last executing test programs: 5.746410922s ago: executing program 0 (id=2126): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffffbc, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000005440)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000005440)={'wg2\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000300)="71e31116baf5c08e42962fae38257aa26144b6aa854023b8016417880911aa4786f9ca443163c463e82e38b6c31d1eb75654a72f83546a781698c938662d17b91f1309e0d4926938396d4b0a4fd1f78eff61ae85db574bf5840737c56d2b0915ed0ba4e3bc4b3558", 0x68}, {&(0x7f0000000480)="b192ccbd37a632924b3ff9fa77eeb019746925c829843e114d6d465aff4f8706b84bd60517f9b6a67f4153979be86e6533fc860c9493f0b5b695ab90aa", 0x3d}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="0c97725ae73cab2337dc40bc0ecde50fcc833449889e246793984a3fbfce3ee550049fc351aac9ca8e98458a1070a5a635d6196527543e3d716af09b49cf00bb694b9d52ca07b05dddf581316ea544", 0x4f}, {&(0x7f0000000680)="c01b939e9cf8e357b010a4cd7eb00f03181ebd8355c91be789567ed6a19cb2161a1d8cbddf2786a22d3c292a739848814352cf7abd727820444b02e7752f0417a78bf253fe5d0947e8d08a37d0908915858468189e04226e6a7710da86788190f1e4804b3d6d60602930bff2dc45212735473034d7e7adc7d06bd94f15073b47b603e14d9a4f6f9b4a67c0f3566f0155688c338d41a673cd5916df9bb37b18d7ad098fcdb153f61213373ce2698deba646a0ffaf493886a8f4f8a42e1e93a550f954be9a5c146ead4de60d9e616519f0d649c1e8049802344966967de7267bc9744ad3d6aa", 0xe5}, {&(0x7f0000000880)="7b1e7b57966cf0b2e2eafbb42f5e01b748e70a92dd2abffd911e19ec4e16c8615e6ca5d5b75d541ea95e18091e45ac2bf12d9feaf4ec7b339e354914294e4c8f9df95f55adedea30813c02b7e760a3b9fd8b57e870c4941146db84b9f998abc7f6bc7853d1aa1886db1abd4b971d99874001d49bf201f8fbf9979a230d5f9364059a254900011ae3d5a78e068c602561c441b9c904878da720008b62979c4b96f609219d6c34bf919b5d3365a205c8863413a027206d282068726c0720abdfac3aa4202f", 0xc4}], 0x6}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000a00)="6131a936fbdccb4c828ba0fd94568c5d5d665a77c32a8e9e2ee7972f2e5e9751bc501ee154ed3e75801bc9152942927732e05278dda30083a397a1905fc0080b04bf0876e2eac23257785ac50f86f3091e6c398ae484e0886832fc3d71b2def76ab1fbddcf45f11af6f0e013deb7e69219ae6a05fbe2c40495a99040f559cb9455465a57a4d910326410e33517d68e2df86462bd7d4890d9a26fb85a447b744a97", 0xa1}, {&(0x7f0000000ac0)="4c0205101ab61bf0ec29471cbb8371c7e5b318350062646e2e1203529eed6b2c614c08d1faf07b49d510bc90e1f8f197cc714c661d8eb132c2ac4cb056be4b70b7aa83ada4d18a0b0c42194a244b7fa7a7ee3b", 0x53}, {&(0x7f0000000b40)="a7cbd8865c73abd93cd9f02e9ad720e21f5ba3a946610d3b80bf3e3623815064d93b4d03f2d7c51e59b0e6c47ff72b6275d8d5a22bf1679cecd25d6cc4eb7e10e97b692055a5ae6fc2bc05c8494723a247eac9e568fc04a8ee2609873bbb861513b6da7e3440ef2c0b9beffe74b7d12a1b01d573e7275d002ee3034a0e6565c9c78a0a6d7c61b195050071eb95a6ee905dbf9ff710137b5fd8378263d7a1507dfd324be038ec9a9e391a1ad1673937bb78d7a0f1a6667736cfc3", 0xba}, {&(0x7f0000000780)="a44664ca443e39b8e4151ad81eb5d0e39971031a4ccfd1cc00ddf5d6dbf0f65e4fad7eaa74e280d8b24c5a4bc242e5f82781dbd949", 0x35}, {&(0x7f0000000c00)="8db22b5a3e72afa67c453ff4986a9fa71ee44a9580a9c2d111a38ac1332cfde821b564a341607ed5bbd7ab44b7f7ef3f3c6b2e", 0x33}], 0x5, &(0x7f0000000cc0)=[@hoplimit={{0x14, 0x29, 0x34, 0xd}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x74}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0xb8}}, {{&(0x7f0000000dc0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000e00)="ba2244962e1aaa430db93fe95759d4291d9efb5ad06b34f8e98a7ee8111773149f0831e32c952677a9fc24cbd2927f1fd4017ad5794301440fa59a662147374c7bb50028c26090b3c24b70add117ae17c80bd2be9b9639361ec4c4a5cb73807ea64077c0c032602fe1c1b1bb62a255127b33c1f7d27308f9ef463050870f2090058e694fcfac52f519c7b47f21355cc6a45f3f64e64d91b68b288dc7dfe436d5fc25a2bc8abaf4a376d89dff73b215307248b86280b8efd85395d32745492b850bffc980c2dd510102ecb0bc9405ae6d1e20265624", 0xd5}, {&(0x7f0000000f00)="61aaff3ea2b000fa8a944575c80513412fec8a5e2d3f644d40ee952d3e9f6aaa48112241941d04c014abedb992db867aeaa3e8a406bdc1abdf425d001c442d611d8ced7fd983656f191c13b22cfa8635cd5d72a64511455718ea179748f65cb181", 0x61}, {&(0x7f0000000f80)="7d67978091c09621c30aa1c1e306b5aee1801f6fcfdf8ca278405dc3ffa2845d486f51c8329a730bf5560f11d60f6b2b1d024244be6f761c0724fda46e1a7996d17d7b74c74b175b68d58d54c9c112312d7ce6fc81fcecb8fc4e56c6d79a9f67cc7b801f08895766e5c127db06e75b1a790b3f7448accc1e02c9af8c0e1580bbe3bd4795da35", 0x86}, {&(0x7f0000001040)="0a792205517e", 0x6}, {&(0x7f0000001080)="ec6de589d584576d2209f9f12ced27c3de9c601ce9e636a8ea9ca27834262807f67b1999792edf6070a8c4e43bf1f4b60bbdcba77293754b1a7921fbab92304037d4efbc4de8eb3839c9e4452ab3d2b49dabaeb4171b474358d56e84687f262326343697b8b6519553d0943a23151ec1f4c7275aa9a61877d54d7e1dfc26c781767a23032fce5f532b5e418a09ca816656da911375bbbc23836a7c3e8bdbb71c986f672ef444772a4e", 0xa9}, {&(0x7f0000001140)="f77c429116e24def52a2b22d9ca6a092e64b28509d50754120909e6a199cf96427337865c961b18224af188d0118124748707e7b93492ada48f3fd1ff745a0cb8d268efa8ae5b4bf6d8c5162f9904dbfd1e25e39cf", 0x55}], 0x6, &(0x7f0000001240)=[@dstopts={{0xc0, 0x29, 0x37, {0xff, 0x15, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @generic={0x6, 0x71, "4d22838983fba081cf33c85f76c42f3f140b5fddf3a0bb5603e8d403e68062e3aea30ae77d05840af24b64236e0ef522f1db5cc542d4b83c0fc53d3a3cb59501bfb98121bbccd50b3b3c68a5ba7f6ec20b30271db1c87b0d81bc64d683bd1f995055820f34b6bc88e84582221e5ea15e91"}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x62, 0x6, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo, @calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x6}}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x99, 0x8, 0x0, 0x66, 0x0, [@empty, @mcast2, @rand_addr=' \x01\x00', @loopback]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x3c, 0x5, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xb9, 0x7, "67abc755a260da"}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd8, 0x3, [0x1, 0x80f]}}]}}}, @dstopts_2292={{0x1058, 0x29, 0x4, {0x32, 0x207, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x1}, @generic={0x8, 0x1000, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x0, [0x3b1, 0x7, 0x1, 0x5, 0x4]}}]}}}, @dstopts_2292={{0x1d0, 0x29, 0x4, {0x87, 0x36, '\x00', [@generic={0x9, 0xda, "cbd82d5761d72f8fae69e1660527df9f70091d404d8c719986b79aa5891593616dd2f6f653a9faef0d76a5c001ce36634d939b5e94513012460038dbab07bf263e10d2c32378d56189ed713c0ed969ba4d6fbefed39472aa984a784dbfb0834ea005560aa91485eee0ec54fe34731bcb93155188fa54493d4206f87ce13b7ab2fc8d848726c9483db9748a426104df792c6e6bfe80831205414ab2262c5a21b78e941fd42da900b79a8b0cc86d20e8bfd90cee2a2b2ea4aef867d18589b734043bfdfa4a11e4e28b34ea8ee5c8ee6e984baf5a6d3d3a58bffe7c"}, @padn={0x1, 0x1, [0x0]}, @generic={0xd5, 0xd3, "6991b4d90d91ded9a118d4886f81aa1284fdb9504be0b869fdf29550432d1d88550c01e7e67d3ce7c2324ac8ac85199c09900211637d26fcc21a97575782aed49ef43c2cd08e4eac32542eda4648afa2a4288c294dc80f6c85daa316d7aa1c7893e4cb155386674863dfb513357a5f9f8d71e5167f8abcebe866c8676eaee535050a1525291f4ace09ebb94819df089723ce4132f90c02dd099d9a41d1d82e59a33f400eee5415ee00b430a3918c9a58ff24a07de5de46e6fe9dc4bbb2437c523dc3c77b814fb0b93fac8b4d505db65808b773"}]}}}], 0x1408}}, {{&(0x7f0000002680)={0xa, 0x4e22, 0x54, @empty, 0x1}, 0x1c, &(0x7f0000003a80)=[{&(0x7f00000026c0)="332d0bd53acdb1b88d6ddc67fa27c64ca0360b417a368c29262c65ae407c3866cdaa985ec8af982525cbccf650b0aa22bd4ebe592f25df27312a9c8605db846b6148bb561103f12bf78abbc60b32e235529afa9d980b624890e90893d95e5378d3c8d7c5fa9eac7cd7aacc3b97863f184c35b14faf19f84f29a2e77d2ea9", 0x7e}, {&(0x7f0000002740)="53cb7466db42143b0c0c750daaef4ef7524c1ba66a5b5bf28409b4fa207ebcbca4baae3eb2ab3cdce1af9bc2d9f8a499730134c843652b9d38f9d6230840a0a4771bb9f6143b2d1187f4c60a62fbe1ed95dc8bbf4801336d5bc38f46b627eb883b143b31d2fe59450295f664e2a538f40c714f307d591ee2802164445710117c1e004886375c9df97219874e9d8748f2bd706cda1a47de27f86b5cea0d2c0896535d389b9bed1bbd460192574134d3f1d972067fb06e723214f5f724f45fa3898ed4481164291b252b75ae6be867b855ef2e8345", 0xd4}, {&(0x7f0000002840)="db52f8f90064f2e1b1345c63cd332b6f3dc8ab6e9dadc8e42dadd569a3d43fc4515f1a4de6a90a3dd19d8092081917eae57ae6159bb6fe3d0cbb3a48b0", 0x3d}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="543f9825702f1d00216fcf5a789d3417a2f56815411663e50c70762c3b890f89f3b4204e99601fd80d9395a5d4524f2cc09f6535", 0x34}, {&(0x7f0000003900)="6bf0f688d1559763c6b0158bae309631baa2732ab037b0c9b64e99bf02ee48e272128a1c7d4e4fd740879c3d1b1d7327a9d12e5d0c297d79af879e605d12e2f6a50696b28455c2d197b024bb285186a19772db7013e082261c984aaf2bcd809975da3bd2caeb8b6934c9b59ab1ac5eb2be85e9414e0d889d93693f17bdd8994c9d1203fb9a35af10925c5f96586ea9163ec4fb6c19b4ccc93ff85851cdea009fe86f33125d0c616a90a25e2aae728e5d89b9ecbd15c410f25c0693b0a7463b4393d4ec4db9c25f2ede754be6ef008d3edae644bd3eba476f4a188765368a5c330961ff968fab72", 0xe7}, {&(0x7f0000003a00)="f92b667f6852c2ab6e2fe0ffc5697c1b37abeb582dac9afd4c9322f83c6bc71f131ed63b5d2755fc6814983f34b64041ecafc11fdd97f463e86cc3505b9e291bb1f5b798f81026ebb38fdbabf345d99d3e1cef2665a17c6c38f9c134", 0x5c}], 0x7}}, {{&(0x7f0000003b00)={0xa, 0x4e23, 0x80000000, @remote, 0x9}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000003b40)="332e7713f97b0bae0e56a9aaeaf473775d2463842cb9c925c3753534be2000a6c8332926acac95e42ccc34df42fc11e4b225f4244fd18e60630f80b3a3ea15747148c44e794162750c54d2c77c4890d8b7eec5721f61a5f506df49ca82d1dd727284a57df856b4c8a79697ea45e334bcf53e36b43b91e6d680ad43de3c0b3215dfc9bb2950895b4675d1a1ba20a7ab77fc58b4ce44f673284ade408163b3a32d00deb70b93d2c1187b899a45b8349f3379f92e34f0aea1c8285bf7a948063ce57f3c7a680a7fda111ff03ddeb9643343e5608472401e84c7", 0xd8}, {&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="3cc445581ba6f3787cb5c162bedf029b1eed8de02c319a5b69698448e0c9d3fe9275edbdbda299b7e1133c9693be72374bd31fa64f8d450b732d142a61f0a9cea0ec314ed169496858ca6dd61f7a07334157f3fdc76dfa84e801eafd340cfa8709461d6ad7043c94e5dce4a33d620003a76eb410483bc65100fb", 0x7a}, {&(0x7f0000004cc0)="2773c3618812f9535c3a48f90012feac98beec172b29fa15e27c422d8f368e943d9b7f4d505076ce7d89dd6d7f336bb0c990322e22f2b4d1f1ffc21d538980e7d702cee565c65e7dd23195f7fd7302256a3855453fdde77d12bd4e612a7d90e19e6c56c7d3cfc28fa0733ed8103cc57999bc79229b89fb1ac2f83337f643e29d96d9a5c8eeeadd15a6e187af458c57891b4b4bd28dfdcb39b169003ba76c5ffd2f2707357d1e9a9f4a11c83aabcf49edb3c230e9e7b35e1ad4947fa9104e1cafdc6ae974391ef58a17500291342fcf49deba74b350563a0742cb5932692290d498e332283e267c52ae26afe0104ddf9f8a85aeee2fe08353", 0xf8}, {&(0x7f0000004dc0)="19de92198b17b4df9906db127f0a9093ffe59600c37baabcb31b5a1d18c679b61242873dbd49d6e7904b6d8ea50d06", 0x2f}, {&(0x7f0000004e00)="39c828ae1244a3efc7a4508f43e40807332cc51b449a79959d9a0cf31f4557aba5ed697c941466a60e9cc306d75c969797239142b73a657cd50e2ccd3a13e08bddabd1a1592a8a6cf1f5d5f299dd592c833c8e1f4506bfac8700220492ffb5ac22d411a1c92498b6e9e8c27e3a22fdbf8627e58b741ca52b02b218e73a40cbf9ea83fa7a1c74ca9d8549cf12b7e0004bb5af5f9f44a17c8f736a1c08b173146d171f9c30379b832cff72d7bfc2915d136375251059f638f8a971e1fabb480ff3cce06fd7330220b51e52aeed098f1964592da973881824dced9e25ed16f442557525d7fe4effb2b8ac2a9fc51603c0140ff8f16c4a", 0xf5}, {&(0x7f0000004f00)="692c86612ed1808019a6b7c57c173f834834fb9f92eeaf00f36dd423361c8bc1599fa88c2328c1edab718fc61eeb092da5e5d6d244204181849e15dd3ff69c799f61f8fe4ed15ca99544bb502fcf668f76ebf1a80f67a3171a71e86c21a77adae3bf735fd0075d8d9833061e527429b16059f122c6af523e2c09ac136faf8a5e1566baf313322070c2ac921de0b95b831280c4d5359b6a4989cc2166d0e4479a6015ea43508ff13c102e491c18663d058b8d2c143be96a584fb4b676d6008a6d0a1419b94772d6e96aed90705c2b8435c4e3224afaf6ef7c52c91097de697f3e4fbe9dbfb5", 0xe5}], 0x7, &(0x7f0000005080)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x1, 0x1, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x16, 0x6, '\x00', [@pad1, @pad1, @calipso={0x7, 0x28, {0x1, 0x3, 0x9, 0x7, [0x91, 0x9, 0x9, 0x2]}}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x17}, @private0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x158}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005200)="5e4e4bb9cb09c64b6d4c11671d5af82c96864127d65598fbd86d9250aac9b79353ee4958463530923e4dfee9162748f45a6d7b915a51388f36078420aabc74799e4e8f23d713c506ae91bf13f1958c2d60557f9b6fb77356cc9353db44315d105078058d015686e7dcca5d8bc6efd9ff4d432d0ba90705881fd054a0b690f0980ee6250d200173425710242e812d1cb00e553ade6aef384385f7048124bb9c65096a2fa219f64570006b299acb54088380c4739c185a74b9ae88", 0xba}], 0x1, &(0x7f0000005300)=[@rthdrdstopts={{0x58, 0x29, 0x37, {0x3a, 0x8, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0xfa, 0xf, [0x1, 0x2, 0xfffffffffffffeff, 0x6]}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x8, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x7a, 0xb, [0xffffffffffffffff, 0x692b]}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0xc0}}, {{&(0x7f00000053c0)={0xa, 0x4e24, 0x2, @loopback, 0x7d}, 0x1c, &(0x7f0000005400), 0x0, &(0x7f0000005480)=[@dstopts_2292={{0xf0, 0x29, 0x4, {0x32, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xd}, @generic={0x1, 0x89, "741ff7d0576e662fc296d974c52e25cdccda10c0a785fcb5f309a26e59bee8846906acb2fff9f61079a621b314115243671b736220e491f2a11ee12afe8c4a258d016f6b4b0e99d97cd167852b3a68d8f94d5c3e3e76580e2689f67ac65b264ebb28934b65208a47a7d19317a3dc1c56aa33566d3e31ec51869e0bf3a9f172cd3c417d2507d4b68f04"}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0xa7, [0x2, 0x100000000, 0x0, 0x4, 0x8, 0x3]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x100}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x130}}], 0x7, 0x24000045) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) (async) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="50000000ffffffffffff080211000000080211000025ad4000000000000000006400010000060202020202020100"], 0x2e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700), 0x600, 0x40, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000003700), 0x600, 0x40, 0x0) accept$packet(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 3.983648156s ago: executing program 0 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f51002b1f03003a000000000011000000000000fe8000000000000000000000000000aa840031"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="dbae00fe10010000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) sendto$l2tp6(r1, 0x0, 0x0, 0x20000890, &(0x7f00000002c0)={0xa, 0x0, 0x7, @private2, 0x6, 0x1}, 0x20) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000340)=0x12, 0x80000) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x38, r4, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x90, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x1) 3.778796247s ago: executing program 0 (id=2147): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000300)=0x4) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 2.579755273s ago: executing program 2 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x1, 0x48096) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x1000, 0x10, &(0x7f0000000d00)="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", &(0x7f0000000140)=""/16, 0xe06e, 0x0, 0x49, 0xbc, &(0x7f0000000180)="d12982878ac3b3232d5fff0ad496de8343561ebf493d82bf97f2879461d1552855e4e126d0b245e9919d7201aadc01139d26447f2951c57187ab35c302b4c2a1dceb07c1699cb833f5", &(0x7f0000000280)="429ab1348893dcb61e0f60b057280243714b475911eeda08a058956b46b93080517139b3efdd6bc6afac84d7644cd0921375cf50c8e6a83a25868b340a051264b9d8683f48b15144f36824df9acdc37aaf5ae50ae37c4865b8189589079c2da4e8df636963d2cc6cf898d1180cdc39f4a50e78b8b12a2a56ae883023840252fd9d0e3c31d443e33576bb35119b33d1955876d5907a78fe401dbc80d7033bebde0490071d715d4fd36b05ac9921f0a106afb70cc804f2ea3d858732c6", 0x6, 0x0, 0x3}, 0x50) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.35545572s ago: executing program 0 (id=2164): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r10, 0x0, 0xb9b}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.349116464s ago: executing program 2 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4800) recvmsg(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1, &(0x7f0000002880)=""/15, 0xf}, 0x20) sendmsg$kcm(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="33c62081479f163bcdd7edeb94787b58", 0x10}, {&(0x7f0000000540)="a94be1a9090fc929d625737892d9f974084c", 0x12}, {&(0x7f0000000580)="a9c81a28344cf89d567a2cd7d4994040df5be1788196f3fd8922f22949962a5c1bbd3f3685c0e691a24a5da4e9dc56a554605bc440f8071b63830a878e87be05fb7bf168b67b942e03b8e1c0ae9922b52edb71c851db01244190842ff0680ce2d965511e8ed4d0aaeaaa66e7eaf1c27e5b2a9e7ee69c4d5a2af460ae0bc4d65bcd12e243447ab242d35f8fa896ca5b3e3520b6caa3ebf8dd", 0x98}, {&(0x7f0000000640)="fbed4b33c6293d8456403a4a3150bdb5e6da7d1282b2b78c6c9b4de26f55e9a7ddb56e4ed09b", 0x26}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="6c17a4e4ecf2ab69a74a420cd70813962b148bba4e8747f97be5aa450c1c478a0e9917e5c1990aa96bb7ff8ed1e3935e1258d646fcc753b3d6653be5d093e3f920c0344b985e218813583487d31bf8e8cbba776cf508a01bd226373551eb39dbe6e2fab81950418f1fbfe76590194c79a60b1860ecf250ac92086aac8e016084875bc4b46f03a7d4c8c4d2e14e45a80d280d04469c96fe607e657fde09766f848dd5ae0cd97a9132fb14628fe0280762c106aeed0eb117aaba5e48909474c71b", 0xc0}], 0x6, &(0x7f00000008c0)=[{0xf0, 0x111, 0xe, "a6ae8441e6c52a76f14f542c1a15a11f85d1b93e29aff7f067a41f8f3fbab517e1cc3e1020ba71b9151cfa6d7d51ef820001430240e63fc7781c6c2dfdb7e484e93f53b3f23f16e60c18b20e1968a51af5da708f3efd21e7d6a111b00684413cfd55b1840fc3b97931a459033255fa2118b5539320774d850999b1e24d68824b6f65bc0e16baee47c865c9c783586e6024e4e15782ce0128f282302cd02fc48053f61b4765611aff188bde858ba157b1772353a2fcac10b40214af73ca2c5855361ff75be20fd0b0b3efbfb8661e25e48f8af8a87bdf4f9a4c2570993c71"}, {0xf0, 0x84, 0x6, "a27eb07239903a7395f6c0e26e779ac1d87451b17c192b108e674b717b74472dbd66bd3e20421b89c6377b8fffebb1a18f8693c5f8c17f07c1e6e6f46240b51b3030f2bfd8ea3bfe9cf9c64f38157202cec78232c5872dca581258386e3aff1fd7862afe117b02cdc8331efd7be426dfacb073c2b4bdfc0e1db86ff08276830558cdbd163741f44629327447b43954a5843615c8184f04ddd646248fe83e8a820846d4ea6ba8b342b7870aa1fa096558ef12a7d69e8b6b058c396f9ca60a16fba4d82d7538ed774f8eed0d0108fe6bc36ad08a6d566f35b6c4d0"}, {0xa8, 0x114, 0x2, "435d0f5175f75343f4403058c40b24468b81160eaf4901659d847f6a6d735ca5eb28aa377690269340ec9d67fa6166150253dcb41aa00e21cf61c84754e0defd407d79b098ea2cffe07e1c1cf682399e8d66ea28b1d43cc22b96ea1120f50671ce6e3004949794f3ceddd1e817449381a000f19ebfa2a8b35de92d1cbd2d0f12c7394f49ddb3e595be7c7f74a5d0718f354959a9"}, {0x10, 0x117, 0x4}, {0x78, 0x88, 0x3, "eba9785cfdd1ed59d6126743940226f36ac17ea4921907d205df1a4965752706039e7574d2a14f2d9d820a3bfce011ef7270a221c03e43a661e0fcc9ae9ac8f1ec9cb58933fa7a2975a43f711dc5c2789c68c4d3bcc250904d6b18631b11ec49085d3c4a9efc"}, {0x98, 0x112, 0x1, "f9be8dd2a89efae23bf291a184349fad72ed9da02dd5afa8fe2d91d78cf45aebb6f2d9e7f1b65a0554d86e430bcddf15cb5c0353a82a99d2b0cf8f450e0fb12fcf0bb53a9fbdb34b79b3a97cb8a17b313736908e42e32afddd306fbe304fa6b87467c7b6cc11db7487948085162af8ab05900edf8b2cf34addb12825600a06a93ddb620f92d151d2"}, {0xe8, 0x10f, 0x5, "4f585d9f68c6cb5ad95695961c9c3835e70cebf5cfd9b67ba97428c23244b1691a47d22a183753b79f7447de89c973854da41df5d1a007b6e106f09c23e464d67e3a51c3194fec4c241ecd49b95acbc175eec052a7188726561a68fcd37e8cec0cc72e679490a74c599c6e524e3226b546b0086006c2d30073633a780c656371330aff6e75622e478e4a9a514b1a13d81a4cff37eb3b93e08b5f1e56877c463d61eb11ca24d208e2cfcda3a033ac9897063aeb48a823d2394f3f09f3db30fcc621d4c1fac2b50f1a3c21e59eaa93367a6a8e61736e"}], 0x490}, 0x20000090) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) socket$tipc(0x1e, 0x5, 0x0) unshare(0x6020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x180000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0xb157, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x800000, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0xf9, 0x9, 0x80000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1005, 0x7, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x1, 0x6, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x8000, 0x7, 0x3, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/171, 0xab}, {&(0x7f0000000fc0)=""/218, 0xda}, {&(0x7f00000010c0)=""/217, 0xd9}, {&(0x7f00000011c0)=""/170, 0xaa}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/99, 0x63}], 0x7, &(0x7f0000001400)=""/4096, 0x1000}, 0x72}, {{&(0x7f0000002400)=@xdp, 0x80, &(0x7f0000000040)=[{&(0x7f0000002480)=""/233, 0xe9}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000002580)=""/207, 0xcf}], 0x3, &(0x7f0000002680)=""/66, 0x42}, 0xe57d}, {{&(0x7f0000002700)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/17, 0x11}, {&(0x7f0000002900)=""/198, 0xc6}, {&(0x7f0000002800)=""/119, 0x77}, {&(0x7f0000002a00)=""/87, 0x57}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/182, 0xb6}], 0x6}, 0xd9}, {{&(0x7f0000002bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/130, 0x82}, {&(0x7f0000002d00)=""/29, 0x1d}], 0x2}, 0x80}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002d80)=""/107, 0x6b}, {&(0x7f0000002e00)=""/180, 0xb4}, {&(0x7f0000002ec0)=""/213, 0xd5}, {&(0x7f0000002fc0)=""/45, 0x2d}], 0x4, &(0x7f0000003040)=""/206, 0xce}, 0x1}, {{&(0x7f0000003140)=@un=@abs, 0x80, &(0x7f00000069c0)=[{&(0x7f00000031c0)=""/77, 0x4d}, {&(0x7f0000003240)=""/68, 0x44}, {&(0x7f00000032c0)=""/119, 0x77}, {&(0x7f0000003340)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/91, 0x5b}, {&(0x7f0000003440)=""/142, 0x8e}, {&(0x7f0000003500)=""/125, 0x7d}, {&(0x7f0000003580)=""/236, 0xec}], 0x9, &(0x7f0000003740)=""/213, 0xd5}, 0x6}, {{&(0x7f0000006940)=@ethernet={0x0, @local}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000003880)=""/27, 0x1b}, {&(0x7f0000006e00)=""/209, 0xd1}], 0x2}, 0x2}], 0x7, 0x100, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006cc0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x4, @any, 0x9}, 0xe) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00c25a00", @ANYRES16=r4, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32, @ANYBLOB="0c0099000000000025000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) close(r3) 2.101329257s ago: executing program 0 (id=2169): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) unshare(0x22020600) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = epoll_create(0x7) epoll_pwait(r3, &(0x7f0000000380)=[{}], 0x1, 0x3f38, 0x0, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0xb5a, 0x0, 0x0, 0x2}, 0x48) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0xffd, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="002100000101040014001680100001800c000720060000000800000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x7, [{0x5, 0x204c}, {0x7fff, 0xfff}, {0xffffffff, 0xae8}, {0xa, 0x4eb6}, {0xf, 0x2}, {0x4, 0x7}, {0xb, 0x1}]}}) close(0x3) 2.015913609s ago: executing program 1 (id=2170): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x3000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80800) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 1.855979479s ago: executing program 0 (id=2171): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0xfffff9a3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa2c638a8, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x9a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="c2900c000800000018000000feffffff0009000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x0, r0}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0xffffffffffffffff) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x2c, 0x0, 0x0, 0xfffff034}, {0x40, 0xd, 0x0, 0xfffffff9}, {0x6, 0xdc, 0x3}]}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.716941432s ago: executing program 1 (id=2172): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd020000", 0x5}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x68040}, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000100)=0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r5, 0x7fff}, 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0d02, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000000c0)={'macvtap0\x00', @broadcast}) 1.407828572s ago: executing program 1 (id=2173): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x1b, 0x0, &(0x7f0000000080)="63eced8e46cc1c5b7644c554cd0867702259dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.359845007s ago: executing program 2 (id=2174): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x4008040) 1.318332601s ago: executing program 3 (id=2175): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0xc}, 0x1) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f0000ee04000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x94}]}}]}, 0x3c}}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x4) 1.247835274s ago: executing program 1 (id=2176): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000180)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.17876103s ago: executing program 2 (id=2177): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x40, 0x4, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x280400, 0x4, 0x1000a, 0x6}], 0x10, 0xfffffff6}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00'}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="16e60000", @ANYRES16=r8, @ANYBLOB="020026bd7000ffdbdf250200000008000800000000000c00030004000000000000000c0003000000000000000000080005006401010114000b00fc0100000000000000000000000000000c0003000400000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f00000000c0), 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) sendto$l2tp(r9, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r11, @ANYRESDEC=r8], 0x30}}, 0x4) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 954.616998ms ago: executing program 4 (id=2178): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0xfffffa26, 0x4, 0x5, 0x5, 0xf, 0xff, 0x2, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c010040130000042abd7000fedbdf25150206874e204e230800000002000000008000000200000006000000070000000000000006000000bd8f1fe285c09b6a8f17d3cb385041fad61da3cd11a34369017250e917cab91805291d87442a04529112b07a96055a0e1a89f0e047f1367266782eb3f385cdc4f2788ed341da6191877a", @ANYRES32=r2, @ANYBLOB="cf0e00000200000002000000430f0000d00001008663d583429b4b23e3293cf240515fd6ad55831c3a3031e0e8f398bfcff7a8d2a07dfb3fba0569b2eb0900ee0fdd193ba2cec720df32702edbc129cce3729c657f27e893b018e59b9489620f5e9ac4f87e9e29036399eeb3af4f1c44b784d245875b4c345223cf0fedb705421b0458a5cff1f73c9ba00defcda659e0085a266d80a142409202bbb264c03cebd8f7bd09b73e078633dcf959ebd91fff3452f0b020ac586b12688d590aea62023b148503e87f680ec7a846078c3479f71a876a91e35c1f0a32bd04ed0e8c930e"], 0x11c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030300000000fcffffff661f5c87387f365071fe522869ffe03d0e3f03bd0f961763c9ae9db272a766249bde8a2b6f61da3f2f27"], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030300000000fcffffff661f5c87387f365071fe522869ffe03d0e3f03bd0f961763c9ae9db272a766249bde8a2b6f61da3f2f27"], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10) (async) bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff3}, {0xffff, 0xa}, {0x1, 0x1}}, [{0x8}]}, 0x2c}}, 0x80) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff3}, {0xffff, 0xa}, {0x1, 0x1}}, [{0x8}]}, 0x2c}}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xfffe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0xfffffff8, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x3, 0x6, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x1a, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4fc, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x200001, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x2, 0xffffffff, 0xffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2000000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48010000309901000000000000000000e00000020000000000000000000000000a010101000000000008"], 0x148}, 0x1, 0x0, 0x0, 0x200c0881}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r10, 0x0, 0x12, &(0x7f0000000000)=0x6aba, 0x4) setsockopt$inet_int(r10, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r10, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) recvmmsg(r10, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 827.651448ms ago: executing program 1 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) poll(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000006112c4000000000095000000000400001737cc9e47d3d4af5769667daf5fc177c4c0be3b1655901baef06c97f44155a0576d58278747ef365037504bed008758af9d6954015defcdf2d7eb8c0598acff5284921687b8bc0146aee70a72c601d49696ec24689fd283eed017bcc136dc991c4106c0dee82ca6ab51be2761ead18980a6b6782afd02de6e0b6919101ac86cbd1e13e34ea23506b873c13f1e044332298c9e2136cb61414a150f32d5ad29d1ae7ea957d2c3da476deecdde2a46f393d04d3ebc775b8f"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000006112c4000000000095000000000400001737cc9e47d3d4af5769667daf5fc177c4c0be3b1655901baef06c97f44155a0576d58278747ef365037504bed008758af9d6954015defcdf2d7eb8c0598acff5284921687b8bc0146aee70a72c601d49696ec24689fd283eed017bcc136dc991c4106c0dee82ca6ab51be2761ead18980a6b6782afd02de6e0b6919101ac86cbd1e13e34ea23506b873c13f1e044332298c9e2136cb61414a150f32d5ad29d1ae7ea957d2c3da476deecdde2a46f393d04d3ebc775b8f"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0xa, 0x0) (async) r2 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x55, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010033797a310000000028000480240001800b0001007470726f78f97400140002800800034000000012080001400000000a0900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800460000b4000000000011907800000000000000000000000000004e1e009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1285461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f0000000100), &(0x7f0000002140)=0x4) (async) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f0000000100), &(0x7f0000002140)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000001000c0000000c0000000500000002000000000000080500000000005f5f00"], 0x0, 0x29, 0x0, 0x1, 0x7}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@gettclass={0x0, 0x2a, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x3, 0x4}, {0xffe0, 0x10}}, ["", "", "", "", "", ""]}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 789.719093ms ago: executing program 3 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\"PW ', @ANYRES16=r1, @ANYRESDEC=r1], 0x34}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x20008000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x10}, &(0x7f00000002c0)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="ec64093cbe8761f61607aed02b8d11526fef33f0e1db6d026d95a00457a290fa03978f92b55bd6283f583aa5e5b33ba162b30bfe09da44f527512709a19d8b1ef1f9e7c56ff70f6d9cdaf37fc1c7317b0e2f28e6a719178fd54a6e800b4196e99a942673bb840487931e36a0e37a3790182ddd8d9db2632cde2caf69319a6df7ba7484549e80a68b2f37dd2ea56be7d19c6394ca7190d97dcc509c2915782c45140edf5cd432a9ebb9843cff51f4d07e57a2b4b1eb92b7059e0e2332f5943db335c87cf361ddc296a64c748d53b71fb143bf6a22d9d6df6724e45028947c4b1fb253c8ecdb2eb4", 0xe7}], 0x1, &(0x7f0000000300)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0xd37, 0x9, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x80, 0x800}, 0x40010) 619.505647ms ago: executing program 1 (id=2181): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x24060880) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8000}, 0x2e) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x3d) sendmmsg(r7, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @local, 0x8000}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f00000002c0)) 555.721393ms ago: executing program 4 (id=2182): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000c00)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r3, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) 482.551494ms ago: executing program 4 (id=2183): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r0}, 0x38) r1 = socket(0x22, 0x2, 0x34d) bind$bt_sco(r1, 0x0, 0x0) 465.991778ms ago: executing program 3 (id=2184): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143c00000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 327.97207ms ago: executing program 3 (id=2185): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x9, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x42040) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 326.851725ms ago: executing program 4 (id=2186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) writev(r5, &(0x7f0000001200)=[{0x0}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xe108, 0x1, 0xa9, 0x11120, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x1}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r7, 0xffffd000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x5}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x1, 0x1, 0x0, 0xa, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x48, &(0x7f0000000580)=""/72, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0xc3f}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x4, 0x47, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=[r6, 0x1, r7], &(0x7f0000000780)=[{0x2, 0x4, 0xc, 0xb}, {0x5, 0x1, 0xb, 0xb}], 0x10, 0x9}, 0x94) connect$rxrpc(r2, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0)=0xffffffffffffffff, 0xf) 197.011383ms ago: executing program 2 (id=2187): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xc6ae, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, r2, 0x0, 0x80}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000200), &(0x7f00000002c0)=0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x27c0}, 0x90) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 176.680128ms ago: executing program 3 (id=2188): r0 = socket$packet(0x11, 0x3, 0x300) (async) unshare(0x20400) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) read$alg(r2, &(0x7f0000000b80)=""/237, 0xed) (async) connect$ax25(r1, 0x0, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001840), 0x4) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40020) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xfffffffffffffeb0, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "48d62433959a3ae24a14cdb55458b78c0b3cb64a01096cbba0a763fe92"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x931538cbe06bf231}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) (async) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 175.883747ms ago: executing program 4 (id=2189): r0 = epoll_create(0x5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x20000014}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 51.735833ms ago: executing program 4 (id=2190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x33e, 0x730, 0x40, 0x7fffffff, 0xe}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.331057ms ago: executing program 2 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000480)={0x14, r7, 0xba87317d461c07c9, 0x70bd23, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40801) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x80) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000)) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x200000, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c0012800b00010062726964676500000c000280080005000100000008000a007d75af6954c627befb2f68215dcece28b118d343cd9e5fdc2db4efe5e96394aa8fc826e8858f8edd122487c0a5aef2c50f5f7a59e5fb48c316370c25f560dace11c7177b85eaf36a64648d2b94e0dbe5122a0935bc59c49d72de18393f2169907ff0fe65d2ce3535f8b8db03c044890921b4fbabc1b768a786f307e7115e383662c9fa3b8df3a7e1", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r13 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000000000000000000000000200"/26], 0x0, 0x1a}, 0x28) (async) setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) (async) sendto$l2tp6(r13, 0x0, 0x0, 0x20000890, &(0x7f00000002c0)={0xa, 0x0, 0x200, @mcast1, 0x6, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@delchain={0x2c, 0x65, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x2, 0x4}, {0xa, 0xc}, {0x3, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 0s ago: executing program 3 (id=2192): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010007bd290400000025550000cf83a1eec0e0fb90e74900080028ec640000000800d278f12de8dfe45c2dc8afd9665a71caa4b6b0ccd05bd0ed8db2e0e7919b495c892705debc0bb95e562bf2f9b8a50ee0b2fef513906c41a16a3e29d012435d4232180aee9d68eba0b0325675c4ca53dda7e64cf87af9d44584f19bd5bea5f136dc", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x5c, r10, 0x56c, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r11}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf46d}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}}, 0x44081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f00000005c0), 0x10) recvmmsg(r13, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x38}, {&(0x7f0000000340)=""/97, 0x61}], 0x2}, 0x40007f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) kernel console output (not intermixed with test programs): kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 204.668307][ T9205] ? pfn_valid+0x125/0x4d0 [ 204.668325][ T9205] ? pfn_valid+0x125/0x4d0 [ 204.668342][ T9205] ? pfn_valid+0x125/0x4d0 [ 204.668363][ T9205] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 204.668392][ T9205] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 204.668419][ T9205] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 204.668436][ T9205] ? bpf_dispatcher_xdp+0x800/0x1000 [ 204.668454][ T9205] ? bpf_dispatcher_xdp+0x800/0x1000 [ 204.668512][ T9205] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 204.668537][ T9205] ? _copy_from_user+0x94/0xb0 [ 204.668561][ T9205] ? bpf_test_init+0x133/0x170 [ 204.668575][ T9205] ? xdp_convert_md_to_buff+0x5b/0x330 [ 204.668594][ T9205] bpf_prog_test_run_xdp+0x713/0x1000 [ 204.668626][ T9205] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 204.668648][ T9205] ? __fget_files+0x2a/0x420 [ 204.668678][ T9205] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 204.668696][ T9205] bpf_prog_test_run+0x2c7/0x340 [ 204.668727][ T9205] __sys_bpf+0x4a4/0x860 [ 204.668761][ T9205] ? __pfx___sys_bpf+0x10/0x10 [ 204.668798][ T9205] ? ksys_write+0x22a/0x250 [ 204.668822][ T9205] ? __pfx_ksys_write+0x10/0x10 [ 204.668841][ T9205] ? rcu_is_watching+0x15/0xb0 [ 204.668867][ T9205] __x64_sys_bpf+0x7c/0x90 [ 204.668890][ T9205] do_syscall_64+0xfa/0x3b0 [ 204.668908][ T9205] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.668924][ T9205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.668941][ T9205] ? clear_bhb_loop+0x60/0xb0 [ 204.668962][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.668978][ T9205] RIP: 0033:0x7f27c0f8e9a9 [ 204.668994][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.669008][ T9205] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.669027][ T9205] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 204.669039][ T9205] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 204.669050][ T9205] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 204.669060][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.669070][ T9205] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 204.669101][ T9205] [ 205.017289][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'. [ 205.094229][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'. [ 205.179495][ T9213] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 205.310777][ T9222] pim6reg9: entered allmulticast mode [ 205.341343][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'. [ 205.343453][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.776'. [ 205.608386][ T9248] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 206.068661][ T9261] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 206.191481][ T9264] netlink: 'syz.4.790': attribute type 39 has an invalid length. [ 206.739455][ T9269] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 206.759678][ T9269] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 206.786131][ T9269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.001863][ T9276] __nla_validate_parse: 4 callbacks suppressed [ 207.001890][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 207.052064][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'. [ 207.350334][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.800'. [ 207.465771][ T9295] veth1_to_bond: entered allmulticast mode [ 207.476534][ T9295] bond_slave_1: entered promiscuous mode [ 207.541395][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 207.565734][ T9294] bond_slave_1: left promiscuous mode [ 207.571645][ T9294] veth1_to_bond: left allmulticast mode [ 207.691348][ T9303] batman_adv: batadv0: Adding interface: ip6gretap2 [ 207.698764][ T9303] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.727217][ T9303] batman_adv: batadv0: Interface activated: ip6gretap2 [ 207.918471][ T9313] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.807'. [ 208.335635][ T9340] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 208.754998][ T9366] netlink: 666 bytes leftover after parsing attributes in process `syz.2.819'. [ 208.858234][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 208.870566][ T9370] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 208.939727][ T9373] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.942322][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 209.118390][ T9384] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 209.132306][ T9384] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.826'. [ 209.354946][ T31] audit: type=1800 audit(1753574806.184:6): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.831" name="memory.events" dev="tmpfs" ino=994 res=0 errno=0 [ 209.380499][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 209.407195][ T31] audit: type=1804 audit(1753574806.214:7): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.831" name="/newroot/190/memory.events" dev="tmpfs" ino=994 res=1 errno=0 [ 209.492595][ T9402] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 209.514368][ T9395] block nbd0: server does not support multiple connections per device. [ 209.517490][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.587742][ T9402] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.593800][ T9395] block nbd0: shutting down sockets [ 210.651185][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 210.798886][ T9462] lo speed is unknown, defaulting to 1000 [ 210.834710][ T9462] lo speed is unknown, defaulting to 1000 [ 210.858653][ T9462] lo speed is unknown, defaulting to 1000 [ 211.176879][ T9462] infiniband syz0: set active [ 211.181947][ T9462] infiniband syz0: added lo [ 211.267794][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.277738][ T9468] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.309215][ T9468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.353618][ T9462] RDS/IB: syz0: added [ 211.358467][ T9462] smc: adding ib device syz0 with port count 1 [ 211.366042][ T9462] smc: ib device syz0 port 1 has pnetid [ 211.367175][ T5956] lo speed is unknown, defaulting to 1000 [ 211.424376][ T5956] syz0: Port: 1 Link ACTIVE [ 211.531468][ T9482] netlink: 'syz.0.854': attribute type 3 has an invalid length. [ 211.578183][ T9482] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 211.638412][ T6145] lo speed is unknown, defaulting to 1000 [ 211.677818][ T9462] lo speed is unknown, defaulting to 1000 [ 212.131960][ T9508] __nla_validate_parse: 4 callbacks suppressed [ 212.131981][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 212.168769][ T9512] netlink: 168 bytes leftover after parsing attributes in process `syz.0.861'. [ 212.200113][ T9515] netlink: 168 bytes leftover after parsing attributes in process `syz.0.861'. [ 212.262755][ T9512] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 212.303831][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'. [ 212.303844][ T9512] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 212.304111][ T9515] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 212.548289][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 212.639176][ T9462] lo speed is unknown, defaulting to 1000 [ 212.662544][ T9539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.866'. [ 213.332511][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 213.351403][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 213.382388][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 213.411888][ T9568] wg1: entered promiscuous mode [ 213.436714][ T9568] wg1: entered allmulticast mode [ 213.495633][ T9462] lo speed is unknown, defaulting to 1000 [ 213.831045][ T9580] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 214.059930][ T9580] netlink: 416 bytes leftover after parsing attributes in process `syz.4.875'. [ 214.111815][ T9462] lo speed is unknown, defaulting to 1000 [ 214.376182][ T9588] syzkaller1: entered promiscuous mode [ 214.382342][ T9588] syzkaller1: entered allmulticast mode [ 214.503400][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.548498][ T9462] lo speed is unknown, defaulting to 1000 [ 214.749211][ T9462] lo speed is unknown, defaulting to 1000 [ 214.927900][ T9462] lo speed is unknown, defaulting to 1000 [ 215.142097][ T9561] siw: device registration error -23 [ 215.183825][ T9597] rdma_rxe: rxe_newlink: failed to add lo [ 215.560299][ T9613] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 215.777114][ T9613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.785849][ T9613] team0: Port device bond0 added [ 215.900771][ T9622] tipc: Enabled bearer , priority 0 [ 215.946859][ T9624] syzkaller0: entered promiscuous mode [ 215.982439][ T9624] syzkaller0: entered allmulticast mode [ 216.083799][ T9615] tipc: Resetting bearer [ 216.157059][ T9614] tipc: Resetting bearer [ 216.191517][ T9614] tipc: Disabling bearer [ 216.361967][ T9628] lo speed is unknown, defaulting to 1000 [ 216.519346][ T9639] netlink: 'syz.1.890': attribute type 13 has an invalid length. [ 216.538275][ T9639] netlink: 'syz.1.890': attribute type 17 has an invalid length. [ 216.658312][ T9639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.710899][ T24] lo speed is unknown, defaulting to 1000 [ 217.549281][ T9694] __nla_validate_parse: 69 callbacks suppressed [ 217.549302][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 218.173825][ T9722] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 218.200123][ T9716] tipc: Enabled bearer , priority 0 [ 218.229641][ T9716] syzkaller0: entered promiscuous mode [ 218.235531][ T9716] syzkaller0: entered allmulticast mode [ 218.271104][ T9716] batadv_slave_1: entered promiscuous mode [ 218.278971][ T9714] batadv_slave_1: left promiscuous mode [ 218.296767][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 218.325076][ T9714] tipc: Resetting bearer [ 218.326810][ T9730] netlink: 124 bytes leftover after parsing attributes in process `syz.3.913'. [ 218.367215][ T9714] tipc: Disabling bearer [ 218.436956][ T10] IPVS: starting estimator thread 0... [ 218.643124][ T9742] IPVS: using max 23 ests per chain, 55200 per kthread [ 218.863019][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 218.892742][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.926'. [ 218.915571][ T9760] netlink: 'syz.0.923': attribute type 15 has an invalid length. [ 218.925433][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'. [ 218.947821][ T9764] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 219.098947][ T9771] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 219.147659][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 219.165436][ T9771] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 219.292332][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 219.320008][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 219.370839][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 219.538527][ T9798] openvswitch: netlink: EtherType 0 is less than min 600 [ 220.188654][ T9838] lo speed is unknown, defaulting to 1000 [ 220.281377][ T9845] bridge0: entered promiscuous mode [ 220.298700][ T9845] bridge0: left promiscuous mode [ 220.539370][ T9858] syz_tun: entered allmulticast mode [ 220.580128][ T9854] syz_tun: left allmulticast mode [ 221.156840][ T9892] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 221.282374][ T9840] lo speed is unknown, defaulting to 1000 [ 221.736417][ T9879] lo speed is unknown, defaulting to 1000 [ 221.888303][ T9915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.716000][ T9930] __nla_validate_parse: 8 callbacks suppressed [ 222.716029][ T9930] netlink: 88 bytes leftover after parsing attributes in process `syz.3.974'. [ 223.219333][ T9945] netlink: 124 bytes leftover after parsing attributes in process `syz.2.977'. [ 223.912204][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 224.151004][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 224.596175][T10011] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 224.668493][T10011] bond1: entered promiscuous mode [ 224.675881][T10011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.706321][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 224.720346][T10014] tipc: Enabled bearer , priority 0 [ 224.739156][T10014] syzkaller0: entered promiscuous mode [ 224.741948][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 224.747369][T10014] syzkaller0: entered allmulticast mode [ 224.767038][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 224.801233][T10014] tipc: Resetting bearer [ 224.834361][T10012] tipc: Resetting bearer [ 224.846617][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.999'. [ 224.889159][T10012] tipc: Disabling bearer [ 225.259108][T10031] lo speed is unknown, defaulting to 1000 [ 225.360339][T10044] netlink: 'syz.2.1007': attribute type 83 has an invalid length. [ 225.607224][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'. [ 225.654847][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1011'. [ 225.711835][T10053] team0: Port device team_slave_0 removed [ 226.283762][T10080] FAULT_INJECTION: forcing a failure. [ 226.283762][T10080] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 226.310804][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.2.1016 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 226.310833][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.310845][T10080] Call Trace: [ 226.310852][T10080] [ 226.310861][T10080] dump_stack_lvl+0x189/0x250 [ 226.310889][T10080] ? __pfx____ratelimit+0x10/0x10 [ 226.310921][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.310942][T10080] ? __pfx__printk+0x10/0x10 [ 226.310979][T10080] should_fail_ex+0x414/0x560 [ 226.311016][T10080] _copy_to_user+0x31/0xb0 [ 226.311044][T10080] simple_read_from_buffer+0xe1/0x170 [ 226.311075][T10080] proc_fail_nth_read+0x1df/0x250 [ 226.311109][T10080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.311141][T10080] ? rw_verify_area+0x258/0x650 [ 226.311164][T10080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.311195][T10080] vfs_read+0x200/0x980 [ 226.311224][T10080] ? __pfx___mutex_lock+0x10/0x10 [ 226.311244][T10080] ? __pfx_vfs_read+0x10/0x10 [ 226.311269][T10080] ? __fget_files+0x2a/0x420 [ 226.311301][T10080] ? __fget_files+0x3a0/0x420 [ 226.311327][T10080] ? __fget_files+0x2a/0x420 [ 226.311364][T10080] ksys_read+0x145/0x250 [ 226.311390][T10080] ? __pfx_ksys_read+0x10/0x10 [ 226.311419][T10080] ? do_syscall_64+0xbe/0x3b0 [ 226.311442][T10080] do_syscall_64+0xfa/0x3b0 [ 226.311460][T10080] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.311477][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.311495][T10080] ? clear_bhb_loop+0x60/0xb0 [ 226.311519][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.311537][T10080] RIP: 0033:0x7fa8f078d3bc [ 226.311555][T10080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.311573][T10080] RSP: 002b:00007fa8f159a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.311595][T10080] RAX: ffffffffffffffda RBX: 00007fa8f09b6080 RCX: 00007fa8f078d3bc [ 226.311610][T10080] RDX: 000000000000000f RSI: 00007fa8f159a0a0 RDI: 000000000000000a [ 226.311623][T10080] RBP: 00007fa8f159a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.311635][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.311647][T10080] R13: 0000000000000000 R14: 00007fa8f09b6080 R15: 00007ffd779340e8 [ 226.311681][T10080] [ 226.617319][T10082] Bluetooth: MGMT ver 1.23 [ 226.765426][T10092] FAULT_INJECTION: forcing a failure. [ 226.765426][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 226.780405][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.3.1020 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 226.780435][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.780448][T10092] Call Trace: [ 226.780457][T10092] [ 226.780467][T10092] dump_stack_lvl+0x189/0x250 [ 226.780497][T10092] ? __pfx____ratelimit+0x10/0x10 [ 226.780528][T10092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.780553][T10092] ? __pfx__printk+0x10/0x10 [ 226.780587][T10092] ? __pfx___might_resched+0x10/0x10 [ 226.780617][T10092] should_fail_ex+0x414/0x560 [ 226.780657][T10092] should_failslab+0xa8/0x100 [ 226.780690][T10092] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 226.780719][T10092] ? __alloc_skb+0x112/0x2d0 [ 226.780747][T10092] __alloc_skb+0x112/0x2d0 [ 226.780782][T10092] tipc_msg_build+0x13b/0xcf0 [ 226.780812][T10092] ? tipc_node_find+0xb3/0x480 [ 226.780844][T10092] ? __pfx_tipc_msg_build+0x10/0x10 [ 226.780884][T10092] __tipc_sendmsg+0x1715/0x2960 [ 226.780930][T10092] ? process_measurement+0x72d/0x1a40 [ 226.780962][T10092] ? __pfx___tipc_sendmsg+0x10/0x10 [ 226.781000][T10092] ? process_measurement+0x1640/0x1a40 [ 226.781025][T10092] ? aa_label_sk_perm+0x413/0x560 [ 226.781065][T10092] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 226.781111][T10092] ? look_up_lock_class+0x74/0x170 [ 226.781144][T10092] ? __lock_acquire+0xab9/0xd20 [ 226.781180][T10092] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.781202][T10092] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.781222][T10092] ? __pfx_woken_wake_function+0x10/0x10 [ 226.781255][T10092] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 226.781289][T10092] tipc_sendmsg+0x55/0x70 [ 226.781308][T10092] ? __pfx_tipc_sendmsg+0x10/0x10 [ 226.781325][T10092] __sock_sendmsg+0x21c/0x270 [ 226.781361][T10092] ____sys_sendmsg+0x52d/0x830 [ 226.781394][T10092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.781430][T10092] ? import_iovec+0x74/0xa0 [ 226.781462][T10092] ___sys_sendmsg+0x21f/0x2a0 [ 226.781491][T10092] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.781567][T10092] ? __might_fault+0xb0/0x130 [ 226.781599][T10092] __sys_sendmmsg+0x227/0x430 [ 226.781632][T10092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.781655][T10092] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 226.781708][T10092] ? ksys_write+0x22a/0x250 [ 226.781736][T10092] ? __pfx_ksys_write+0x10/0x10 [ 226.781767][T10092] ? rcu_is_watching+0x15/0xb0 [ 226.781798][T10092] __x64_sys_sendmmsg+0xa0/0xc0 [ 226.781826][T10092] do_syscall_64+0xfa/0x3b0 [ 226.781847][T10092] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.781865][T10092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.781886][T10092] ? clear_bhb_loop+0x60/0xb0 [ 226.781912][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.781932][T10092] RIP: 0033:0x7f5fcc98e9a9 [ 226.781952][T10092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.781969][T10092] RSP: 002b:00007f5fcd7db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.781991][T10092] RAX: ffffffffffffffda RBX: 00007f5fccbb5fa0 RCX: 00007f5fcc98e9a9 [ 226.782006][T10092] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 226.782019][T10092] RBP: 00007f5fcd7db090 R08: 0000000000000000 R09: 0000000000000000 [ 226.782032][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.782044][T10092] R13: 0000000000000000 R14: 00007f5fccbb5fa0 R15: 00007ffce1cf84a8 [ 226.782077][T10092] [ 226.792322][T10085] netlink: 'syz.2.1019': attribute type 13 has an invalid length. [ 227.196184][T10085] netlink: 'syz.2.1019': attribute type 17 has an invalid length. [ 227.464924][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 227.471177][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 227.473092][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 227.513094][T10085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.550187][T10114] netlink: 'syz.0.1026': attribute type 13 has an invalid length. [ 227.584472][T10114] netlink: 'syz.0.1026': attribute type 17 has an invalid length. [ 227.737730][T10090] lo speed is unknown, defaulting to 1000 [ 227.829368][T10114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.521479][T10117] lo speed is unknown, defaulting to 1000 [ 228.836577][T10150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.197228][T10146] lo speed is unknown, defaulting to 1000 [ 229.427983][T10168] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 229.524428][T10166] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 229.799950][T10176] tipc: Enabling of bearer rejected, failed to enable media [ 230.046698][T10185] __nla_validate_parse: 2 callbacks suppressed [ 230.046720][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'. [ 230.084389][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 230.524585][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 230.777402][T10213] FAULT_INJECTION: forcing a failure. [ 230.777402][T10213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.791338][T10213] CPU: 0 UID: 0 PID: 10213 Comm: syz.0.1047 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 230.791370][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.791384][T10213] Call Trace: [ 230.791393][T10213] [ 230.791403][T10213] dump_stack_lvl+0x189/0x250 [ 230.791425][T10213] ? __pfx____ratelimit+0x10/0x10 [ 230.791451][T10213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.791467][T10213] ? __pfx__printk+0x10/0x10 [ 230.791487][T10213] ? __might_fault+0xb0/0x130 [ 230.791516][T10213] should_fail_ex+0x414/0x560 [ 230.791545][T10213] _copy_from_user+0x2d/0xb0 [ 230.791566][T10213] ___sys_sendmsg+0x158/0x2a0 [ 230.791587][T10213] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.791639][T10213] ? __might_fault+0xb0/0x130 [ 230.791661][T10213] __sys_sendmmsg+0x227/0x430 [ 230.791684][T10213] ? __pfx___sys_sendmmsg+0x10/0x10 [ 230.791700][T10213] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 230.791736][T10213] ? ksys_write+0x22a/0x250 [ 230.791757][T10213] ? __pfx_ksys_write+0x10/0x10 [ 230.791780][T10213] __x64_sys_sendmmsg+0xa0/0xc0 [ 230.791800][T10213] do_syscall_64+0xfa/0x3b0 [ 230.791814][T10213] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.791827][T10213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.791841][T10213] ? clear_bhb_loop+0x60/0xb0 [ 230.791859][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.791873][T10213] RIP: 0033:0x7f27c0f8e9a9 [ 230.791887][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.791899][T10213] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 230.791915][T10213] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 230.791926][T10213] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 230.791935][T10213] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 230.791944][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.791952][T10213] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 230.791975][T10213] [ 230.797094][T10189] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 231.045695][T10205] tipc: Enabling of bearer rejected, failed to enable media [ 231.077555][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 231.185429][T10217] netlink: 'syz.0.1048': attribute type 39 has an invalid length. [ 231.379681][T10224] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.715455][T10241] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1053'. [ 232.151854][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 232.277319][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 232.306075][T10267] lo speed is unknown, defaulting to 1000 [ 232.316292][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 232.576148][T10277] bridge5: entered promiscuous mode [ 232.586365][T10277] bridge5: entered allmulticast mode [ 232.596285][T10287] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1067'. [ 232.719445][T10289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1068'. [ 232.986578][T10304] netlink: 'syz.2.1073': attribute type 23 has an invalid length. [ 232.993186][T10302] vlan2: entered allmulticast mode [ 233.014708][T10302] gretap0: entered allmulticast mode [ 233.105931][T10266] IPv6: NLM_F_REPLACE set, but no existing node found! [ 233.225012][T10313] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 233.248899][T10312] vlan3: entered promiscuous mode [ 233.258586][T10312] syz_tun: entered promiscuous mode [ 233.297284][T10279] lo speed is unknown, defaulting to 1000 [ 233.576359][T10321] tipc: Enabled bearer , priority 0 [ 233.742090][T10321] syzkaller0: entered promiscuous mode [ 233.751531][T10321] syzkaller0: entered allmulticast mode [ 233.768340][T10321] tipc: Resetting bearer [ 233.845152][T10318] tipc: Resetting bearer [ 234.125644][T10335] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 234.694631][ T24] tipc: Node number set to 1550213715 [ 235.770927][T10318] tipc: Disabling bearer [ 235.790989][T10335] __nla_validate_parse: 5 callbacks suppressed [ 235.791005][T10335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1081'. [ 235.832687][T10342] syzkaller1: entered promiscuous mode [ 235.853013][T10342] syzkaller1: entered allmulticast mode [ 236.094556][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 236.141848][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 236.187876][T10359] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 236.546771][T10373] FAULT_INJECTION: forcing a failure. [ 236.546771][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.571603][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.1.1092 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 236.571634][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.571652][T10373] Call Trace: [ 236.571660][T10373] [ 236.571669][T10373] dump_stack_lvl+0x189/0x250 [ 236.571700][T10373] ? __pfx____ratelimit+0x10/0x10 [ 236.571744][T10373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.571767][T10373] ? __pfx__printk+0x10/0x10 [ 236.571794][T10373] ? __might_fault+0xb0/0x130 [ 236.571836][T10373] should_fail_ex+0x414/0x560 [ 236.571875][T10373] _copy_from_user+0x2d/0xb0 [ 236.571905][T10373] ___sys_sendmsg+0x158/0x2a0 [ 236.571936][T10373] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.572009][T10373] ? __might_fault+0xb0/0x130 [ 236.572038][T10373] __sys_sendmmsg+0x227/0x430 [ 236.572068][T10373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.572089][T10373] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 236.572146][T10373] ? ksys_write+0x22a/0x250 [ 236.572173][T10373] ? __pfx_ksys_write+0x10/0x10 [ 236.572195][T10373] ? rcu_is_watching+0x15/0xb0 [ 236.572225][T10373] __x64_sys_sendmmsg+0xa0/0xc0 [ 236.572254][T10373] do_syscall_64+0xfa/0x3b0 [ 236.572276][T10373] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.572295][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.572317][T10373] ? clear_bhb_loop+0x60/0xb0 [ 236.572343][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.572364][T10373] RIP: 0033:0x7fd494b8e9a9 [ 236.572382][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.572400][T10373] RSP: 002b:00007fd495a54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.572423][T10373] RAX: ffffffffffffffda RBX: 00007fd494db5fa0 RCX: 00007fd494b8e9a9 [ 236.572438][T10373] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 236.572452][T10373] RBP: 00007fd495a54090 R08: 0000000000000000 R09: 0000000000000000 [ 236.572465][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.572477][T10373] R13: 0000000000000000 R14: 00007fd494db5fa0 R15: 00007ffcc143be98 [ 236.572511][T10373] [ 237.006721][T10375] lo speed is unknown, defaulting to 1000 [ 237.220928][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 237.259868][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 237.300990][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 237.694841][T10410] FAULT_INJECTION: forcing a failure. [ 237.694841][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 237.732462][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.4.1103 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 237.732496][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.732509][T10410] Call Trace: [ 237.732517][T10410] [ 237.732527][T10410] dump_stack_lvl+0x189/0x250 [ 237.732554][T10410] ? __pfx____ratelimit+0x10/0x10 [ 237.732587][T10410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.732612][T10410] ? __pfx__printk+0x10/0x10 [ 237.732646][T10410] ? __pfx___might_resched+0x10/0x10 [ 237.732676][T10410] should_fail_ex+0x414/0x560 [ 237.732717][T10410] should_failslab+0xa8/0x100 [ 237.732750][T10410] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 237.732806][T10410] ? __alloc_skb+0x112/0x2d0 [ 237.732835][T10410] __alloc_skb+0x112/0x2d0 [ 237.732866][T10410] tipc_msg_build+0x13b/0xcf0 [ 237.732893][T10410] ? tipc_node_find+0xb3/0x480 [ 237.732925][T10410] ? __pfx_tipc_msg_build+0x10/0x10 [ 237.732965][T10410] __tipc_sendmsg+0x1715/0x2960 [ 237.733011][T10410] ? process_measurement+0x72d/0x1a40 [ 237.733043][T10410] ? __pfx___tipc_sendmsg+0x10/0x10 [ 237.733080][T10410] ? process_measurement+0x1640/0x1a40 [ 237.733105][T10410] ? aa_label_sk_perm+0x413/0x560 [ 237.733144][T10410] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 237.733190][T10410] ? look_up_lock_class+0x74/0x170 [ 237.733223][T10410] ? __lock_acquire+0xab9/0xd20 [ 237.733260][T10410] ? __local_bh_enable_ip+0x12d/0x1c0 [ 237.733282][T10410] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.733302][T10410] ? __pfx_woken_wake_function+0x10/0x10 [ 237.733334][T10410] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.733369][T10410] tipc_sendmsg+0x55/0x70 [ 237.733388][T10410] ? __pfx_tipc_sendmsg+0x10/0x10 [ 237.733406][T10410] __sock_sendmsg+0x21c/0x270 [ 237.733442][T10410] ____sys_sendmsg+0x52d/0x830 [ 237.733474][T10410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.733511][T10410] ? import_iovec+0x74/0xa0 [ 237.733545][T10410] ___sys_sendmsg+0x21f/0x2a0 [ 237.733572][T10410] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.733647][T10410] ? __might_fault+0xb0/0x130 [ 237.733679][T10410] __sys_sendmmsg+0x227/0x430 [ 237.733711][T10410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.733733][T10410] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 237.733794][T10410] ? ksys_write+0x22a/0x250 [ 237.733825][T10410] ? __pfx_ksys_write+0x10/0x10 [ 237.733850][T10410] ? rcu_is_watching+0x15/0xb0 [ 237.733881][T10410] __x64_sys_sendmmsg+0xa0/0xc0 [ 237.733911][T10410] do_syscall_64+0xfa/0x3b0 [ 237.733931][T10410] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.733950][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.733972][T10410] ? clear_bhb_loop+0x60/0xb0 [ 237.733999][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.734019][T10410] RIP: 0033:0x7fb8ee98e9a9 [ 237.734039][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.734059][T10410] RSP: 002b:00007fb8ec7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.734081][T10410] RAX: ffffffffffffffda RBX: 00007fb8eebb5fa0 RCX: 00007fb8ee98e9a9 [ 237.734097][T10410] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 237.734111][T10410] RBP: 00007fb8ec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.734123][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.734136][T10410] R13: 0000000000000000 R14: 00007fb8eebb5fa0 R15: 00007ffda37f64b8 [ 237.734170][T10410] [ 238.175806][T10415] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.287376][T10414] pim6reg1: entered allmulticast mode [ 238.298254][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 238.469355][T10423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.478282][T10423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.497608][T10423] bond0: (slave batadv0): Releasing backup interface [ 238.622762][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 238.857482][T10433] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 239.091221][T10433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.094678][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 239.155028][T10437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.162608][T10437] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.178227][T10437] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 239.210214][T10444] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.222378][T10444] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 239.519556][T10468] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.610467][T10475] IPv6: Can't replace route, no match found [ 239.818820][T10482] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20000 [ 240.061899][T10487] syzkaller0: entered promiscuous mode [ 240.068100][T10487] syzkaller0: entered allmulticast mode [ 240.402328][T10490] syz_tun: entered allmulticast mode [ 240.434379][T10490] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.506721][ T3547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.544343][ T3547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.575231][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.590825][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.269329][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1132'. [ 241.385414][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 241.624718][T10544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1138'. [ 241.769591][T10544] bridge_slave_0: entered allmulticast mode [ 241.848708][T10540] lo speed is unknown, defaulting to 1000 [ 242.092028][T10566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1144'. [ 242.121407][T10566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1144'. [ 242.132654][T10566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1144'. [ 242.155700][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'. [ 242.375835][T10577] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1146'. [ 242.583978][T10593] trusted_key: syz.1.1151 sent an empty control message without MSG_MORE. [ 242.797414][T10598] lo speed is unknown, defaulting to 1000 [ 243.912702][T10622] nftables ruleset with unbound chain [ 243.986637][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 244.452593][T10640] lo speed is unknown, defaulting to 1000 [ 245.595088][T10671] lo speed is unknown, defaulting to 1000 [ 245.891348][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 246.678665][T10719] tipc: Enabled bearer , priority 0 [ 246.707953][T10719] syzkaller0: entered promiscuous mode [ 246.718111][T10719] syzkaller0: entered allmulticast mode [ 246.783926][T10719] tipc: Resetting bearer [ 246.862541][T10729] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 247.374133][T10718] tipc: Resetting bearer [ 247.407595][T10747] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1196'. [ 247.413825][T10718] tipc: Disabling bearer [ 247.645391][T10754] lo speed is unknown, defaulting to 1000 [ 247.674854][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 247.783501][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.815363][T10776] FAULT_INJECTION: forcing a failure. [ 247.815363][T10776] name failslab, interval 1, probability 0, space 0, times 0 [ 247.840223][T10776] CPU: 0 UID: 0 PID: 10776 Comm: syz.0.1204 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 247.840258][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.840271][T10776] Call Trace: [ 247.840279][T10776] [ 247.840290][T10776] dump_stack_lvl+0x189/0x250 [ 247.840320][T10776] ? __pfx____ratelimit+0x10/0x10 [ 247.840356][T10776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.840381][T10776] ? __pfx__printk+0x10/0x10 [ 247.840416][T10776] ? __pfx___might_resched+0x10/0x10 [ 247.840446][T10776] should_fail_ex+0x414/0x560 [ 247.840488][T10776] should_failslab+0xa8/0x100 [ 247.840521][T10776] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 247.840551][T10776] ? __alloc_skb+0x112/0x2d0 [ 247.840579][T10776] __alloc_skb+0x112/0x2d0 [ 247.840607][T10776] tipc_msg_build+0x13b/0xcf0 [ 247.840638][T10776] ? tipc_node_find+0xb3/0x480 [ 247.840669][T10776] ? __pfx_tipc_msg_build+0x10/0x10 [ 247.840711][T10776] __tipc_sendmsg+0x1715/0x2960 [ 247.840757][T10776] ? process_measurement+0x72d/0x1a40 [ 247.840789][T10776] ? __pfx___tipc_sendmsg+0x10/0x10 [ 247.840827][T10776] ? process_measurement+0x1640/0x1a40 [ 247.840852][T10776] ? aa_label_sk_perm+0x413/0x560 [ 247.840900][T10776] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 247.840948][T10776] ? look_up_lock_class+0x74/0x170 [ 247.840981][T10776] ? __lock_acquire+0xab9/0xd20 [ 247.841018][T10776] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.841042][T10776] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.841063][T10776] ? __pfx_woken_wake_function+0x10/0x10 [ 247.841096][T10776] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.841132][T10776] tipc_sendmsg+0x55/0x70 [ 247.841151][T10776] ? __pfx_tipc_sendmsg+0x10/0x10 [ 247.841171][T10776] __sock_sendmsg+0x21c/0x270 [ 247.841208][T10776] ____sys_sendmsg+0x52d/0x830 [ 247.841241][T10776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.841279][T10776] ? import_iovec+0x74/0xa0 [ 247.841313][T10776] ___sys_sendmsg+0x21f/0x2a0 [ 247.841342][T10776] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.841422][T10776] ? __might_fault+0xb0/0x130 [ 247.841455][T10776] __sys_sendmmsg+0x227/0x430 [ 247.841488][T10776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 247.841512][T10776] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 247.841571][T10776] ? ksys_write+0x22a/0x250 [ 247.841601][T10776] ? __pfx_ksys_write+0x10/0x10 [ 247.841625][T10776] ? rcu_is_watching+0x15/0xb0 [ 247.841658][T10776] __x64_sys_sendmmsg+0xa0/0xc0 [ 247.841688][T10776] do_syscall_64+0xfa/0x3b0 [ 247.841709][T10776] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.841728][T10776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.841750][T10776] ? clear_bhb_loop+0x60/0xb0 [ 247.841777][T10776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.841798][T10776] RIP: 0033:0x7f27c0f8e9a9 [ 247.841818][T10776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.841837][T10776] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.841859][T10776] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 247.841883][T10776] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 247.841897][T10776] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 247.841910][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.841923][T10776] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 247.841957][T10776] [ 248.774844][T10802] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1213'. [ 248.785703][T10798] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 248.803844][T10802] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1213'. [ 248.815446][T10798] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 248.868651][T10798] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 248.975401][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 249.220892][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 249.451556][T10814] syzkaller0: entered promiscuous mode [ 249.485051][T10814] syzkaller0: entered allmulticast mode [ 249.602324][T10831] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 249.766575][T10828] lo speed is unknown, defaulting to 1000 [ 249.859475][T10839] netlink: 'syz.3.1220': attribute type 2 has an invalid length. [ 249.983695][T10844] geneve2: entered promiscuous mode [ 250.020698][ T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.061962][ T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.089494][ T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.109986][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.452672][T10869] FAULT_INJECTION: forcing a failure. [ 250.452672][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.511130][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.4.1228 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 250.511167][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.511181][T10869] Call Trace: [ 250.511190][T10869] [ 250.511199][T10869] dump_stack_lvl+0x189/0x250 [ 250.511230][T10869] ? __pfx____ratelimit+0x10/0x10 [ 250.511264][T10869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.511285][T10869] ? __pfx__printk+0x10/0x10 [ 250.511309][T10869] ? __might_fault+0xb0/0x130 [ 250.511345][T10869] should_fail_ex+0x414/0x560 [ 250.511512][T10869] _copy_from_user+0x2d/0xb0 [ 250.511546][T10869] ___sys_sendmsg+0x158/0x2a0 [ 250.511576][T10869] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.511655][T10869] ? __might_fault+0xb0/0x130 [ 250.511707][T10869] __sys_sendmmsg+0x227/0x430 [ 250.511740][T10869] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.511764][T10869] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 250.511816][T10869] ? ksys_write+0x22a/0x250 [ 250.511848][T10869] ? __pfx_ksys_write+0x10/0x10 [ 250.511872][T10869] ? rcu_is_watching+0x15/0xb0 [ 250.511904][T10869] __x64_sys_sendmmsg+0xa0/0xc0 [ 250.511933][T10869] do_syscall_64+0xfa/0x3b0 [ 250.511954][T10869] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.511974][T10869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.511995][T10869] ? clear_bhb_loop+0x60/0xb0 [ 250.512022][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.512043][T10869] RIP: 0033:0x7fb8ee98e9a9 [ 250.512064][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.512083][T10869] RSP: 002b:00007fb8ec7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.512108][T10869] RAX: ffffffffffffffda RBX: 00007fb8eebb5fa0 RCX: 00007fb8ee98e9a9 [ 250.512124][T10869] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 250.512138][T10869] RBP: 00007fb8ec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.512157][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.512170][T10869] R13: 0000000000000000 R14: 00007fb8eebb5fa0 R15: 00007ffda37f64b8 [ 250.512204][T10869] [ 250.811340][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 250.916118][T10879] team0: No ports can be present during mode change [ 251.610222][T10922] lo speed is unknown, defaulting to 1000 [ 251.799305][T10925] FAULT_INJECTION: forcing a failure. [ 251.799305][T10925] name failslab, interval 1, probability 0, space 0, times 0 [ 251.845474][T10925] CPU: 1 UID: 0 PID: 10925 Comm: syz.0.1242 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 251.845510][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.845524][T10925] Call Trace: [ 251.845533][T10925] [ 251.845543][T10925] dump_stack_lvl+0x189/0x250 [ 251.845573][T10925] ? __pfx____ratelimit+0x10/0x10 [ 251.845609][T10925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.845634][T10925] ? __pfx__printk+0x10/0x10 [ 251.845669][T10925] ? __pfx___might_resched+0x10/0x10 [ 251.845699][T10925] should_fail_ex+0x414/0x560 [ 251.845741][T10925] should_failslab+0xa8/0x100 [ 251.845774][T10925] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 251.845805][T10925] ? __alloc_skb+0x112/0x2d0 [ 251.845833][T10925] __alloc_skb+0x112/0x2d0 [ 251.845861][T10925] tipc_msg_build+0x13b/0xcf0 [ 251.845892][T10925] ? tipc_node_find+0xb3/0x480 [ 251.845924][T10925] ? __pfx_tipc_msg_build+0x10/0x10 [ 251.845966][T10925] __tipc_sendmsg+0x1715/0x2960 [ 251.846013][T10925] ? process_measurement+0x72d/0x1a40 [ 251.846046][T10925] ? __pfx___tipc_sendmsg+0x10/0x10 [ 251.846085][T10925] ? process_measurement+0x1640/0x1a40 [ 251.846111][T10925] ? aa_label_sk_perm+0x413/0x560 [ 251.846152][T10925] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 251.846200][T10925] ? look_up_lock_class+0x74/0x170 [ 251.846234][T10925] ? __lock_acquire+0xab9/0xd20 [ 251.846279][T10925] ? __local_bh_enable_ip+0x12d/0x1c0 [ 251.846302][T10925] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.846323][T10925] ? __pfx_woken_wake_function+0x10/0x10 [ 251.846356][T10925] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 251.846392][T10925] tipc_sendmsg+0x55/0x70 [ 251.846411][T10925] ? __pfx_tipc_sendmsg+0x10/0x10 [ 251.846431][T10925] __sock_sendmsg+0x21c/0x270 [ 251.846467][T10925] ____sys_sendmsg+0x52d/0x830 [ 251.846502][T10925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.846540][T10925] ? import_iovec+0x74/0xa0 [ 251.846575][T10925] ___sys_sendmsg+0x21f/0x2a0 [ 251.846605][T10925] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.846687][T10925] ? __might_fault+0xb0/0x130 [ 251.846721][T10925] __sys_sendmmsg+0x227/0x430 [ 251.846755][T10925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.846778][T10925] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 251.846834][T10925] ? ksys_write+0x22a/0x250 [ 251.846865][T10925] ? __pfx_ksys_write+0x10/0x10 [ 251.846901][T10925] __x64_sys_sendmmsg+0xa0/0xc0 [ 251.846932][T10925] do_syscall_64+0xfa/0x3b0 [ 251.846953][T10925] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.846973][T10925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.846994][T10925] ? clear_bhb_loop+0x60/0xb0 [ 251.847021][T10925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.847041][T10925] RIP: 0033:0x7f27c0f8e9a9 [ 251.847062][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.847081][T10925] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 251.847104][T10925] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 251.847119][T10925] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 251.847133][T10925] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 251.847146][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.847159][T10925] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 251.847195][T10925] [ 252.173043][T10929] tipc: Enabled bearer , priority 0 [ 252.467211][T10927] syzkaller0: entered promiscuous mode [ 252.474025][T10927] syzkaller0: entered allmulticast mode [ 252.480411][T10927] tipc: Resetting bearer [ 252.499945][T10936] smc: net device bond0 applied user defined pnetid SYZ2 [ 252.542141][T10926] tipc: Resetting bearer [ 252.665175][T10953] netlink: 'syz.0.1248': attribute type 83 has an invalid length. [ 252.687882][T10953] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 253.184904][T10972] netlink: 'syz.0.1250': attribute type 2 has an invalid length. [ 253.267273][ T24] tipc: Node number set to 1165427962 [ 254.324783][T10926] tipc: Disabling bearer [ 254.544808][T10979] __nla_validate_parse: 2 callbacks suppressed [ 254.544829][T10979] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1253'. [ 254.553453][T10980] netlink: 'syz.1.1254': attribute type 12 has an invalid length. [ 254.583794][T10980] netlink: 'syz.1.1254': attribute type 29 has an invalid length. [ 254.592359][T10980] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1254'. [ 254.601893][T10980] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 254.913271][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'. [ 255.120094][T11008] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 255.192273][T11014] FAULT_INJECTION: forcing a failure. [ 255.192273][T11014] name failslab, interval 1, probability 0, space 0, times 0 [ 255.193488][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1262'. [ 255.208688][T11014] CPU: 1 UID: 0 PID: 11014 Comm: syz.2.1264 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 255.208726][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.208740][T11014] Call Trace: [ 255.208750][T11014] [ 255.208760][T11014] dump_stack_lvl+0x189/0x250 [ 255.208796][T11014] ? __pfx____ratelimit+0x10/0x10 [ 255.208851][T11014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.208880][T11014] ? __pfx__printk+0x10/0x10 [ 255.208916][T11014] ? __pfx___might_resched+0x10/0x10 [ 255.208948][T11014] should_fail_ex+0x414/0x560 [ 255.208993][T11014] should_failslab+0xa8/0x100 [ 255.209030][T11014] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 255.209064][T11014] ? __alloc_skb+0x112/0x2d0 [ 255.209096][T11014] __alloc_skb+0x112/0x2d0 [ 255.209128][T11014] tipc_msg_build+0x13b/0xcf0 [ 255.209160][T11014] ? tipc_node_find+0xb3/0x480 [ 255.209196][T11014] ? __pfx_tipc_msg_build+0x10/0x10 [ 255.209251][T11014] __tipc_sendmsg+0x1715/0x2960 [ 255.209304][T11014] ? process_measurement+0x72d/0x1a40 [ 255.209340][T11014] ? __pfx___tipc_sendmsg+0x10/0x10 [ 255.209382][T11014] ? process_measurement+0x1640/0x1a40 [ 255.209410][T11014] ? aa_label_sk_perm+0x413/0x560 [ 255.209456][T11014] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 255.209507][T11014] ? look_up_lock_class+0x74/0x170 [ 255.209547][T11014] ? __lock_acquire+0xab9/0xd20 [ 255.209589][T11014] ? __local_bh_enable_ip+0x12d/0x1c0 [ 255.209616][T11014] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.209640][T11014] ? __pfx_woken_wake_function+0x10/0x10 [ 255.209680][T11014] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.209718][T11014] tipc_sendmsg+0x55/0x70 [ 255.209739][T11014] ? __pfx_tipc_sendmsg+0x10/0x10 [ 255.209762][T11014] __sock_sendmsg+0x21c/0x270 [ 255.209802][T11014] ____sys_sendmsg+0x52d/0x830 [ 255.209840][T11014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.209883][T11014] ? import_iovec+0x74/0xa0 [ 255.209921][T11014] ___sys_sendmsg+0x21f/0x2a0 [ 255.209953][T11014] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.210042][T11014] ? __might_fault+0xb0/0x130 [ 255.210079][T11014] __sys_sendmmsg+0x227/0x430 [ 255.210117][T11014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.210143][T11014] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 255.210213][T11014] ? ksys_write+0x22a/0x250 [ 255.210246][T11014] ? __pfx_ksys_write+0x10/0x10 [ 255.210273][T11014] ? rcu_is_watching+0x15/0xb0 [ 255.210310][T11014] __x64_sys_sendmmsg+0xa0/0xc0 [ 255.210343][T11014] do_syscall_64+0xfa/0x3b0 [ 255.210366][T11014] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.210389][T11014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.210413][T11014] ? clear_bhb_loop+0x60/0xb0 [ 255.210443][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.210467][T11014] RIP: 0033:0x7fa8f078e9a9 [ 255.210489][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.210512][T11014] RSP: 002b:00007fa8f15bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.210539][T11014] RAX: ffffffffffffffda RBX: 00007fa8f09b5fa0 RCX: 00007fa8f078e9a9 [ 255.210558][T11014] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 255.210574][T11014] RBP: 00007fa8f15bb090 R08: 0000000000000000 R09: 0000000000000000 [ 255.210588][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.210603][T11014] R13: 0000000000000000 R14: 00007fa8f09b5fa0 R15: 00007ffd779340e8 [ 255.210642][T11014] [ 255.368342][T11008] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1263'. [ 255.645808][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 255.803897][T11028] bond5: (slave bridge4): Releasing backup interface [ 255.810775][T11028] bridge4: left promiscuous mode [ 255.829261][T11026] netlink: 'syz.0.1268': attribute type 12 has an invalid length. [ 255.936487][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 256.174836][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 256.251336][T11060] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1278'. [ 256.323833][T11061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.400323][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 256.431406][ T5859] Bluetooth: hci4: link tx timeout [ 256.440868][ T5859] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 257.079369][T11106] netlink: 'syz.4.1290': attribute type 15 has an invalid length. [ 257.428935][T11128] pimreg: left allmulticast mode [ 257.531706][T11133] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.141901][T11157] lo speed is unknown, defaulting to 1000 [ 258.503382][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 258.611785][T11172] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 258.744629][T11175] tipc: Invalid UDP bearer configuration [ 258.744682][T11175] tipc: Enabling of bearer rejected, failed to enable media [ 259.153981][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.301157][T11205] lo speed is unknown, defaulting to 1000 [ 259.391215][T11216] sctp: [Deprecated]: syz.1.1320 (pid 11216) Use of int in max_burst socket option. [ 259.391215][T11216] Use struct sctp_assoc_value instead [ 260.118231][T11256] __nla_validate_parse: 10 callbacks suppressed [ 260.118252][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 260.234581][T11259] lo speed is unknown, defaulting to 1000 [ 260.636443][T11275] tipc: New replicast peer: 255.255.255.255 [ 260.659980][T11275] tipc: Enabled bearer , priority 10 [ 260.666452][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 260.801305][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1330'. [ 260.849007][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 260.971747][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 261.040541][T11288] netlink: 'syz.4.1341': attribute type 14 has an invalid length. [ 261.218385][T11288] netlink: 'syz.4.1341': attribute type 14 has an invalid length. [ 261.855846][T11310] lo speed is unknown, defaulting to 1000 [ 261.952820][T11316] netlink: 'syz.3.1351': attribute type 3 has an invalid length. [ 262.101739][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 262.349464][T11337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1359'. [ 262.369404][T11337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1359'. [ 262.477811][T11342] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 262.572670][T11325] lo speed is unknown, defaulting to 1000 [ 262.600558][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 262.678998][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1362'. [ 262.811813][T11356] FAULT_INJECTION: forcing a failure. [ 262.811813][T11356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.826856][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.0.1364 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 262.826889][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.826903][T11356] Call Trace: [ 262.826911][T11356] [ 262.826921][T11356] dump_stack_lvl+0x189/0x250 [ 262.826951][T11356] ? __pfx____ratelimit+0x10/0x10 [ 262.826987][T11356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.827011][T11356] ? __pfx__printk+0x10/0x10 [ 262.827039][T11356] ? __might_fault+0xb0/0x130 [ 262.827079][T11356] should_fail_ex+0x414/0x560 [ 262.827120][T11356] _copy_from_user+0x2d/0xb0 [ 262.827169][T11356] ___sys_sendmsg+0x158/0x2a0 [ 262.827200][T11356] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.827278][T11356] ? __might_fault+0xb0/0x130 [ 262.827309][T11356] __sys_sendmmsg+0x227/0x430 [ 262.827342][T11356] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.827366][T11356] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 262.827420][T11356] ? ksys_write+0x22a/0x250 [ 262.827451][T11356] ? __pfx_ksys_write+0x10/0x10 [ 262.827474][T11356] ? rcu_is_watching+0x15/0xb0 [ 262.827514][T11356] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.827544][T11356] do_syscall_64+0xfa/0x3b0 [ 262.827565][T11356] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.827586][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.827607][T11356] ? clear_bhb_loop+0x60/0xb0 [ 262.827634][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.827654][T11356] RIP: 0033:0x7f27c0f8e9a9 [ 262.827682][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.827703][T11356] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.827725][T11356] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 262.827742][T11356] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 262.827756][T11356] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 262.827769][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.827782][T11356] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 262.827816][T11356] [ 263.379574][T11360] bridge0: entered promiscuous mode [ 263.388878][T11360] vlan0: entered promiscuous mode [ 264.022426][T11394] FAULT_INJECTION: forcing a failure. [ 264.022426][T11394] name failslab, interval 1, probability 0, space 0, times 0 [ 264.043976][T11394] CPU: 1 UID: 0 PID: 11394 Comm: syz.1.1376 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 264.044009][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.044023][T11394] Call Trace: [ 264.044031][T11394] [ 264.044041][T11394] dump_stack_lvl+0x189/0x250 [ 264.044071][T11394] ? __pfx____ratelimit+0x10/0x10 [ 264.044107][T11394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.044132][T11394] ? __pfx__printk+0x10/0x10 [ 264.044180][T11394] ? __pfx___might_resched+0x10/0x10 [ 264.044209][T11394] should_fail_ex+0x414/0x560 [ 264.044251][T11394] should_failslab+0xa8/0x100 [ 264.044285][T11394] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.044315][T11394] ? __alloc_skb+0x112/0x2d0 [ 264.044343][T11394] __alloc_skb+0x112/0x2d0 [ 264.044372][T11394] tipc_msg_build+0x13b/0xcf0 [ 264.044402][T11394] ? tipc_node_find+0xb3/0x480 [ 264.044434][T11394] ? __pfx_tipc_msg_build+0x10/0x10 [ 264.044476][T11394] __tipc_sendmsg+0x1715/0x2960 [ 264.044523][T11394] ? process_measurement+0x72d/0x1a40 [ 264.044555][T11394] ? __pfx___tipc_sendmsg+0x10/0x10 [ 264.044593][T11394] ? process_measurement+0x1640/0x1a40 [ 264.044619][T11394] ? aa_label_sk_perm+0x413/0x560 [ 264.044659][T11394] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 264.044707][T11394] ? look_up_lock_class+0x74/0x170 [ 264.044741][T11394] ? __lock_acquire+0xab9/0xd20 [ 264.044779][T11394] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.044801][T11394] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.044822][T11394] ? __pfx_woken_wake_function+0x10/0x10 [ 264.044856][T11394] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 264.044892][T11394] tipc_sendmsg+0x55/0x70 [ 264.044911][T11394] ? __pfx_tipc_sendmsg+0x10/0x10 [ 264.044935][T11394] __sock_sendmsg+0x21c/0x270 [ 264.044972][T11394] ____sys_sendmsg+0x52d/0x830 [ 264.045004][T11394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.045042][T11394] ? import_iovec+0x74/0xa0 [ 264.045076][T11394] ___sys_sendmsg+0x21f/0x2a0 [ 264.045106][T11394] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.045205][T11394] ? __might_fault+0xb0/0x130 [ 264.045237][T11394] __sys_sendmmsg+0x227/0x430 [ 264.045271][T11394] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.045295][T11394] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 264.045349][T11394] ? ksys_write+0x22a/0x250 [ 264.045379][T11394] ? __pfx_ksys_write+0x10/0x10 [ 264.045402][T11394] ? rcu_is_watching+0x15/0xb0 [ 264.045434][T11394] __x64_sys_sendmmsg+0xa0/0xc0 [ 264.045463][T11394] do_syscall_64+0xfa/0x3b0 [ 264.045484][T11394] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.045504][T11394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.045526][T11394] ? clear_bhb_loop+0x60/0xb0 [ 264.045553][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.045574][T11394] RIP: 0033:0x7fd494b8e9a9 [ 264.045593][T11394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.045611][T11394] RSP: 002b:00007fd495a54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.045634][T11394] RAX: ffffffffffffffda RBX: 00007fd494db5fa0 RCX: 00007fd494b8e9a9 [ 264.045650][T11394] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 264.045663][T11394] RBP: 00007fd495a54090 R08: 0000000000000000 R09: 0000000000000000 [ 264.045676][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.045689][T11394] R13: 0000000000000000 R14: 00007fd494db5fa0 R15: 00007ffcc143be98 [ 264.045723][T11394] [ 264.642020][T11407] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 264.768589][T11407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.777924][T11418] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 264.809360][T11413] bond2: (slave gretap1): making interface the new active one [ 264.818570][T11413] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 264.837192][T11422] syzkaller0: entered promiscuous mode [ 264.849166][T11422] syzkaller0: entered allmulticast mode [ 264.868946][T11419] tipc: Enabled bearer , priority 0 [ 264.894235][T11407] IPv6: sit1: Disabled Multicast RS [ 264.901026][T11407] sit1: entered allmulticast mode [ 264.941771][T11410] lo speed is unknown, defaulting to 1000 [ 264.941785][T11417] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 264.941895][T11417] dvmrp1: linktype set to 805 [ 265.025809][T11412] tipc: Resetting bearer [ 265.055772][T11411] tipc: Resetting bearer [ 265.137825][T11411] tipc: Disabling bearer [ 265.168412][T11433] __nla_validate_parse: 3 callbacks suppressed [ 265.168434][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 265.214504][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 265.283748][T11435] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1387'. [ 265.421090][T11447] tipc: Can't bind to reserved service type 1 [ 265.558947][T11447] lo speed is unknown, defaulting to 1000 [ 265.617995][T11457] netlink: 'syz.4.1392': attribute type 3 has an invalid length. [ 265.678184][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 265.903021][T11467] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 265.910816][T11467] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1394'. [ 266.129146][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1396'. [ 266.185840][T11479] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1396'. [ 266.472389][T11486] FAULT_INJECTION: forcing a failure. [ 266.472389][T11486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.503263][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.0.1400 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 266.503297][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.503310][T11486] Call Trace: [ 266.503318][T11486] [ 266.503328][T11486] dump_stack_lvl+0x189/0x250 [ 266.503357][T11486] ? __pfx____ratelimit+0x10/0x10 [ 266.503391][T11486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.503415][T11486] ? __pfx__printk+0x10/0x10 [ 266.503442][T11486] ? __might_fault+0xb0/0x130 [ 266.503479][T11486] should_fail_ex+0x414/0x560 [ 266.503519][T11486] _copy_from_user+0x2d/0xb0 [ 266.503550][T11486] ___sys_sendmsg+0x158/0x2a0 [ 266.503578][T11486] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.503650][T11486] ? __might_fault+0xb0/0x130 [ 266.503683][T11486] __sys_sendmmsg+0x227/0x430 [ 266.503715][T11486] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.503738][T11486] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 266.503787][T11486] ? ksys_write+0x22a/0x250 [ 266.503815][T11487] netlink: 'syz.2.1399': attribute type 10 has an invalid length. [ 266.503816][T11486] ? __pfx_ksys_write+0x10/0x10 [ 266.503850][T11486] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.503876][T11486] do_syscall_64+0xfa/0x3b0 [ 266.503896][T11486] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.503916][T11486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.503941][T11486] ? clear_bhb_loop+0x60/0xb0 [ 266.503972][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.503997][T11486] RIP: 0033:0x7f27c0f8e9a9 [ 266.504019][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.504040][T11486] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.504066][T11486] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 266.504084][T11486] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 266.504101][T11486] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 266.504117][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.504130][T11486] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 266.504167][T11486] [ 266.734044][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1399'. [ 266.840017][T11487] veth0_vlan: entered allmulticast mode [ 266.849717][T11487] bridge0: port 1(veth0_vlan) entered blocking state [ 266.913176][T11487] bridge0: port 1(veth0_vlan) entered disabled state [ 266.937470][T11487] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 267.295655][T11508] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 267.305074][T11508] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1408'. [ 267.415432][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1409'. [ 267.470798][T11516] FAULT_INJECTION: forcing a failure. [ 267.470798][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 267.492368][T11516] CPU: 0 UID: 0 PID: 11516 Comm: syz.4.1411 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 267.492403][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.492416][T11516] Call Trace: [ 267.492426][T11516] [ 267.492436][T11516] dump_stack_lvl+0x189/0x250 [ 267.492465][T11516] ? __pfx____ratelimit+0x10/0x10 [ 267.492499][T11516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.492524][T11516] ? __pfx__printk+0x10/0x10 [ 267.492559][T11516] ? __pfx___might_resched+0x10/0x10 [ 267.492589][T11516] should_fail_ex+0x414/0x560 [ 267.492630][T11516] should_failslab+0xa8/0x100 [ 267.492664][T11516] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 267.492695][T11516] ? __alloc_skb+0x112/0x2d0 [ 267.492723][T11516] __alloc_skb+0x112/0x2d0 [ 267.492752][T11516] tipc_msg_build+0x13b/0xcf0 [ 267.492781][T11516] ? tipc_node_find+0xb3/0x480 [ 267.492814][T11516] ? __pfx_tipc_msg_build+0x10/0x10 [ 267.492866][T11516] __tipc_sendmsg+0x1715/0x2960 [ 267.492911][T11516] ? process_measurement+0x72d/0x1a40 [ 267.492943][T11516] ? __pfx___tipc_sendmsg+0x10/0x10 [ 267.492980][T11516] ? process_measurement+0x1640/0x1a40 [ 267.493005][T11516] ? aa_label_sk_perm+0x413/0x560 [ 267.493045][T11516] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 267.493092][T11516] ? look_up_lock_class+0x74/0x170 [ 267.493125][T11516] ? __lock_acquire+0xab9/0xd20 [ 267.493162][T11516] ? __local_bh_enable_ip+0x12d/0x1c0 [ 267.493185][T11516] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.493205][T11516] ? __pfx_woken_wake_function+0x10/0x10 [ 267.493238][T11516] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 267.493273][T11516] tipc_sendmsg+0x55/0x70 [ 267.493292][T11516] ? __pfx_tipc_sendmsg+0x10/0x10 [ 267.493311][T11516] __sock_sendmsg+0x21c/0x270 [ 267.493347][T11516] ____sys_sendmsg+0x52d/0x830 [ 267.493380][T11516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.493417][T11516] ? import_iovec+0x74/0xa0 [ 267.493450][T11516] ___sys_sendmsg+0x21f/0x2a0 [ 267.493479][T11516] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.493557][T11516] ? __might_fault+0xb0/0x130 [ 267.493587][T11516] __sys_sendmmsg+0x227/0x430 [ 267.493619][T11516] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.493642][T11516] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 267.493694][T11516] ? ksys_write+0x22a/0x250 [ 267.493724][T11516] ? __pfx_ksys_write+0x10/0x10 [ 267.493747][T11516] ? rcu_is_watching+0x15/0xb0 [ 267.493778][T11516] __x64_sys_sendmmsg+0xa0/0xc0 [ 267.493806][T11516] do_syscall_64+0xfa/0x3b0 [ 267.493825][T11516] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.493846][T11516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.493875][T11516] ? clear_bhb_loop+0x60/0xb0 [ 267.493902][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.493923][T11516] RIP: 0033:0x7fb8ee98e9a9 [ 267.493943][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.493962][T11516] RSP: 002b:00007fb8ec7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.493985][T11516] RAX: ffffffffffffffda RBX: 00007fb8eebb5fa0 RCX: 00007fb8ee98e9a9 [ 267.494001][T11516] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 267.494015][T11516] RBP: 00007fb8ec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.494029][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.494042][T11516] R13: 0000000000000000 R14: 00007fb8eebb5fa0 R15: 00007ffda37f64b8 [ 267.494077][T11516] [ 268.464732][T11545] block nbd0: server does not support multiple connections per device. [ 268.486237][T11545] block nbd0: shutting down sockets [ 268.615114][T11568] FAULT_INJECTION: forcing a failure. [ 268.615114][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 268.659460][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.0.1427 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 268.659493][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.659507][T11568] Call Trace: [ 268.659516][T11568] [ 268.659526][T11568] dump_stack_lvl+0x189/0x250 [ 268.659556][T11568] ? __pfx____ratelimit+0x10/0x10 [ 268.659592][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.659616][T11568] ? __pfx__printk+0x10/0x10 [ 268.659649][T11568] ? __pfx___might_resched+0x10/0x10 [ 268.659678][T11568] should_fail_ex+0x414/0x560 [ 268.659719][T11568] should_failslab+0xa8/0x100 [ 268.659764][T11568] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 268.659796][T11568] ? __alloc_skb+0x112/0x2d0 [ 268.659823][T11568] __alloc_skb+0x112/0x2d0 [ 268.659852][T11568] tipc_msg_build+0x13b/0xcf0 [ 268.659882][T11568] ? tipc_node_find+0xb3/0x480 [ 268.659915][T11568] ? __pfx_tipc_msg_build+0x10/0x10 [ 268.659957][T11568] __tipc_sendmsg+0x1715/0x2960 [ 268.660002][T11568] ? process_measurement+0x72d/0x1a40 [ 268.660034][T11568] ? __pfx___tipc_sendmsg+0x10/0x10 [ 268.660073][T11568] ? process_measurement+0x1640/0x1a40 [ 268.660099][T11568] ? aa_label_sk_perm+0x413/0x560 [ 268.660139][T11568] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 268.660186][T11568] ? look_up_lock_class+0x74/0x170 [ 268.660220][T11568] ? __lock_acquire+0xab9/0xd20 [ 268.660257][T11568] ? __local_bh_enable_ip+0x12d/0x1c0 [ 268.660280][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.660301][T11568] ? __pfx_woken_wake_function+0x10/0x10 [ 268.660334][T11568] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 268.660370][T11568] tipc_sendmsg+0x55/0x70 [ 268.660389][T11568] ? __pfx_tipc_sendmsg+0x10/0x10 [ 268.660409][T11568] __sock_sendmsg+0x21c/0x270 [ 268.660445][T11568] ____sys_sendmsg+0x52d/0x830 [ 268.660479][T11568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.660516][T11568] ? import_iovec+0x74/0xa0 [ 268.660549][T11568] ___sys_sendmsg+0x21f/0x2a0 [ 268.660579][T11568] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.660657][T11568] ? __might_fault+0xb0/0x130 [ 268.660690][T11568] __sys_sendmmsg+0x227/0x430 [ 268.660724][T11568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.660757][T11568] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 268.660812][T11568] ? ksys_write+0x22a/0x250 [ 268.660843][T11568] ? __pfx_ksys_write+0x10/0x10 [ 268.660867][T11568] ? rcu_is_watching+0x15/0xb0 [ 268.660899][T11568] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.660928][T11568] do_syscall_64+0xfa/0x3b0 [ 268.660949][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.660968][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.660988][T11568] ? clear_bhb_loop+0x60/0xb0 [ 268.661017][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.661038][T11568] RIP: 0033:0x7f27c0f8e9a9 [ 268.661058][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.661078][T11568] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.661101][T11568] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 268.661117][T11568] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 268.661131][T11568] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 268.661144][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.661157][T11568] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 268.661191][T11568] [ 269.055444][T11562] lo speed is unknown, defaulting to 1000 [ 269.737777][T11600] batadv_slave_1: entered promiscuous mode [ 269.775601][T11600] batadv_slave_1: left promiscuous mode [ 269.998296][T11616] FAULT_INJECTION: forcing a failure. [ 269.998296][T11616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.056564][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.0.1441 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 270.056597][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.056610][T11616] Call Trace: [ 270.056619][T11616] [ 270.056628][T11616] dump_stack_lvl+0x189/0x250 [ 270.056659][T11616] ? __pfx____ratelimit+0x10/0x10 [ 270.056693][T11616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.056717][T11616] ? __pfx__printk+0x10/0x10 [ 270.056747][T11616] ? __might_fault+0xb0/0x130 [ 270.056786][T11616] should_fail_ex+0x414/0x560 [ 270.056827][T11616] _copy_from_user+0x2d/0xb0 [ 270.056857][T11616] ___sys_sendmsg+0x158/0x2a0 [ 270.056888][T11616] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.056973][T11616] ? __might_fault+0xb0/0x130 [ 270.057005][T11616] __sys_sendmmsg+0x227/0x430 [ 270.057038][T11616] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.057063][T11616] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 270.057117][T11616] ? ksys_write+0x22a/0x250 [ 270.057148][T11616] ? __pfx_ksys_write+0x10/0x10 [ 270.057173][T11616] ? rcu_is_watching+0x15/0xb0 [ 270.057207][T11616] __x64_sys_sendmmsg+0xa0/0xc0 [ 270.057236][T11616] do_syscall_64+0xfa/0x3b0 [ 270.057257][T11616] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.057276][T11616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.057298][T11616] ? clear_bhb_loop+0x60/0xb0 [ 270.057325][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.057346][T11616] RIP: 0033:0x7f27c0f8e9a9 [ 270.057366][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.057386][T11616] RSP: 002b:00007f27c1d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.057410][T11616] RAX: ffffffffffffffda RBX: 00007f27c11b5fa0 RCX: 00007f27c0f8e9a9 [ 270.057425][T11616] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 270.057440][T11616] RBP: 00007f27c1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 270.057453][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.057466][T11616] R13: 0000000000000000 R14: 00007f27c11b5fa0 R15: 00007ffcd39821c8 [ 270.057499][T11616] [ 270.796319][T11638] __nla_validate_parse: 3 callbacks suppressed [ 270.796342][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'. [ 271.047322][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 271.253529][T11651] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 271.297636][T11651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.327718][T11651] bond2: (slave bridge4): making interface the new active one [ 271.338027][T11651] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 271.361185][T11651] gretap1: entered promiscuous mode [ 271.371821][T11651] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 271.414688][T11651] macvlan0: entered promiscuous mode [ 271.425081][T11651] macvlan0: entered allmulticast mode [ 271.431476][T11651] bond2: entered promiscuous mode [ 271.437039][T11651] bridge4: entered promiscuous mode [ 271.447260][T11651] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 271.459509][T11651] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 271.477484][T11651] bond2: left promiscuous mode [ 271.483943][T11651] bridge4: left promiscuous mode [ 271.534682][T11657] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882) [ 271.547798][T11657] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 271.847898][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 271.858057][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 271.867657][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 272.050464][T11677] lo speed is unknown, defaulting to 1000 [ 272.070222][T11684] team0: Device gtp0 is of different type [ 272.147537][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 272.158578][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1458'. [ 272.202291][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 272.326405][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1464'. [ 272.360833][T11697] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.428981][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.471672][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.496729][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.559028][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.796718][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 273.241576][ T5938] IPVS: starting estimator thread 0... [ 273.244658][T11721] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.333685][T11730] IPVS: using max 25 ests per chain, 60000 per kthread [ 273.406942][T11735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.496658][T11744] wg1: entered promiscuous mode [ 273.618990][T11746] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 273.665509][T11761] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 273.756271][T11761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.792067][T11761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 273.916093][T11761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.945831][T11761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 274.322627][T11796] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 274.770231][T11761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.793658][T11761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 274.848302][T11810] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.945158][T11761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.998451][T11761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.198798][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.213093][ T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.261792][T11830] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 275.484541][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.503281][ T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.512223][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.533578][ T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.562439][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.590647][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.845482][T11846] 8021q: VLANs not supported on ip_vti0 [ 275.859054][T11844] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 276.082152][T11854] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.125134][T11854] bond7: (slave bond8): Enslaving as an active interface with a down link [ 276.207201][T11868] netlink: 'syz.4.1514': attribute type 7 has an invalid length. [ 276.271525][T11868] : entered promiscuous mode [ 276.524499][T11879] __nla_validate_parse: 40 callbacks suppressed [ 276.524523][T11879] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1520'. [ 277.376481][T11915] netlink: 'syz.3.1533': attribute type 1 has an invalid length. [ 277.409051][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1531'. [ 277.506639][T11920] pimreg: entered allmulticast mode [ 277.898598][T11948] lo speed is unknown, defaulting to 1000 [ 278.197045][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 278.229391][T11958] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1543'. [ 278.383277][T11963] ipvlan0: entered promiscuous mode [ 278.735474][T11976] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 278.808185][T11976] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.919920][T11978] lo speed is unknown, defaulting to 1000 [ 279.118307][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1551'. [ 279.174003][T11985] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 279.196999][T11982] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1551'. [ 279.509555][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 279.594539][T11998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1557'. [ 279.648774][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'. [ 279.891069][T12015] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 279.900358][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 279.918651][T12015] bridge0: port 1(gretap0) entered blocking state [ 279.984597][T12015] bridge0: port 1(gretap0) entered disabled state [ 279.991479][T12015] gretap0: entered allmulticast mode [ 280.015707][T12015] gretap0: entered promiscuous mode [ 280.043484][T12015] bridge0: port 1(gretap0) entered blocking state [ 280.050073][T12015] bridge0: port 1(gretap0) entered forwarding state [ 280.410973][T12039] tipc: Enabled bearer , priority 0 [ 280.462185][T12039] syzkaller0: entered promiscuous mode [ 280.495000][T12039] syzkaller0: entered allmulticast mode [ 280.628232][T12033] lo speed is unknown, defaulting to 1000 [ 280.753637][T12039] tipc: Resetting bearer [ 280.788084][T12037] tipc: Resetting bearer [ 280.874599][T12037] tipc: Disabling bearer [ 280.902113][T12068] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.917079][ T31] audit: type=1804 audit(1753574877.744:8): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1573" name="/newroot/326/cgroup.controllers" dev="tmpfs" ino=1692 res=1 errno=0 [ 280.977305][ T31] audit: type=1800 audit(1753574877.774:9): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1573" name="cgroup.controllers" dev="tmpfs" ino=1692 res=0 errno=0 [ 281.121603][T12072] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 281.159791][T12072] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 281.252039][T12035] lo speed is unknown, defaulting to 1000 [ 281.788112][T12085] sctp: [Deprecated]: syz.3.1580 (pid 12085) Use of int in max_burst socket option. [ 281.788112][T12085] Use struct sctp_assoc_value instead [ 283.089769][T12122] __nla_validate_parse: 2 callbacks suppressed [ 283.089784][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 283.113413][T12122] tipc: Enabling of bearer rejected, failed to enable media [ 283.286207][T12126] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 283.805224][T12145] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1596'. [ 283.929127][T12142] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 283.970262][T12148] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1597'. [ 284.045379][T12142] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.090973][T12146] bond9: (slave geneve3): making interface the new active one [ 284.100698][T12146] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 284.127906][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.138838][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.256882][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.317819][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.363794][T12158] lo: entered allmulticast mode [ 284.385098][T12158] dvmrp8: entered allmulticast mode [ 284.391309][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'. [ 284.497008][T12169] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 284.509449][T12169] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 284.567846][T12160] macvlan2: entered promiscuous mode [ 284.588972][T12160] macvlan2: entered allmulticast mode [ 284.619365][T12160] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 284.636103][T12176] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 284.651896][T12165] bridge_slave_0: left allmulticast mode [ 284.661087][T12165] bridge_slave_0: left promiscuous mode [ 284.671063][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.738989][T12165] bridge_slave_1: left allmulticast mode [ 284.756640][T12165] bridge_slave_1: left promiscuous mode [ 284.793429][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.829238][T12165] bond0: (slave bond_slave_0): Releasing backup interface [ 284.856743][T12165] bond0: (slave bond_slave_1): Releasing backup interface [ 284.926065][T12165] team0: Port device team_slave_0 removed [ 284.959096][T12165] team0: Port device team_slave_1 removed [ 284.973920][T12165] bond2: (slave bridge4): Releasing active interface [ 284.983112][T12165] bond2: (slave bridge4): the permanent HWaddr of slave - 7e:1a:02:7b:f7:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 285.003931][T12165] bond2: (slave gretap1): making interface the new active one [ 285.014097][T12183] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.051157][T12165] bond2: (slave gretap1): Releasing active interface [ 285.066825][T12176] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 285.087382][T12176] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 285.193106][T12155] lo: left allmulticast mode [ 285.258959][T12168] lo speed is unknown, defaulting to 1000 [ 285.564527][T12189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1607'. [ 285.907455][T12195] lo speed is unknown, defaulting to 1000 [ 285.983875][T12199] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 286.010041][T12199] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 286.118500][T12199] veth1_to_bond: entered promiscuous mode [ 286.124476][T12199] veth1_to_bond: entered allmulticast mode [ 286.485172][T12208] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 286.572164][T12208] bond5: entered promiscuous mode [ 286.587932][T12208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.665781][T12210] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.679582][T12210] bond5: (slave bond6): making interface the new active one [ 286.687281][T12210] bond6: entered promiscuous mode [ 286.693765][T12210] bond5: (slave bond6): Enslaving as an active interface with an up link [ 286.905235][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 287.364206][T12232] netlink: 'syz.2.1614': attribute type 2 has an invalid length. [ 287.384595][T12232] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1614'. [ 287.566487][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 287.757492][T12252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1620'. [ 287.950504][T12260] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1622'. [ 288.119992][T12269] __nla_validate_parse: 2 callbacks suppressed [ 288.120016][T12269] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1625'. [ 288.143394][T12269] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1625'. [ 288.366926][T12275] tipc: New replicast peer: 255.255.255.255 [ 288.387695][T12275] tipc: Enabled bearer , priority 10 [ 288.408132][T12279] IPVS: length: 180 != 8 [ 288.413593][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1630'. [ 288.639783][T12296] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1637'. [ 288.663841][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 288.715077][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1636'. [ 288.808637][T12309] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 288.815775][T12309] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 288.822906][T12309] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 288.927704][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 288.976296][T12320] netlink: 'syz.4.1644': attribute type 27 has an invalid length. [ 289.302123][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 289.380620][T12316] bridge_slave_1: left allmulticast mode [ 289.387719][T12316] bridge_slave_1: left promiscuous mode [ 289.395327][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.412575][T12345] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1649'. [ 289.427639][T12316] bridge_slave_0: left allmulticast mode [ 289.433733][T12345] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1649'. [ 289.447330][T12316] bridge_slave_0: left promiscuous mode [ 289.459288][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.565642][T12352] netlink: 'syz.0.1650': attribute type 16 has an invalid length. [ 289.767444][T12346] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 289.776381][T12347] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 289.787887][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.802559][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.824533][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.844667][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.863993][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.884218][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.914274][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.961781][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.350670][T12386] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 290.372379][T12388] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 290.626366][T12401] bridge0: entered allmulticast mode [ 290.705412][T12401] bridge0 (unregistering): left allmulticast mode [ 290.775586][T12404] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 290.870689][T12410] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 290.892993][T12410] netlink: 'syz.3.1668': attribute type 3 has an invalid length. [ 291.216344][T12431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.223719][T12431] IPv6: NLM_F_CREATE should be set when creating new route [ 291.231059][T12431] IPv6: NLM_F_CREATE should be set when creating new route [ 291.238478][T12431] IPv6: NLM_F_CREATE should be set when creating new route [ 291.294520][T12431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.535061][T12448] veth0_vlan: left promiscuous mode [ 292.315411][T12479] vlan0: entered allmulticast mode [ 292.332592][T12479] veth1: entered allmulticast mode [ 292.375146][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.399394][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.432447][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.451664][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.655858][T12496] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 292.767270][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.780045][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.861942][T12502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.009227][T12508] macvlan2: entered promiscuous mode [ 293.039230][T12508] bond0: entered promiscuous mode [ 293.067052][T12508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.089310][T12523] vxcan1: entered allmulticast mode [ 293.116222][T12525] vxcan1: left allmulticast mode [ 293.281095][T12528] __nla_validate_parse: 111 callbacks suppressed [ 293.281120][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 293.345944][T12528] tipc: Enabled bearer , priority 0 [ 293.376145][T12528] syzkaller0: entered promiscuous mode [ 293.381696][T12528] syzkaller0: entered allmulticast mode [ 293.470239][T12528] tipc: Resetting bearer [ 293.501249][T12544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1708'. [ 293.514428][T12527] tipc: Resetting bearer [ 293.538402][T12527] tipc: Disabling bearer [ 293.775346][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1712'. [ 293.841365][T12562] vlan0: entered allmulticast mode [ 293.848152][T12562] bridge_slave_0: entered allmulticast mode [ 294.408662][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 294.444730][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'. [ 294.507469][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1725'. [ 294.721856][T12611] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1726'. [ 295.025071][T12620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.222365][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 295.738883][T12649] tipc: Enabling of bearer rejected, failed to enable media [ 296.437903][T12696] lo speed is unknown, defaulting to 1000 [ 296.889358][T12725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1750'. [ 297.101063][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1753'. [ 297.688910][T12671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.716917][T12671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.801921][T12754] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 298.165101][T12764] vxcan0: entered promiscuous mode [ 298.269131][T12766] lo speed is unknown, defaulting to 1000 [ 298.460556][T12776] __nla_validate_parse: 3 callbacks suppressed [ 298.460579][T12776] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1768'. [ 298.755921][T12786] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1772'. [ 298.987924][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.005510][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.032716][T12789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.076672][T12788] rdma_rxe: rxe_newlink: failed to add lo [ 299.344077][T12813] tipc: Enabled bearer , priority 0 [ 299.383151][T12813] syzkaller0: entered promiscuous mode [ 299.396129][T12813] syzkaller0: entered allmulticast mode [ 299.418248][T12813] sch_fq: defrate 257 ignored. [ 299.429239][T12813] tipc: Resetting bearer [ 299.441901][T12812] tipc: Resetting bearer [ 299.449965][T12820] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1778'. [ 299.517404][T12812] tipc: Disabling bearer [ 299.680069][T12819] tipc: Enabled bearer , priority 0 [ 299.699860][T12825] syzkaller0: entered promiscuous mode [ 299.733583][T12825] syzkaller0: entered allmulticast mode [ 299.771645][T12819] tipc: Resetting bearer [ 299.798072][T12835] wlan1: mtu greater than device maximum [ 299.809109][T12816] tipc: Resetting bearer [ 299.842689][T12816] tipc: Disabling bearer [ 299.945042][T12837] lo speed is unknown, defaulting to 1000 [ 300.007511][T12839] bond0: (slave bond_slave_0): Releasing backup interface [ 300.161821][T12839] bond0: (slave bond_slave_1): Releasing backup interface [ 300.246570][T12839] team0: Port device team_slave_1 removed [ 300.253283][T12839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.268968][T12839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.299020][T12839] bond0: (slave wlan1): Releasing backup interface [ 300.361076][T12839] bond1: (slave bond2): Releasing backup interface [ 300.438202][T12839] bond3: (slave bridge3): Releasing active interface [ 300.523835][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 300.661003][T12841] pim6reg: entered allmulticast mode [ 300.756495][ T10] syz1: Port: 1 Link DOWN [ 301.272058][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 301.283525][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 301.328225][T12901] erspan1: entered promiscuous mode [ 301.360602][T12901] erspan1: entered allmulticast mode [ 301.528380][T12908] netlink: 'syz.4.1802': attribute type 10 has an invalid length. [ 301.562040][T12908] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 301.654026][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 301.793104][T12918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1805'. [ 302.035388][T12928] lo speed is unknown, defaulting to 1000 [ 302.181142][T12946] netlink: zone id is out of range [ 302.193902][T12946] netlink: zone id is out of range [ 302.230661][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 302.247906][T12946] netlink: zone id is out of range [ 302.261567][T12946] netlink: zone id is out of range [ 302.275905][T12946] netlink: zone id is out of range [ 302.281310][T12946] netlink: zone id is out of range [ 302.544714][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1815'. [ 302.706969][T12669] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.744718][T12672] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.891210][T12672] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.925769][T12672] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.141025][T12980] IPVS: Scheduler module ip_vs_sip not found [ 303.194246][T12983] IPVS: length: 8 != 446622349272 [ 303.373933][T12992] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 303.574968][T13009] netlink: 'syz.3.1827': attribute type 2 has an invalid length. [ 303.950149][ T9] IPVS: starting estimator thread 0... [ 304.183032][T13013] IPVS: using max 23 ests per chain, 55200 per kthread [ 304.299043][T13014] tipc: New replicast peer: 255.255.255.255 [ 304.343838][T13014] tipc: Enabled bearer , priority 10 [ 304.393215][ T9] lo speed is unknown, defaulting to 1000 [ 304.430785][ T9] syz0: Port: 1 Link DOWN [ 304.487896][ T5956] lo speed is unknown, defaulting to 1000 [ 304.510115][T13012] lo speed is unknown, defaulting to 1000 [ 304.591257][T13026] syzkaller1: entered promiscuous mode [ 304.620321][T13026] syzkaller1: entered allmulticast mode [ 304.944748][T13036] bridge5: entered allmulticast mode [ 305.420866][T13063] __nla_validate_parse: 3 callbacks suppressed [ 305.420889][T13063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1843'. [ 305.465469][ T6145] tipc: Node number set to 3461699032 [ 305.651109][T13070] lo speed is unknown, defaulting to 1000 [ 305.785463][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 305.961820][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 306.120130][T13089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.159769][T13099] netlink: 'syz.2.1851': attribute type 8 has an invalid length. [ 306.168683][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 306.224746][T13098] macvlan2: entered promiscuous mode [ 306.231980][T13098] macvlan2: entered allmulticast mode [ 306.293563][T13101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1852'. [ 306.328841][T13103] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 306.381984][T13103] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 306.504350][T13104] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 307.871857][T13144] tipc: Enabled bearer , priority 0 [ 307.897337][T13144] syzkaller0: entered promiscuous mode [ 307.915798][T13144] syzkaller0: entered allmulticast mode [ 307.964254][T13144] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 307.996171][T13144] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 308.076558][T13144] tipc: Resetting bearer [ 308.363268][T13142] tipc: Resetting bearer [ 308.430660][T13142] tipc: Disabling bearer [ 308.589425][T13171] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 308.597548][T13171] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1872'. [ 308.823582][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1876'. [ 308.880580][T13183] veth1_to_bond: entered allmulticast mode [ 308.916331][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 309.070643][T13183] veth1_to_bond (unregistering): left allmulticast mode [ 309.204679][T13196] lo speed is unknown, defaulting to 1000 [ 309.485391][T13205] tipc: Enabling of bearer rejected, failed to enable media [ 309.737532][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 309.747816][T13220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1885'. [ 310.739212][T13260] net_ratelimit: 9 callbacks suppressed [ 310.739243][T13260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.949334][T13265] __nla_validate_parse: 1 callbacks suppressed [ 310.949356][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 311.088044][T13265] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 311.097736][T13272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 311.207569][T13280] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 311.208824][T13281] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 311.286076][T13277] nbd0: detected capacity change from 0 to 127 [ 311.375422][T13289] sctp: [Deprecated]: syz.2.1902 (pid 13289) Use of int in maxseg socket option. [ 311.375422][T13289] Use struct sctp_assoc_value instead [ 311.877065][T13310] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 311.892265][T13300] sctp: [Deprecated]: syz.2.1905 (pid 13300) Use of int in max_burst socket option deprecated. [ 311.892265][T13300] Use struct sctp_assoc_value instead [ 311.939601][ T5863] block nbd0: Receive control failed (result -32) [ 311.980042][T13311] bond5: (slave bridge5): making interface the new active one [ 311.990522][T13311] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 312.075238][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'. [ 312.158866][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 312.304773][T13327] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1914'. [ 312.338848][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 312.368250][T13330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1915'. [ 312.423048][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.919753][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 312.970246][T13366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'. [ 312.982582][T13366] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1924'. [ 313.066884][T13373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.197970][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 313.241814][T13381] netlink: 'syz.1.1929': attribute type 3 has an invalid length. [ 313.812468][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.833878][T13404] team0: Port device batadv0 added [ 313.850023][T13409] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 313.875515][T13409] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 314.338446][T13424] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 314.670826][T13439] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 314.682450][T13440] netlink: 'syz.4.1946': attribute type 13 has an invalid length. [ 314.701811][T13440] netlink: 'syz.4.1946': attribute type 17 has an invalid length. [ 314.732566][T13440] netlink: 'syz.4.1946': attribute type 27 has an invalid length. [ 314.783516][T13439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.092775][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.254741][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.272751][T13440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.339107][T13443] lo speed is unknown, defaulting to 1000 [ 316.126714][T13507] __nla_validate_parse: 10 callbacks suppressed [ 316.126746][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1962'. [ 316.165491][T13507] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1962'. [ 316.819597][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1966'. [ 317.095532][T13540] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1971'. [ 317.453818][T13557] netlink: 'syz.3.1973': attribute type 46 has an invalid length. [ 317.470076][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c089c00: rx timeout, send abort [ 317.559142][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1975'. [ 317.568531][T13559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1975'. [ 317.678231][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1977'. [ 317.757693][T13570] netlink: 'syz.2.1978': attribute type 282 has an invalid length. [ 317.837576][T13579] netlink: 'syz.0.1980': attribute type 3 has an invalid length. [ 317.855617][T13579] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1980'. [ 317.869179][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 317.882913][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'. [ 317.929176][T13580] lo speed is unknown, defaulting to 1000 [ 317.978386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c089c00: abort rx timeout. Force session deactivation [ 318.474826][T13587] lo speed is unknown, defaulting to 1000 [ 318.790199][T13591] lo speed is unknown, defaulting to 1000 [ 318.854509][T13580] validate_nla: 1 callbacks suppressed [ 318.854532][T13580] netlink: 'syz.2.1981': attribute type 6 has an invalid length. [ 319.520391][T13609] tipc: Enabled bearer , priority 0 [ 319.529337][T13609] syzkaller0: entered promiscuous mode [ 319.535979][T13609] syzkaller0: entered allmulticast mode [ 319.610949][T13609] tipc: Resetting bearer [ 319.631722][T13609] tipc: Resetting bearer [ 319.733938][T13609] tipc: Disabling bearer [ 321.016953][T13668] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 321.132100][T13668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.141778][T13681] __nla_validate_parse: 4 callbacks suppressed [ 321.141799][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2008'. [ 321.159058][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 321.159236][T13672] tipc: Enabled bearer , priority 0 [ 321.196412][T13673] batadv_slave_0: entered promiscuous mode [ 321.225614][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 321.236563][T13672] lo: mtu less than device minimum [ 321.244057][T13664] syzkaller0: entered promiscuous mode [ 321.282987][T13664] syzkaller0: entered allmulticast mode [ 321.437858][T13664] lo speed is unknown, defaulting to 1000 [ 321.480834][T13670] batadv_slave_0: left promiscuous mode [ 321.611111][T13694] tun0: tun_chr_ioctl cmd 1074025681 [ 321.804257][T13661] tipc: Resetting bearer [ 321.815255][T13705] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2015'. [ 321.859228][T13661] tipc: Disabling bearer [ 321.890420][T13708] netlink: 'syz.4.2016': attribute type 4 has an invalid length. [ 321.911867][T13704] tc_dump_action: action bad kind [ 321.941185][T13704] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 322.099193][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 322.150501][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 322.761083][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2025'. [ 322.990656][T13746] lo speed is unknown, defaulting to 1000 [ 323.162941][ T31] audit: type=1800 audit(1753574919.974:10): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2025" name="cgroup.controllers" dev="tmpfs" ino=1989 res=0 errno=0 [ 323.173360][T13759] netlink: 'syz.0.2034': attribute type 7 has an invalid length. [ 323.286736][T13759] : entered promiscuous mode [ 324.151563][T13769] lo speed is unknown, defaulting to 1000 [ 324.165784][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 324.422586][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 324.892199][T13819] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 325.145765][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 325.339273][T13835] lo speed is unknown, defaulting to 1000 [ 325.847137][T13771] lo speed is unknown, defaulting to 1000 [ 326.230291][T13868] openvswitch: netlink: IP tunnel dst address not specified [ 326.779875][T13881] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2063'. [ 326.797141][T13881] nbd: must specify at least one socket [ 327.524127][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2068'. [ 328.066278][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2075'. [ 328.091762][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 328.110790][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 328.113916][T13943] macvtap0: entered promiscuous mode [ 328.126699][T13943] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 328.140181][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 328.197664][T13943] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 328.442229][T13959] lo speed is unknown, defaulting to 1000 [ 328.660210][T13971] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 328.686680][T13975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2083'. [ 328.758647][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 328.777243][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 328.860260][T13977] netlink: 'syz.0.2081': attribute type 19 has an invalid length. [ 329.028962][T13966] lo speed is unknown, defaulting to 1000 [ 329.326958][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 329.832449][T14009] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 330.098161][T12666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.143621][T12666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.403739][T14037] netlink: 'syz.0.2097': attribute type 2 has an invalid length. [ 330.498711][T14037] : entered promiscuous mode [ 330.699534][T14032] lo speed is unknown, defaulting to 1000 [ 331.157406][T14060] tipc: Enabled bearer , priority 0 [ 331.169598][T14060] syzkaller0: entered promiscuous mode [ 331.178955][T14060] syzkaller0: entered allmulticast mode [ 331.263750][T14065] tipc: Resetting bearer [ 331.299299][T14057] lo speed is unknown, defaulting to 1000 [ 331.487701][T14058] tipc: Resetting bearer [ 331.562647][T14058] tipc: Disabling bearer [ 331.866585][T14078] ip6erspan0: entered allmulticast mode [ 332.055377][T14083] __nla_validate_parse: 9 callbacks suppressed [ 332.055404][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 332.125135][T14071] lo speed is unknown, defaulting to 1000 [ 332.165172][T14090] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2111'. [ 332.320562][T14096] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 332.650190][T14104] bond0: (slave wlan1): Releasing backup interface [ 332.724206][T14104] team0: Port device batadv0 removed [ 332.917233][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2117'. [ 332.931099][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 332.941836][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2117'. [ 332.969419][T14109] bridge0: entered promiscuous mode [ 333.250514][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 333.796759][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 333.941420][T14140] ipvlan1: entered promiscuous mode [ 333.952202][T14140] ipvlan1: entered allmulticast mode [ 333.970584][T14140] veth0_vlan: entered allmulticast mode [ 334.256836][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 334.270059][T14143] lo speed is unknown, defaulting to 1000 [ 334.279261][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'. [ 334.394543][T14146] syzkaller1: entered promiscuous mode [ 334.405627][T14146] syzkaller1: entered allmulticast mode [ 334.731804][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2131'. [ 335.506272][T14194] netlink: 'syz.2.2138': attribute type 25 has an invalid length. [ 335.530662][T14196] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 335.802201][T14207] ip6tnl1: entered promiscuous mode [ 335.819041][T14207] ip6tnl1: entered allmulticast mode [ 335.846771][T14207] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 335.918229][T14210] rdma_rxe: rxe_newlink: failed to add lo [ 335.949153][T14212] 0·: renamed from hsr_slave_1 (while UP) [ 335.975429][T14212] 0·: entered allmulticast mode [ 335.984841][T14212] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 336.150982][T14226] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 336.543656][T14237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.576885][T14246] gtp2: entered promiscuous mode [ 336.581991][T14246] gtp2: entered allmulticast mode [ 336.612410][T14237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.619814][T14237] IPv6: NLM_F_CREATE should be set when creating new route [ 336.627119][T14237] IPv6: NLM_F_CREATE should be set when creating new route [ 336.634408][T14237] IPv6: NLM_F_CREATE should be set when creating new route [ 336.646037][T14237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.796250][T14248] bond3: entered promiscuous mode [ 336.802803][T14248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.106715][T14248] bond3 (unregistering): Released all slaves [ 337.310323][T14266] __nla_validate_parse: 6 callbacks suppressed [ 337.310342][T14266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2158'. [ 337.483768][T14278] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 337.532030][T14282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2162'. [ 337.544667][T14278] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 337.872251][T14307] wireguard0: entered promiscuous mode [ 337.886996][T14307] wireguard0: entered allmulticast mode [ 338.184068][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 338.602983][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 338.634716][T14327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 338.694438][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2176'. [ 338.761643][T14331] vlan0: entered promiscuous mode [ 338.784927][T14331] gretap0: entered promiscuous mode [ 338.794898][T14337] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2177'. [ 339.052371][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 339.076293][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 339.308416][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 339.409309][T14365] lo speed is unknown, defaulting to 1000 [ 339.891248][T14389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2192'. [ 339.927792][T14386] tipc: Enabled bearer , priority 0 [ 339.951035][T14386] syzkaller0: entered promiscuous mode [ 339.959688][T14386] syzkaller0: entered allmulticast mode [ 339.982544][T14395] [ 339.984928][T14395] ====================================================== [ 339.991958][T14395] WARNING: possible circular locking dependency detected [ 339.998996][T14395] 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 Not tainted [ 340.006169][T14395] ------------------------------------------------------ [ 340.013214][T14395] syz.2.2191/14395 is trying to acquire lock: [ 340.019308][T14395] ffffffff8f674a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 340.028699][T14395] [ 340.028699][T14395] but task is already holding lock: [ 340.036096][T14395] ffff888033721470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 340.045549][T14395] [ 340.045549][T14395] which lock already depends on the new lock. [ 340.045549][T14395] [ 340.055991][T14395] [ 340.055991][T14395] the existing dependency chain (in reverse order) is: [ 340.065019][T14395] [ 340.065019][T14395] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 340.073019][T14395] lock_acquire+0x120/0x360 [ 340.078129][T14395] _raw_spin_lock_bh+0x36/0x50 [ 340.083439][T14395] nr_rt_device_down+0x12a/0x720 [ 340.088927][T14395] nr_device_event+0x137/0x150 [ 340.094334][T14395] notifier_call_chain+0x1b3/0x3e0 [ 340.100000][T14395] netif_close_many+0x29c/0x410 [ 340.105382][T14395] netif_close+0x158/0x210 [ 340.110329][T14395] dev_close+0x10a/0x220 [ 340.115094][T14395] bpq_device_event+0x2f4/0x600 [ 340.120466][T14395] notifier_call_chain+0x1b3/0x3e0 [ 340.126118][T14395] __dev_notify_flags+0x18d/0x2e0 [ 340.131684][T14395] netif_change_flags+0xe8/0x1a0 [ 340.137210][T14395] dev_change_flags+0x130/0x260 [ 340.142588][T14395] dev_ioctl+0x7b4/0x1150 [ 340.147452][T14395] sock_do_ioctl+0x22c/0x300 [ 340.152603][T14395] sock_ioctl+0x576/0x790 [ 340.157526][T14395] __se_sys_ioctl+0xfc/0x170 [ 340.162674][T14395] do_syscall_64+0xfa/0x3b0 [ 340.167714][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.174136][T14395] [ 340.174136][T14395] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 340.181975][T14395] lock_acquire+0x120/0x360 [ 340.187010][T14395] _raw_spin_lock_bh+0x36/0x50 [ 340.192314][T14395] nr_rt_device_down+0xa9/0x720 [ 340.197713][T14395] nr_device_event+0x137/0x150 [ 340.203014][T14395] notifier_call_chain+0x1b3/0x3e0 [ 340.208742][T14395] netif_close_many+0x29c/0x410 [ 340.214119][T14395] netif_close+0x158/0x210 [ 340.219142][T14395] dev_close+0x10a/0x220 [ 340.223909][T14395] bpq_device_event+0x2f4/0x600 [ 340.229283][T14395] notifier_call_chain+0x1b3/0x3e0 [ 340.234919][T14395] __dev_notify_flags+0x18d/0x2e0 [ 340.240475][T14395] netif_change_flags+0xe8/0x1a0 [ 340.246029][T14395] dev_change_flags+0x130/0x260 [ 340.251408][T14395] dev_ioctl+0x7b4/0x1150 [ 340.256265][T14395] sock_do_ioctl+0x22c/0x300 [ 340.261393][T14395] sock_ioctl+0x576/0x790 [ 340.266257][T14395] __se_sys_ioctl+0xfc/0x170 [ 340.271374][T14395] do_syscall_64+0xfa/0x3b0 [ 340.276406][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.282825][T14395] [ 340.282825][T14395] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 340.290757][T14395] validate_chain+0xb9b/0x2140 [ 340.296057][T14395] __lock_acquire+0xab9/0xd20 [ 340.301262][T14395] lock_acquire+0x120/0x360 [ 340.306288][T14395] _raw_spin_lock_bh+0x36/0x50 [ 340.311586][T14395] nr_remove_neigh+0x25/0xe0 [ 340.316711][T14395] nr_add_node+0x1d9f/0x2570 [ 340.321838][T14395] nr_rt_ioctl+0xc12/0xd50 [ 340.326799][T14395] sock_do_ioctl+0xdc/0x300 [ 340.331840][T14395] sock_ioctl+0x576/0x790 [ 340.336710][T14395] __se_sys_ioctl+0xfc/0x170 [ 340.341830][T14395] do_syscall_64+0xfa/0x3b0 [ 340.346857][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.353279][T14395] [ 340.353279][T14395] other info that might help us debug this: [ 340.353279][T14395] [ 340.363517][T14395] Chain exists of: [ 340.363517][T14395] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 340.363517][T14395] [ 340.377347][T14395] Possible unsafe locking scenario: [ 340.377347][T14395] [ 340.384803][T14395] CPU0 CPU1 [ 340.390168][T14395] ---- ---- [ 340.395538][T14395] lock(&nr_node->node_lock); [ 340.400309][T14395] lock(nr_node_list_lock); [ 340.407427][T14395] lock(&nr_node->node_lock); [ 340.414718][T14395] lock(nr_neigh_list_lock); [ 340.419400][T14395] [ 340.419400][T14395] *** DEADLOCK *** [ 340.419400][T14395] [ 340.427540][T14395] 1 lock held by syz.2.2191/14395: [ 340.432649][T14395] #0: ffff888033721470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 340.442418][T14395] [ 340.442418][T14395] stack backtrace: [ 340.448315][T14395] CPU: 1 UID: 0 PID: 14395 Comm: syz.2.2191 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 340.448339][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.448366][T14395] Call Trace: [ 340.448373][T14395] [ 340.448381][T14395] dump_stack_lvl+0x189/0x250 [ 340.448406][T14395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.448425][T14395] ? __pfx__printk+0x10/0x10 [ 340.448445][T14395] ? stack_trace_save+0x9c/0xe0 [ 340.448474][T14395] print_circular_bug+0x2ee/0x310 [ 340.448497][T14395] check_noncircular+0x134/0x160 [ 340.448521][T14395] validate_chain+0xb9b/0x2140 [ 340.448540][T14395] ? do_syscall_64+0xfa/0x3b0 [ 340.448570][T14395] __lock_acquire+0xab9/0xd20 [ 340.448589][T14395] ? nr_remove_neigh+0x25/0xe0 [ 340.448616][T14395] lock_acquire+0x120/0x360 [ 340.448630][T14395] ? nr_remove_neigh+0x25/0xe0 [ 340.448660][T14395] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 340.448683][T14395] ? nr_remove_neigh+0x25/0xe0 [ 340.448709][T14395] _raw_spin_lock_bh+0x36/0x50 [ 340.448734][T14395] ? nr_remove_neigh+0x25/0xe0 [ 340.448759][T14395] nr_remove_neigh+0x25/0xe0 [ 340.448786][T14395] nr_add_node+0x1d9f/0x2570 [ 340.448825][T14395] ? dev_get_by_name+0x21/0x200 [ 340.448848][T14395] ? dev_get_by_name+0x21/0x200 [ 340.448869][T14395] ? dev_get_by_name+0x21/0x200 [ 340.448891][T14395] ? nr_call_to_digi+0x136/0x1b0 [ 340.448915][T14395] nr_rt_ioctl+0xc12/0xd50 [ 340.448938][T14395] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 340.448961][T14395] ? kasan_quarantine_put+0xdd/0x220 [ 340.448981][T14395] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 340.449010][T14395] ? apparmor_capable+0x137/0x1b0 [ 340.449036][T14395] ? capable+0x89/0xe0 [ 340.449053][T14395] ? nr_ioctl+0x1b1/0x3b0 [ 340.449073][T14395] sock_do_ioctl+0xdc/0x300 [ 340.449099][T14395] ? __pfx_sock_do_ioctl+0x10/0x10 [ 340.449121][T14395] ? __lock_acquire+0xab9/0xd20 [ 340.449143][T14395] sock_ioctl+0x576/0x790 [ 340.449167][T14395] ? __pfx_sock_ioctl+0x10/0x10 [ 340.449189][T14395] ? __fget_files+0x2a/0x420 [ 340.449214][T14395] ? __fget_files+0x3a0/0x420 [ 340.449237][T14395] ? __fget_files+0x2a/0x420 [ 340.449262][T14395] ? bpf_lsm_file_ioctl+0x9/0x20 [ 340.449281][T14395] ? __pfx_sock_ioctl+0x10/0x10 [ 340.449303][T14395] __se_sys_ioctl+0xfc/0x170 [ 340.449323][T14395] do_syscall_64+0xfa/0x3b0 [ 340.449339][T14395] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.449354][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.449377][T14395] ? clear_bhb_loop+0x60/0xb0 [ 340.449396][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.449412][T14395] RIP: 0033:0x7fa8f078e9a9 [ 340.449427][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.449442][T14395] RSP: 002b:00007fa8f1579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.449460][T14395] RAX: ffffffffffffffda RBX: 00007fa8f09b6160 RCX: 00007fa8f078e9a9 [ 340.449473][T14395] RDX: 0000200000000240 RSI: 000000000000890b RDI: 000000000000000b [ 340.449484][T14395] RBP: 00007fa8f0810d69 R08: 0000000000000000 R09: 0000000000000000 [ 340.449495][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.449505][T14395] R13: 0000000000000000 R14: 00007fa8f09b6160 R15: 00007ffd779340e8 [ 340.449524][T14395] [ 340.806193][T14392] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 340.828671][T14386] tipc: Resetting bearer [ 340.846380][T14385] tipc: Resetting bearer [ 340.856130][T14385] tipc: Disabling bearer