905ed168ed3e830abcca3e1432c9870d4df021a04372a730ec5e3842485ce1e55900c620930d9cd06a569f"}, {0xdd, 0xc4, "dccede699722125df7e8522e08df49552ad986aefdfa481fd18fefc558dfa3a0c4dd0dfe24a4d75f35f24d0451d005fb41b84a0d8bf213e0cbe012b5d4b48f60b614d4715ea89eda87601d8e1a5fd8ee938b5f5e71fd0b00efa51e1c48b7cab0cf3e8450d77247537b64529a928150c42712e7824e977d8f557d133db9898580fe0fca3e5fc186fdc641bb15846a1d31d0016d0414cee0b796c256c63153fdaae2d05db5d37500911361156253292e0209680223902dfee76ea7ebef110e29ee8d59ce6c"}, {0xdd, 0xb7, "48767faf04dac58161b1d6d5cc046c0bb470a765bc5431e1a2dc4f9f6d2e22568b3f60b6b7b1426a9c60d19dfcc99e9681ea9a118c16381d017e62af698b9b96ff698a7ab1b7438ed7b0d40e4a10f4cf6a1631b08347f4407b83460b9831620ed48be7622798252b9fdd58ebda7566ff820fcdff14da95fef5ee0242d9c19982c3cb10c1da337e0a59ece8f5edac63083080c8cb8021b0ec8efbd9ee1dbf9b72eb5760b33a23b54427f2c4cc84cf983e65a33e89f2386b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1f3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, @device_a, @device_a, @initial, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x74a6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x2, @default, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x4}, {0x5}, {0x30, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x60}]}, @void, @val={0x4, 0x6, {0x4, 0x0, 0x81, 0x8}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x75, {0x2, 0x56, 0x2, "2018bc9125012a75dec20c17f73026116ec913a4dd011ea191df48b2a03ccbeeb2ac2b490c7ab8d9a6b2fb2c375622f2dfda470208f955a61e93356661e6f1cce728ca518c0fbec00018d2f6d4606a0516688188eb1807bb437a47260b1ac656080500c3f028a6f87457f143dac33e66307c"}}, @val={0x25, 0x3, {0x1, 0x68, 0x9}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x28, 0x8}}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9a, 0xe0}}, @void, [{0xdd, 0x1e, "f4b111d7271cc33f8c13bd2b754abf5a68f7ed8995920cdee58628c96c28"}, {0xdd, 0x8e, "bd6981d20057aae0f2950064e3a6684e84492712ab1139c340c4884270732470428ab18ea3905510a80ee61da474c87dbc36156280df29d632c9553dc9a0e6885c741ab94e26db472bdc6ebf3045663361f0da38572828074256051d70c1335533be330d8164dab995896c6be772d0aaf95ba77c9cb01abd3a39b9b6f8f6bdacfa9714aeaa33c5ef2c2a2749103e"}, {0xdd, 0x6e, "1ff9854e138ed7b7c47baca8d420760a294d77c6edfe632b5093f795ccc9d77bc87be6747bf7c8fcb4afbed9c12d015956ed17a11d28ccf0dd0b062a2b9f0d63bf811265de5f57308046889806aa2afe78e9d772e8fd8c6374cf219e01bf4e5163e03ad74b0888e0a5881fae4277"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1ba, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {0x8}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x6, @default, 0x10, @void, @val={0x1, 0x2, [{0xc}, {0x1, 0x1}]}, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x80, 0x2, 0x400, 0xebc}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0x30}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x90, 0x0, 0x1f, 0x7f}}, [{0xdd, 0x9f, "b9163705e0b989f3831975563c99589bdfa4be2ce5ffd2778772311eef5693b96c74ab40998f1cadcaeb74702484418f8d48bcbc2f190a2f41f6f5a155dbc8e11b0eea0de1fb4203a999f1b492859ba05a758a30b0caf25affa62f43a5a85c551e2f8b7d228dcc7c78b2af2ac5c546372062b8dde572c38ccfc4e3ee236adb4314acb6e9992dc8cc191ed3527383d0aa5090416151f36e7c5c86bca86629f4"}, {0xdd, 0x1c, "b0fecf64d3e3994dc469beb8382c7cd5198ec82532152f8aad689665"}, {0xdd, 0x9c, "e66ed6ba07866a9a473cd25391aca21da5126686769aa8f75d1d684b544eca3cce180fff1d64385a046492946a6c074f63cea16c3efed88939c99fd4ea6f299eba47f4b0aa36dc6e0bf70fe3b72915cae05f4843e13cac137c9ec469cb71105f5a5067000675dda1d4eaf80beebabf0aff6c410d6266987645d1e8ec1b4d3d443d07967d5d1a64862e0e97bf7ea7b9bf271514398008a6c22aac5693"}]}}, @NL80211_ATTR_IE={0x11d, 0x2a, [@random_vendor={0xdd, 0x30, "f5f0d3e87ea22ca334c0caee50297ee2db1de058ed8676ce4d26dda881661f5c896f782fc3c0d039bcf3e28502942ebc"}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x9, 0x28}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x2, 0x9, 0x60}}, @tim={0x5, 0xc0, {0x2, 0x1f, 0x1, "b13a0bfe993a7706a24634b30479ab7eb4b122c3fad995eb91f8e47968a29ada814ece41f7f4205f3412adeade00d1a81d61cff72cf5cec2738bbf3881e9efeb8dbc6fdfcde3220ad27c6205076ef9bf5ca134752fe9b99b90a50954c8110bb75edb6f9a65b1802a8ccb666dd1199b991bd802cd93e38f71bf60cc2aa2babb32df5640ca4f012339f8a57dbe4f134ed21b7e25f8b6ed2ea21743611bd1160f6a1a3cd128ece0a4ace9d630467ac5a4399765c3e3a706ff7a94d0423e3f"}}, @dsss={0x3, 0x1, 0x7}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc7, 0x80, [@chsw_timing={0x68, 0x4, {0x5, 0x8c}}, @random={0x2, 0xb1, "4f328af180f24355311dc77e5187db66fed1d9866a306919e6c8838e7079286bab9bc38b3f21fd16067b66a8e64932df1caf8bea1e59bbee08230e9858db3ffd4b994698e418860414f164661894c31b31ad183c8c0a0320091636a89e563ca21da5fac1b7fbbde8412f3f70d70a6e87085efceab461fbec17c047cee997e773504dfd125cb47e66a1a0b73c4b1f3307ebdb3db52d58f5a3197630e20f9a8e12f9740590974253daff17e2cc649817828b"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0xb1, 0x8}}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_IE_PROBE_RESP={0x102, 0x7f, [@random_vendor={0xdd, 0xe5, "5c90f8e4538e0c3c2d1c6105f4064bff612c7aebc677d5c3b7accebe6974d515935df5bc1e1a434038ca8bf1edb512de98829507a6899e9288f5ef6ca07caed49c62b3652c4eb1dc58f43ef2a00a37dabc4896d6549b3557279d93570fb086968c5d7eb15719ec276e4285d3cebe24044ea9f4b8327c813984ddae1e7d6100b0bd73893ecb1cba2c4f08e78c21b315c2a90b5dccdd7f29666fba9b9456536e1cb05c25e8639eeefabfc900aaa82907dc659c06ebb0fabed58cdd1b2654c7a8911166a12a9b7a4d27dd181780537dd88faea6c4e4106a514243ad3cfdd874d738b5a422d22c"}, @rann={0x7e, 0x15, {{0x0, 0x7b}, 0x8, 0x8, @broadcast, 0x7, 0x80}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x14c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xc, 0x3, 0x1000, 0x6, 0xffff, 0xa, 0x2, 0x400, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x9, 0xc40, 0x8, 0xfffa, 0x1000, 0x9]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xe8, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0xcb, {0x0, 0x89, 0xd, "a96ee2f3f412a5a6064a6d4207b607b866a81d462bc2f226506cefa28eda653758e1928f19c662a14e0b85372d9ee5b0369248619854a52af949529a148928b56cedabc117157a928f0192e2ebf849c5989009e393ceb0da1bb909a77fe6cae1f7992cd3f59de551119ce4bbfe5f2c35b6f716d21b256b2e27940ba779a1e5dacda8c70fba79c66713d8abfb03679aa4891a8d06f4e75275c32c14a9c5dbf3f6d567a5e437f63946294b0e9e5d04a4f17a95d0c705f5e2ddad937b55a6056b45acbcb68877e0841d"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x68}}, @dsss={0x3, 0x1, 0xa9}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x36, 0x7f, [@cf={0x4, 0x6, {0x1, 0x80, 0xfff, 0xfffb}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @dsss={0x3, 0x1, 0xb5}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x60}}, @challenge={0x10, 0x1, 0x4e}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x2, 0x7f, 0x3b, 0x101}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}]}, 0x1e2c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x9, 0x101, 0xfff6, 0x1, 0x7fff, 0x6]}, &(0x7f0000000140)=0x10) 0s ago: executing program 1 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000028b80000000008000a000f7fef1df3005716efbaa25807fd812d782251cc4b799472dd862268e99089ac1cdba196181356b90889e37eb67f8595369ca235a0b85c52ca0f6d5bfe2d13b2b475ed851b194eb820e0de5b496690c7e155e2092525e5a20510cc4b5890fbf6a0244336fc618071925f05e230db50fc6d00aa83c7b6479fd28cc6f9b300e14cc26d27d9faf255248cf9ad85ab3be706cda98a42b3ef4f543bfd3486fd667ea6af4c6f15a609c39a2d7156a135c3ebf5949a8a78041be2fdc956da2046b339bd1897f41d4f3ef91dc3a0a3fb40397113d1", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, &(0x7f0000000200), 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e9c1cfb1418b7e8cbb5064c174666f18733716854b0a8218e7171247ff075537f94e19f0daedfbb3967ad42b17aba06fa6f588026324b6ed452d1f76242f31fa61e18a8a6703890535b9e7a6d7d443e3379b6abf16b72678928f9d724b2b66aa46255566f55894d5fffba22bd54bf9c2bff9e1c0aa38909227a227ca10611ac16637a28dbd99cd11a22add65a31c72b84de746518eeb485ea6914854c9806d8dcb562eb5572bd7e7a02ed06475aa4329fd", 0xb1, 0x1d, &(0x7f0000000100)={0xa, 0x4e22, 0x42, @empty, 0xfffffffa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={r8, 0xff, 0x1}, 0x8) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockopt$ax25_int(r9, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r13 = epoll_create1(0x80000) socket(0x40000000015, 0x805, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r13, 0x541b, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r14, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@getnexthop={0x2c, 0x6a, 0x1d72b918161b43b2, 0x70bd29, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6000008}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_newroute={0x44, 0x18, 0x0, 0x70bd2d, 0x25dfdbfb, {0xa, 0x4, 0x0, 0xf7, 0xfd, 0x4, 0x0, 0xa, 0x100}, [@RTA_UID={0x8}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_OIF={0x8, 0x4, r6}, @RTA_PRIORITY={0x8, 0x6, 0x80000001}, @RTA_MARK={0x8, 0x10, 0x53}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x4064) kernel console output (not intermixed with test programs): cket_sendmsg_permission+0x1e1/0x300 [ 121.651261][ T6990] ? aa_sock_msg_perm+0x94/0x160 [ 121.651301][ T6990] ? skcipher_sendmsg+0x26/0xf0 [ 121.651319][ T6990] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 121.651340][ T6990] __sock_sendmsg+0x219/0x270 [ 121.651363][ T6990] ____sys_sendmsg+0x505/0x830 [ 121.651394][ T6990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.651429][ T6990] ? import_iovec+0x74/0xa0 [ 121.651459][ T6990] ___sys_sendmsg+0x21f/0x2a0 [ 121.651486][ T6990] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.651549][ T6990] ? __fget_files+0x2a/0x420 [ 121.651573][ T6990] ? __fget_files+0x3a0/0x420 [ 121.651609][ T6990] __x64_sys_sendmsg+0x19b/0x260 [ 121.651638][ T6990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.651681][ T6990] ? do_syscall_64+0xba/0x210 [ 121.651703][ T6990] do_syscall_64+0xf6/0x210 [ 121.651722][ T6990] ? clear_bhb_loop+0x45/0xa0 [ 121.651746][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.651763][ T6990] RIP: 0033:0x7fd652d8e969 [ 121.651780][ T6990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.651795][ T6990] RSP: 002b:00007fd653bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.651816][ T6990] RAX: ffffffffffffffda RBX: 00007fd652fb5fa0 RCX: 00007fd652d8e969 [ 121.651829][ T6990] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 121.651841][ T6990] RBP: 00007fd653bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.651852][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.651863][ T6990] R13: 0000000000000000 R14: 00007fd652fb5fa0 R15: 00007ffc4d1dce28 [ 121.651893][ T6990] [ 121.656962][ T6987] No such timeout policy "syz1" [ 121.854173][ T6994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.171061][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 122.245997][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 122.389353][ T7018] Cannot find del_set index 0 as target [ 122.408237][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 122.477122][ T7024] x_tables: unsorted underflow at hook 2 [ 122.490484][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 122.514039][ T7027] netlink: 'syz.0.286': attribute type 2 has an invalid length. [ 122.535297][ T7023] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 122.570036][ T7023] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 122.620182][ T7033] FAULT_INJECTION: forcing a failure. [ 122.620182][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.656196][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz.2.287 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 122.656224][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 122.656235][ T7033] Call Trace: [ 122.656243][ T7033] [ 122.656251][ T7033] dump_stack_lvl+0x189/0x250 [ 122.656283][ T7033] ? __lock_acquire+0xaac/0xd20 [ 122.656312][ T7033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.656338][ T7033] ? __pfx__printk+0x10/0x10 [ 122.656358][ T7033] ? __might_fault+0xb0/0x130 [ 122.656393][ T7033] should_fail_ex+0x414/0x560 [ 122.656418][ T7033] _copy_from_iter+0x1db/0x15a0 [ 122.656452][ T7033] ? policy_nodemask+0x27c/0x720 [ 122.656476][ T7033] ? __pfx__copy_from_iter+0x10/0x10 [ 122.656505][ T7033] ? set_page_refcounted+0xa0/0x1e0 [ 122.656536][ T7033] af_alg_sendmsg+0x13de/0x22d0 [ 122.656588][ T7033] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 122.656617][ T7033] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.656633][ T7033] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 122.656663][ T7033] ? aa_sock_msg_perm+0x94/0x160 [ 122.656685][ T7033] ? skcipher_sendmsg+0x26/0xf0 [ 122.656704][ T7033] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 122.656725][ T7033] __sock_sendmsg+0x219/0x270 [ 122.656748][ T7033] ____sys_sendmsg+0x505/0x830 [ 122.656779][ T7033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.656814][ T7033] ? import_iovec+0x74/0xa0 [ 122.656850][ T7033] ___sys_sendmsg+0x21f/0x2a0 [ 122.656879][ T7033] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.656943][ T7033] ? __fget_files+0x2a/0x420 [ 122.656966][ T7033] ? __fget_files+0x3a0/0x420 [ 122.657006][ T7033] __x64_sys_sendmsg+0x19b/0x260 [ 122.657034][ T7033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.657078][ T7033] ? do_syscall_64+0xba/0x210 [ 122.657101][ T7033] do_syscall_64+0xf6/0x210 [ 122.657119][ T7033] ? clear_bhb_loop+0x45/0xa0 [ 122.657141][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.657155][ T7033] RIP: 0033:0x7f81d5d8e969 [ 122.657169][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.657182][ T7033] RSP: 002b:00007f81d6c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.657199][ T7033] RAX: ffffffffffffffda RBX: 00007f81d5fb5fa0 RCX: 00007f81d5d8e969 [ 122.657212][ T7033] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 122.657223][ T7033] RBP: 00007f81d6c34090 R08: 0000000000000000 R09: 0000000000000000 [ 122.657232][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.657241][ T7033] R13: 0000000000000000 R14: 00007f81d5fb5fa0 R15: 00007ffedb868dd8 [ 122.657263][ T7033] [ 123.028046][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 123.120055][ T7049] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.289'. [ 123.136724][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 123.264658][ T7058] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.289528][ T7049] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.325296][ T7049] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.369871][ T7049] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.407725][ T7049] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.433260][ T7049] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 123.448242][ T7068] Cannot find del_set index 0 as target [ 123.457861][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 123.591053][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.750298][ T7082] FAULT_INJECTION: forcing a failure. [ 123.750298][ T7082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.772613][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.2.301 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 123.772640][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 123.772650][ T7082] Call Trace: [ 123.772657][ T7082] [ 123.772665][ T7082] dump_stack_lvl+0x189/0x250 [ 123.772699][ T7082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.772725][ T7082] ? __pfx__printk+0x10/0x10 [ 123.772746][ T7082] ? fs_reclaim_acquire+0x7d/0x100 [ 123.772780][ T7082] should_fail_ex+0x414/0x560 [ 123.772802][ T7082] prepare_alloc_pages+0x213/0x610 [ 123.772836][ T7082] __alloc_frozen_pages_noprof+0x123/0x370 [ 123.772871][ T7082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.772906][ T7082] ? policy_nodemask+0x27c/0x720 [ 123.772928][ T7082] ? __pfx__copy_from_iter+0x10/0x10 [ 123.772952][ T7082] alloc_pages_mpol+0x232/0x4a0 [ 123.772981][ T7082] alloc_pages_noprof+0xa9/0x190 [ 123.773005][ T7082] af_alg_sendmsg+0x1315/0x22d0 [ 123.773054][ T7082] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 123.773081][ T7082] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.773096][ T7082] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 123.773124][ T7082] ? aa_sock_msg_perm+0x94/0x160 [ 123.773145][ T7082] ? skcipher_sendmsg+0x26/0xf0 [ 123.773161][ T7082] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 123.773181][ T7082] __sock_sendmsg+0x219/0x270 [ 123.773202][ T7082] ____sys_sendmsg+0x505/0x830 [ 123.773230][ T7082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.773262][ T7082] ? import_iovec+0x74/0xa0 [ 123.773289][ T7082] ___sys_sendmsg+0x21f/0x2a0 [ 123.773315][ T7082] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.773374][ T7082] ? __fget_files+0x2a/0x420 [ 123.773396][ T7082] ? __fget_files+0x3a0/0x420 [ 123.773429][ T7082] __x64_sys_sendmsg+0x19b/0x260 [ 123.773455][ T7082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.773495][ T7082] ? do_syscall_64+0xba/0x210 [ 123.773523][ T7082] do_syscall_64+0xf6/0x210 [ 123.773540][ T7082] ? clear_bhb_loop+0x45/0xa0 [ 123.773562][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.773578][ T7082] RIP: 0033:0x7f81d5d8e969 [ 123.773595][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.773609][ T7082] RSP: 002b:00007f81d6c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.773627][ T7082] RAX: ffffffffffffffda RBX: 00007f81d5fb5fa0 RCX: 00007f81d5d8e969 [ 123.773639][ T7082] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 123.773650][ T7082] RBP: 00007f81d6c34090 R08: 0000000000000000 R09: 0000000000000000 [ 123.773660][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.773670][ T7082] R13: 0000000000000000 R14: 00007f81d5fb5fa0 R15: 00007ffedb868dd8 [ 123.773698][ T7082] [ 124.324584][ T7092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.365765][ T7095] bridge0: port 3(batadv0) entered disabled state [ 124.448454][ T7096] trusted_key: syz.2.304 sent an empty control message without MSG_MORE. [ 124.592002][ T7107] Cannot find del_set index 0 as target [ 124.631624][ T7107] macsec1: entered allmulticast mode [ 124.683046][ T7107] syz_tun: entered allmulticast mode [ 124.695678][ T7107] syz_tun: left allmulticast mode [ 125.194087][ T7125] syzkaller0: entered promiscuous mode [ 125.199743][ T7125] syzkaller0: entered allmulticast mode [ 126.824228][ T7151] x_tables: duplicate underflow at hook 2 [ 127.035183][ T7168] validate_nla: 22 callbacks suppressed [ 127.035203][ T7168] netlink: 'syz.0.325': attribute type 21 has an invalid length. [ 127.120436][ T7168] __nla_validate_parse: 5 callbacks suppressed [ 127.120453][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.325'. [ 127.278709][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 127.569610][ T24] IPVS: starting estimator thread 0... [ 127.575557][ T7184] x_tables: duplicate underflow at hook 2 [ 127.662207][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 127.693897][ T7185] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.925318][ T7197] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 127.935211][ T7197] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 127.944326][ T7197] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 127.956319][ T7202] netlink: 'syz.0.335': attribute type 2 has an invalid length. [ 128.044239][ T7204] netlink: 'syz.2.336': attribute type 3 has an invalid length. [ 128.054051][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 128.119934][ T7207] netlink: 'syz.3.338': attribute type 12 has an invalid length. [ 128.147442][ T7209] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 128.156201][ T7207] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.338'. [ 128.180700][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 128.221608][ T7213] x_tables: duplicate underflow at hook 1 [ 128.234289][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.243572][ T7213] netlink: 9 bytes leftover after parsing attributes in process `syz.2.336'. [ 128.277665][ T7213] 0·: renamed from hsr0 (while UP) [ 128.296251][ T7213] 0·: entered allmulticast mode [ 128.304597][ T7213] hsr_slave_0: entered allmulticast mode [ 128.310607][ T7216] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 128.319329][ T7213] hsr_slave_1: entered allmulticast mode [ 128.325741][ T7213] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 128.373598][ T7218] netlink: 3 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.396587][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.405426][ T7209] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.418408][ T7209] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 128.490537][ T7216] bond1: entered promiscuous mode [ 128.496726][ T7216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.500503][ T7221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.504918][ T7189] tipc: Started in network mode [ 128.518179][ T7189] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.526887][ T7189] tipc: Enabled bearer , priority 10 [ 128.539163][ T7214] ip6erspan0: entered promiscuous mode [ 128.549978][ T7214] bond1: (slave ip6erspan0): making interface the new active one [ 128.559795][ T7214] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 128.587786][ T7218] batadv1: entered promiscuous mode [ 128.598150][ T7218] batadv1: entered allmulticast mode [ 128.607291][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.628057][ T7218] bond1: (slave batadv1): making interface the new active one [ 128.663551][ T7218] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 128.686911][ T7223] Cannot find del_set index 0 as target [ 128.722431][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 128.800451][ T7223] macsec1: entered allmulticast mode [ 128.822736][ T7223] syz_tun: entered allmulticast mode [ 128.860847][ T7223] syz_tun: left allmulticast mode [ 128.920774][ T7231] syzkaller1: entered promiscuous mode [ 128.926609][ T7231] syzkaller1: entered allmulticast mode [ 128.945336][ T7231] netlink: 'syz.3.343': attribute type 33 has an invalid length. [ 129.105779][ T7235] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 129.231807][ T7235] team0: Port device wlan1 removed [ 129.304842][ T7235] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.643341][ T1206] tipc: Node number set to 2886997162 [ 129.654157][ T7262] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 129.683039][ T7262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.693187][ T7262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.708192][ T7262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.717444][ T7262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.737191][ T7262] team0: Port device geneve0 added [ 129.781722][ T7270] tipc: Started in network mode [ 129.796981][ T7270] tipc: Node identity 2e000000000000000000000000000001, cluster identity 4711 [ 129.826892][ T7270] tipc: Enabling of bearer rejected, failed to enable media [ 129.926183][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.535616][ T7297] FAULT_INJECTION: forcing a failure. [ 130.535616][ T7297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.557807][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.0.365 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 130.557834][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 130.557847][ T7297] Call Trace: [ 130.557855][ T7297] [ 130.557864][ T7297] dump_stack_lvl+0x189/0x250 [ 130.557900][ T7297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.557929][ T7297] ? __pfx__printk+0x10/0x10 [ 130.557952][ T7297] ? fs_reclaim_acquire+0x7d/0x100 [ 130.557990][ T7297] should_fail_ex+0x414/0x560 [ 130.558015][ T7297] prepare_alloc_pages+0x213/0x610 [ 130.558053][ T7297] __alloc_frozen_pages_noprof+0x123/0x370 [ 130.558088][ T7297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.558132][ T7297] ? policy_nodemask+0x27c/0x720 [ 130.558157][ T7297] ? __pfx__copy_from_iter+0x10/0x10 [ 130.558184][ T7297] alloc_pages_mpol+0x232/0x4a0 [ 130.558215][ T7297] alloc_pages_noprof+0xa9/0x190 [ 130.558243][ T7297] af_alg_sendmsg+0x1315/0x22d0 [ 130.558297][ T7297] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 130.558334][ T7297] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.558351][ T7297] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 130.558382][ T7297] ? aa_sock_msg_perm+0x94/0x160 [ 130.558404][ T7297] ? skcipher_sendmsg+0x26/0xf0 [ 130.558423][ T7297] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 130.558445][ T7297] __sock_sendmsg+0x219/0x270 [ 130.558468][ T7297] ____sys_sendmsg+0x505/0x830 [ 130.558500][ T7297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.558535][ T7297] ? import_iovec+0x74/0xa0 [ 130.558566][ T7297] ___sys_sendmsg+0x21f/0x2a0 [ 130.558594][ T7297] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.558660][ T7297] ? __fget_files+0x2a/0x420 [ 130.558684][ T7297] ? __fget_files+0x3a0/0x420 [ 130.558721][ T7297] __x64_sys_sendmsg+0x19b/0x260 [ 130.558750][ T7297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.558795][ T7297] ? do_syscall_64+0xba/0x210 [ 130.558818][ T7297] do_syscall_64+0xf6/0x210 [ 130.558837][ T7297] ? clear_bhb_loop+0x45/0xa0 [ 130.558874][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.558892][ T7297] RIP: 0033:0x7fb3c9b8e969 [ 130.558908][ T7297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.558924][ T7297] RSP: 002b:00007fb3ca966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.558944][ T7297] RAX: ffffffffffffffda RBX: 00007fb3c9db5fa0 RCX: 00007fb3c9b8e969 [ 130.558957][ T7297] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 130.558969][ T7297] RBP: 00007fb3ca966090 R08: 0000000000000000 R09: 0000000000000000 [ 130.558980][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.559009][ T7297] R13: 0000000000000000 R14: 00007fb3c9db5fa0 R15: 00007ffe77b420a8 [ 130.559040][ T7297] [ 131.174103][ T7317] netlink: 'syz.4.370': attribute type 11 has an invalid length. [ 131.831916][ T7341] FAULT_INJECTION: forcing a failure. [ 131.831916][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.861895][ T7341] CPU: 1 UID: 0 PID: 7341 Comm: syz.3.378 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 131.861927][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 131.861939][ T7341] Call Trace: [ 131.861947][ T7341] [ 131.861956][ T7341] dump_stack_lvl+0x189/0x250 [ 131.861989][ T7341] ? __lock_acquire+0xaac/0xd20 [ 131.862021][ T7341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.862050][ T7341] ? __pfx__printk+0x10/0x10 [ 131.862071][ T7341] ? __might_fault+0xb0/0x130 [ 131.862120][ T7341] should_fail_ex+0x414/0x560 [ 131.862144][ T7341] _copy_from_iter+0x1db/0x15a0 [ 131.862184][ T7341] ? policy_nodemask+0x27c/0x720 [ 131.862208][ T7341] ? __pfx__copy_from_iter+0x10/0x10 [ 131.862237][ T7341] ? set_page_refcounted+0xa0/0x1e0 [ 131.862267][ T7341] af_alg_sendmsg+0x13de/0x22d0 [ 131.862318][ T7341] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 131.862346][ T7341] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.862362][ T7341] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 131.862392][ T7341] ? aa_sock_msg_perm+0x94/0x160 [ 131.862414][ T7341] ? skcipher_sendmsg+0x26/0xf0 [ 131.862433][ T7341] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 131.862457][ T7341] __sock_sendmsg+0x219/0x270 [ 131.862479][ T7341] ____sys_sendmsg+0x505/0x830 [ 131.862510][ T7341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.862543][ T7341] ? import_iovec+0x74/0xa0 [ 131.862573][ T7341] ___sys_sendmsg+0x21f/0x2a0 [ 131.862601][ T7341] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.862665][ T7341] ? __fget_files+0x2a/0x420 [ 131.862689][ T7341] ? __fget_files+0x3a0/0x420 [ 131.862724][ T7341] __x64_sys_sendmsg+0x19b/0x260 [ 131.862753][ T7341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.862796][ T7341] ? do_syscall_64+0xba/0x210 [ 131.862818][ T7341] do_syscall_64+0xf6/0x210 [ 131.862836][ T7341] ? clear_bhb_loop+0x45/0xa0 [ 131.862859][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862877][ T7341] RIP: 0033:0x7f544558e969 [ 131.862894][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.862908][ T7341] RSP: 002b:00007f544643f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.862928][ T7341] RAX: ffffffffffffffda RBX: 00007f54457b5fa0 RCX: 00007f544558e969 [ 131.862941][ T7341] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 131.862953][ T7341] RBP: 00007f544643f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.862963][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.862973][ T7341] R13: 0000000000000000 R14: 00007f54457b5fa0 R15: 00007ffe61819618 [ 131.863002][ T7341] [ 132.344260][ T7349] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 132.378716][ T7351] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 132.728028][ T7373] __nla_validate_parse: 9 callbacks suppressed [ 132.728048][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.385'. [ 132.781756][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.4.385'. [ 132.822111][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091319][ T7400] netlink: 124 bytes leftover after parsing attributes in process `syz.0.390'. [ 133.232376][ T7409] FAULT_INJECTION: forcing a failure. [ 133.232376][ T7409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.248328][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.3.394 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 133.248355][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 133.248366][ T7409] Call Trace: [ 133.248373][ T7409] [ 133.248381][ T7409] dump_stack_lvl+0x189/0x250 [ 133.248417][ T7409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.248446][ T7409] ? __pfx__printk+0x10/0x10 [ 133.248468][ T7409] ? fs_reclaim_acquire+0x7d/0x100 [ 133.248507][ T7409] should_fail_ex+0x414/0x560 [ 133.248532][ T7409] prepare_alloc_pages+0x213/0x610 [ 133.248571][ T7409] __alloc_frozen_pages_noprof+0x123/0x370 [ 133.248607][ T7409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.248646][ T7409] ? policy_nodemask+0x27c/0x720 [ 133.248671][ T7409] ? __pfx__copy_from_iter+0x10/0x10 [ 133.248698][ T7409] alloc_pages_mpol+0x232/0x4a0 [ 133.248731][ T7409] alloc_pages_noprof+0xa9/0x190 [ 133.248757][ T7409] af_alg_sendmsg+0x1315/0x22d0 [ 133.248813][ T7409] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 133.248853][ T7409] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.248870][ T7409] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 133.248902][ T7409] ? aa_sock_msg_perm+0x94/0x160 [ 133.248924][ T7409] ? skcipher_sendmsg+0x26/0xf0 [ 133.248943][ T7409] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 133.248964][ T7409] __sock_sendmsg+0x219/0x270 [ 133.248989][ T7409] ____sys_sendmsg+0x505/0x830 [ 133.249022][ T7409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.249059][ T7409] ? import_iovec+0x74/0xa0 [ 133.249089][ T7409] ___sys_sendmsg+0x21f/0x2a0 [ 133.249118][ T7409] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.249184][ T7409] ? __fget_files+0x2a/0x420 [ 133.249209][ T7409] ? __fget_files+0x3a0/0x420 [ 133.249245][ T7409] __x64_sys_sendmsg+0x19b/0x260 [ 133.249275][ T7409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.249320][ T7409] ? do_syscall_64+0xba/0x210 [ 133.249342][ T7409] do_syscall_64+0xf6/0x210 [ 133.249361][ T7409] ? clear_bhb_loop+0x45/0xa0 [ 133.249384][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.249403][ T7409] RIP: 0033:0x7f544558e969 [ 133.249420][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.249435][ T7409] RSP: 002b:00007f544643f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.249455][ T7409] RAX: ffffffffffffffda RBX: 00007f54457b5fa0 RCX: 00007f544558e969 [ 133.249469][ T7409] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 133.249481][ T7409] RBP: 00007f544643f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.249492][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.249503][ T7409] R13: 0000000000000000 R14: 00007f54457b5fa0 R15: 00007ffe61819618 [ 133.249534][ T7409] [ 133.892335][ T7426] openvswitch: netlink: Unknown key attributes 2 [ 134.040489][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.401'. [ 134.295684][ T7447] FAULT_INJECTION: forcing a failure. [ 134.295684][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.327156][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.0.406 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 134.327185][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 134.327197][ T7447] Call Trace: [ 134.327205][ T7447] [ 134.327213][ T7447] dump_stack_lvl+0x189/0x250 [ 134.327244][ T7447] ? __lock_acquire+0xaac/0xd20 [ 134.327273][ T7447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.327300][ T7447] ? __pfx__printk+0x10/0x10 [ 134.327318][ T7447] ? __might_fault+0xb0/0x130 [ 134.327353][ T7447] should_fail_ex+0x414/0x560 [ 134.327378][ T7447] _copy_from_iter+0x1db/0x15a0 [ 134.327412][ T7447] ? policy_nodemask+0x27c/0x720 [ 134.327436][ T7447] ? __pfx__copy_from_iter+0x10/0x10 [ 134.327467][ T7447] ? set_page_refcounted+0xa0/0x1e0 [ 134.327498][ T7447] af_alg_sendmsg+0x13de/0x22d0 [ 134.327552][ T7447] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 134.327581][ T7447] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.327597][ T7447] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 134.327628][ T7447] ? aa_sock_msg_perm+0x94/0x160 [ 134.327669][ T7447] ? skcipher_sendmsg+0x26/0xf0 [ 134.327688][ T7447] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 134.327709][ T7447] __sock_sendmsg+0x219/0x270 [ 134.327733][ T7447] ____sys_sendmsg+0x505/0x830 [ 134.327765][ T7447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.327802][ T7447] ? import_iovec+0x74/0xa0 [ 134.327832][ T7447] ___sys_sendmsg+0x21f/0x2a0 [ 134.327861][ T7447] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.327928][ T7447] ? __fget_files+0x2a/0x420 [ 134.327963][ T7447] ? __fget_files+0x3a0/0x420 [ 134.328001][ T7447] __x64_sys_sendmsg+0x19b/0x260 [ 134.328030][ T7447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.328074][ T7447] ? do_syscall_64+0xba/0x210 [ 134.328098][ T7447] do_syscall_64+0xf6/0x210 [ 134.328117][ T7447] ? clear_bhb_loop+0x45/0xa0 [ 134.328142][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.328160][ T7447] RIP: 0033:0x7fb3c9b8e969 [ 134.328184][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.328200][ T7447] RSP: 002b:00007fb3ca966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.328221][ T7447] RAX: ffffffffffffffda RBX: 00007fb3c9db5fa0 RCX: 00007fb3c9b8e969 [ 134.328235][ T7447] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 134.328248][ T7447] RBP: 00007fb3ca966090 R08: 0000000000000000 R09: 0000000000000000 [ 134.328259][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.328271][ T7447] R13: 0000000000000000 R14: 00007fb3c9db5fa0 R15: 00007ffe77b420a8 [ 134.328303][ T7447] [ 134.681916][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 134.701232][ T7456] team0: No ports can be present during mode change [ 134.716403][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 134.932317][ T7463] syzkaller0: entered promiscuous mode [ 134.939036][ T7463] syzkaller0: entered allmulticast mode [ 134.974250][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 135.000841][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 135.021568][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 135.057457][ T7480] FAULT_INJECTION: forcing a failure. [ 135.057457][ T7480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.078626][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.2.418 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 135.078655][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 135.078667][ T7480] Call Trace: [ 135.078674][ T7480] [ 135.078683][ T7480] dump_stack_lvl+0x189/0x250 [ 135.078718][ T7480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.078747][ T7480] ? __pfx__printk+0x10/0x10 [ 135.078769][ T7480] ? fs_reclaim_acquire+0x7d/0x100 [ 135.078807][ T7480] should_fail_ex+0x414/0x560 [ 135.078831][ T7480] prepare_alloc_pages+0x213/0x610 [ 135.078879][ T7480] __alloc_frozen_pages_noprof+0x123/0x370 [ 135.078924][ T7480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.078961][ T7480] ? policy_nodemask+0x27c/0x720 [ 135.078985][ T7480] ? __pfx__copy_from_iter+0x10/0x10 [ 135.079010][ T7480] alloc_pages_mpol+0x232/0x4a0 [ 135.079040][ T7480] alloc_pages_noprof+0xa9/0x190 [ 135.079066][ T7480] af_alg_sendmsg+0x1315/0x22d0 [ 135.079118][ T7480] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 135.079146][ T7480] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.079162][ T7480] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 135.079191][ T7480] ? aa_sock_msg_perm+0x94/0x160 [ 135.079213][ T7480] ? skcipher_sendmsg+0x26/0xf0 [ 135.079232][ T7480] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 135.079254][ T7480] __sock_sendmsg+0x219/0x270 [ 135.079276][ T7480] ____sys_sendmsg+0x505/0x830 [ 135.079306][ T7480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.079340][ T7480] ? import_iovec+0x74/0xa0 [ 135.079370][ T7480] ___sys_sendmsg+0x21f/0x2a0 [ 135.079398][ T7480] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.079461][ T7480] ? __fget_files+0x2a/0x420 [ 135.079485][ T7480] ? __fget_files+0x3a0/0x420 [ 135.079520][ T7480] __x64_sys_sendmsg+0x19b/0x260 [ 135.079549][ T7480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.079590][ T7480] ? do_syscall_64+0xba/0x210 [ 135.079612][ T7480] do_syscall_64+0xf6/0x210 [ 135.079630][ T7480] ? clear_bhb_loop+0x45/0xa0 [ 135.079655][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.079673][ T7480] RIP: 0033:0x7f81d5d8e969 [ 135.079690][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.079706][ T7480] RSP: 002b:00007f81d6c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.079726][ T7480] RAX: ffffffffffffffda RBX: 00007f81d5fb5fa0 RCX: 00007f81d5d8e969 [ 135.079739][ T7480] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 135.079751][ T7480] RBP: 00007f81d6c34090 R08: 0000000000000000 R09: 0000000000000000 [ 135.079762][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.079773][ T7480] R13: 0000000000000000 R14: 00007f81d5fb5fa0 R15: 00007ffedb868dd8 [ 135.079803][ T7480] [ 135.439702][ T7485] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.507133][ T7489] netlink: 112 bytes leftover after parsing attributes in process `syz.2.420'. [ 135.515976][ T7488] ipt_rpfilter: unknown options [ 135.632853][ T7494] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 136.937806][ T7533] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 137.183078][ T7541] bridge1: entered promiscuous mode [ 137.472836][ T7556] syzkaller0: entered promiscuous mode [ 137.478380][ T7556] syzkaller0: entered allmulticast mode [ 137.510389][ T7563] netlink: 'syz.3.437': attribute type 11 has an invalid length. [ 137.839732][ T30] audit: type=1107 audit(1746738831.222:2): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 138.638369][ T7566] netlink: 'syz.1.444': attribute type 5 has an invalid length. [ 138.652921][ T7574] __nla_validate_parse: 6 callbacks suppressed [ 138.652933][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.951790][ T7590] macsec1: entered promiscuous mode [ 138.957432][ T7590] dummy0: entered promiscuous mode [ 138.965452][ T7590] dummy0: left promiscuous mode [ 139.108368][ T7598] netlink: 80 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.254338][ T7597] block nbd4: shutting down sockets [ 139.277205][ T7606] unknown channel width for channel at 909000KHz? [ 139.459862][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 139.494275][ T7616] IPv6: sit1: Disabled Multicast RS [ 139.506792][ T7614] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 139.794991][ T7628] FAULT_INJECTION: forcing a failure. [ 139.794991][ T7628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.827546][ T7632] xt_hashlimit: size too large, truncated to 1048576 [ 139.833516][ T7628] CPU: 1 UID: 0 PID: 7628 Comm: syz.0.463 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 139.833548][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 139.833560][ T7628] Call Trace: [ 139.833568][ T7628] [ 139.833577][ T7628] dump_stack_lvl+0x189/0x250 [ 139.833624][ T7628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.833654][ T7628] ? __pfx__printk+0x10/0x10 [ 139.833677][ T7628] ? fs_reclaim_acquire+0x7d/0x100 [ 139.833718][ T7628] should_fail_ex+0x414/0x560 [ 139.833744][ T7628] prepare_alloc_pages+0x213/0x610 [ 139.833783][ T7628] __alloc_frozen_pages_noprof+0x123/0x370 [ 139.833820][ T7628] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.833860][ T7628] ? policy_nodemask+0x27c/0x720 [ 139.833885][ T7628] ? __pfx__copy_from_iter+0x10/0x10 [ 139.833914][ T7628] alloc_pages_mpol+0x232/0x4a0 [ 139.833946][ T7628] alloc_pages_noprof+0xa9/0x190 [ 139.833975][ T7628] af_alg_sendmsg+0x1315/0x22d0 [ 139.834033][ T7628] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 139.834063][ T7628] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.834080][ T7628] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 139.834112][ T7628] ? aa_sock_msg_perm+0x94/0x160 [ 139.834136][ T7628] ? skcipher_sendmsg+0x26/0xf0 [ 139.834155][ T7628] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 139.834178][ T7628] __sock_sendmsg+0x219/0x270 [ 139.834202][ T7628] ____sys_sendmsg+0x505/0x830 [ 139.834236][ T7628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.834274][ T7628] ? import_iovec+0x74/0xa0 [ 139.834302][ T7628] ___sys_sendmsg+0x21f/0x2a0 [ 139.834330][ T7628] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.834391][ T7628] ? __fget_files+0x2a/0x420 [ 139.834415][ T7628] ? __fget_files+0x3a0/0x420 [ 139.834449][ T7628] __x64_sys_sendmsg+0x19b/0x260 [ 139.834478][ T7628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.834521][ T7628] ? do_syscall_64+0xba/0x210 [ 139.834544][ T7628] do_syscall_64+0xf6/0x210 [ 139.834562][ T7628] ? clear_bhb_loop+0x45/0xa0 [ 139.834586][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.834610][ T7628] RIP: 0033:0x7fb3c9b8e969 [ 139.834627][ T7628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.834642][ T7628] RSP: 002b:00007fb3ca966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.834662][ T7628] RAX: ffffffffffffffda RBX: 00007fb3c9db5fa0 RCX: 00007fb3c9b8e969 [ 139.834677][ T7628] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 139.834691][ T7628] RBP: 00007fb3ca966090 R08: 0000000000000000 R09: 0000000000000000 [ 139.834703][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.834715][ T7628] R13: 0000000000000000 R14: 00007fb3c9db5fa0 R15: 00007ffe77b420a8 [ 139.834748][ T7628] [ 140.135432][ T7632] xt_hashlimit: max too large, truncated to 1048576 [ 140.516180][ T7651] netlink: 124 bytes leftover after parsing attributes in process `syz.4.472'. [ 140.568827][ T7651] veth0: entered promiscuous mode [ 140.576627][ T7650] veth0: left promiscuous mode [ 140.741389][ T7666] Cannot find del_set index 0 as target [ 140.762885][ T7669] FAULT_INJECTION: forcing a failure. [ 140.762885][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.783793][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.4.475 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 140.783817][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 140.783828][ T7669] Call Trace: [ 140.783836][ T7669] [ 140.783844][ T7669] dump_stack_lvl+0x189/0x250 [ 140.783875][ T7669] ? __lock_acquire+0xaac/0xd20 [ 140.783905][ T7669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.783932][ T7669] ? __pfx__printk+0x10/0x10 [ 140.783952][ T7669] ? __might_fault+0xb0/0x130 [ 140.783989][ T7669] should_fail_ex+0x414/0x560 [ 140.784013][ T7669] _copy_from_iter+0x1db/0x15a0 [ 140.784047][ T7669] ? policy_nodemask+0x27c/0x720 [ 140.784072][ T7669] ? __pfx__copy_from_iter+0x10/0x10 [ 140.784102][ T7669] ? set_page_refcounted+0xa0/0x1e0 [ 140.784134][ T7669] af_alg_sendmsg+0x13de/0x22d0 [ 140.784188][ T7669] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 140.784217][ T7669] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.784232][ T7669] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 140.784262][ T7669] ? aa_sock_msg_perm+0x94/0x160 [ 140.784285][ T7669] ? skcipher_sendmsg+0x26/0xf0 [ 140.784303][ T7669] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 140.784325][ T7669] __sock_sendmsg+0x219/0x270 [ 140.784349][ T7669] ____sys_sendmsg+0x505/0x830 [ 140.784381][ T7669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.784417][ T7669] ? import_iovec+0x74/0xa0 [ 140.784447][ T7669] ___sys_sendmsg+0x21f/0x2a0 [ 140.784500][ T7669] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.784568][ T7669] ? __fget_files+0x2a/0x420 [ 140.784593][ T7669] ? __fget_files+0x3a0/0x420 [ 140.784630][ T7669] __x64_sys_sendmsg+0x19b/0x260 [ 140.784660][ T7669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.784718][ T7669] ? do_syscall_64+0xba/0x210 [ 140.784741][ T7669] do_syscall_64+0xf6/0x210 [ 140.784759][ T7669] ? clear_bhb_loop+0x45/0xa0 [ 140.784783][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.784801][ T7669] RIP: 0033:0x7fd652d8e969 [ 140.784823][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.784839][ T7669] RSP: 002b:00007fd653bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.784859][ T7669] RAX: ffffffffffffffda RBX: 00007fd652fb5fa0 RCX: 00007fd652d8e969 [ 140.784873][ T7669] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 140.784884][ T7669] RBP: 00007fd653bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.784896][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.784906][ T7669] R13: 0000000000000000 R14: 00007fd652fb5fa0 R15: 00007ffc4d1dce28 [ 140.784937][ T7669] [ 141.461670][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 141.504880][ T7683] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 141.626253][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 141.660348][ T7683] wg1: entered promiscuous mode [ 141.666915][ T7683] wg1: entered allmulticast mode [ 141.732147][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 141.778157][ T7700] gretap0: entered promiscuous mode [ 141.786746][ T7700] gretap0: entered allmulticast mode [ 141.806810][ T7703] FAULT_INJECTION: forcing a failure. [ 141.806810][ T7703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.820788][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.1.487 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 141.820816][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 141.820827][ T7703] Call Trace: [ 141.820835][ T7703] [ 141.820843][ T7703] dump_stack_lvl+0x189/0x250 [ 141.820881][ T7703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.820910][ T7703] ? __pfx__printk+0x10/0x10 [ 141.820932][ T7703] ? fs_reclaim_acquire+0x7d/0x100 [ 141.820971][ T7703] should_fail_ex+0x414/0x560 [ 141.820996][ T7703] prepare_alloc_pages+0x213/0x610 [ 141.821044][ T7703] __alloc_frozen_pages_noprof+0x123/0x370 [ 141.821079][ T7703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.821118][ T7703] ? policy_nodemask+0x27c/0x720 [ 141.821141][ T7703] ? __pfx__copy_from_iter+0x10/0x10 [ 141.821177][ T7703] alloc_pages_mpol+0x232/0x4a0 [ 141.821208][ T7703] alloc_pages_noprof+0xa9/0x190 [ 141.821235][ T7703] af_alg_sendmsg+0x1315/0x22d0 [ 141.821288][ T7703] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 141.821317][ T7703] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.821333][ T7703] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 141.821382][ T7703] ? aa_sock_msg_perm+0x94/0x160 [ 141.821405][ T7703] ? skcipher_sendmsg+0x26/0xf0 [ 141.821437][ T7703] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 141.821459][ T7703] __sock_sendmsg+0x219/0x270 [ 141.821483][ T7703] ____sys_sendmsg+0x505/0x830 [ 141.821515][ T7703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.821550][ T7703] ? import_iovec+0x74/0xa0 [ 141.821580][ T7703] ___sys_sendmsg+0x21f/0x2a0 [ 141.821608][ T7703] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.821672][ T7703] ? __fget_files+0x2a/0x420 [ 141.821696][ T7703] ? __fget_files+0x3a0/0x420 [ 141.821732][ T7703] __x64_sys_sendmsg+0x19b/0x260 [ 141.821761][ T7703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.821817][ T7703] ? rcu_is_watching+0x15/0xb0 [ 141.821857][ T7703] do_syscall_64+0xf6/0x210 [ 141.821877][ T7703] ? clear_bhb_loop+0x45/0xa0 [ 141.821902][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.821920][ T7703] RIP: 0033:0x7f589fb8e969 [ 141.821938][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.821953][ T7703] RSP: 002b:00007f58a0a90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.821974][ T7703] RAX: ffffffffffffffda RBX: 00007f589fdb5fa0 RCX: 00007f589fb8e969 [ 141.821988][ T7703] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 141.822000][ T7703] RBP: 00007f58a0a90090 R08: 0000000000000000 R09: 0000000000000000 [ 141.822012][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.822023][ T7703] R13: 0000000000000000 R14: 00007f589fdb5fa0 R15: 00007ffe21075758 [ 141.822054][ T7703] [ 142.123323][ T7707] netlink: 'syz.2.488': attribute type 11 has an invalid length. [ 142.131904][ T7707] netlink: 228 bytes leftover after parsing attributes in process `syz.2.488'. [ 142.170489][ T7711] xt_socket: unknown flags 0xfc [ 142.390753][ T7725] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 142.397250][ T7727] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 142.430666][ T7727] veth0_vlan: left promiscuous mode [ 142.440920][ T7715] sctp: [Deprecated]: syz.1.492 (pid 7715) Use of int in max_burst socket option. [ 142.440920][ T7715] Use struct sctp_assoc_value instead [ 142.464467][ T7727] veth0_vlan: entered promiscuous mode [ 142.492315][ T7723] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 142.509841][ T7727] team0: Device veth0_vlan failed to register rx_handler [ 142.660096][ T5845] Bluetooth: hci4: command tx timeout [ 142.706725][ T7744] FAULT_INJECTION: forcing a failure. [ 142.706725][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.709861][ T7740] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.724410][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.4.501 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 142.724439][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 142.724452][ T7744] Call Trace: [ 142.724461][ T7744] [ 142.724470][ T7744] dump_stack_lvl+0x189/0x250 [ 142.724504][ T7744] ? __lock_acquire+0xaac/0xd20 [ 142.724536][ T7744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.724565][ T7744] ? __pfx__printk+0x10/0x10 [ 142.724587][ T7744] ? __might_fault+0xb0/0x130 [ 142.724627][ T7744] should_fail_ex+0x414/0x560 [ 142.724653][ T7744] _copy_from_iter+0x1db/0x15a0 [ 142.724690][ T7744] ? policy_nodemask+0x27c/0x720 [ 142.724716][ T7744] ? __pfx__copy_from_iter+0x10/0x10 [ 142.724748][ T7744] ? set_page_refcounted+0xa0/0x1e0 [ 142.724783][ T7744] af_alg_sendmsg+0x13de/0x22d0 [ 142.724841][ T7744] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 142.724872][ T7744] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.724889][ T7744] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 142.724922][ T7744] ? aa_sock_msg_perm+0x94/0x160 [ 142.724946][ T7744] ? skcipher_sendmsg+0x26/0xf0 [ 142.724965][ T7744] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 142.724989][ T7744] __sock_sendmsg+0x219/0x270 [ 142.725013][ T7744] ____sys_sendmsg+0x505/0x830 [ 142.725046][ T7744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.725083][ T7744] ? import_iovec+0x74/0xa0 [ 142.725116][ T7744] ___sys_sendmsg+0x21f/0x2a0 [ 142.725146][ T7744] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.725215][ T7744] ? __fget_files+0x2a/0x420 [ 142.725240][ T7744] ? __fget_files+0x3a0/0x420 [ 142.725278][ T7744] __x64_sys_sendmsg+0x19b/0x260 [ 142.725323][ T7744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.725371][ T7744] ? do_syscall_64+0xba/0x210 [ 142.725395][ T7744] do_syscall_64+0xf6/0x210 [ 142.725415][ T7744] ? clear_bhb_loop+0x45/0xa0 [ 142.725442][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.725461][ T7744] RIP: 0033:0x7fd652d8e969 [ 142.725480][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.725496][ T7744] RSP: 002b:00007fd653bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.725518][ T7744] RAX: ffffffffffffffda RBX: 00007fd652fb5fa0 RCX: 00007fd652d8e969 [ 142.725532][ T7744] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 142.725545][ T7744] RBP: 00007fd653bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.725557][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.725569][ T7744] R13: 0000000000000000 R14: 00007fd652fb5fa0 R15: 00007ffc4d1dce28 [ 142.725602][ T7744] [ 142.933233][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.502'. [ 143.234028][ T7758] veth1_to_team: entered promiscuous mode [ 143.266793][ T7758] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 143.315824][ T7765] netlink: 68 bytes leftover after parsing attributes in process `syz.0.505'. [ 143.358159][ T1206] IPVS: starting estimator thread 0... [ 143.454368][ T7770] IPVS: using max 28 ests per chain, 67200 per kthread [ 143.641744][ T7787] FAULT_INJECTION: forcing a failure. [ 143.641744][ T7787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.680188][ T7787] CPU: 0 UID: 0 PID: 7787 Comm: syz.4.513 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 143.680230][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 143.680249][ T7787] Call Trace: [ 143.680261][ T7787] [ 143.680278][ T7787] dump_stack_lvl+0x189/0x250 [ 143.680315][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.680343][ T7787] ? __pfx__printk+0x10/0x10 [ 143.680365][ T7787] ? fs_reclaim_acquire+0x7d/0x100 [ 143.680403][ T7787] should_fail_ex+0x414/0x560 [ 143.680428][ T7787] prepare_alloc_pages+0x213/0x610 [ 143.680465][ T7787] __alloc_frozen_pages_noprof+0x123/0x370 [ 143.680500][ T7787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.680548][ T7787] ? policy_nodemask+0x27c/0x720 [ 143.680571][ T7787] ? __pfx__copy_from_iter+0x10/0x10 [ 143.680596][ T7787] alloc_pages_mpol+0x232/0x4a0 [ 143.680625][ T7787] alloc_pages_noprof+0xa9/0x190 [ 143.680650][ T7787] af_alg_sendmsg+0x1315/0x22d0 [ 143.680701][ T7787] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 143.680729][ T7787] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.680743][ T7787] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 143.680773][ T7787] ? aa_sock_msg_perm+0x94/0x160 [ 143.680794][ T7787] ? skcipher_sendmsg+0x26/0xf0 [ 143.680812][ T7787] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 143.680832][ T7787] __sock_sendmsg+0x219/0x270 [ 143.680855][ T7787] ____sys_sendmsg+0x505/0x830 [ 143.680885][ T7787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.680918][ T7787] ? import_iovec+0x74/0xa0 [ 143.680946][ T7787] ___sys_sendmsg+0x21f/0x2a0 [ 143.680972][ T7787] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.681031][ T7787] ? __fget_files+0x2a/0x420 [ 143.681054][ T7787] ? __fget_files+0x3a0/0x420 [ 143.681088][ T7787] __x64_sys_sendmsg+0x19b/0x260 [ 143.681115][ T7787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.681156][ T7787] ? do_syscall_64+0xba/0x210 [ 143.681177][ T7787] do_syscall_64+0xf6/0x210 [ 143.681195][ T7787] ? clear_bhb_loop+0x45/0xa0 [ 143.681218][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.681234][ T7787] RIP: 0033:0x7fd652d8e969 [ 143.681251][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.681265][ T7787] RSP: 002b:00007fd653bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.681289][ T7787] RAX: ffffffffffffffda RBX: 00007fd652fb5fa0 RCX: 00007fd652d8e969 [ 143.681302][ T7787] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 143.681312][ T7787] RBP: 00007fd653bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.681323][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.681332][ T7787] R13: 0000000000000000 R14: 00007fd652fb5fa0 R15: 00007ffc4d1dce28 [ 143.681360][ T7787] [ 144.236665][ T7799] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.280640][ T7802] xt_TCPMSS: Only works on TCP SYN packets [ 144.537870][ T7813] __nla_validate_parse: 4 callbacks suppressed [ 144.537889][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 145.166377][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'. [ 145.284398][ T7841] !: renamed from dummy0 [ 145.321332][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 145.465295][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 146.818723][ T7914] dummy0: entered allmulticast mode [ 146.875713][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.545'. [ 146.936953][ T7916] bridge2: entered promiscuous mode [ 146.983310][ T7916] netlink: 'syz.2.546': attribute type 11 has an invalid length. [ 146.991210][ T7916] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.546'. [ 147.016915][ T7916] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 147.032243][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.344509][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.550'. [ 148.109406][ T7962] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 148.924182][ T7986] syz.2.559: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.990996][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.2.559 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 148.991026][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 148.991038][ T7986] Call Trace: [ 148.991045][ T7986] [ 148.991055][ T7986] dump_stack_lvl+0x189/0x250 [ 148.991090][ T7986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.991117][ T7986] ? __pfx__printk+0x10/0x10 [ 148.991137][ T7986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.991157][ T7986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.991177][ T7986] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 148.991199][ T7986] warn_alloc+0x214/0x310 [ 148.991228][ T7986] ? __pfx___schedule+0x10/0x10 [ 148.991258][ T7986] ? __pfx_warn_alloc+0x10/0x10 [ 148.991284][ T7986] ? kasan_save_track+0x4f/0x80 [ 148.991305][ T7986] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 148.991327][ T7986] ? xskq_create+0x56/0x170 [ 148.991355][ T7986] ? __x64_sys_setsockopt+0x18b/0x220 [ 148.991377][ T7986] ? do_syscall_64+0xf6/0x210 [ 148.991393][ T7986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.991423][ T7986] __vmalloc_node_range_noprof+0x125/0x12c0 [ 148.991478][ T7986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.991508][ T7986] ? __kasan_kmalloc+0x93/0xb0 [ 148.991535][ T7986] vmalloc_user_noprof+0x74/0x80 [ 148.991560][ T7986] ? xskq_create+0xbf/0x170 [ 148.991586][ T7986] xskq_create+0xbf/0x170 [ 148.991615][ T7986] xsk_init_queue+0xb0/0x110 [ 148.991644][ T7986] xsk_setsockopt+0x43f/0x710 [ 148.991673][ T7986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.991709][ T7986] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.991729][ T7986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.991756][ T7986] do_sock_setsockopt+0x257/0x3e0 [ 148.991781][ T7986] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 148.991802][ T7986] ? __fget_files+0x2a/0x420 [ 148.991830][ T7986] ? __fget_files+0x3a0/0x420 [ 148.991859][ T7986] ? __fget_files+0x2a/0x420 [ 148.991892][ T7986] __x64_sys_setsockopt+0x18b/0x220 [ 148.991922][ T7986] do_syscall_64+0xf6/0x210 [ 148.991942][ T7986] ? clear_bhb_loop+0x45/0xa0 [ 148.991985][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.992004][ T7986] RIP: 0033:0x7f81d5d8e969 [ 148.992023][ T7986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.992041][ T7986] RSP: 002b:00007f81d6c34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.992062][ T7986] RAX: ffffffffffffffda RBX: 00007f81d5fb5fa0 RCX: 00007f81d5d8e969 [ 148.992077][ T7986] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 148.992089][ T7986] RBP: 00007f81d5e10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 148.992101][ T7986] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.992114][ T7986] R13: 0000000000000000 R14: 00007f81d5fb5fa0 R15: 00007ffedb868dd8 [ 148.992145][ T7986] [ 148.992164][ T7986] Mem-Info: [ 149.367856][ T7986] active_anon:5867 inactive_anon:0 isolated_anon:0 [ 149.367856][ T7986] active_file:1331 inactive_file:39851 isolated_file:0 [ 149.367856][ T7986] unevictable:768 dirty:60 writeback:0 [ 149.367856][ T7986] slab_reclaimable:10977 slab_unreclaimable:97369 [ 149.367856][ T7986] mapped:32218 shmem:3599 pagetables:650 [ 149.367856][ T7986] sec_pagetables:0 bounce:0 [ 149.367856][ T7986] kernel_misc_reclaimable:0 [ 149.367856][ T7986] free:1346410 free_pcp:1506 free_cma:0 [ 149.492673][ T7986] Node 0 active_anon:23468kB inactive_anon:0kB active_file:5324kB inactive_file:159204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128972kB dirty:236kB writeback:0kB shmem:12860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10924kB pagetables:2800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.584781][ T7986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.646868][ T7986] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.702848][ T7986] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 149.764726][ T7986] Node 0 DMA32 free:1457312kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:23660kB inactive_anon:0kB active_file:5324kB inactive_file:159112kB unevictable:1536kB writepending:236kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:1256kB free_cma:0kB [ 149.842555][ T7986] lowmem_reserve[]: 0 0 0 0 0 [ 149.847808][ T7986] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 149.891541][ T7986] lowmem_reserve[]: 0 0 0 0 0 [ 149.896629][ T7986] Node 1 Normal free:3916324kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.942899][ T7986] lowmem_reserve[]: 0 0 0 0 0 [ 149.948340][ T7986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.965942][ T7986] Node 0 DMA32: 164*4kB (UME) 276*8kB (UME) 187*16kB (UME) 617*32kB (UME) 309*64kB (UME) 102*128kB (UM) 60*256kB (UME) 35*512kB (UM) 5*1024kB (UME) 2*2048kB (ME) 331*4096kB (M) = 1456704kB [ 149.989796][ T7986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.001494][ T7986] Node 1 Normal: 205*4kB (UM) 56*8kB (UME) 45*16kB (UME) 181*32kB (UME) 93*64kB (UME) 35*128kB (UME) 13*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 948*4096kB (M) = 3916324kB [ 150.002208][ T8018] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 150.025445][ T7986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.037944][ T7986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.048100][ T7986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.058268][ T7986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.059379][ T8018] netlink: 244 bytes leftover after parsing attributes in process `syz.3.566'. [ 150.072715][ T7986] 44773 total pagecache pages [ 150.081803][ T7986] 0 pages in swap cache [ 150.089822][ T7986] Free swap = 124996kB [ 150.095502][ T7986] Total swap = 124996kB [ 150.099830][ T7986] 2097051 pages RAM [ 150.104112][ T7986] 0 pages HighMem/MovableOnly [ 150.109062][ T7986] 424375 pages reserved [ 150.114218][ T7986] 0 pages cma reserved [ 150.288031][ T8024] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 150.309794][ T8024] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 150.443082][ T8025] syzkaller0: entered promiscuous mode [ 150.453273][ T8025] syzkaller0: entered allmulticast mode [ 150.719410][ T8036] tipc: Failed to remove unknown binding: 66,1,1/0:3025829166/3025829168 [ 150.757486][ T8036] tipc: Failed to remove unknown binding: 66,1,1/0:3025829166/3025829168 [ 150.843257][ T8038] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20000 [ 152.291925][ T8060] netlink: 'syz.0.578': attribute type 13 has an invalid length. [ 152.335594][ T8053] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.409323][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 152.560647][ T8053] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.685950][ T8053] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.726771][ T8088] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 152.735426][ T8086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 152.754490][ T8088] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 152.767284][ T8086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.586'. [ 152.796642][ T8053] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.807477][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 152.914705][ T8053] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.935144][ T8053] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.967234][ T8053] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.992759][ T8097] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 153.020465][ T8053] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.035726][ T8096] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 153.045045][ T8096] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 153.059254][ T8099] netlink: 128 bytes leftover after parsing attributes in process `syz.0.590'. [ 153.276808][ T8103] syzkaller0: entered promiscuous mode [ 153.282323][ T8103] syzkaller0: entered allmulticast mode [ 154.035372][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.051357][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.063301][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.078943][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.090249][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.746391][ T8117] netlink: 'syz.3.596': attribute type 23 has an invalid length. [ 155.057966][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 155.073851][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 155.086325][ T8131] tipc: Started in network mode [ 155.091242][ T8131] tipc: Node identity 3e3b21ce9507, cluster identity 4711 [ 155.101357][ T8131] tipc: Enabled bearer , priority 0 [ 155.125306][ T8131] syzkaller0: entered promiscuous mode [ 155.142611][ T8131] syzkaller0: entered allmulticast mode [ 155.230001][ T8131] tipc: Resetting bearer [ 155.274213][ T8147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.603'. [ 155.305107][ T8130] tipc: Resetting bearer [ 155.317401][ T8130] tipc: Disabling bearer [ 155.596782][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 155.639647][ T8161] netlink: 'syz.1.608': attribute type 15 has an invalid length. [ 155.712944][ T8172] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 155.727464][ T8172] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 155.818225][ T8170] syzkaller0: entered promiscuous mode [ 155.834406][ T8170] syzkaller0: entered allmulticast mode [ 156.118500][ T8181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.612'. [ 156.176472][ T5140] Bluetooth: hci0: command tx timeout [ 156.977983][ T8183] bridge_slave_0: left allmulticast mode [ 156.984007][ T8183] bridge_slave_0: left promiscuous mode [ 156.989775][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.999564][ T8183] bridge_slave_1: left allmulticast mode [ 157.005383][ T8183] bridge_slave_1: left promiscuous mode [ 157.011195][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.026259][ T8183] bond0: (slave bond_slave_0): Releasing backup interface [ 157.035312][ T8183] bond0: (slave bond_slave_1): Releasing backup interface [ 157.049741][ T8183] team0: Port device team_slave_0 removed [ 157.058776][ T8183] team0: Port device team_slave_1 removed [ 157.065130][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.073467][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.083060][ T8183] bond1: (slave batadv1): Releasing active interface [ 157.106227][ T8181] team0: Mode changed to "loadbalance" [ 157.264101][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.271555][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.306473][ T8114] bridge_slave_0: entered allmulticast mode [ 157.336912][ T8114] bridge_slave_0: entered promiscuous mode [ 157.363452][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.370621][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.390791][ T8114] bridge_slave_1: entered allmulticast mode [ 157.401369][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 157.412952][ T8114] bridge_slave_1: entered promiscuous mode [ 157.521507][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.566641][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.740494][ T8114] team0: Port device team_slave_0 added [ 157.768726][ T8114] team0: Port device team_slave_1 added [ 157.792887][ T8214] netlink: 'syz.3.622': attribute type 8 has an invalid length. [ 157.960561][ T8214] syzkaller0: entered promiscuous mode [ 157.966466][ T8214] syzkaller0: entered allmulticast mode [ 157.974153][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.624'. [ 157.989911][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.999279][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.031704][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.077396][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.091298][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.122696][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.166024][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 158.199026][ T8231] syzkaller0: entered promiscuous mode [ 158.204880][ T8231] syzkaller0: entered allmulticast mode [ 158.259516][ T5140] Bluetooth: hci0: command tx timeout [ 159.635535][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 159.722762][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.633'. [ 160.336249][ T5140] Bluetooth: hci0: command tx timeout [ 160.675581][ T8261] syzkaller1: entered promiscuous mode [ 160.681249][ T8261] syzkaller1: entered allmulticast mode [ 160.756403][ T8266] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 160.757864][ T8114] hsr_slave_0: entered promiscuous mode [ 160.770549][ T8266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.635'. [ 160.786334][ T8114] hsr_slave_1: entered promiscuous mode [ 160.793362][ T8114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.801878][ T8114] Cannot create hsr debugfs directory [ 161.245474][ T8284] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.266767][ T8284] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.282768][ T8284] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.293666][ T8284] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.379900][ T8283] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 161.410391][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 161.421885][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 161.725236][ T8305] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20004 [ 161.815345][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'. [ 161.917108][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.645'. [ 161.954415][ T8317] netlink: 'syz.3.643': attribute type 4 has an invalid length. [ 162.011798][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 162.423335][ T5845] Bluetooth: hci0: command tx timeout [ 162.661272][ T8114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.686498][ T8114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.709493][ T8114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.742926][ T8114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.843831][ T8328] netlink: 'syz.1.649': attribute type 21 has an invalid length. [ 162.900677][ T8328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.649'. [ 163.011488][ T8335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.652'. [ 163.041181][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 163.130492][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.140678][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 163.176478][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.222364][ T8337] Bluetooth: MGMT ver 1.23 [ 163.245695][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.252928][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.335966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.343176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.674677][ T8357] netlink: 'syz.4.659': attribute type 13 has an invalid length. [ 163.720987][ T8360] xfrm1: entered promiscuous mode [ 163.726510][ T8360] xfrm1: entered allmulticast mode [ 164.352053][ T8381] bond0: entered promiscuous mode [ 164.357819][ T8381] bond_slave_0: entered promiscuous mode [ 164.367724][ T8381] bond_slave_1: entered promiscuous mode [ 164.377510][ T8381] bridge0: entered promiscuous mode [ 164.492869][ T5845] Bluetooth: hci0: command 0x0405 tx timeout [ 164.577499][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.702410][ T8114] veth0_vlan: entered promiscuous mode [ 164.736999][ T8401] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.743660][ T8400] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.751737][ T8404] netlink: 'syz.2.673': attribute type 11 has an invalid length. [ 164.771222][ T8400] xt_CT: No such helper "pptp" [ 164.824762][ T8114] veth1_vlan: entered promiscuous mode [ 164.948612][ T8410] vlan2: entered promiscuous mode [ 164.967546][ T8410] bond0: entered promiscuous mode [ 164.980840][ T8410] bond_slave_0: entered promiscuous mode [ 164.987200][ T8410] bond_slave_1: entered promiscuous mode [ 164.993216][ T8410] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 165.000554][ T8410] bridge0: entered promiscuous mode [ 165.006401][ T8410] vlan2: entered allmulticast mode [ 165.011670][ T8410] bond0: entered allmulticast mode [ 165.026817][ T8410] bond_slave_0: entered allmulticast mode [ 165.035373][ T8410] bond_slave_1: entered allmulticast mode [ 165.042198][ T8410] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 165.074721][ T8410] bridge0: entered allmulticast mode [ 165.090111][ T8417] netlink: 'syz.3.676': attribute type 3 has an invalid length. [ 165.107355][ T8420] gtp0: entered promiscuous mode [ 165.112353][ T8420] gtp0: entered allmulticast mode [ 165.180809][ T8114] veth0_macvtap: entered promiscuous mode [ 165.215093][ T8114] veth1_macvtap: entered promiscuous mode [ 165.278669][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.298258][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.310941][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.366752][ T8430] syzkaller0: entered promiscuous mode [ 165.372597][ T8430] syzkaller0: entered allmulticast mode [ 165.785849][ T8455] __nla_validate_parse: 6 callbacks suppressed [ 165.785867][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 166.655750][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.666783][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.678336][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.769796][ T8114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.784666][ T8114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.794872][ T8114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.803973][ T8114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.972877][ T8474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'. [ 167.131507][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.174390][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.316392][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.347376][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.695422][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 167.915287][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.022649][ T8503] netlink: 8760 bytes leftover after parsing attributes in process `syz.3.698'. [ 168.065029][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.474934][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.550099][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 168.680493][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.701908][ T5845] block nbd3: Receive control failed (result -32) [ 168.834669][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 168.953125][ T5936] IPVS: starting estimator thread 0... [ 168.978862][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.988103][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.012365][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.030519][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.040439][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.049206][ T36] bridge_slave_1: left allmulticast mode [ 169.069997][ T36] bridge_slave_1: left promiscuous mode [ 169.083984][ T8531] IPVS: using max 38 ests per chain, 91200 per kthread [ 169.084337][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.201146][ T36] bridge_slave_0: left allmulticast mode [ 169.209467][ T36] bridge_slave_0: left promiscuous mode [ 169.221556][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.805190][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.820190][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.831584][ T36] bond0 (unregistering): Released all slaves [ 169.862507][ T8544] tc_dump_action: action bad kind [ 170.093060][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 170.202883][ T8577] bond0: left promiscuous mode [ 170.207759][ T8577] bond_slave_0: left promiscuous mode [ 170.216032][ T8577] bond_slave_1: left promiscuous mode [ 170.221896][ T8577] bridge0: left promiscuous mode [ 170.229448][ T8577] wg1: left promiscuous mode [ 170.229941][ T8582] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 170.234138][ T8577] wg1: left allmulticast mode [ 170.241769][ T8577] xfrm1: left promiscuous mode [ 170.250710][ T8582] netlink: 224 bytes leftover after parsing attributes in process `syz.1.721'. [ 170.265755][ T8577] xfrm1: left allmulticast mode [ 170.487846][ T36] hsr_slave_0: left promiscuous mode [ 170.499993][ T36] hsr_slave_1: left promiscuous mode [ 170.509266][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.518591][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.546957][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.554575][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.586307][ T36] veth1_macvtap: left promiscuous mode [ 170.593017][ T36] veth0_macvtap: left promiscuous mode [ 170.598744][ T36] veth1_vlan: left promiscuous mode [ 170.604948][ T36] veth0_vlan: left promiscuous mode [ 170.818041][ T8603] netlink: 'syz.2.727': attribute type 5 has an invalid length. [ 171.051635][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'. [ 171.075618][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 171.084901][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 171.094471][ T8608] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.143454][ T5140] Bluetooth: hci0: command tx timeout [ 171.192053][ T36] team0 (unregistering): Port device team_slave_1 removed [ 171.238559][ T36] team0 (unregistering): Port device team_slave_0 removed [ 171.916294][ T8622] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 171.967522][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 172.032687][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 172.277988][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.299171][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.311781][ T8530] bridge_slave_0: entered allmulticast mode [ 172.321753][ T8530] bridge_slave_0: entered promiscuous mode [ 172.346539][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.364945][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.372367][ T8530] bridge_slave_1: entered allmulticast mode [ 172.389016][ T8530] bridge_slave_1: entered promiscuous mode [ 172.526126][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.741'. [ 172.586502][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.617526][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.685994][ T8530] team0: Port device team_slave_0 added [ 172.711009][ T8530] team0: Port device team_slave_1 added [ 172.816448][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.832630][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.865257][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.879946][ T8667] netlink: 300 bytes leftover after parsing attributes in process `syz.3.746'. [ 172.905613][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.916426][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.948133][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.198525][ T8530] hsr_slave_0: entered promiscuous mode [ 173.210994][ T8530] hsr_slave_1: entered promiscuous mode [ 173.217054][ T5140] Bluetooth: hci0: command tx timeout [ 173.224513][ T8530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.232172][ T8530] Cannot create hsr debugfs directory [ 173.490901][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 173.787429][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 174.101479][ T8701] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 174.164324][ T8711] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 174.266437][ T8716] dvmrp8: entered allmulticast mode [ 174.307037][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 174.320320][ T8725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.757'. [ 174.346963][ T8716] dvmrp8: left allmulticast mode [ 174.401198][ T8725] vlan3: entered allmulticast mode [ 174.407583][ T8725] syz_tun: entered allmulticast mode [ 174.456693][ T8727] netlink: 'syz.3.758': attribute type 13 has an invalid length. [ 174.560357][ T8733] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 175.055014][ T8530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.086437][ T8754] FAULT_INJECTION: forcing a failure. [ 175.086437][ T8754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.101656][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.1.765 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 175.101684][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 175.101705][ T8754] Call Trace: [ 175.101713][ T8754] [ 175.101721][ T8754] dump_stack_lvl+0x189/0x250 [ 175.101757][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.101803][ T8754] ? __pfx__printk+0x10/0x10 [ 175.101841][ T8754] ? fs_reclaim_acquire+0x7d/0x100 [ 175.101878][ T8754] should_fail_ex+0x414/0x560 [ 175.101903][ T8754] prepare_alloc_pages+0x213/0x610 [ 175.101958][ T8754] __alloc_frozen_pages_noprof+0x123/0x370 [ 175.101994][ T8754] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.102034][ T8754] ? policy_nodemask+0x27c/0x720 [ 175.102060][ T8754] ? __pfx__copy_from_iter+0x10/0x10 [ 175.102085][ T8754] alloc_pages_mpol+0x232/0x4a0 [ 175.102115][ T8754] alloc_pages_noprof+0xa9/0x190 [ 175.102142][ T8754] af_alg_sendmsg+0x1315/0x22d0 [ 175.102198][ T8754] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 175.102228][ T8754] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.102245][ T8754] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 175.102277][ T8754] ? aa_sock_msg_perm+0x94/0x160 [ 175.102301][ T8754] ? skcipher_sendmsg+0x26/0xf0 [ 175.102320][ T8754] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 175.102342][ T8754] __sock_sendmsg+0x219/0x270 [ 175.102377][ T8754] ____sys_sendmsg+0x505/0x830 [ 175.102410][ T8754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.102444][ T8754] ? import_iovec+0x74/0xa0 [ 175.102473][ T8754] ___sys_sendmsg+0x21f/0x2a0 [ 175.102505][ T8754] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.102569][ T8754] ? __fget_files+0x2a/0x420 [ 175.102593][ T8754] ? __fget_files+0x3a0/0x420 [ 175.102628][ T8754] __x64_sys_sendmsg+0x19b/0x260 [ 175.102658][ T8754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.102708][ T8754] ? do_syscall_64+0xba/0x210 [ 175.102731][ T8754] do_syscall_64+0xf6/0x210 [ 175.102750][ T8754] ? clear_bhb_loop+0x45/0xa0 [ 175.102774][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.102793][ T8754] RIP: 0033:0x7f589fb8e969 [ 175.102810][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.102827][ T8754] RSP: 002b:00007f58a0a90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.102848][ T8754] RAX: ffffffffffffffda RBX: 00007f589fdb5fa0 RCX: 00007f589fb8e969 [ 175.102863][ T8754] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 175.102875][ T8754] RBP: 00007f58a0a90090 R08: 0000000000000000 R09: 0000000000000000 [ 175.102887][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.102899][ T8754] R13: 0000000000000000 R14: 00007f589fdb5fa0 R15: 00007ffe21075758 [ 175.102929][ T8754] [ 175.373498][ T5140] Bluetooth: hci0: command tx timeout [ 175.522964][ T8530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.597579][ T8530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.674031][ T8530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.202748][ T8757] __nla_validate_parse: 7 callbacks suppressed [ 176.202768][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 176.293289][ T8790] FAULT_INJECTION: forcing a failure. [ 176.293289][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.336376][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.3.777 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 176.336403][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 176.336415][ T8790] Call Trace: [ 176.336423][ T8790] [ 176.336431][ T8790] dump_stack_lvl+0x189/0x250 [ 176.336461][ T8790] ? __lock_acquire+0xaac/0xd20 [ 176.336489][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.336515][ T8790] ? __pfx__printk+0x10/0x10 [ 176.336534][ T8790] ? __might_fault+0xb0/0x130 [ 176.336569][ T8790] should_fail_ex+0x414/0x560 [ 176.336599][ T8790] _copy_from_iter+0x1db/0x15a0 [ 176.336632][ T8790] ? policy_nodemask+0x27c/0x720 [ 176.336655][ T8790] ? __pfx__copy_from_iter+0x10/0x10 [ 176.336683][ T8790] ? set_page_refcounted+0xa0/0x1e0 [ 176.336714][ T8790] af_alg_sendmsg+0x13de/0x22d0 [ 176.336765][ T8790] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 176.336792][ T8790] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.336807][ T8790] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 176.336835][ T8790] ? aa_sock_msg_perm+0x94/0x160 [ 176.336855][ T8790] ? skcipher_sendmsg+0x26/0xf0 [ 176.336873][ T8790] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 176.336894][ T8790] __sock_sendmsg+0x219/0x270 [ 176.336916][ T8790] ____sys_sendmsg+0x505/0x830 [ 176.336945][ T8790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.336978][ T8790] ? import_iovec+0x74/0xa0 [ 176.337006][ T8790] ___sys_sendmsg+0x21f/0x2a0 [ 176.337032][ T8790] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.337093][ T8790] ? __fget_files+0x2a/0x420 [ 176.337115][ T8790] ? __fget_files+0x3a0/0x420 [ 176.337149][ T8790] __x64_sys_sendmsg+0x19b/0x260 [ 176.337177][ T8790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.337219][ T8790] ? do_syscall_64+0xba/0x210 [ 176.337240][ T8790] do_syscall_64+0xf6/0x210 [ 176.337258][ T8790] ? clear_bhb_loop+0x45/0xa0 [ 176.337280][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.337297][ T8790] RIP: 0033:0x7f544558e969 [ 176.337314][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.337330][ T8790] RSP: 002b:00007f544643f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.337349][ T8790] RAX: ffffffffffffffda RBX: 00007f54457b5fa0 RCX: 00007f544558e969 [ 176.337362][ T8790] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 176.337374][ T8790] RBP: 00007f544643f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.337384][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.337394][ T8790] R13: 0000000000000000 R14: 00007f54457b5fa0 R15: 00007ffe61819618 [ 176.337423][ T8790] [ 176.351638][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 176.480332][ T8793] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 176.693341][ T8793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.955050][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.020604][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.085786][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.093005][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.126417][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.133699][ T7936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.339503][ T8833] netlink: 'syz.2.785': attribute type 4 has an invalid length. [ 177.388035][ T8833] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.785'. [ 177.453474][ T5140] Bluetooth: hci0: command tx timeout [ 177.530148][ T8838] xt_bpf: check failed: parse error [ 177.835675][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.982980][ T8850] netlink: 'syz.2.789': attribute type 11 has an invalid length. [ 178.005878][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 178.326475][ T8530] veth0_vlan: entered promiscuous mode [ 178.401048][ T8847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.788'. [ 178.458612][ T8530] veth1_vlan: entered promiscuous mode [ 178.824500][ T8861] netlink: 'syz.2.790': attribute type 7 has an invalid length. [ 179.138575][ T8869] netlink: 52 bytes leftover after parsing attributes in process `syz.1.791'. [ 179.279160][ T8530] veth0_macvtap: entered promiscuous mode [ 179.408748][ T8530] veth1_macvtap: entered promiscuous mode [ 179.484025][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.517575][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.554115][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.573543][ T8880] xt_CT: No such helper "snmp" [ 179.599213][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.602276][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'. [ 179.626215][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.654102][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.677751][ T8888] netlink: 56 bytes leftover after parsing attributes in process `syz.2.795'. [ 179.687024][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 179.710766][ T8530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.732058][ T8530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.742409][ T8530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.757952][ T8530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.089953][ T8902] GUP no longer grows the stack in syz.3.800 (8902): 200000006000-20000000a000 (200000005000) [ 180.142164][ T8902] CPU: 0 UID: 0 PID: 8902 Comm: syz.3.800 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 180.142196][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 180.142209][ T8902] Call Trace: [ 180.142217][ T8902] [ 180.142225][ T8902] dump_stack_lvl+0x189/0x250 [ 180.142270][ T8902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.142299][ T8902] ? __pfx__printk+0x10/0x10 [ 180.142315][ T8902] ? find_vma+0xe7/0x160 [ 180.142353][ T8902] __get_user_pages+0x24e4/0x2a40 [ 180.142410][ T8902] ? __pfx___get_user_pages+0x10/0x10 [ 180.142434][ T8902] ? __gup_longterm_locked+0xbf7/0x15b0 [ 180.142456][ T8902] ? down_read_killable+0x1d1/0x350 [ 180.142474][ T8902] ? try_get_folio+0x633/0x660 [ 180.142500][ T8902] __gup_longterm_locked+0xd66/0x15b0 [ 180.142528][ T8902] ? try_grab_folio_fast+0x19a/0x4d0 [ 180.142561][ T8902] ? gup_fast_fallback+0x1672/0x1d60 [ 180.142586][ T8902] gup_fast_fallback+0x1843/0x1d60 [ 180.142640][ T8902] ? __pfx_gup_fast_fallback+0x10/0x10 [ 180.142660][ T8902] ? __mutex_lock+0x330/0xe80 [ 180.142681][ T8902] ? is_valid_gup_args+0x11f/0x200 [ 180.142704][ T8902] ? get_user_pages_fast+0x4d/0xb0 [ 180.142729][ T8902] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 180.142762][ T8902] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 180.142785][ T8902] ? wait_for_space+0x24d/0x2d0 [ 180.142808][ T8902] iov_iter_get_pages2+0x5e/0xa0 [ 180.142836][ T8902] __se_sys_vmsplice+0x548/0x10e0 [ 180.142879][ T8902] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 180.142902][ T8902] ? __pfx_futex_wait+0x10/0x10 [ 180.142937][ T8902] ? __lock_acquire+0xaac/0xd20 [ 180.143001][ T8902] ? rcu_is_watching+0x15/0xb0 [ 180.143037][ T8902] ? do_syscall_64+0xba/0x210 [ 180.143059][ T8902] do_syscall_64+0xf6/0x210 [ 180.143077][ T8902] ? clear_bhb_loop+0x45/0xa0 [ 180.143099][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.143116][ T8902] RIP: 0033:0x7f544558e969 [ 180.143132][ T8902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.143148][ T8902] RSP: 002b:00007f544643f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 180.143167][ T8902] RAX: ffffffffffffffda RBX: 00007f54457b5fa0 RCX: 00007f544558e969 [ 180.143180][ T8902] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 180.143191][ T8902] RBP: 00007f5445610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 180.143202][ T8902] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 180.143213][ T8902] R13: 0000000000000000 R14: 00007f54457b5fa0 R15: 00007ffe61819618 [ 180.143242][ T8902] [ 180.482287][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.490276][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.784852][ T8900] veth1_to_team: left promiscuous mode [ 180.826176][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.861510][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.977916][ T8900] 0·: left allmulticast mode [ 180.990122][ T8900] hsr_slave_0: left allmulticast mode [ 180.997253][ T8900] hsr_slave_1: left allmulticast mode [ 181.097493][ T8900] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.142491][ T8900] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.150911][ T8900] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.162746][ T8900] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.230067][ T8900] bridge1: left promiscuous mode [ 181.242344][ T8900] bridge2: left promiscuous mode [ 181.394709][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.420507][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.518268][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.530737][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.040341][ T8953] batadv_slave_0: entered promiscuous mode [ 182.048812][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 182.070350][ T8953] dummy0 (unregistering): left allmulticast mode [ 182.084599][ T8953] batman_adv: batadv0: Removing interface: dummy0 [ 182.150876][ T8959] pim6reg: entered allmulticast mode [ 182.174264][ T8952] batadv_slave_0: left promiscuous mode [ 182.181521][ T8959] pim6reg: left allmulticast mode [ 182.189730][ T8961] netlink: 788 bytes leftover after parsing attributes in process `syz.2.811'. [ 182.419455][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 182.447204][ T3497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.458570][ T8961] block nbd0: not configured, cannot reconfigure [ 182.535165][ T3497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.591571][ T8967] netlink: 'syz.4.815': attribute type 21 has an invalid length. [ 182.640313][ T8973] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 182.732057][ T8973] bond4: entered promiscuous mode [ 182.741177][ T8973] bond4: entered allmulticast mode [ 182.741292][ T8978] netlink: 'syz.1.812': attribute type 7 has an invalid length. [ 182.788302][ T8979] ip6gretap1: entered promiscuous mode [ 182.799707][ T8979] ip6gretap1: entered allmulticast mode [ 182.815647][ T8979] bond4: (slave ip6gretap1): making interface the new active one [ 182.826559][ T8979] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.848290][ T8970] netlink: 'syz.1.812': attribute type 7 has an invalid length. [ 182.861453][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 182.996439][ T3497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.044766][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 183.095952][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 183.144445][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 183.214143][ T3497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.436032][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.453907][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.463097][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.476498][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.484381][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.761554][ T3497] bridge_slave_1: left allmulticast mode [ 183.781022][ T3497] bridge_slave_1: left promiscuous mode [ 183.801398][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.830348][ T3497] bridge_slave_0: left allmulticast mode [ 183.836366][ T3497] bridge_slave_0: left promiscuous mode [ 183.849942][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.187483][ T9044] raw_sendmsg: syz.2.831 forgot to set AF_INET. Fix it! [ 184.363416][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.375386][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.387595][ T3497] bond0 (unregistering): Released all slaves [ 184.755612][ T9062] sctp: [Deprecated]: syz.1.836 (pid 9062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.755612][ T9062] Use struct sctp_sack_info instead [ 184.832669][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 184.875439][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 185.090596][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 185.228046][ T3497] hsr_slave_0: left promiscuous mode [ 185.252578][ T3497] hsr_slave_1: left promiscuous mode [ 185.260947][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.268623][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.277014][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.284853][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.318346][ T3497] veth1_macvtap: left promiscuous mode [ 185.324532][ T3497] veth0_macvtap: left promiscuous mode [ 185.330244][ T3497] veth1_vlan: left promiscuous mode [ 185.335702][ T3497] veth0_vlan: left promiscuous mode [ 185.534788][ T5140] Bluetooth: hci0: command tx timeout [ 185.767195][ T9090] netlink: 312 bytes leftover after parsing attributes in process `syz.1.842'. [ 185.887632][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 185.927267][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 186.324841][ T9082] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.353743][ T9082] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.362809][ T9082] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.371857][ T9082] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.390476][ T9082] bond1: left promiscuous mode [ 186.399850][ T9082] batadv1: left promiscuous mode [ 186.410531][ T9082] batadv1: left allmulticast mode [ 186.419102][ T9082] gtp0: left promiscuous mode [ 186.429718][ T9082] gtp0: left allmulticast mode [ 186.969668][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.983484][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.990883][ T9003] bridge_slave_0: entered allmulticast mode [ 186.999265][ T9003] bridge_slave_0: entered promiscuous mode [ 187.052843][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.067877][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.069099][ T9125] __nla_validate_parse: 2 callbacks suppressed [ 187.069116][ T9125] netlink: 64 bytes leftover after parsing attributes in process `syz.3.849'. [ 187.078418][ T9003] bridge_slave_1: entered allmulticast mode [ 187.099333][ T9003] bridge_slave_1: entered promiscuous mode [ 187.228528][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.228780][ T9133] netlink: 180 bytes leftover after parsing attributes in process `syz.3.853'. [ 187.259076][ T9133] netlink: 168 bytes leftover after parsing attributes in process `syz.3.853'. [ 187.267691][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.370668][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 187.397148][ T9003] team0: Port device team_slave_0 added [ 187.421427][ T9003] team0: Port device team_slave_1 added [ 187.511809][ T9148] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 187.537331][ T9146] syzkaller0: entered promiscuous mode [ 187.543044][ T9146] syzkaller0: entered allmulticast mode [ 187.553421][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.563015][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.590416][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.615146][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.622228][ T5140] Bluetooth: hci0: command tx timeout [ 187.622372][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.657417][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.704690][ T9148] bond1: entered promiscuous mode [ 187.711487][ T9148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.762123][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.778584][ T9149] bond1: (slave batadv1): making interface the new active one [ 187.788501][ T9149] batadv1: entered promiscuous mode [ 187.799209][ T9149] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 187.823511][ T9154] delete_channel: no stack [ 188.948229][ T5140] block nbd0: Receive control failed (result -107) [ 188.986392][ T9163] nbd0: detected capacity change from 0 to 32 [ 189.698458][ T5140] Bluetooth: hci0: command tx timeout [ 190.357899][ T9003] hsr_slave_0: entered promiscuous mode [ 190.372346][ T9003] hsr_slave_1: entered promiscuous mode [ 190.397124][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.410386][ T9003] Cannot create hsr debugfs directory [ 190.547805][ T9205] netlink: 248 bytes leftover after parsing attributes in process `syz.1.872'. [ 190.592825][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 190.788587][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 190.821111][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 190.888132][ T9217] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.897084][ T9217] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.905402][ T9217] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.909174][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 190.913721][ T9217] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.000326][ T9222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.877'. [ 191.369072][ T9236] netlink: 'syz.1.880': attribute type 29 has an invalid length. [ 191.471882][ T9003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.512019][ T9003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.541696][ T9003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.592723][ T9003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.773198][ T5140] Bluetooth: hci0: command tx timeout [ 191.832218][ T9222] xt_hashlimit: size too large, truncated to 1048576 [ 192.154351][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.193114][ T9264] syz.2.889 (9264) used obsolete PPPIOCDETACH ioctl [ 192.232324][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.287514][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.295576][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.329403][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.336604][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.470175][ T9274] __nla_validate_parse: 2 callbacks suppressed [ 192.470197][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 192.763741][ T9280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.098166][ T9302] ip6t_srh: unknown srh match flags 5294 [ 193.220129][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.898'. [ 193.240213][ T9308] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 193.288630][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 193.303950][ T9308] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 193.361038][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.470850][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.898'. [ 193.512776][ T9003] veth0_vlan: entered promiscuous mode [ 193.548730][ T9003] veth1_vlan: entered promiscuous mode [ 193.876612][ T9325] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 193.890355][ T9003] veth0_macvtap: entered promiscuous mode [ 193.920542][ T9003] veth1_macvtap: entered promiscuous mode [ 193.938153][ T9325] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 194.027184][ T9331] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 194.029841][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.079768][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.136244][ T9003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.162532][ T9003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.171301][ T9003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.200755][ T9003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.219336][ T9339] 8021q: VLANs not supported on nlmon0 [ 194.265889][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.272400][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.316669][ T9350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.908'. [ 194.360175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.382771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.429348][ T9353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 194.444825][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.458577][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.559664][ T9357] vlan2: left promiscuous mode [ 194.571581][ T9357] bond0: left promiscuous mode [ 194.577711][ T9357] bond_slave_0: left promiscuous mode [ 194.584330][ T9357] bond_slave_1: left promiscuous mode [ 194.590517][ T9357] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 194.607109][ T9357] bridge0: left promiscuous mode [ 194.612667][ T9357] vlan2: left allmulticast mode [ 194.617612][ T9357] bond0: left allmulticast mode [ 194.623163][ T9357] bond_slave_0: left allmulticast mode [ 194.628731][ T9357] bond_slave_1: left allmulticast mode [ 194.634432][ T9357] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 194.641243][ T9357] bridge0: left allmulticast mode [ 194.752292][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 194.849638][ T9371] set match dimension is over the limit! [ 194.877521][ T9371] pim6reg: entered allmulticast mode [ 194.953633][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.917'. [ 195.125975][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.920'. [ 195.307411][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.402050][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.518719][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.668856][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.835763][ T12] bridge_slave_1: left allmulticast mode [ 195.841577][ T12] bridge_slave_1: left promiscuous mode [ 195.847588][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.861721][ T12] bridge_slave_0: left allmulticast mode [ 195.870090][ T12] bridge_slave_0: left promiscuous mode [ 195.902762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.971858][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 196.303645][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.313072][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.321601][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.340640][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.353908][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.450778][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.461903][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.474596][ T12] bond0 (unregistering): Released all slaves [ 196.491996][ T9399] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 196.659825][ T9419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.156260][ T12] hsr_slave_0: left promiscuous mode [ 197.172941][ T12] hsr_slave_1: left promiscuous mode [ 197.174960][ T9437] Illegal XDP return value 4294967294 on prog (id 489) dev N/A, expect packet loss! [ 197.181022][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.204599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.218122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.226929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.271599][ T12] veth1_macvtap: left promiscuous mode [ 197.283478][ T12] veth0_macvtap: left promiscuous mode [ 197.290718][ T12] veth1_vlan: left promiscuous mode [ 197.300612][ T12] veth0_vlan: left promiscuous mode [ 197.812841][ T12] team0 (unregistering): Port device team_slave_1 removed [ 197.890421][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.413604][ T5835] Bluetooth: hci0: command tx timeout [ 198.454062][ T9444] ip6tnl3: entered promiscuous mode [ 198.471125][ T9444] ip6tnl3: entered allmulticast mode [ 198.521852][ T9413] chnl_net:caif_netlink_parms(): no params data found [ 198.811327][ T9476] bridge0: port 3(gretap0) entered blocking state [ 198.840261][ T9476] bridge0: port 3(gretap0) entered disabled state [ 198.852660][ T9476] gretap0: entered allmulticast mode [ 198.859787][ T9476] gretap0: entered promiscuous mode [ 198.900009][ T9485] __nla_validate_parse: 3 callbacks suppressed [ 198.900029][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 198.932927][ T9485] netlink: 'syz.1.944': attribute type 3 has an invalid length. [ 199.086372][ T9491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 199.112610][ T9491] netlink: 56 bytes leftover after parsing attributes in process `syz.3.945'. [ 199.187722][ T9497] netlink: 428 bytes leftover after parsing attributes in process `syz.2.947'. [ 199.286011][ T9491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 199.314279][ T9491] gretap1: entered promiscuous mode [ 199.331224][ T9491] gretap1: entered allmulticast mode [ 199.337028][ T9497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.947'. [ 199.410191][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.435054][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.462789][ T9413] bridge_slave_0: entered allmulticast mode [ 199.479620][ T9413] bridge_slave_0: entered promiscuous mode [ 199.549198][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 199.609789][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 199.619341][ T9503] syzkaller0: entered promiscuous mode [ 199.644338][ T9503] syzkaller0: entered allmulticast mode [ 199.658229][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.669826][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.677415][ T9413] bridge_slave_1: entered allmulticast mode [ 199.685941][ T9413] bridge_slave_1: entered promiscuous mode [ 199.796308][ T9521] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 199.815465][ T9521] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.952'. [ 199.899240][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 200.496323][ T5835] Bluetooth: hci0: command tx timeout [ 202.413085][ T9413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.437606][ T9523] veth7: entered allmulticast mode [ 202.504742][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'. [ 202.573114][ T5835] Bluetooth: hci0: command tx timeout [ 202.581573][ T9413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.737116][ T9413] team0: Port device team_slave_0 added [ 202.783871][ T9413] team0: Port device team_slave_1 added [ 202.898094][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.905570][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.951666][ T9413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.980538][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.992844][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.019363][ T9413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.259765][ T9413] hsr_slave_0: entered promiscuous mode [ 203.272988][ T9413] hsr_slave_1: entered promiscuous mode [ 203.279692][ T9413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.287945][ T9413] Cannot create hsr debugfs directory [ 203.311249][ T9563] vlan3: entered promiscuous mode [ 203.316857][ T9563] vlan3: entered allmulticast mode [ 203.322005][ T9563] hsr_slave_1: entered allmulticast mode [ 204.066916][ T9579] syzkaller0: entered promiscuous mode [ 204.085624][ T9579] syzkaller0: entered allmulticast mode [ 204.131703][ T9584] syz.1.969: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.149958][ T9584] CPU: 1 UID: 0 PID: 9584 Comm: syz.1.969 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 204.149985][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 204.149998][ T9584] Call Trace: [ 204.150005][ T9584] [ 204.150013][ T9584] dump_stack_lvl+0x189/0x250 [ 204.150050][ T9584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.150080][ T9584] ? __pfx__printk+0x10/0x10 [ 204.150101][ T9584] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.150121][ T9584] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.150144][ T9584] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 204.150167][ T9584] warn_alloc+0x214/0x310 [ 204.150202][ T9584] ? __pfx_warn_alloc+0x10/0x10 [ 204.150240][ T9584] ? __get_vm_area_node+0x1c5/0x2d0 [ 204.150265][ T9584] ? __get_vm_area_node+0x25a/0x2d0 [ 204.150298][ T9584] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 204.150358][ T9584] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.150384][ T9584] ? xskq_create+0x56/0x170 [ 204.150414][ T9584] ? __kasan_kmalloc+0x93/0xb0 [ 204.150444][ T9584] vmalloc_user_noprof+0x74/0x80 [ 204.150479][ T9584] ? xskq_create+0xbf/0x170 [ 204.150505][ T9584] xskq_create+0xbf/0x170 [ 204.150536][ T9584] xsk_init_queue+0xb0/0x110 [ 204.150566][ T9584] xsk_setsockopt+0x4de/0x710 [ 204.150596][ T9584] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.150630][ T9584] ? aa_sock_opt_perm+0x74/0x110 [ 204.150653][ T9584] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 204.150675][ T9584] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.150703][ T9584] do_sock_setsockopt+0x257/0x3e0 [ 204.150733][ T9584] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 204.150755][ T9584] ? __fget_files+0x2a/0x420 [ 204.150785][ T9584] ? __fget_files+0x3a0/0x420 [ 204.150809][ T9584] ? __fget_files+0x2a/0x420 [ 204.150843][ T9584] __x64_sys_setsockopt+0x18b/0x220 [ 204.150875][ T9584] do_syscall_64+0xf6/0x210 [ 204.150894][ T9584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.150913][ T9584] ? clear_bhb_loop+0x45/0xa0 [ 204.150942][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.150960][ T9584] RIP: 0033:0x7f589fb8e969 [ 204.150977][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.150994][ T9584] RSP: 002b:00007f58a0a90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.151014][ T9584] RAX: ffffffffffffffda RBX: 00007f589fdb5fa0 RCX: 00007f589fb8e969 [ 204.151028][ T9584] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 204.151040][ T9584] RBP: 00007f589fc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 204.151051][ T9584] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 204.151064][ T9584] R13: 0000000000000000 R14: 00007f589fdb5fa0 R15: 00007ffe21075758 [ 204.151096][ T9584] [ 204.151164][ T9584] Mem-Info: [ 204.429870][ T9584] active_anon:7724 inactive_anon:0 isolated_anon:0 [ 204.429870][ T9584] active_file:1382 inactive_file:39883 isolated_file:0 [ 204.429870][ T9584] unevictable:779 dirty:257 writeback:0 [ 204.429870][ T9584] slab_reclaimable:11300 slab_unreclaimable:133666 [ 204.429870][ T9584] mapped:29026 shmem:1363 pagetables:651 [ 204.429870][ T9584] sec_pagetables:0 bounce:0 [ 204.429870][ T9584] kernel_misc_reclaimable:0 [ 204.429870][ T9584] free:1306011 free_pcp:1606 free_cma:0 [ 204.475446][ T9584] Node 0 active_anon:30896kB inactive_anon:0kB active_file:5528kB inactive_file:159332kB unevictable:1580kB isolated(anon):0kB isolated(file):0kB mapped:116104kB dirty:1024kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11700kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.509671][ T9584] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.575339][ T9584] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.649203][ T9584] lowmem_reserve[]: [ 204.652940][ T5835] Bluetooth: hci0: command tx timeout [ 204.771760][ T9584] 0 2503 2504 2504 2504 [ 204.778606][ T9584] Node 0 DMA32 free:1298460kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:30888kB inactive_anon:0kB active_file:5528kB inactive_file:159240kB unevictable:1580kB writepending:1020kB present:3129332kB managed:2564072kB mlocked:44kB bounce:0kB free_pcp:1320kB local_pcp:124kB free_cma:0kB [ 204.810240][ T9594] __nla_validate_parse: 5 callbacks suppressed [ 204.810262][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 204.833582][ T9584] lowmem_reserve[]: 0 0 0 0 0 [ 204.859998][ T9584] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 204.893599][ T9584] lowmem_reserve[]: 0 0 0 0 0 [ 204.898422][ T9584] Node 1 Normal free:3916312kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.933945][ T9584] lowmem_reserve[]: 0 0 0 0 0 [ 204.938751][ T9584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.957417][ T9584] Node 0 DMA32: 42*4kB (UM) 171*8kB (UME) 78*16kB (UME) 82*32kB (UME) 49*64kB (UME) 39*128kB (ME) 75*256kB (UM) 61*512kB (UM) 23*1024kB (UME) 5*2048kB (UM) 293*4096kB (UM) = 1297888kB [ 204.982102][ T9584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.007592][ T9584] Node 1 Normal: 202*4kB (UM) 56*8kB (UME) 45*16kB (UME) 181*32kB (UME) 93*64kB (UME) 35*128kB (UME) 13*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 948*4096kB (M) = 3916312kB [ 205.031573][ T9584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.041435][ T9584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.056257][ T9584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.072211][ T9584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.081705][ T9584] 42625 total pagecache pages [ 205.088146][ T9584] 0 pages in swap cache [ 205.092399][ T9584] Free swap = 124996kB [ 205.102398][ T9584] Total swap = 124996kB [ 205.106732][ T9584] 2097051 pages RAM [ 205.110557][ T9584] 0 pages HighMem/MovableOnly [ 205.121461][ T9584] 424375 pages reserved [ 205.126595][ T9584] 0 pages cma reserved [ 206.805888][ T9608] sctp: [Deprecated]: syz.3.975 (pid 9608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.805888][ T9608] Use struct sctp_sack_info instead [ 206.862299][ T9413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.904377][ T9610] netlink: 71 bytes leftover after parsing attributes in process `syz.2.976'. [ 206.904901][ T9413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.933863][ T9413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.984441][ T9413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.126944][ T9619] veth0: entered promiscuous mode [ 207.188927][ T9617] veth0: left promiscuous mode [ 207.198954][ T9625] blkio.reset_stats is deprecated [ 207.320926][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.331846][ T9628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.982'. [ 207.350491][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 207.359457][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.369061][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.376231][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.399855][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.407033][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.768426][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 207.834025][ T9413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.991668][ T9413] veth0_vlan: entered promiscuous mode [ 208.078201][ T9654] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 208.091018][ T9413] veth1_vlan: entered promiscuous mode [ 208.106034][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.987'. [ 208.189989][ T9413] veth0_macvtap: entered promiscuous mode [ 208.237174][ T9413] veth1_macvtap: entered promiscuous mode [ 208.265518][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 208.352032][ T9661] ------------[ cut here ]------------ [ 208.358024][ T9661] WARNING: CPU: 1 PID: 9661 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 [ 208.367432][ T9661] Modules linked in: [ 208.371554][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.3.988 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 208.383662][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 208.394105][ T9661] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 208.400226][ T9661] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 208.420087][ T9661] RSP: 0018:ffffc90004e673d0 EFLAGS: 00010287 [ 208.426698][ T9661] RAX: ffffffff84ec1e8f RBX: ffffffff8c809eb0 RCX: 0000000000080000 [ 208.434786][ T9661] RDX: ffffc9000cfd4000 RSI: 0000000000007692 RDI: 0000000000007693 [ 208.442907][ T9661] RBP: 0000000000008a3e R08: ffff88805b891e00 R09: 0000000000000004 [ 208.450915][ T9661] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c809eba [ 208.459023][ T9661] R13: ffffc90004e675b0 R14: dffffc0000000000 R15: 1ffffffff19013d6 [ 208.467103][ T9661] FS: 00007f544643f6c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 208.476386][ T9661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.483070][ T9661] CR2: 00007f5445574420 CR3: 0000000062250000 CR4: 00000000003526f0 [ 208.491099][ T9661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.499352][ T9661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.507440][ T9661] Call Trace: [ 208.510766][ T9661] [ 208.513811][ T9661] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 208.520126][ T9661] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 208.527002][ T9661] ? stack_trace_save+0x9c/0xe0 [ 208.531896][ T9661] ? stack_depot_save_flags+0x40/0x910 [ 208.537478][ T9661] ? __asan_memset+0x22/0x50 [ 208.542105][ T9661] ? __nla_put+0x85/0xd0 [ 208.546442][ T9661] ? __asan_memcpy+0x40/0x70 [ 208.551076][ T9661] ? nla_put+0xd0/0x150 [ 208.555323][ T9661] netlink_policy_dump_write+0x1e1/0x6e0 [ 208.561028][ T9661] ctrl_dumppolicy+0x6f4/0xb90 [ 208.565915][ T9661] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 208.571254][ T9661] ? genl_dumpit+0xdb/0x1b0 [ 208.576096][ T9661] ? __pfx___mutex_lock+0x10/0x10 [ 208.581180][ T9661] ? __build_skb_around+0x257/0x3e0 [ 208.586513][ T9661] genl_dumpit+0x108/0x1b0 [ 208.590980][ T9661] netlink_dump+0x64e/0xe70 [ 208.595598][ T9661] ? __pfx_netlink_dump+0x10/0x10 [ 208.600675][ T9661] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.606005][ T9661] ? kmem_cache_free+0x192/0x3f0 [ 208.610999][ T9661] netlink_recvmsg+0x67b/0xe00 [ 208.615874][ T9661] ? __lock_acquire+0xaac/0xd20 [ 208.620787][ T9661] ? __pfx_netlink_recvmsg+0x10/0x10 [ 208.626184][ T9661] ? __pfx_aa_sk_perm+0x10/0x10 [ 208.631082][ T9661] ? aa_sock_msg_perm+0x94/0x160 [ 208.636145][ T9661] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 208.641476][ T9661] ? security_socket_recvmsg+0x7e/0x2e0 [ 208.647140][ T9661] ? __pfx_netlink_recvmsg+0x10/0x10 [ 208.652666][ T9661] sock_recvmsg+0x229/0x270 [ 208.657220][ T9661] __sys_recvfrom+0x1f6/0x340 [ 208.661946][ T9661] ? __pfx___sys_recvfrom+0x10/0x10 [ 208.667251][ T9661] ? count_memcg_event_mm+0x92/0x3b0 [ 208.672658][ T9661] __x64_sys_recvfrom+0xde/0x100 [ 208.677642][ T9661] do_syscall_64+0xf6/0x210 [ 208.682214][ T9661] ? clear_bhb_loop+0x45/0xa0 [ 208.686988][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.692986][ T9661] RIP: 0033:0x7f5445590734 [ 208.697442][ T9661] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 208.717247][ T9661] RSP: 002b:00007f544643df30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 208.725803][ T9661] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f5445590734 [ 208.733905][ T9661] RDX: 0000000000001000 RSI: 00007f544643e010 RDI: 0000000000000004 [ 208.741910][ T9661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.749983][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 208.758119][ T9661] R13: 00007f544643dfc0 R14: 000000000000000c R15: 0000000000000000 [ 208.766233][ T9661] [ 208.769314][ T9661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.776623][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.3.988 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) [ 208.788550][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 208.798641][ T9661] Call Trace: [ 208.801934][ T9661] [ 208.804874][ T9661] dump_stack_lvl+0x99/0x250 [ 208.809481][ T9661] ? __asan_memcpy+0x40/0x70 [ 208.814082][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.819296][ T9661] ? __pfx__printk+0x10/0x10 [ 208.823904][ T9661] panic+0x2db/0x790 [ 208.827820][ T9661] ? __pfx_panic+0x10/0x10 [ 208.832265][ T9661] __warn+0x31b/0x4b0 [ 208.836281][ T9661] ? nla_get_range_unsigned+0xc8/0x4b0 [ 208.841749][ T9661] ? nla_get_range_unsigned+0xc8/0x4b0 [ 208.847217][ T9661] report_bug+0x2be/0x4f0 [ 208.851587][ T9661] ? nla_get_range_unsigned+0xc8/0x4b0 [ 208.857057][ T9661] ? nla_get_range_unsigned+0xc8/0x4b0 [ 208.862525][ T9661] ? nla_get_range_unsigned+0xca/0x4b0 [ 208.867996][ T9661] handle_bug+0x84/0x160 [ 208.872249][ T9661] exc_invalid_op+0x1a/0x50 [ 208.876762][ T9661] asm_exc_invalid_op+0x1a/0x20 [ 208.881617][ T9661] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 208.887691][ T9661] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 208.907325][ T9661] RSP: 0018:ffffc90004e673d0 EFLAGS: 00010287 [ 208.913407][ T9661] RAX: ffffffff84ec1e8f RBX: ffffffff8c809eb0 RCX: 0000000000080000 [ 208.921388][ T9661] RDX: ffffc9000cfd4000 RSI: 0000000000007692 RDI: 0000000000007693 [ 208.929365][ T9661] RBP: 0000000000008a3e R08: ffff88805b891e00 R09: 0000000000000004 [ 208.937355][ T9661] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c809eba [ 208.945342][ T9661] R13: ffffc90004e675b0 R14: dffffc0000000000 R15: 1ffffffff19013d6 [ 208.953329][ T9661] ? nla_get_range_unsigned+0x39f/0x4b0 [ 208.958898][ T9661] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 208.965176][ T9661] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 208.971963][ T9661] ? stack_trace_save+0x9c/0xe0 [ 208.976821][ T9661] ? stack_depot_save_flags+0x40/0x910 [ 208.982292][ T9661] ? __asan_memset+0x22/0x50 [ 208.986881][ T9661] ? __nla_put+0x85/0xd0 [ 208.991127][ T9661] ? __asan_memcpy+0x40/0x70 [ 208.995861][ T9661] ? nla_put+0xd0/0x150 [ 209.000027][ T9661] netlink_policy_dump_write+0x1e1/0x6e0 [ 209.005688][ T9661] ctrl_dumppolicy+0x6f4/0xb90 [ 209.010474][ T9661] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 209.015772][ T9661] ? genl_dumpit+0xdb/0x1b0 [ 209.020299][ T9661] ? __pfx___mutex_lock+0x10/0x10 [ 209.025333][ T9661] ? __build_skb_around+0x257/0x3e0 [ 209.030542][ T9661] genl_dumpit+0x108/0x1b0 [ 209.034973][ T9661] netlink_dump+0x64e/0xe70 [ 209.039492][ T9661] ? __pfx_netlink_dump+0x10/0x10 [ 209.044552][ T9661] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.049792][ T9661] ? kmem_cache_free+0x192/0x3f0 [ 209.054753][ T9661] netlink_recvmsg+0x67b/0xe00 [ 209.059547][ T9661] ? __lock_acquire+0xaac/0xd20 [ 209.064423][ T9661] ? __pfx_netlink_recvmsg+0x10/0x10 [ 209.069726][ T9661] ? __pfx_aa_sk_perm+0x10/0x10 [ 209.074589][ T9661] ? aa_sock_msg_perm+0x94/0x160 [ 209.079544][ T9661] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 209.084838][ T9661] ? security_socket_recvmsg+0x7e/0x2e0 [ 209.090394][ T9661] ? __pfx_netlink_recvmsg+0x10/0x10 [ 209.095688][ T9661] sock_recvmsg+0x229/0x270 [ 209.100197][ T9661] __sys_recvfrom+0x1f6/0x340 [ 209.104883][ T9661] ? __pfx___sys_recvfrom+0x10/0x10 [ 209.110087][ T9661] ? count_memcg_event_mm+0x92/0x3b0 [ 209.115420][ T9661] __x64_sys_recvfrom+0xde/0x100 [ 209.120368][ T9661] do_syscall_64+0xf6/0x210 [ 209.124877][ T9661] ? clear_bhb_loop+0x45/0xa0 [ 209.129564][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.135459][ T9661] RIP: 0033:0x7f5445590734 [ 209.139888][ T9661] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 209.159502][ T9661] RSP: 002b:00007f544643df30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 209.167924][ T9661] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f5445590734 [ 209.175902][ T9661] RDX: 0000000000001000 RSI: 00007f544643e010 RDI: 0000000000000004 [ 209.183880][ T9661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.191855][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 209.199832][ T9661] R13: 00007f544643dfc0 R14: 000000000000000c R15: 0000000000000000 [ 209.207824][ T9661] [ 209.211170][ T9661] Kernel Offset: disabled [ 209.215520][ T9661] Rebooting in 86400 seconds..