last executing test programs: 3m14.369864714s ago: executing program 2 (id=4849): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x34, r4, 0x1, 0x40000004, 0x25dfdbff, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}]}, 0x34}}, 0xcaf122d8d3ca315d) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000030108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3m13.636278805s ago: executing program 1 (id=4856): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x20040081) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x20040081) (async) 3m13.493720262s ago: executing program 1 (id=4858): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000004001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 3m13.410898252s ago: executing program 2 (id=4860): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r3, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10fea7, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}}, 0x48000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, r0, 0xbdac3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000fcffffffff0000000000000095000000f4ff00"/40], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0x14) 3m13.325531763s ago: executing program 0 (id=4861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 3m13.299360374s ago: executing program 1 (id=4863): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffdba, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}}}}]}, 0x4c}}, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r7}, {0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3m13.217063259s ago: executing program 0 (id=4865): r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) unshare(0x20040600) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r1, 0x200, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400030000000b2fa2560d"], 0x20, 0x2400e044}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0xf, 0x538, 0x7, 0x20, 0xab5, 0x6f}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r5, 0x7, 0x2, [0x1, 0x7ff]}, &(0x7f0000000200)=0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000340)={0xea6, 0x200, 0xa, 0x40, r6}, 0x10) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)={0x18, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8805}, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r2, 0x20, &(0x7f00000004c0)={&(0x7f0000000480)=""/11, 0xb, 0x0, &(0x7f0000000a00)=""/222, 0xde}}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x44}, @map_val={0x18, 0xa, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x0, 0xdc0, 0x0, &(0x7f00000001c0)="9baba5f7940d0fc2159d721e7c10", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c840}, 0xc014) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r11, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001600)={0x50, r16, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}}, 0x48) 3m13.149697976s ago: executing program 2 (id=4866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000fffffffe00000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 3m13.091494285s ago: executing program 1 (id=4868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f000000ae80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x40000101, 0x0) shutdown(r2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r5 = socket$inet6(0xa, 0x0, 0x8000000003c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20179ca9552f8af58bc521caaa1a6fd1000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800274000000021140011800a0001006c696d69b7684408e44d08043c18577400000004000280140000001000010000000000000000000084000a"], 0x98}}, 0x0) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e22, 0x6, @remote, 0xa}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0xb, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x3000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 3m12.93345806s ago: executing program 0 (id=4870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000011fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 3m12.918690897s ago: executing program 2 (id=4871): r0 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000840)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), 0x4) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/50, 0x32}], 0x1, &(0x7f0000000680)=""/87, 0x57}, 0x20000122) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000000000400000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x0) unshare(0x2040400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r9) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @local}, 0x3, 0x0, 0x2, 0x1}}, 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x7, [@datasec={0x10, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x4d2fec45}], "dd930e"}, @struct={0xb, 0x4, 0x0, 0x4, 0x1, 0x5, [{0x9, 0x2, 0x7fffffff}, {0x3, 0x0, 0x6}, {0xe, 0x2}, {0x0, 0x2, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x0, 0x0]}}, &(0x7f0000000900)=""/238, 0x77, 0xee, 0x1, 0x10, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r10, 0x20, &(0x7f0000000b40)={&(0x7f0000000a40)=""/183, 0xb7, 0x0, &(0x7f0000000b00)=""/58, 0x3a}}, 0x10) 3m12.77958552s ago: executing program 0 (id=4873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000400000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m12.563282947s ago: executing program 0 (id=4875): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 3m12.561707828s ago: executing program 1 (id=4876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000080000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000300000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fcd10000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) 3m12.36157882s ago: executing program 1 (id=4877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 3m12.030584566s ago: executing program 32 (id=4877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 3m12.013274549s ago: executing program 0 (id=4879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000080010a00000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000005000000000004000000000000000000000000000004000000000000000000000000000000000000000000000000cde10000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff0000000000000007660885393e0b3b3f00000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000008"], 0x17c}}, 0x0) 3m11.959931584s ago: executing program 33 (id=4879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000080010a00000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000005000000000004000000000000000000000000000004000000000000000000000000000000000000000000000000cde10000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff0000000000000007660885393e0b3b3f00000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000008"], 0x17c}}, 0x0) 3m11.913040592s ago: executing program 2 (id=4880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000620000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0xf, 0x8, 0xc, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000201b7080000000000007b8af8ff00000000a6080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000800)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x34}}, 0x4000894) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xffffffffffffffa3, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL, @NL80211_MNTR_FLAG_CONTROL={0x57}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x95}, 0x40014) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, r12, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) r14 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r14, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m11.301771161s ago: executing program 2 (id=4881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000ffff00000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 3m11.13905688s ago: executing program 34 (id=4881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000ffff00000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 3.563942577s ago: executing program 7 (id=6964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xae7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x400010, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 2.595923429s ago: executing program 7 (id=6978): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f00000000c0)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6", 0x19}, {&(0x7f0000000540)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a131cbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a1", 0x99}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19", 0x54}, {&(0x7f0000001500)="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", 0x1b3}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28d", 0x75}], 0x3}}], 0x4, 0x4000011) 2.234911034s ago: executing program 5 (id=6984): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ff7f010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4100}, 0x0) 1.871411358s ago: executing program 5 (id=6988): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000540)=""/174, 0xae}], 0x4, &(0x7f0000000600)=""/165, 0xa5}, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 1.565554046s ago: executing program 3 (id=6992): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r0, 0x5450b000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004000000", 0x28}], 0x1) close(r2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000955377279db111ad93384006e5ba86af6ba5b10e7bc9df39ee16f3a3d95455ec4f7a8f88bcfc783bef25d7994d83fd336aba9adf1c49929923d282093c5f36a69f4cda6967d5d151c30236d513a10a4f7faf278262851db4bba1288cc966060177e9fd5b576fd71dbda22288e3e4ed2c9cce0be86ba6ecb3f3637db1dbfccbbfbe5ad79af13bd99ba5e767edf868cc8e42745a83a62123", @ANYRES32, @ANYBLOB="0e0d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket(0x11, 0xa, 0x2) unshare(0x62040200) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x0, 0x25dfdbff, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x4) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @long}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r8, r8, 0x2f, 0x558, 0x0, @void, @value}, 0x20) 1.458988585s ago: executing program 4 (id=6993): socket(0x11, 0x4, 0x9) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000fb720137dd67fb200000000000a200000000000000000010000000900010073797a543ee7313000002c0000001e0a01020000000000000000011900000900010073797a0900000000000000000300000000000000000000aeb313f7f04f327c437df71c00000ae737925f010014712b8fb876071cc8bb77f33b72bff79ad5621775695d23cf6007c270017cb9d7355fb48a8225625110e638150296736a196e46f6414440fdf905f330664824ed0100563d404fda2fe63007512427ff52f96d54cd36b7eef93b61f3e2bf50ab904a624e498b7869943ed438e4ef2070c3c534e360a92262b0da0900000007ef16991cf0cb12fa3756f3bdb6b4ddb1b5584b68c43e1ff61c7f"], 0x74}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a0200"], &(0x7f0000000d40)=""/252, 0x56, 0xfc, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xd, 0x4, 0x2, 0x2b, 0x34, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x8, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) (async) r5 = socket$inet6(0xa, 0x80003, 0xff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r1, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, 0x0, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000300), 0x4) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000240)=0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4008, 0x3, 0x450, 0x0, 0x32, 0x148, 0x0, 0x148, 0x3b8, 0x240, 0x240, 0x3b8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x2c0, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x1, 0x200, 0x2, 0x9c95, 0xa, 0x83, 0x4a, 0x1, 0x78, 0x20}, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x4, 0xcd388e7e35af0e92, 0x0, 0x2], 0x5, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x4, 0xe, 0xf], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x62, 0x4e21, 0x9, 0x2, 0x80, 0xa0, 0x21, r4, r8}, {0x8b27, 0x75, 0x2, 0x2, 0x0, 0x18777dfa, 0x2180, 0xdb7}, {0x100000000, 0x6, 0xffffffffffffffc0, 0x10001}, 0x3, 0x6e6bbc, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x32}, 0xa, @in6=@remote, 0x3506, 0x0, 0x0, 0x7, 0x1, 0x7fffffff, 0x400}}, 0xe8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000900110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.401700293s ago: executing program 6 (id=6994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000feffffff00006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 1.268592074s ago: executing program 4 (id=6995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r5], 0x50}}, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x468a, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) sendmsg$can_raw(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x2c, 0x2, 0x0, 0x0, "2b530563f4e0baf7ebab6f65bbe8573a76ce724e9bbe6be65edb7ca1c9850fbde43ededad51ba1df4e6eb6441abbe2521f27fcf35983c94c4f75c63a0d9f6104"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xb, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x4, [{0x2, 0x5, 0x40}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x60, 0x6}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @union={0xf, 0x6, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x2, 0xffffff7f}, {0xf, 0x4, 0xfc000000}, {0xa, 0x1, 0xfffffff9}, {0x1, 0x2, 0x4}, {0xe, 0x5, 0xf90c}, {0x0, 0x0, 0xb}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x0, 0xc, [{0x8, 0x9, 0x5}, {0x8, 0x6, 0x100}, {0x7, 0x9, 0xac}, {0x6, 0x1, 0x200}]}]}, {0x0, [0x61, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000080)=""/81, 0xe7, 0x51, 0x0, 0x802d, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x400, '\x00', r9, r10, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r2], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=r11, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r12, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="cb", 0x1}], 0x1) (async) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", "0879f5ff", "e4eb37b07ad86ed7"}, 0x28) 1.231789153s ago: executing program 6 (id=6996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000ffff000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bbfffe0000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000"], 0x144}}, 0x20000000) 1.177285908s ago: executing program 7 (id=6997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x30008801}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4e23, 0x7000, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffc}, 0x101}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'pim6reg\x00', @random="6c3e7d65df10"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xc39, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0x2}, {0xffef, 0xe}}}, 0x24}}, 0x4000050) (async) close(r0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r10) (async, rerun: 64) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) socket$inet6(0xa, 0x1, 0x9) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYRES64=r13, @ANYRESDEC=r2, @ANYBLOB="01002dbd7004ffdbdf25180000005c0030805800018008000100000000000c000500018000000000000034000380060003009aaa000006000100020000000800020003000000080002000000000006000300a2aa000008000200030000000c000500000000000000000008000300", @ANYRES32=r13], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x38, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xee9272a78b5d6067}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x50050}, 0x20000004) (async) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 1.041815529s ago: executing program 6 (id=6998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) 932.837926ms ago: executing program 3 (id=6999): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000a40)}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000a00000000001000000010000000060000000900000000000001000000004c00200500610030000019eb70"], &(0x7f0000000cc0)=""/169, 0x2e, 0xa9, 0x1, 0x10001, 0x0, @void, @value}, 0x28) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040001000a3000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r6}, 0x38) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x687c, '\x00', 0x0, r3, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x19, 0xe, &(0x7f0000002740)=@raw=[@ldst={0x3, 0x0, 0x0, 0x3, 0x1}, @jmp={0x5, 0x1, 0x5, 0x9, 0x8, 0x50, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf7800000}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3}], &(0x7f0000000100)='GPL\x00', 0x401, 0x1000, &(0x7f0000001740)=""/4096, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, r3, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xe, 0x10, 0x9fafffff}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r6, r7, r3, r3, r3, 0xffffffffffffffff, r3, r0, r7], &(0x7f00000008c0)=[{0x3, 0x4, 0xd, 0x7}, {0x1, 0x4, 0x9}], 0x10, 0xffffffff, @void, @value}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000e40)=@raw=[@jmp={0x5, 0x0, 0xb, 0x8, 0xa, 0x1, 0x10}, @alu={0x4, 0x1, 0x0, 0x6, 0x6, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x9, 0x8, 0x0, 0x6, 0xdf0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x30}, @exit], &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x4, 0x3, 0xfffffffb, 0x7}, 0x10, 0x118d0, 0xffffffffffffffff, 0x3, &(0x7f0000000f40)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000f80)=[{0x2, 0x3, 0xa9, 0x8}, {0x4, 0x3, 0xf, 0x7}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x8000, @void, @value}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', 0x0, 0x28}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x3, 0xc, 0xb958, 0x0, 0xffffffffffffffff, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xd, 0x20, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @tail_call, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @jmp={0x5, 0x1, 0x5, 0x8, 0x5, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000c00)=""/112, 0x41000, 0x3, '\x00', 0x0, @fallback=0x37, r1, 0x8, &(0x7f0000000dc0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0x8d4a, 0xf, 0x6f3e}, 0x10, r5, r8, 0x1, &(0x7f0000001240)=[0x1, r9, r10, r11, r12, r13], &(0x7f0000001280)=[{0x5, 0x3, 0x5, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000650544afef5095c067b7c8c739bcf7b9f9b251b5f598bab312a23ca7f53d0a16fdd2410519bb122fb86553f5dfd9054f56a9fbceba3d2b67bf1df8240e8a20fe9f1ccf70d434f2de1a796f17f59e0c4feb1e25698e25a9fdaef56cc63145f4b40fe1676cf25c6a2f2ad0a1b9aa58f0"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_wait(0xffffffffffffffff, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xfffffffe) r15 = accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@remote, @remote, @default, @remote, @default, @netrom, @rose, @null]}, &(0x7f0000000040)=0x48, 0x80800) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000000000000000558cb08a00850000000e0000001801000020207825000000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000c7ea33d94835a7586337773e06d2aaa4adc09299ef7b63e7c87bea43b13a0000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r16, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(r15, 0x101, 0x19, &(0x7f0000000240)=@rose={'rose', 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='xen_mc_entry\x00', r14, 0x0, 0xf6c}, 0x15) r17 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r17, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x108, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x180, 0xe00}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) r18 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r18, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$netrom_NETROM_T4(r18, 0x103, 0x6, &(0x7f00000000c0)=0xfffffffd, &(0x7f0000000340)=0x4) 857.664445ms ago: executing program 5 (id=7000): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x5, 0x5, 0x0, 0xe, 0x6, 0xe, 0x4, 0xa, 0x9, 0x3, 0x10, 0x6, 0x10, 0xf, 0x6, 0x2], 0x1, [0x7fff, 0xfff9, 0x4, 0x0, 0x9f, 0x0, 0x40, 0x40, 0xb, 0x5, 0xf800, 0x6, 0x5, 0x4, 0x7, 0x9], [0xfff7, 0x4a5, 0x9f9, 0x3, 0x9, 0x6, 0x4, 0xfe00, 0x3, 0x3, 0xa, 0x483d, 0x10, 0x1, 0x6, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 820.172262ms ago: executing program 3 (id=7001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) 809.143955ms ago: executing program 6 (id=7002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000006000000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, &(0x7f0000000280)=""/24, 0x18}, 0x2}, {{&(0x7f0000000400)=@generic, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/208, 0xd0}, {&(0x7f0000001680)=""/54, 0x36}], 0x5, &(0x7f0000001740)=""/77, 0x4d}, 0xcf}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/84, 0x54}, {&(0x7f0000001840)=""/140, 0x8c}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/79, 0x4f}], 0x4, &(0x7f0000001a00)=""/235, 0xeb}, 0x2bed7c95}], 0x3, 0x1, &(0x7f0000001bc0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001900)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x1, &(0x7f0000000080)=@raw=[@generic={0x4, 0x7, 0x5, 0x9, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 709.285412ms ago: executing program 4 (id=7003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8ff}, @generic={0x66, 0x8, 0x0, 0x0, 0xd0ff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb5}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004, @void, @value}, 0x94) 658.918702ms ago: executing program 7 (id=7004): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400030100000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 607.072418ms ago: executing program 6 (id=7005): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000010000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 558.741432ms ago: executing program 5 (id=7006): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f0000000240)=0x8) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r2, @ANYBLOB="5843e5e8366fe03c1fa7733e89c079a8595084653a2e1afb5510754d0a72576ebce211e37f02ed4c20ce0d492c1ba4fec8d589e5114cccb52002391f9399cc38c8da8a9488f8486483c20eae68b9cea889b8b831df289efa581dfd32b4dae9430deb94a49567a865318c32dbfece974341fed271c1b541cd6cb9d75c535b0e01aa9d9998a33af19e936e075b4afa51eba1dca8b7c4407ef3fc898b171ac9299bc5fe8e7621796518da9056bd88b55236dfcad1baf01b99629e99f00863d6bc83b3e32565f3d4dbd8d4225de03f0fd44787dea63a0307511c22343000c788df6744040b4e11958949c851c851060506822ac37d934761c256", @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x18c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) gettid() ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 509.485512ms ago: executing program 4 (id=7007): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@call={0x85, 0x0, 0x0, 0x98}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x5b0, 0x7a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000000c0)='xdp_bulk_tx\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) bind$bt_hci(r2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 483.814746ms ago: executing program 3 (id=7008): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 437.448764ms ago: executing program 5 (id=7009): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000019000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 377.422558ms ago: executing program 7 (id=7010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010029bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003007465616d3000000000000000000000000a0001"], 0x70}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x304}}, 0x0) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000540)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000bf000000000000000000000085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000000701010000000000000000070000060200000073797a31006600000c00034000000000000004030800054000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0xbc, r10, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4000}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}]}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003380)={0x20, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x20}}, 0x4010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002000008000100ecbfe6bb962b5a2c00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) 376.68435ms ago: executing program 6 (id=7011): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x34, r4, 0x1, 0x40000004, 0x25dfdbff, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}]}, 0x34}}, 0xcaf122d8d3ca315d) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a00ffe00000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 287.297574ms ago: executing program 4 (id=7012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000010000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 285.660661ms ago: executing program 5 (id=7013): socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000600), 0x0, &(0x7f0000000640), 0x0, 0x0) unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x21}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4020040}, 0x0) 193.565212ms ago: executing program 3 (id=7014): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7, 0x0, 0x2000}, 0x0) 112.429616ms ago: executing program 4 (id=7015): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x34, r4, 0x1, 0x40000004, 0x25dfdbff, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}]}, 0x34}}, 0xcaf122d8d3ca315d) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a00ffe40000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 26.267155ms ago: executing program 3 (id=7016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x2, 0x80805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x5, 0x5, 0x0, 0xe, 0x6, 0xe, 0x4, 0xa, 0x9, 0x3, 0x10, 0x6, 0x10, 0xf, 0x6, 0x2], 0x1, [0x7fff, 0xfff9, 0x4, 0x0, 0x9f, 0x0, 0x40, 0x40, 0xb, 0x5, 0xf800, 0x6, 0x5, 0x4, 0x7, 0x9], [0xfff7, 0x4a5, 0x9f9, 0x3, 0x9, 0x6, 0x4, 0xfe00, 0x3, 0x3, 0xa, 0x483d, 0x10, 0x1, 0x6, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 0s ago: executing program 7 (id=7017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000010000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff40000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056020000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): s in process `syz.6.5782'. [ 602.582568][T23393] macvlan3: entered promiscuous mode [ 602.596569][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5785'. [ 602.607457][T23398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5785'. [ 602.612231][T23393] macvlan3: entered allmulticast mode [ 602.659193][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5783'. [ 602.932103][T23413] pim6reg1: entered promiscuous mode [ 602.943232][T23413] pim6reg1: entered allmulticast mode [ 603.030752][T23417] macsec1: entered promiscuous mode [ 603.036727][T23417] macsec1: entered allmulticast mode [ 603.052352][T23417] veth1_macvtap: entered allmulticast mode [ 603.077932][T23417] veth1_macvtap: left allmulticast mode [ 603.251412][T23432] FAULT_INJECTION: forcing a failure. [ 603.251412][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 603.270644][T23432] CPU: 1 UID: 0 PID: 23432 Comm: syz.4.5796 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 603.270677][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.270692][T23432] Call Trace: [ 603.270701][T23432] [ 603.270711][T23432] dump_stack_lvl+0x189/0x250 [ 603.270751][T23432] ? __pfx____ratelimit+0x10/0x10 [ 603.270784][T23432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.270819][T23432] ? __pfx__printk+0x10/0x10 [ 603.270851][T23432] ? ref_tracker_alloc+0x318/0x460 [ 603.270884][T23432] should_fail_ex+0x414/0x560 [ 603.270917][T23432] should_failslab+0xa8/0x100 [ 603.270943][T23432] kmem_cache_alloc_noprof+0x73/0x3c0 [ 603.270978][T23432] ? skb_clone+0x212/0x3a0 [ 603.271014][T23432] skb_clone+0x212/0x3a0 [ 603.271047][T23432] __netlink_deliver_tap+0x404/0x850 [ 603.271088][T23432] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.271115][T23432] netlink_deliver_tap+0x19c/0x1b0 [ 603.271143][T23432] netlink_unicast+0x72f/0x8d0 [ 603.271180][T23432] netlink_sendmsg+0x805/0xb30 [ 603.271217][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.271253][T23432] ? aa_sock_msg_perm+0x94/0x160 [ 603.271283][T23432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.271311][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.271339][T23432] __sock_sendmsg+0x219/0x270 [ 603.271376][T23432] ____sys_sendmsg+0x505/0x830 [ 603.271419][T23432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.271458][T23432] ? import_iovec+0x74/0xa0 [ 603.271485][T23432] ___sys_sendmsg+0x21f/0x2a0 [ 603.271515][T23432] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.271586][T23432] ? __fget_files+0x2a/0x420 [ 603.271609][T23432] ? __fget_files+0x3a0/0x420 [ 603.271644][T23432] __x64_sys_sendmsg+0x19b/0x260 [ 603.271677][T23432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.271716][T23432] ? __pfx_ksys_write+0x10/0x10 [ 603.271743][T23432] ? do_syscall_64+0xbe/0x3b0 [ 603.271768][T23432] do_syscall_64+0xfa/0x3b0 [ 603.271787][T23432] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.271819][T23432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.271840][T23432] ? clear_bhb_loop+0x60/0xb0 [ 603.271867][T23432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.271889][T23432] RIP: 0033:0x7fdedc98e929 [ 603.271909][T23432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.271928][T23432] RSP: 002b:00007fdedd781038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.271952][T23432] RAX: ffffffffffffffda RBX: 00007fdedcbb5fa0 RCX: 00007fdedc98e929 [ 603.271968][T23432] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 603.271982][T23432] RBP: 00007fdedd781090 R08: 0000000000000000 R09: 0000000000000000 [ 603.271996][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.272009][T23432] R13: 0000000000000000 R14: 00007fdedcbb5fa0 R15: 00007ffd9a367958 [ 603.272044][T23432] [ 603.838524][T23447] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5801'. [ 603.855744][T23447] batadv1: entered promiscuous mode [ 603.861072][T23447] batadv1: entered allmulticast mode [ 603.884134][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5803'. [ 603.905000][T23449] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5805'. [ 603.914520][T23452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5804'. [ 603.930070][T23449] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5805'. [ 604.561985][T23471] syzkaller0: entered promiscuous mode [ 604.573657][T23471] syzkaller0: entered allmulticast mode [ 604.581832][T23464] lo speed is unknown, defaulting to 1000 [ 604.601437][T23480] FAULT_INJECTION: forcing a failure. [ 604.601437][T23480] name failslab, interval 1, probability 0, space 0, times 0 [ 604.624211][T23480] CPU: 1 UID: 0 PID: 23480 Comm: syz.6.5814 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 604.624255][T23480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.624270][T23480] Call Trace: [ 604.624279][T23480] [ 604.624289][T23480] dump_stack_lvl+0x189/0x250 [ 604.624330][T23480] ? __pfx____ratelimit+0x10/0x10 [ 604.624364][T23480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.624399][T23480] ? __pfx__printk+0x10/0x10 [ 604.624426][T23480] ? __pfx___might_resched+0x10/0x10 [ 604.624461][T23480] ? fs_reclaim_acquire+0x7d/0x100 [ 604.624493][T23480] should_fail_ex+0x414/0x560 [ 604.624528][T23480] should_failslab+0xa8/0x100 [ 604.624555][T23480] __kmalloc_noprof+0xcb/0x4f0 [ 604.624574][T23480] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 604.624606][T23480] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 604.624648][T23480] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 604.624691][T23480] genl_family_rcv_msg_doit+0xb8/0x300 [ 604.624733][T23480] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.624769][T23480] ? rcu_is_watching+0x15/0xb0 [ 604.624808][T23480] ? apparmor_capable+0x137/0x1b0 [ 604.624846][T23480] ? bpf_lsm_capable+0x9/0x20 [ 604.624866][T23480] ? security_capable+0x7e/0x2e0 [ 604.624903][T23480] genl_rcv_msg+0x60e/0x790 [ 604.624942][T23480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.624972][T23480] ? ref_tracker_free+0x63a/0x7d0 [ 604.625000][T23480] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 604.625029][T23480] ? __pfx_nl80211_get_mpp+0x10/0x10 [ 604.625061][T23480] ? __pfx_nl80211_post_doit+0x10/0x10 [ 604.625101][T23480] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.625145][T23480] netlink_rcv_skb+0x205/0x470 [ 604.625175][T23480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.625210][T23480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.625261][T23480] ? down_read+0x1ad/0x2e0 [ 604.625287][T23480] genl_rcv+0x28/0x40 [ 604.625316][T23480] netlink_unicast+0x758/0x8d0 [ 604.625352][T23480] netlink_sendmsg+0x805/0xb30 [ 604.625390][T23480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.625420][T23480] ? aa_sock_msg_perm+0x94/0x160 [ 604.625452][T23480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.625481][T23480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.625509][T23480] __sock_sendmsg+0x219/0x270 [ 604.625547][T23480] ____sys_sendmsg+0x505/0x830 [ 604.625583][T23480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.625622][T23480] ? import_iovec+0x74/0xa0 [ 604.625649][T23480] ___sys_sendmsg+0x21f/0x2a0 [ 604.625681][T23480] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.625752][T23480] ? __fget_files+0x2a/0x420 [ 604.625776][T23480] ? __fget_files+0x3a0/0x420 [ 604.625812][T23480] __x64_sys_sendmsg+0x19b/0x260 [ 604.625844][T23480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.625882][T23480] ? __pfx_ksys_write+0x10/0x10 [ 604.625900][T23480] ? rcu_is_watching+0x15/0xb0 [ 604.625940][T23480] ? do_syscall_64+0xbe/0x3b0 [ 604.625966][T23480] do_syscall_64+0xfa/0x3b0 [ 604.625985][T23480] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.626017][T23480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.626040][T23480] ? clear_bhb_loop+0x60/0xb0 [ 604.626068][T23480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.626090][T23480] RIP: 0033:0x7fd4c858e929 [ 604.626110][T23480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.626130][T23480] RSP: 002b:00007fd4c944d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.626154][T23480] RAX: ffffffffffffffda RBX: 00007fd4c87b5fa0 RCX: 00007fd4c858e929 [ 604.626170][T23480] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 604.626185][T23480] RBP: 00007fd4c944d090 R08: 0000000000000000 R09: 0000000000000000 [ 604.626199][T23480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.626225][T23480] R13: 0000000000000000 R14: 00007fd4c87b5fa0 R15: 00007ffffdab65b8 [ 604.626260][T23480] [ 605.092389][T13482] net_ratelimit: 52 callbacks suppressed [ 605.092411][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.411682][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.807719][ T8211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.816226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.834288][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.844055][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.132495][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.140996][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.451910][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.460831][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.270447][T23503] batadv2: entered promiscuous mode [ 607.275820][T23503] batadv2: entered allmulticast mode [ 607.559378][T23510] macsec1: entered promiscuous mode [ 607.564862][T23510] macsec1: entered allmulticast mode [ 607.577583][T23510] veth1_macvtap: entered allmulticast mode [ 607.586521][T23510] veth1_macvtap: left allmulticast mode [ 607.830483][T23525] __nla_validate_parse: 5 callbacks suppressed [ 607.830503][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5831'. [ 607.952839][T23531] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5842'. [ 607.956611][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5834'. [ 608.016223][T23531] batadv2: entered promiscuous mode [ 608.036605][T23531] batadv2: entered allmulticast mode [ 608.213490][T23543] netlink: 'syz.6.5839': attribute type 1 has an invalid length. [ 608.585969][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5849'. [ 608.598304][T23565] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5849'. [ 608.803595][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.821444][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.910825][T23556] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.921154][T23556] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.930461][T23556] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.939507][T23556] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.055438][T23556] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.064606][T23556] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.073926][T23556] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.083117][T23556] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.168231][T23570] macsec1: entered promiscuous mode [ 609.173706][T23570] macsec1: entered allmulticast mode [ 609.179658][T23570] veth1_macvtap: entered allmulticast mode [ 609.194051][T23570] veth1_macvtap: left allmulticast mode [ 609.261603][T23558] lo speed is unknown, defaulting to 1000 [ 609.459205][T23581] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 609.603160][T23583] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 609.608513][T23585] lo: entered allmulticast mode [ 609.632249][T23584] lo: left allmulticast mode [ 609.647312][T23583] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 610.083705][T23610] lo speed is unknown, defaulting to 1000 [ 610.302695][ T5904] net_ratelimit: 8 callbacks suppressed [ 610.302719][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.366639][T23619] lo speed is unknown, defaulting to 1000 [ 610.564213][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5872'. [ 610.607236][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.016053][T23641] macsec1: entered promiscuous mode [ 611.022930][T23641] macsec1: entered allmulticast mode [ 611.043313][T23641] veth1_macvtap: entered allmulticast mode [ 611.069903][T23641] veth1_macvtap: left allmulticast mode [ 611.379358][T23650] FAULT_INJECTION: forcing a failure. [ 611.379358][T23650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.437318][T23650] CPU: 1 UID: 0 PID: 23650 Comm: syz.6.5880 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 611.437350][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.437365][T23650] Call Trace: [ 611.437373][T23650] [ 611.437382][T23650] dump_stack_lvl+0x189/0x250 [ 611.437422][T23650] ? __pfx____ratelimit+0x10/0x10 [ 611.437454][T23650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.437487][T23650] ? __pfx__printk+0x10/0x10 [ 611.437526][T23650] should_fail_ex+0x414/0x560 [ 611.437559][T23650] _copy_to_user+0x31/0xb0 [ 611.437583][T23650] simple_read_from_buffer+0xe1/0x170 [ 611.437613][T23650] proc_fail_nth_read+0x1df/0x250 [ 611.437645][T23650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.437675][T23650] ? rw_verify_area+0x258/0x650 [ 611.437708][T23650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.437741][T23650] vfs_read+0x200/0x980 [ 611.437781][T23650] ? __pfx___mutex_lock+0x10/0x10 [ 611.437803][T23650] ? __pfx_vfs_read+0x10/0x10 [ 611.437838][T23650] ? __fget_files+0x2a/0x420 [ 611.437874][T23650] ? __fget_files+0x3a0/0x420 [ 611.437898][T23650] ? __fget_files+0x2a/0x420 [ 611.437933][T23650] ksys_read+0x145/0x250 [ 611.437970][T23650] ? __pfx_ksys_read+0x10/0x10 [ 611.438001][T23650] ? rcu_is_watching+0x15/0xb0 [ 611.438040][T23650] ? do_syscall_64+0xbe/0x3b0 [ 611.438065][T23650] do_syscall_64+0xfa/0x3b0 [ 611.438084][T23650] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.438116][T23650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.438138][T23650] ? clear_bhb_loop+0x60/0xb0 [ 611.438165][T23650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.438185][T23650] RIP: 0033:0x7fd4c858d33c [ 611.438205][T23650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.438224][T23650] RSP: 002b:00007fd4c944d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.438248][T23650] RAX: ffffffffffffffda RBX: 00007fd4c87b5fa0 RCX: 00007fd4c858d33c [ 611.438264][T23650] RDX: 000000000000000f RSI: 00007fd4c944d0a0 RDI: 0000000000000004 [ 611.438277][T23650] RBP: 00007fd4c944d090 R08: 0000000000000000 R09: 0000000000000000 [ 611.438290][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.438302][T23650] R13: 0000000000000000 R14: 00007fd4c87b5fa0 R15: 00007ffffdab65b8 [ 611.438337][T23650] [ 611.678623][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.051982][T23665] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5886'. [ 612.334191][T23682] netlink: 'syz.4.5893': attribute type 2 has an invalid length. [ 612.531359][T23691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5897'. [ 612.562300][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5898'. [ 612.690719][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.792060][T23704] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5903'. [ 613.195100][T23720] tun0: tun_chr_ioctl cmd 1074025675 [ 613.212509][T23720] tun0: persist enabled [ 613.223343][T23720] tun0: tun_chr_ioctl cmd 1074025675 [ 613.230466][T23725] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5913'. [ 613.245639][T23720] tun0: persist disabled [ 613.252035][T23725] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5913'. [ 613.317117][T23718] lo speed is unknown, defaulting to 1000 [ 613.327343][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.540775][T23737] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 613.555692][T23737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.613882][T23741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5920'. [ 613.730181][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.909038][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 613.945873][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 613.957030][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 613.986533][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 614.027288][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5927'. [ 614.104763][T23764] macsec1: entered promiscuous mode [ 614.113769][T23764] macsec1: entered allmulticast mode [ 614.121808][T23764] veth1_macvtap: entered allmulticast mode [ 614.141612][T23764] veth1_macvtap: left allmulticast mode [ 614.192369][T23768] netlink: 'syz.5.5929': attribute type 5 has an invalid length. [ 614.219058][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5929'. [ 614.495828][T23778] lo speed is unknown, defaulting to 1000 [ 614.571925][T23786] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5936'. [ 614.729364][T23788] can: request_module (can-proto-0) failed. [ 614.771706][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.882184][T23799] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 614.998714][T23799] netlink: 'syz.3.5939': attribute type 5 has an invalid length. [ 615.071852][T23804] syz.5.5941: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.122870][T23804] CPU: 0 UID: 0 PID: 23804 Comm: syz.5.5941 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 615.122903][T23804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.122918][T23804] Call Trace: [ 615.122928][T23804] [ 615.122938][T23804] dump_stack_lvl+0x189/0x250 [ 615.122979][T23804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.123012][T23804] ? __pfx__printk+0x10/0x10 [ 615.123035][T23804] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 615.123061][T23804] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 615.123087][T23804] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 615.123115][T23804] warn_alloc+0x214/0x310 [ 615.123146][T23804] ? __pfx_warn_alloc+0x10/0x10 [ 615.123181][T23804] ? __get_vm_area_node+0x28f/0x300 [ 615.123205][T23804] ? nf_tables_newset+0x132b/0x2530 [ 615.123240][T23804] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 615.123293][T23804] ? nft_hash_estimate+0x102/0x260 [ 615.123321][T23804] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.123351][T23804] ? rcu_is_watching+0x15/0xb0 [ 615.123395][T23804] ? nf_tables_newset+0x132b/0x2530 [ 615.123422][T23804] ? nf_tables_newset+0x132b/0x2530 [ 615.123448][T23804] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 615.123471][T23804] ? nf_tables_newset+0x132b/0x2530 [ 615.123500][T23804] ? nft_table_lookup+0x211/0x230 [ 615.123529][T23804] ? nft_set_lookup+0x128/0x150 [ 615.123560][T23804] ? nft_hash_privsize+0x7f/0xf0 [ 615.123588][T23804] nf_tables_newset+0x132b/0x2530 [ 615.123633][T23804] ? __pfx_nf_tables_newset+0x10/0x10 [ 615.123689][T23804] ? __nla_parse+0x40/0x60 [ 615.123726][T23804] nfnetlink_rcv+0x1132/0x2520 [ 615.123795][T23804] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 615.123900][T23804] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.123936][T23804] netlink_unicast+0x758/0x8d0 [ 615.123971][T23804] netlink_sendmsg+0x805/0xb30 [ 615.124009][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.124040][T23804] ? aa_sock_msg_perm+0x94/0x160 [ 615.124071][T23804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.124099][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.124126][T23804] __sock_sendmsg+0x219/0x270 [ 615.124165][T23804] ____sys_sendmsg+0x505/0x830 [ 615.124199][T23804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.124236][T23804] ? import_iovec+0x74/0xa0 [ 615.124258][T23804] ___sys_sendmsg+0x21f/0x2a0 [ 615.124285][T23804] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.124354][T23804] ? __fget_files+0x2a/0x420 [ 615.124393][T23804] ? __fget_files+0x3a0/0x420 [ 615.124430][T23804] __x64_sys_sendmsg+0x19b/0x260 [ 615.124461][T23804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.124501][T23804] ? rcu_is_watching+0x15/0xb0 [ 615.124539][T23804] ? do_syscall_64+0xbe/0x3b0 [ 615.124565][T23804] do_syscall_64+0xfa/0x3b0 [ 615.124583][T23804] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.124614][T23804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.124636][T23804] ? clear_bhb_loop+0x60/0xb0 [ 615.124662][T23804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.124682][T23804] RIP: 0033:0x7f16e058e929 [ 615.124702][T23804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.124722][T23804] RSP: 002b:00007f16e1332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.124746][T23804] RAX: ffffffffffffffda RBX: 00007f16e07b5fa0 RCX: 00007f16e058e929 [ 615.124762][T23804] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 615.124776][T23804] RBP: 00007f16e0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 615.124790][T23804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.124803][T23804] R13: 0000000000000000 R14: 00007f16e07b5fa0 R15: 00007ffeb313e448 [ 615.124838][T23804] [ 615.124848][T23804] Mem-Info: [ 615.519263][T23804] active_anon:5819 inactive_anon:0 isolated_anon:0 [ 615.519263][T23804] active_file:2115 inactive_file:40050 isolated_file:0 [ 615.519263][T23804] unevictable:768 dirty:144 writeback:0 [ 615.519263][T23804] slab_reclaimable:11572 slab_unreclaimable:108916 [ 615.519263][T23804] mapped:28174 shmem:3037 pagetables:1073 [ 615.519263][T23804] sec_pagetables:0 bounce:0 [ 615.519263][T23804] kernel_misc_reclaimable:0 [ 615.519263][T23804] free:1313578 free_pcp:14357 free_cma:0 [ 615.567373][T23804] Node 0 active_anon:23276kB inactive_anon:0kB active_file:8460kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112696kB dirty:576kB writeback:0kB shmem:10612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12572kB pagetables:4152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.613121][T23804] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.652142][T23804] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 615.691143][T23804] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 615.700972][T23804] Node 0 DMA32 free:1324436kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24432kB inactive_anon:0kB active_file:8460kB inactive_file:158180kB unevictable:1536kB writepending:576kB present:3129332kB managed:2561028kB mlocked:0kB bounce:0kB free_pcp:47316kB local_pcp:31844kB free_cma:0kB [ 615.744140][T23804] lowmem_reserve[]: 0 0 1 1 1 [ 615.751986][T23804] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 615.781563][T23804] lowmem_reserve[]: 0 0 0 0 0 [ 615.786348][T23804] Node 1 Normal free:3912788kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10752kB local_pcp:3488kB free_cma:0kB [ 615.837205][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.845808][T23804] lowmem_reserve[]: 0 0 0 0 0 [ 615.860116][T23804] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 615.922590][T23804] Node 0 DMA32: 0*4kB 30*8kB (UME) 209*16kB (M) 142*32kB (M) 134*64kB (UM) 252*128kB (UME) 280*256kB (UM) 213*512kB (UME) 87*1024kB (UM) 11*2048kB (UME) 240*4096kB (UM) = 1324352kB [ 615.976938][T23804] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 616.013813][T23804] Node 1 Normal: 143*4kB (UME) 47*8kB (UME) 38*16kB (UME) 236*32kB (UME) 67*64kB (UME) 10*128kB (UME) 7*256kB (UM) 2*512kB (M) 4*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3912788kB [ 616.049427][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.066578][T23804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.092087][T23804] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.104786][T23804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.134405][T23804] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.152483][T23804] 46380 total pagecache pages [ 616.158593][T23804] 0 pages in swap cache [ 616.172914][T23804] Free swap = 124996kB [ 616.183020][T23804] Total swap = 124996kB [ 616.199421][T23804] 2097051 pages RAM [ 616.213517][T23804] 0 pages HighMem/MovableOnly [ 616.228707][T23804] 424688 pages reserved [ 616.232927][T23804] 0 pages cma reserved [ 616.353607][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 616.372637][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 616.382682][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 616.392452][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 616.400524][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.426895][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.440886][ T6048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.554235][ T6048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.612895][ T6048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.643851][T23827] lo speed is unknown, defaulting to 1000 [ 616.855555][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.868505][ T6048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.890545][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.450828][ T5154] Bluetooth: hci1: command tx timeout [ 618.551599][ T6048] bond1 (unregistering): Released all slaves [ 618.718265][ T6048] bond2 (unregistering): Released all slaves [ 618.913450][T23887] __nla_validate_parse: 4 callbacks suppressed [ 618.913471][T23887] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5968'. [ 618.929633][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.945007][T23887] netlink: del zone limit has 4 unknown bytes [ 618.974279][ T6048] bond3 (unregistering): Released all slaves [ 619.100139][ T6048] bond4 (unregistering): Released all slaves [ 619.115381][ T6048] bond5 (unregistering): Released all slaves [ 619.248061][ T6048] bond6 (unregistering): Released all slaves [ 619.373419][ T6048] bond0 (unregistering): Released all slaves [ 619.491945][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.503486][ T6048] bond7 (unregistering): Released all slaves [ 619.620745][ T6048] bond8 (unregistering): Released all slaves [ 619.745472][ T6048] bond9 (unregistering): Released all slaves [ 619.872081][ T6048] bond10 (unregistering): Released all slaves [ 619.890551][ T6048] bond11 (unregistering): Released all slaves [ 619.952992][T23887] vxcan5: entered allmulticast mode [ 619.982477][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.012350][T23827] chnl_net:caif_netlink_parms(): no params data found [ 620.289538][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5972'. [ 620.498617][T23904] x_tables: duplicate underflow at hook 3 [ 620.542890][ T5154] Bluetooth: hci1: command tx timeout [ 620.585696][T23827] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.613080][T23827] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.635857][T23827] bridge_slave_0: entered allmulticast mode [ 620.670363][T23827] bridge_slave_0: entered promiscuous mode [ 620.736729][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5975'. [ 620.760037][T23827] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.781829][T23827] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.791858][T23827] bridge_slave_1: entered allmulticast mode [ 620.801505][T23827] bridge_slave_1: entered promiscuous mode [ 620.911455][T23918] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5977'. [ 620.923019][T23918] netlink: del zone limit has 4 unknown bytes [ 621.007561][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.094205][T23918] vxcan7: entered allmulticast mode [ 621.162702][T23827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.208943][T23827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.331751][T23922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5979'. [ 621.362545][T23922] netlink: del zone limit has 4 unknown bytes [ 621.377616][T23927] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5981'. [ 621.388923][T23827] team0: Port device team_slave_0 added [ 621.401913][ T6048] hsr_slave_0: left promiscuous mode [ 621.420967][ T6048] hsr_slave_1: left promiscuous mode [ 621.443931][ T6048] veth1_macvtap: left promiscuous mode [ 621.451541][ T6048] veth0_macvtap: left promiscuous mode [ 621.457563][ T6048] veth1_vlan: left promiscuous mode [ 621.462883][ T6048] veth0_vlan: left promiscuous mode [ 622.050409][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.531448][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.606151][T23925] sit0: entered promiscuous mode [ 622.615110][T23925] netlink: 'syz.3.5982': attribute type 1 has an invalid length. [ 622.623170][ T5154] Bluetooth: hci1: command tx timeout [ 622.629590][T23925] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5982'. [ 622.674352][T23922] vxcan3: entered allmulticast mode [ 622.761468][T23827] team0: Port device team_slave_1 added [ 623.015205][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5987'. [ 623.024412][T23827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.024436][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.024487][T23827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.029118][T23827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.084329][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.118074][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.156893][T23827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.274563][T23955] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5988'. [ 623.288756][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5988'. [ 623.586486][T23827] hsr_slave_0: entered promiscuous mode [ 623.610924][T23827] hsr_slave_1: entered promiscuous mode [ 623.623618][T23827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.642737][T23827] Cannot create hsr debugfs directory [ 623.833631][T23973] sit0: entered promiscuous mode [ 623.863085][T23973] netlink: 'syz.5.5992': attribute type 1 has an invalid length. [ 623.928495][T23973] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5992'. [ 624.001830][ T6048] IPVS: stop unused estimator thread 0... [ 624.127163][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.172248][T23978] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5994'. [ 624.344152][T23983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5997'. [ 624.383883][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.494628][T23983] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5997'. [ 624.520731][T23983] netlink: 'syz.5.5997': attribute type 8 has an invalid length. [ 624.687027][ T5154] Bluetooth: hci1: command tx timeout [ 624.695152][T23997] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 624.912082][T23827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 624.924789][T23827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 624.942851][T23827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 624.962565][T23827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 625.131434][T23827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.167419][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.200604][T23827] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.226074][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.233423][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.280813][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.288066][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.290949][T24015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6004'. [ 625.325567][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6007'. [ 625.340999][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6004'. [ 625.567050][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.648615][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.658788][T24033] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6012'. [ 625.989081][T23827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.207700][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.692682][T23827] veth0_vlan: entered promiscuous mode [ 626.715737][T23827] veth1_vlan: entered promiscuous mode [ 626.777343][T23827] veth0_macvtap: entered promiscuous mode [ 626.799625][T23827] veth1_macvtap: entered promiscuous mode [ 626.856158][T23827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.898633][T23827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.931649][T23827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.954625][T23827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.966913][T23827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.975976][T23827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.199795][ T8209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.217543][T24065] netlink: 'syz.3.6019': attribute type 5 has an invalid length. [ 627.231109][ T8209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.247350][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.278061][T24067] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6021'. [ 627.367621][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.376317][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.402812][T24073] xt_hashlimit: overflow, try lower: 5/0 [ 627.403414][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.450921][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.471013][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6022'. [ 627.477464][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.511735][T24081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.551111][T24081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.601951][T24081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.610626][T24081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.619260][T24081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.776094][T24088] vxcan5: entered allmulticast mode [ 627.867453][T24085] macsec1: entered promiscuous mode [ 627.872933][T24085] macsec1: entered allmulticast mode [ 627.914117][T24085] veth1_macvtap: entered allmulticast mode [ 627.932386][T24085] veth1_macvtap: left allmulticast mode [ 628.340230][T24112] sctp: [Deprecated]: syz.7.6031 (pid 24112) Use of int in maxseg socket option. [ 628.340230][T24112] Use struct sctp_assoc_value instead [ 628.402683][T24114] netlink: 'syz.4.6033': attribute type 5 has an invalid length. [ 629.151923][T24134] __nla_validate_parse: 5 callbacks suppressed [ 629.151945][T24134] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6040'. [ 629.172062][T24134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6040'. [ 629.195258][T24134] vxcan5: entered allmulticast mode [ 629.516070][T24149] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6046'. [ 629.605546][T24152] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6048'. [ 629.608759][T24149] lo speed is unknown, defaulting to 1000 [ 629.673162][T24152] batadv1: entered promiscuous mode [ 629.684051][T24156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6049'. [ 629.699420][T24152] batadv1: entered allmulticast mode [ 629.773265][T24161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6049'. [ 629.836901][T24154] lo speed is unknown, defaulting to 1000 [ 630.271353][T24178] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6055'. [ 630.342747][T24178] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6055'. [ 630.407094][T24178] vxcan3: entered allmulticast mode [ 630.810168][T24192] netlink: 'syz.6.6060': attribute type 12 has an invalid length. [ 630.855523][T24192] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6060'. [ 631.015349][T24201] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6064'. [ 631.095523][T24201] batadv1: entered promiscuous mode [ 631.113652][T24201] batadv1: entered allmulticast mode [ 631.412298][ T5904] net_ratelimit: 46 callbacks suppressed [ 631.412321][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.490596][T24217] macsec1: entered promiscuous mode [ 631.496076][T24217] macsec1: entered allmulticast mode [ 631.501593][T24217] veth1_macvtap: entered allmulticast mode [ 631.510416][T24217] veth1_macvtap: left allmulticast mode [ 631.575105][T24219] netlink: del zone limit has 4 unknown bytes [ 631.593455][T24219] vxcan5: entered allmulticast mode [ 631.656519][T13482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.980916][T24232] lo speed is unknown, defaulting to 1000 [ 632.518459][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.155215][T24260] netlink: del zone limit has 4 unknown bytes [ 633.192868][T24260] vxcan7: entered allmulticast mode [ 633.406192][T24267] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0 [ 633.479622][T24266] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 633.567847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.722059][T24278] batadv1: entered promiscuous mode [ 633.752565][T24278] batadv1: entered allmulticast mode [ 634.047184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.056077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.174424][T24301] __nla_validate_parse: 10 callbacks suppressed [ 634.174512][T24301] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6102'. [ 634.199457][T24301] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6102'. [ 634.251506][T24301] vxcan5: entered allmulticast mode [ 634.375147][T24308] syz_tun: entered allmulticast mode [ 634.478447][T24308] syz_tun: left allmulticast mode [ 634.652308][T24322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 634.965337][T24339] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6115'. [ 634.996624][T24339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6115'. [ 635.049866][T24339] vxcan5: entered allmulticast mode [ 635.107351][T24350] syzkaller1: entered promiscuous mode [ 635.113110][T24350] syzkaller1: entered allmulticast mode [ 635.122858][T24350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6117'. [ 635.162106][T24345] can: request_module (can-proto-4) failed. [ 635.304911][T24355] ip6gre1: entered allmulticast mode [ 635.632027][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6127'. [ 635.654144][T24372] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6127'. [ 635.688166][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6127'. [ 636.139963][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6137'. [ 636.492771][T24407] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6143'. [ 636.527680][ C1] net_ratelimit: 6 callbacks suppressed [ 636.527704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.688010][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.689023][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 637.371503][T24451] netlink: 'syz.7.6161': attribute type 29 has an invalid length. [ 637.381078][T24451] netlink: 'syz.7.6161': attribute type 29 has an invalid length. [ 637.390153][T24451] netlink: 'syz.7.6161': attribute type 29 has an invalid length. [ 637.401589][T24451] netlink: 'syz.7.6161': attribute type 29 has an invalid length. [ 637.633966][T24457] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 637.728032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.736249][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.767065][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.807349][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.822602][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.847093][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.079664][T24481] __nla_validate_parse: 1 callbacks suppressed [ 641.079687][T24481] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6169'. [ 641.238029][T24485] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6174'. [ 641.363904][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 641.395629][T24490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6175'. [ 641.448146][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.468411][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6179'. [ 641.496328][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.524853][T24505] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6181'. [ 641.529578][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6179'. [ 641.548154][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.566241][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6179'. [ 641.603400][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.615514][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6179'. [ 641.645446][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.673433][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6179'. [ 641.705831][T24499] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 641.753175][T24501] wireguard0: entered promiscuous mode [ 641.773159][T24501] wireguard0: entered allmulticast mode [ 641.888004][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.402382][T24542] lo speed is unknown, defaulting to 1000 [ 642.928698][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.998884][T24568] batadv1: entered allmulticast mode [ 643.202897][T24579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.210676][T24579] IPv6: NLM_F_CREATE should be set when creating new route [ 643.497559][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 643.689948][T24580] bond0 (unregistering): Released all slaves [ 643.785215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.890094][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.967385][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.185587][T24609] bridge0: port 3(veth0_to_bridge) entered blocking state [ 644.241974][T24615] validate_nla: 68 callbacks suppressed [ 644.241996][T24615] netlink: 'syz.4.6217': attribute type 10 has an invalid length. [ 644.246357][T24609] bridge0: port 3(veth0_to_bridge) entered disabled state [ 644.279885][T24609] veth0_to_bridge: entered allmulticast mode [ 644.292092][T24617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.310255][T24609] veth0_to_bridge: entered promiscuous mode [ 644.316622][T24609] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.329890][T24609] bridge0: port 3(veth0_to_bridge) entered blocking state [ 644.337225][T24609] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 644.394187][T24615] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 644.530417][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.550297][T24623] netlink: 'syz.6.6218': attribute type 27 has an invalid length. [ 644.861702][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.870163][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.007049][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.071678][T24638] vxcan3: entered allmulticast mode [ 645.992707][T24672] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 646.123432][T24677] __nla_validate_parse: 81 callbacks suppressed [ 646.123454][T24677] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6240'. [ 646.169644][T24677] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6240'. [ 646.219445][T24677] vxcan7: entered allmulticast mode [ 646.373248][T24682] macsec1: entered promiscuous mode [ 646.387324][T24682] macsec1: entered allmulticast mode [ 646.392698][T24682] veth1_macvtap: entered allmulticast mode [ 646.408372][T24682] veth1_macvtap: left allmulticast mode [ 646.559579][T24691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6247'. [ 646.928340][T13465] net_ratelimit: 3 callbacks suppressed [ 646.928359][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.929830][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 647.087158][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.379780][T24697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6250'. [ 648.142109][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.333133][ T5846] block nbd0: Receive control failed (result -32) [ 648.407337][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6266'. [ 648.537547][T24748] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6269'. [ 648.580468][T24748] batadv1: entered allmulticast mode [ 648.601572][T24750] netlink: 'syz.5.6270': attribute type 7 has an invalid length. [ 648.636562][T24750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6270'. [ 648.831756][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6274'. [ 648.912437][T24756] lo speed is unknown, defaulting to 1000 [ 648.992033][T24771] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6277'. [ 649.106036][T24771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6277'. [ 649.170220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.763477][T24788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.793957][T24788] bond_slave_0: left promiscuous mode [ 649.818720][T24788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.876242][T24788] bond_slave_1: left promiscuous mode [ 649.924883][T24788] bond0 (unregistering): Released all slaves [ 649.974962][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.037455][T24801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 650.087948][T24801] team0: Port device batadv1 added [ 650.207036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.246958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.262377][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.353501][T24854] __nla_validate_parse: 5 callbacks suppressed [ 651.353523][T24854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6306'. [ 651.392708][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6306'. [ 651.406427][T24854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6306'. [ 652.287053][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.329914][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6308'. [ 652.740500][T24883] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6315'. [ 652.753392][T24883] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6315'. [ 652.764576][T24883] netlink: del zone limit has 4 unknown bytes [ 652.782278][T24883] vxcan7: entered allmulticast mode [ 653.007682][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.067448][T24892] bridge0: port 4(syz_tun) entered blocking state [ 653.074050][T24892] bridge0: port 4(syz_tun) entered disabled state [ 653.075004][T24894] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 653.106020][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6322'. [ 653.117558][T24892] syz_tun: entered allmulticast mode [ 653.146048][T24892] syz_tun: entered promiscuous mode [ 653.167974][T24892] bridge0: port 4(syz_tun) entered blocking state [ 653.176052][T24892] bridge0: port 4(syz_tun) entered forwarding state [ 653.230881][T24899] ip6gretap1: entered promiscuous mode [ 653.330340][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.410415][T24908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.420637][T24908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.435277][T24908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.488341][T24908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.504896][T24908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.551123][T24909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6326'. [ 653.681954][T24921] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6331'. [ 653.714671][T24921] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6331'. [ 653.750763][T24921] vxcan5: entered allmulticast mode [ 654.136000][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.144165][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.152231][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.160297][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.169199][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.177379][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.185326][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.193778][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.205756][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.215178][T24946] netlink: 'syz.7.6339': attribute type 1 has an invalid length. [ 654.224938][T24909] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 654.399181][T24953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.505857][T24953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.649662][T24953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.795512][T24953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.022012][T24953] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.057055][T24953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.080236][T24953] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.146567][T24953] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.562423][T25000] lo speed is unknown, defaulting to 1000 [ 655.761732][T25007] vlan3: entered promiscuous mode [ 655.774541][T25007] team0: entered promiscuous mode [ 655.785462][T25007] team_slave_0: entered promiscuous mode [ 655.799206][T25007] team_slave_1: entered promiscuous mode [ 656.645502][T25046] __nla_validate_parse: 83 callbacks suppressed [ 656.645525][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6371'. [ 656.889450][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6375'. [ 657.489954][ T5904] net_ratelimit: 51 callbacks suppressed [ 657.489977][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.531791][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.692311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.733039][T25058] macsec1: entered allmulticast mode [ 658.744050][T25058] hsr0: entered allmulticast mode [ 658.750177][T25058] hsr_slave_0: entered allmulticast mode [ 658.756634][T25058] hsr_slave_1: entered allmulticast mode [ 658.784655][T25058] hsr0: left allmulticast mode [ 658.790260][T25058] hsr_slave_0: left allmulticast mode [ 658.795766][T25058] hsr_slave_1: left allmulticast mode [ 658.833945][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6377'. [ 658.861301][T25061] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.869993][T25061] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.879548][T25061] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.888261][T25061] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.949170][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6377'. [ 659.094957][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.245741][T25087] validate_nla: 70 callbacks suppressed [ 659.245764][T25087] netlink: 'syz.3.6385': attribute type 5 has an invalid length. [ 659.389080][T25093] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6388'. [ 659.412746][T25093] batadv1: entered promiscuous mode [ 659.418995][T25093] batadv1: entered allmulticast mode [ 659.567645][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.726894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.210264][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.556991][T25141] netlink: 'syz.3.6400': attribute type 5 has an invalid length. [ 660.564985][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6397'. [ 660.610305][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.766998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.050264][T25158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6407'. [ 661.092876][T25158] netlink: 'syz.4.6407': attribute type 1 has an invalid length. [ 661.106902][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6407'. [ 661.208806][T25169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.244825][T25173] netlink: 'syz.7.6413': attribute type 5 has an invalid length. [ 661.250091][T25169] netlink: 'syz.6.6410': attribute type 4 has an invalid length. [ 661.352414][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6415'. [ 661.405864][T25177] macsec1: entered promiscuous mode [ 661.423096][T25177] gretap0: entered promiscuous mode [ 661.436635][T25177] macsec1: entered allmulticast mode [ 661.445330][T25177] gretap0: entered allmulticast mode [ 661.511885][T25182] netlink: 'syz.4.6417': attribute type 11 has an invalid length. [ 661.531278][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6417'. [ 661.583600][T25185] netlink: 'syz.4.6417': attribute type 1 has an invalid length. [ 661.662072][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6420'. [ 661.695920][T25189] gretap0: entered promiscuous mode [ 662.263643][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6428'. [ 662.317574][T25210] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6428'. [ 662.370972][T25210] batadv1: entered promiscuous mode [ 662.376243][T25210] batadv1: entered allmulticast mode [ 662.667554][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.687060][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.687318][ T5904] net_ratelimit: 2 callbacks suppressed [ 662.687336][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.697045][T25220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6432'. [ 662.722543][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.734480][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.742519][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.871837][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.067669][T25218] lo speed is unknown, defaulting to 1000 [ 663.085765][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.169172][T25227] lo speed is unknown, defaulting to 1000 [ 663.287937][T25239] IPv6: NLM_F_CREATE should be specified when creating new route [ 663.296073][T25240] IPv6: NLM_F_CREATE should be specified when creating new route [ 663.310848][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.446720][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.727434][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.816609][T25256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.767522][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.847345][ T5846] Bluetooth: hci4: command tx timeout [ 665.124055][ T12] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 665.179012][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.255297][ T12] geneve0 (unregistering): left promiscuous mode [ 665.263770][ T12] geneve0 (unregistering): left allmulticast mode [ 665.275812][ T12] team0: Port device geneve0 removed [ 665.330823][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.332779][ T8209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.813702][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.852756][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.929685][ T5846] Bluetooth: hci4: command tx timeout [ 666.937793][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 666.946636][ T12] bond1 (unregistering): Released all slaves [ 667.073806][ T12] bond2 (unregistering): Released all slaves [ 667.197810][ T12] bond3 (unregistering): (slave bond4): Releasing backup interface [ 667.206541][ T12] bond3 (unregistering): Released all slaves [ 667.332457][ T12] bond4 (unregistering): Released all slaves [ 667.349724][ T12] bond5 (unregistering): (slave bond6): Releasing backup interface [ 667.358607][ T12] bond5 (unregistering): Released all slaves [ 667.501151][ T12] bond6 (unregistering): Released all slaves [ 667.550818][T25296] netlink: 'syz.7.6456': attribute type 8 has an invalid length. [ 667.610450][T25218] chnl_net:caif_netlink_parms(): no params data found [ 667.900284][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.919394][T25316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6461'. [ 668.000082][T25218] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.017026][T25218] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.034734][T25218] bridge_slave_0: entered allmulticast mode [ 668.052381][T25218] bridge_slave_0: entered promiscuous mode [ 668.080298][T25320] bridge0: entered promiscuous mode [ 668.086037][T25218] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.114993][T25324] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6465'. [ 668.126894][T25218] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.134203][T25218] bridge_slave_1: entered allmulticast mode [ 668.159041][T25218] bridge_slave_1: entered promiscuous mode [ 668.168722][T25327] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6465'. [ 668.200978][T25327] netlink: del zone limit has 4 unknown bytes [ 668.258144][T25331] netlink: 'syz.6.6468': attribute type 5 has an invalid length. [ 668.331092][T25327] vxcan5: entered allmulticast mode [ 668.371537][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.380223][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.410258][T25218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.421062][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6469'. [ 668.434497][T25218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.604470][T25218] team0: Port device team_slave_0 added [ 668.678670][T25218] team0: Port device team_slave_1 added [ 668.851463][T25218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.874884][T25218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.927373][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.947639][T25218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.986081][T25218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.001110][T25218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.051643][ T5846] Bluetooth: hci4: command tx timeout [ 669.057569][T25218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.124932][T25369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6480'. [ 669.152911][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6479'. [ 669.187600][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6482'. [ 669.202480][T25369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6480'. [ 669.208992][T25218] hsr_slave_0: entered promiscuous mode [ 669.213340][T25369] netlink: del zone limit has 4 unknown bytes [ 669.220148][T25218] hsr_slave_1: entered promiscuous mode [ 669.248334][T25218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.273627][T25218] Cannot create hsr debugfs directory [ 669.324713][T25369] vxcan3: entered allmulticast mode [ 669.363942][ T12] : left promiscuous mode [ 669.561260][T25390] netlink: 'syz.4.6488': attribute type 5 has an invalid length. [ 669.595971][T25388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6485'. [ 669.635637][ T12] tipc: Left network mode [ 669.818925][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.955775][T25403] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6494'. [ 669.967443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.978765][T25401] Cannot find del_set index 1 as target [ 670.289437][T25418] netlink: del zone limit has 4 unknown bytes [ 670.409946][ T12] hsr_slave_0: left promiscuous mode [ 670.440803][ T12] hsr_slave_1: left promiscuous mode [ 670.469884][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.498352][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.856974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.090551][ T5846] Bluetooth: hci4: command tx timeout [ 671.119415][ T12] team_slave_1 (unregistering): left promiscuous mode [ 671.126322][ T12] team_slave_1 (unregistering): left allmulticast mode [ 671.136060][ T12] team0 (unregistering): Port device team_slave_1 removed [ 671.194929][ T12] team_slave_0 (unregistering): left promiscuous mode [ 671.201971][ T12] team_slave_0 (unregistering): left allmulticast mode [ 671.212418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 671.288476][T25430] netlink: 'syz.7.6503': attribute type 16 has an invalid length. [ 671.296479][T25430] netlink: 'syz.7.6503': attribute type 17 has an invalid length. [ 671.756680][T25418] vxcan3: entered allmulticast mode [ 671.943547][T25430] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 671.959431][T25430] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 671.986996][T25430] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 671.995934][T25430] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 672.089083][T25430] gretap0: left allmulticast mode [ 672.094226][T25430] gretap0: left promiscuous mode [ 672.158563][T25437] macsec1: entered promiscuous mode [ 672.168992][T25437] macsec1: entered allmulticast mode [ 672.193894][T25437] veth1_macvtap: entered allmulticast mode [ 672.215822][T25437] veth1_macvtap: left allmulticast mode [ 672.352260][ T12] IPVS: stop unused estimator thread 0... [ 672.776628][T25451] lo speed is unknown, defaulting to 1000 [ 672.927241][ C1] net_ratelimit: 5 callbacks suppressed [ 672.927265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.966560][T25218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.998293][T25218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 673.019227][T25458] __nla_validate_parse: 6 callbacks suppressed [ 673.019249][T25458] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6512'. [ 673.055156][T25458] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6512'. [ 673.087045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.095936][T25218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 673.127621][T25218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 673.212520][T25469] netlink: 'syz.5.6515': attribute type 5 has an invalid length. [ 673.292835][T25474] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6514'. [ 673.369601][T25474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6514'. [ 673.417005][T25474] netlink: del zone limit has 4 unknown bytes [ 673.450983][T25480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6517'. [ 673.503284][T25474] vxcan3: entered allmulticast mode [ 673.649080][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.871724][T25488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6520'. [ 673.878042][T25484] lo speed is unknown, defaulting to 1000 [ 673.930272][T25218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.966943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.994701][T25491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6520'. [ 674.135682][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.144898][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.189436][T25497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6523'. [ 674.227369][T25495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6524'. [ 674.248175][T25499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6523'. [ 674.258975][T25218] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.300690][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.307977][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.337401][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.344603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.447727][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.684043][T25218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.701530][T25516] netlink: del zone limit has 4 unknown bytes [ 674.814965][T25510] vxcan3: entered allmulticast mode [ 675.006891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.120223][T25534] bridge0: port 1(erspan0) entered blocking state [ 675.126851][T25534] bridge0: port 1(erspan0) entered disabled state [ 675.133494][T25534] erspan0: entered allmulticast mode [ 675.141009][T25534] erspan0: entered promiscuous mode [ 675.452466][T25218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.603267][T25553] macsec2: entered promiscuous mode [ 675.617494][T25553] macsec2: entered allmulticast mode [ 675.622890][T25553] veth1_macvtap: entered allmulticast mode [ 675.642992][T25553] veth1_macvtap: left allmulticast mode [ 675.737828][T25218] veth0_vlan: entered promiscuous mode [ 675.785437][T25218] veth1_vlan: entered promiscuous mode [ 675.794368][T25555] lo speed is unknown, defaulting to 1000 [ 675.876040][T25218] veth0_macvtap: entered promiscuous mode [ 675.906108][T25218] veth1_macvtap: entered promiscuous mode [ 675.944464][T25218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.141655][T25218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.189177][T25218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.211296][T25218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.231580][T25218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.243464][T25218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.571341][ T8211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.616832][ T8211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.675402][T25571] vxcan3: entered allmulticast mode [ 676.683019][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.703264][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.984436][T25574] lo speed is unknown, defaulting to 1000 [ 677.185595][T25593] netlink: 'syz.5.6556': attribute type 5 has an invalid length. [ 677.386615][T25603] FAULT_INJECTION: forcing a failure. [ 677.386615][T25603] name failslab, interval 1, probability 0, space 0, times 0 [ 677.402179][T25603] CPU: 0 UID: 0 PID: 25603 Comm: syz.3.6559 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 677.402211][T25603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.402226][T25603] Call Trace: [ 677.402236][T25603] [ 677.402246][T25603] dump_stack_lvl+0x189/0x250 [ 677.402287][T25603] ? __pfx____ratelimit+0x10/0x10 [ 677.402320][T25603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.402354][T25603] ? __pfx__printk+0x10/0x10 [ 677.402385][T25603] ? __pfx___might_resched+0x10/0x10 [ 677.402417][T25603] ? fs_reclaim_acquire+0x7d/0x100 [ 677.402449][T25603] should_fail_ex+0x414/0x560 [ 677.402482][T25603] should_failslab+0xa8/0x100 [ 677.402507][T25603] __kmalloc_cache_noprof+0x70/0x3d0 [ 677.402528][T25603] ? rtnl_newlink+0xed/0x1c70 [ 677.402549][T25603] ? kasan_save_free_info+0x46/0x50 [ 677.402582][T25603] rtnl_newlink+0xed/0x1c70 [ 677.402602][T25603] ? netlink_sendmsg+0x805/0xb30 [ 677.402626][T25603] ? __sock_sendmsg+0x219/0x270 [ 677.402656][T25603] ? ____sys_sendmsg+0x505/0x830 [ 677.402680][T25603] ? ___sys_sendmsg+0x21f/0x2a0 [ 677.402704][T25603] ? __x64_sys_sendmsg+0x19b/0x260 [ 677.402729][T25603] ? do_syscall_64+0xfa/0x3b0 [ 677.402747][T25603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.402794][T25603] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.402836][T25603] ? kasan_quarantine_put+0xdd/0x220 [ 677.402867][T25603] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.402906][T25603] ? nlmon_xmit+0xb0/0x100 [ 677.402935][T25603] ? kmem_cache_free+0x18f/0x400 [ 677.402965][T25603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 677.402998][T25603] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.403037][T25603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 677.403069][T25603] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 677.403105][T25603] ? __dev_queue_xmit+0x27e/0x3a70 [ 677.403150][T25603] ? __lock_acquire+0xab9/0xd20 [ 677.403208][T25603] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.403231][T25603] rtnetlink_rcv_msg+0x7cf/0xb70 [ 677.403258][T25603] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 677.403280][T25603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.403300][T25603] ? ref_tracker_free+0x63a/0x7d0 [ 677.403327][T25603] ? __copy_skb_header+0xa7/0x550 [ 677.403357][T25603] ? __pfx_ref_tracker_free+0x10/0x10 [ 677.403386][T25603] ? __skb_clone+0x63/0x7a0 [ 677.403422][T25603] netlink_rcv_skb+0x205/0x470 [ 677.403449][T25603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.403473][T25603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.403514][T25603] ? netlink_deliver_tap+0x2e/0x1b0 [ 677.403538][T25603] ? netlink_deliver_tap+0x2e/0x1b0 [ 677.403570][T25603] netlink_unicast+0x758/0x8d0 [ 677.403604][T25603] netlink_sendmsg+0x805/0xb30 [ 677.403641][T25603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.403671][T25603] ? aa_sock_msg_perm+0x94/0x160 [ 677.403700][T25603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.403728][T25603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.403756][T25603] __sock_sendmsg+0x219/0x270 [ 677.403793][T25603] ____sys_sendmsg+0x505/0x830 [ 677.403827][T25603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.403865][T25603] ? import_iovec+0x74/0xa0 [ 677.403891][T25603] ___sys_sendmsg+0x21f/0x2a0 [ 677.403920][T25603] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.403987][T25603] ? __fget_files+0x2a/0x420 [ 677.404028][T25603] ? __fget_files+0x3a0/0x420 [ 677.404063][T25603] __x64_sys_sendmsg+0x19b/0x260 [ 677.404093][T25603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.404132][T25603] ? __pfx_ksys_write+0x10/0x10 [ 677.404150][T25603] ? rcu_is_watching+0x15/0xb0 [ 677.404190][T25603] ? do_syscall_64+0xbe/0x3b0 [ 677.404214][T25603] do_syscall_64+0xfa/0x3b0 [ 677.404232][T25603] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.404264][T25603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.404286][T25603] ? clear_bhb_loop+0x60/0xb0 [ 677.404313][T25603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.404334][T25603] RIP: 0033:0x7f4fd258e929 [ 677.404355][T25603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.404375][T25603] RSP: 002b:00007f4fd338d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.404400][T25603] RAX: ffffffffffffffda RBX: 00007f4fd27b5fa0 RCX: 00007f4fd258e929 [ 677.404416][T25603] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 677.404431][T25603] RBP: 00007f4fd338d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.404444][T25603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.404457][T25603] R13: 0000000000000000 R14: 00007f4fd27b5fa0 R15: 00007fff4665d088 [ 677.404491][T25603] [ 678.126931][ C1] net_ratelimit: 8 callbacks suppressed [ 678.126954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.293006][T25622] __nla_validate_parse: 6 callbacks suppressed [ 678.293027][T25622] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6563'. [ 678.615012][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.927702][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.167175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.377764][T25656] nbd: must specify a device to reconfigure [ 679.400518][T25652] nbd: must specify a device to reconfigure [ 679.495345][T25660] netlink: 'syz.6.6577': attribute type 5 has an invalid length. [ 679.568174][T25663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6579'. [ 679.608307][T25665] lo speed is unknown, defaulting to 1000 [ 679.890182][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.973210][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.206852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.294640][T25702] netlink: 'syz.3.6594': attribute type 26 has an invalid length. [ 680.304680][T25699] netlink: 'syz.4.6592': attribute type 9 has an invalid length. [ 680.517311][T25711] netlink: 'syz.7.6598': attribute type 5 has an invalid length. [ 680.633501][T25714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6599'. [ 680.856615][T25724] macsec1: entered promiscuous mode [ 680.873323][T25724] macsec1: entered allmulticast mode [ 680.885888][T25729] sctp: [Deprecated]: syz.7.6606 (pid 25729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.885888][T25729] Use struct sctp_sack_info instead [ 680.936661][T25724] veth1_macvtap: entered allmulticast mode [ 680.984087][T25724] veth1_macvtap: left allmulticast mode [ 681.007727][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.246849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.327200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.501009][T25756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6619'. [ 681.665578][T25765] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6622'. [ 681.831080][T25777] netlink: 'syz.7.6626': attribute type 5 has an invalid length. [ 681.856682][T25777] FAULT_INJECTION: forcing a failure. [ 681.856682][T25777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.880548][T25777] CPU: 1 UID: 0 PID: 25777 Comm: syz.7.6626 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 681.880584][T25777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.880598][T25777] Call Trace: [ 681.880607][T25777] [ 681.880617][T25777] dump_stack_lvl+0x189/0x250 [ 681.880658][T25777] ? __pfx____ratelimit+0x10/0x10 [ 681.880692][T25777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.880727][T25777] ? __pfx__printk+0x10/0x10 [ 681.880752][T25777] ? __might_fault+0xb0/0x130 [ 681.880787][T25777] should_fail_ex+0x414/0x560 [ 681.880820][T25777] _copy_from_user+0x2d/0xb0 [ 681.880844][T25777] kstrtouint_from_user+0xc4/0x170 [ 681.880878][T25777] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 681.880928][T25777] proc_fail_nth_write+0x88/0x240 [ 681.880955][T25777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 681.880988][T25777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 681.881017][T25777] vfs_write+0x27e/0xa90 [ 681.881062][T25777] ? __pfx_vfs_write+0x10/0x10 [ 681.881103][T25777] ? __fget_files+0x2a/0x420 [ 681.881133][T25777] ? __fget_files+0x3a0/0x420 [ 681.881156][T25777] ? __fget_files+0x2a/0x420 [ 681.881190][T25777] ksys_write+0x145/0x250 [ 681.881213][T25777] ? __pfx_ksys_write+0x10/0x10 [ 681.881231][T25777] ? rcu_is_watching+0x15/0xb0 [ 681.881271][T25777] ? do_syscall_64+0xbe/0x3b0 [ 681.881296][T25777] do_syscall_64+0xfa/0x3b0 [ 681.881315][T25777] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.881345][T25777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.881367][T25777] ? clear_bhb_loop+0x60/0xb0 [ 681.881401][T25777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.881422][T25777] RIP: 0033:0x7f358318d3df [ 681.881441][T25777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 681.881461][T25777] RSP: 002b:00007f3583f28030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 681.881484][T25777] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f358318d3df [ 681.881499][T25777] RDX: 0000000000000001 RSI: 00007f3583f280a0 RDI: 0000000000000004 [ 681.881512][T25777] RBP: 00007f3583f28090 R08: 0000000000000000 R09: 0000000000000000 [ 681.881526][T25777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 681.881539][T25777] R13: 0000000000000000 R14: 00007f35833b5fa0 R15: 00007fff2a5e58b8 [ 681.881574][T25777] [ 682.172226][T25779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6628'. [ 682.542822][T25788] macsec1: entered promiscuous mode [ 682.557178][T25788] macsec1: entered allmulticast mode [ 682.569478][T25788] veth1_macvtap: entered allmulticast mode [ 682.592972][T25788] veth1_macvtap: left allmulticast mode [ 682.664185][T25791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6632'. [ 682.684566][T25791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6632'. [ 682.720814][T25791] vxcan3: entered allmulticast mode [ 683.168413][ T10] net_ratelimit: 5 callbacks suppressed [ 683.168435][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.202519][T25807] netlink: 'syz.3.6637': attribute type 5 has an invalid length. [ 683.326835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.379181][T25816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6641'. [ 683.565356][ T30] audit: type=1800 audit(1749930332.153:18): pid=25820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6643" name="memory.events" dev="tmpfs" ino=114 res=0 errno=0 [ 683.828114][T25829] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6646'. [ 683.910241][T25835] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6646'. [ 683.934426][T25835] netlink: del zone limit has 4 unknown bytes [ 684.010952][T25835] vxcan7: entered allmulticast mode [ 684.090079][T25839] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6649'. [ 684.104810][T25839] netlink: get zone limit has 8 unknown bytes [ 684.180009][T25839] netlink: 'syz.3.6649': attribute type 5 has an invalid length. [ 684.208150][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.366864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.592357][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6656'. [ 684.634256][T25865] macsec2: entered promiscuous mode [ 684.639776][T25866] netlink: 15 bytes leftover after parsing attributes in process `syz.3.6658'. [ 684.668443][T25865] macsec2: entered allmulticast mode [ 684.673807][T25865] veth1_macvtap: entered allmulticast mode [ 684.687356][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.710816][T25865] veth1_macvtap: left allmulticast mode [ 684.940772][T25876] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6662'. [ 684.960375][T25876] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6662'. [ 684.991393][T25876] netlink: del zone limit has 4 unknown bytes [ 685.024475][T25876] vxcan5: entered allmulticast mode [ 685.170353][T25893] netlink: 'syz.5.6667': attribute type 1 has an invalid length. [ 685.243566][T25893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.261718][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.323254][T25893] bond1: (slave ip6gretap1): making interface the new active one [ 685.334061][T25893] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 685.647476][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.655372][T25913] bridge0: port 4(syz_tun) entered disabled state [ 685.691040][T25913] bridge0: port 3(veth0_to_bridge) entered disabled state [ 685.700094][T25913] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.712276][T25913] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.812092][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.831720][T25926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6679'. [ 685.884920][T25929] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6679'. [ 685.898727][T25915] bridge0: port 4(syz_tun) entered disabled state [ 685.955448][T25932] netlink: 'syz.3.6681': attribute type 5 has an invalid length. [ 686.077120][T25915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.093510][T25915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.256946][T25915] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.265368][T25915] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.297265][T25915] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.305683][T25915] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.386291][T25929] vxcan7: entered allmulticast mode [ 686.542396][T25934] wireguard0: entered promiscuous mode [ 687.068428][T25968] netlink: 'syz.3.6694': attribute type 9 has an invalid length. [ 687.076233][T25968] netlink: 'syz.3.6694': attribute type 6 has an invalid length. [ 687.089799][T25968] netlink: 'syz.3.6694': attribute type 12 has an invalid length. [ 687.351294][T25980] vxcan3: entered allmulticast mode [ 688.275921][T26034] netlink: 'syz.6.6712': attribute type 5 has an invalid length. [ 688.392915][T26037] __nla_validate_parse: 8 callbacks suppressed [ 688.392939][T26037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6713'. [ 688.491652][T26042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6713'. [ 688.526861][ C1] net_ratelimit: 7 callbacks suppressed [ 688.526912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.540645][T26009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.541647][T26042] netlink: del zone limit has 4 unknown bytes [ 689.568219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.576424][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.606843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.628267][T26009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.690916][T26000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.739306][T26000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.883063][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.940921][T26000] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.950351][T26000] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.959501][T26000] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.968837][T26000] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.065703][ T5849] lo speed is unknown, defaulting to 1000 [ 691.073340][ T5849] syz2: Port: 1 Link DOWN [ 691.098556][T26042] vxcan3: entered allmulticast mode [ 691.209497][T26049] macsec1: entered promiscuous mode [ 691.237454][T26049] macsec1: entered allmulticast mode [ 691.242818][T26049] veth1_macvtap: entered allmulticast mode [ 691.270961][T26049] veth1_macvtap: left allmulticast mode [ 691.483737][T26069] netlink: 'syz.7.6721': attribute type 11 has an invalid length. [ 691.495213][T26066] macsec1: entered promiscuous mode [ 691.512644][T26066] macsec1: entered allmulticast mode [ 691.521852][T26069] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6721'. [ 691.530217][T26066] veth1_macvtap: entered allmulticast mode [ 691.579076][T26066] veth1_macvtap: left allmulticast mode [ 691.646960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.657392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.817579][T26075] lo speed is unknown, defaulting to 1000 [ 691.958994][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6729'. [ 692.053077][T26092] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6728'. [ 692.077189][T26095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6730'. [ 692.093334][T26095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6730'. [ 692.140802][T26095] vxcan3: entered allmulticast mode [ 692.289407][T26099] netlink: 'syz.6.6732': attribute type 5 has an invalid length. [ 692.456631][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6736'. [ 692.473597][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6736'. [ 692.499198][T26106] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6736'. [ 692.843479][T26114] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.965555][T26130] FAULT_INJECTION: forcing a failure. [ 692.965555][T26130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.996931][T26130] CPU: 0 UID: 0 PID: 26130 Comm: syz.5.6746 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 692.996968][T26130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.996982][T26130] Call Trace: [ 692.996992][T26130] [ 692.997003][T26130] dump_stack_lvl+0x189/0x250 [ 692.997044][T26130] ? __pfx____ratelimit+0x10/0x10 [ 692.997079][T26130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.997114][T26130] ? __pfx__printk+0x10/0x10 [ 692.997138][T26130] ? __might_fault+0xb0/0x130 [ 692.997172][T26130] should_fail_ex+0x414/0x560 [ 692.997206][T26130] _copy_from_user+0x2d/0xb0 [ 692.997230][T26130] ___sys_sendmsg+0x158/0x2a0 [ 692.997261][T26130] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.997330][T26130] ? __fget_files+0x2a/0x420 [ 692.997353][T26130] ? __fget_files+0x3a0/0x420 [ 692.997389][T26130] __x64_sys_sendmsg+0x19b/0x260 [ 692.997420][T26130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.997459][T26130] ? __pfx_ksys_write+0x10/0x10 [ 692.997477][T26130] ? rcu_is_watching+0x15/0xb0 [ 692.997518][T26130] ? do_syscall_64+0xbe/0x3b0 [ 692.997542][T26130] do_syscall_64+0xfa/0x3b0 [ 692.997561][T26130] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.997591][T26130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.997613][T26130] ? clear_bhb_loop+0x60/0xb0 [ 692.997639][T26130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.997661][T26130] RIP: 0033:0x7f16e058e929 [ 692.997681][T26130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.997710][T26130] RSP: 002b:00007f16e1332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.997733][T26130] RAX: ffffffffffffffda RBX: 00007f16e07b5fa0 RCX: 00007f16e058e929 [ 692.997750][T26130] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 692.997764][T26130] RBP: 00007f16e1332090 R08: 0000000000000000 R09: 0000000000000000 [ 692.997779][T26130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.997792][T26130] R13: 0000000000000000 R14: 00007f16e07b5fa0 R15: 00007ffeb313e448 [ 692.997825][T26130] [ 693.281085][T26132] netlink: 'syz.7.6747': attribute type 1 has an invalid length. [ 693.401143][T26137] __nla_validate_parse: 4 callbacks suppressed [ 693.401167][T26137] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6747'. [ 693.417301][T26136] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6748'. [ 693.432229][T26114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.473808][T26114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.584246][T26114] vlan0: left promiscuous mode [ 693.607573][T26114] macvlan0: left allmulticast mode [ 693.681080][T26114] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.692142][T26114] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.701331][T26114] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.710770][T26114] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.801629][T26114] vxcan3: left allmulticast mode [ 693.817062][T26114] vxcan5: left allmulticast mode [ 693.847967][T26114] batadv1: left promiscuous mode [ 693.864801][T26114] batadv1: left allmulticast mode [ 693.937471][T26132] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 693.956493][T26134] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 694.072054][T26144] netlink: 'syz.4.6751': attribute type 1 has an invalid length. [ 694.082455][T26144] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6751'. [ 694.095576][T26144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6751'. [ 694.168927][T26144] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6751'. [ 694.228501][T26144] net_ratelimit: 1 callbacks suppressed [ 694.228523][T26144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.248258][T26150] netlink: 'syz.5.6752': attribute type 5 has an invalid length. [ 694.256995][T26148] netlink: 'syz.4.6751': attribute type 11 has an invalid length. [ 694.317862][T26148] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6751'. [ 694.402288][T26160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.486566][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6754'. [ 694.497600][T26157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6754'. [ 694.507181][T26159] netlink: 'syz.5.6755': attribute type 29 has an invalid length. [ 694.557287][T26159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6755'. [ 694.699890][T26169] ip6t_REJECT: ECHOREPLY is not supported [ 694.788576][T26171] vlan3: entered promiscuous mode [ 694.807809][T26171] vlan3: entered allmulticast mode [ 694.813000][T26171] hsr_slave_1: entered allmulticast mode [ 694.994251][T26184] tipc: Invalid UDP bearer configuration [ 694.994799][T26184] tipc: Enabling of bearer rejected, failed to enable media [ 695.261354][T26192] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2 [ 695.273111][T26192] netdevsim netdevsim7: Falling back to sysfs fallback for: ..€ [ 695.740507][T26212] macsec2: entered promiscuous mode [ 695.752344][T26212] macsec2: entered allmulticast mode [ 695.764220][T26212] veth1_macvtap: entered allmulticast mode [ 695.792009][T26212] veth1_macvtap: left allmulticast mode [ 695.925941][T26218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6779'. [ 695.955413][T26218] netlink: del zone limit has 4 unknown bytes [ 696.008464][T26218] vxcan3: entered allmulticast mode [ 696.775495][T26246] netlink: 'syz.6.6791': attribute type 5 has an invalid length. [ 696.976304][T26252] FAULT_INJECTION: forcing a failure. [ 696.976304][T26252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.984629][T26254] netlink: del zone limit has 4 unknown bytes [ 697.007101][T26252] CPU: 0 UID: 0 PID: 26252 Comm: syz.3.6794 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 697.007135][T26252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 697.007150][T26252] Call Trace: [ 697.007158][T26252] [ 697.007168][T26252] dump_stack_lvl+0x189/0x250 [ 697.007207][T26252] ? __pfx____ratelimit+0x10/0x10 [ 697.007243][T26252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.007275][T26252] ? __pfx__printk+0x10/0x10 [ 697.007298][T26252] ? __might_fault+0xb0/0x130 [ 697.007338][T26252] should_fail_ex+0x414/0x560 [ 697.007368][T26252] _copy_from_iter+0x1db/0x16f0 [ 697.007404][T26252] ? rcu_is_watching+0x15/0xb0 [ 697.007437][T26252] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 697.007460][T26252] ? __pfx__copy_from_iter+0x10/0x10 [ 697.007492][T26252] ? __build_skb_around+0x257/0x3e0 [ 697.007521][T26252] ? netlink_sendmsg+0x642/0xb30 [ 697.007545][T26252] ? skb_put+0x11b/0x210 [ 697.007572][T26252] netlink_sendmsg+0x6b2/0xb30 [ 697.007607][T26252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.007636][T26252] ? aa_sock_msg_perm+0x94/0x160 [ 697.007665][T26252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.007691][T26252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.007717][T26252] __sock_sendmsg+0x219/0x270 [ 697.007752][T26252] ____sys_sendmsg+0x505/0x830 [ 697.007785][T26252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.007821][T26252] ? import_iovec+0x74/0xa0 [ 697.007846][T26252] ___sys_sendmsg+0x21f/0x2a0 [ 697.007875][T26252] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.007940][T26252] ? __fget_files+0x2a/0x420 [ 697.007962][T26252] ? __fget_files+0x3a0/0x420 [ 697.007997][T26252] __x64_sys_sendmsg+0x19b/0x260 [ 697.008027][T26252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.008064][T26252] ? __pfx_ksys_write+0x10/0x10 [ 697.008082][T26252] ? rcu_is_watching+0x15/0xb0 [ 697.008118][T26252] ? do_syscall_64+0xbe/0x3b0 [ 697.008141][T26252] do_syscall_64+0xfa/0x3b0 [ 697.008158][T26252] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.008189][T26252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.008228][T26252] ? clear_bhb_loop+0x60/0xb0 [ 697.008254][T26252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.008274][T26252] RIP: 0033:0x7f4fd258e929 [ 697.008293][T26252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.008319][T26252] RSP: 002b:00007f4fd338d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.008343][T26252] RAX: ffffffffffffffda RBX: 00007f4fd27b5fa0 RCX: 00007f4fd258e929 [ 697.008360][T26252] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 697.008374][T26252] RBP: 00007f4fd338d090 R08: 0000000000000000 R09: 0000000000000000 [ 697.008388][T26252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.008402][T26252] R13: 0000000000000000 R14: 00007f4fd27b5fa0 R15: 00007fff4665d088 [ 697.008435][T26252] [ 697.373547][T26254] vxcan7: entered allmulticast mode [ 697.433595][T26257] macsec1: entered promiscuous mode [ 697.439235][T26257] macsec1: entered allmulticast mode [ 697.444572][T26257] veth1_macvtap: entered allmulticast mode [ 697.453533][T26257] veth1_macvtap: left allmulticast mode [ 697.734849][T26272] gtp0: entered promiscuous mode [ 697.794908][T26272] gtp0: entered allmulticast mode [ 698.046877][T26286] netlink: del zone limit has 4 unknown bytes [ 698.065554][T26286] vxcan5: entered allmulticast mode [ 698.130385][T26289] FAULT_INJECTION: forcing a failure. [ 698.130385][T26289] name failslab, interval 1, probability 0, space 0, times 0 [ 698.147944][T26289] CPU: 0 UID: 0 PID: 26289 Comm: syz.5.6808 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 698.147978][T26289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.147993][T26289] Call Trace: [ 698.148003][T26289] [ 698.148013][T26289] dump_stack_lvl+0x189/0x250 [ 698.148052][T26289] ? __pfx____ratelimit+0x10/0x10 [ 698.148085][T26289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.148119][T26289] ? __pfx__printk+0x10/0x10 [ 698.148150][T26289] ? __pfx___might_resched+0x10/0x10 [ 698.148183][T26289] ? fs_reclaim_acquire+0x7d/0x100 [ 698.148221][T26289] should_fail_ex+0x414/0x560 [ 698.148255][T26289] should_failslab+0xa8/0x100 [ 698.148281][T26289] __kmalloc_cache_noprof+0x70/0x3d0 [ 698.148302][T26289] ? genl_start+0x1c9/0x6c0 [ 698.148339][T26289] genl_start+0x1c9/0x6c0 [ 698.148369][T26289] ? netlink_lookup+0x30/0x200 [ 698.148400][T26289] __netlink_dump_start+0x466/0x7e0 [ 698.148434][T26289] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 698.148472][T26289] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 698.148503][T26289] ? genl_get_cmd+0x7d9/0x910 [ 698.148540][T26289] ? __pfx_genl_start+0x10/0x10 [ 698.148568][T26289] ? __pfx_genl_dumpit+0x10/0x10 [ 698.148596][T26289] ? __pfx_genl_done+0x10/0x10 [ 698.148644][T26289] genl_rcv_msg+0x5da/0x790 [ 698.148683][T26289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.148713][T26289] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 698.148753][T26289] netlink_rcv_skb+0x205/0x470 [ 698.148779][T26289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.148813][T26289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.148857][T26289] ? down_read+0x1ad/0x2e0 [ 698.148885][T26289] genl_rcv+0x28/0x40 [ 698.148914][T26289] netlink_unicast+0x758/0x8d0 [ 698.148949][T26289] netlink_sendmsg+0x805/0xb30 [ 698.148990][T26289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.149020][T26289] ? aa_sock_msg_perm+0x94/0x160 [ 698.149051][T26289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.149079][T26289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.149106][T26289] __sock_sendmsg+0x219/0x270 [ 698.149144][T26289] ____sys_sendmsg+0x505/0x830 [ 698.149178][T26289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.149333][T26289] ? import_iovec+0x74/0xa0 [ 698.149366][T26289] ___sys_sendmsg+0x21f/0x2a0 [ 698.149399][T26289] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.149470][T26289] ? __fget_files+0x2a/0x420 [ 698.149495][T26289] ? __fget_files+0x3a0/0x420 [ 698.149531][T26289] __x64_sys_sendmsg+0x19b/0x260 [ 698.149563][T26289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.149602][T26289] ? __pfx_ksys_write+0x10/0x10 [ 698.149620][T26289] ? rcu_is_watching+0x15/0xb0 [ 698.149660][T26289] ? do_syscall_64+0xbe/0x3b0 [ 698.149686][T26289] do_syscall_64+0xfa/0x3b0 [ 698.149704][T26289] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.149737][T26289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.149758][T26289] ? clear_bhb_loop+0x60/0xb0 [ 698.149785][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.149807][T26289] RIP: 0033:0x7f16e058e929 [ 698.149828][T26289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.149847][T26289] RSP: 002b:00007f16e1332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.149871][T26289] RAX: ffffffffffffffda RBX: 00007f16e07b5fa0 RCX: 00007f16e058e929 [ 698.149888][T26289] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 698.149903][T26289] RBP: 00007f16e1332090 R08: 0000000000000000 R09: 0000000000000000 [ 698.149917][T26289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.149930][T26289] R13: 0000000000000000 R14: 00007f16e07b5fa0 R15: 00007ffeb313e448 [ 698.149967][T26289] [ 699.000450][T26318] __nla_validate_parse: 6 callbacks suppressed [ 699.000470][T26318] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6820'. [ 699.201674][T26329] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6822'. [ 699.291649][T26329] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6822'. [ 699.337211][T26329] netlink: del zone limit has 4 unknown bytes [ 699.383773][T26329] vxcan3: entered allmulticast mode [ 699.621539][T26348] netlink: 'syz.5.6829': attribute type 5 has an invalid length. [ 699.675350][T26342] macsec1: entered promiscuous mode [ 699.681806][T26342] macsec1: entered allmulticast mode [ 699.687335][T26342] veth1_macvtap: entered allmulticast mode [ 699.696445][T26342] veth1_macvtap: left allmulticast mode [ 700.329650][T26375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6839'. [ 700.368634][T26370] lo speed is unknown, defaulting to 1000 [ 700.378416][T26375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6839'. [ 700.392452][T26377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6840'. [ 700.399502][T26375] netlink: del zone limit has 4 unknown bytes [ 700.484200][T26375] vxcan3: entered allmulticast mode [ 700.636569][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6841'. [ 700.693239][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6841'. [ 700.847539][T26393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6844'. [ 701.178622][T26404] FAULT_INJECTION: forcing a failure. [ 701.178622][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 701.203637][T26404] CPU: 0 UID: 0 PID: 26404 Comm: syz.3.6848 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 701.203670][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.203683][T26404] Call Trace: [ 701.203692][T26404] [ 701.203702][T26404] dump_stack_lvl+0x189/0x250 [ 701.203742][T26404] ? __pfx____ratelimit+0x10/0x10 [ 701.203786][T26404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.203821][T26404] ? __pfx__printk+0x10/0x10 [ 701.203852][T26404] ? __pfx___might_resched+0x10/0x10 [ 701.203892][T26404] should_fail_ex+0x414/0x560 [ 701.203924][T26404] should_failslab+0xa8/0x100 [ 701.203947][T26404] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 701.203968][T26404] ? __alloc_skb+0x112/0x2d0 [ 701.203994][T26404] __alloc_skb+0x112/0x2d0 [ 701.204019][T26404] netlink_dump+0x22b/0xe20 [ 701.204054][T26404] ? __pfx_netlink_dump+0x10/0x10 [ 701.204094][T26404] ? genl_start+0x499/0x6c0 [ 701.204136][T26404] __netlink_dump_start+0x5cb/0x7e0 [ 701.204172][T26404] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 701.204209][T26404] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 701.204240][T26404] ? genl_get_cmd+0x7d9/0x910 [ 701.204275][T26404] ? __pfx_genl_start+0x10/0x10 [ 701.204304][T26404] ? __pfx_genl_dumpit+0x10/0x10 [ 701.204333][T26404] ? __pfx_genl_done+0x10/0x10 [ 701.204383][T26404] genl_rcv_msg+0x5da/0x790 [ 701.204423][T26404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.204452][T26404] ? ref_tracker_free+0x63a/0x7d0 [ 701.204481][T26404] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 701.204506][T26404] ? __pfx_ref_tracker_free+0x10/0x10 [ 701.204549][T26404] netlink_rcv_skb+0x205/0x470 [ 701.204576][T26404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.204611][T26404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 701.204658][T26404] ? down_read+0x1ad/0x2e0 [ 701.204684][T26404] genl_rcv+0x28/0x40 [ 701.204714][T26404] netlink_unicast+0x758/0x8d0 [ 701.204750][T26404] netlink_sendmsg+0x805/0xb30 [ 701.204796][T26404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.204827][T26404] ? aa_sock_msg_perm+0x94/0x160 [ 701.204859][T26404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.204887][T26404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.204915][T26404] __sock_sendmsg+0x219/0x270 [ 701.204960][T26404] ____sys_sendmsg+0x505/0x830 [ 701.204995][T26404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.205035][T26404] ? import_iovec+0x74/0xa0 [ 701.205063][T26404] ___sys_sendmsg+0x21f/0x2a0 [ 701.205094][T26404] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.205167][T26404] ? __fget_files+0x2a/0x420 [ 701.205190][T26404] ? __fget_files+0x3a0/0x420 [ 701.205227][T26404] __x64_sys_sendmsg+0x19b/0x260 [ 701.205260][T26404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.205302][T26404] ? __pfx_ksys_write+0x10/0x10 [ 701.205320][T26404] ? rcu_is_watching+0x15/0xb0 [ 701.205361][T26404] ? do_syscall_64+0xbe/0x3b0 [ 701.205387][T26404] do_syscall_64+0xfa/0x3b0 [ 701.205405][T26404] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.205438][T26404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.205460][T26404] ? clear_bhb_loop+0x60/0xb0 [ 701.205488][T26404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.205509][T26404] RIP: 0033:0x7f4fd258e929 [ 701.205530][T26404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.205549][T26404] RSP: 002b:00007f4fd338d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.205572][T26404] RAX: ffffffffffffffda RBX: 00007f4fd27b5fa0 RCX: 00007f4fd258e929 [ 701.205589][T26404] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 701.205603][T26404] RBP: 00007f4fd338d090 R08: 0000000000000000 R09: 0000000000000000 [ 701.205617][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.205629][T26404] R13: 0000000000000000 R14: 00007f4fd27b5fa0 R15: 00007fff4665d088 [ 701.205665][T26404] [ 701.231298][T26405] macsec0: entered promiscuous mode [ 701.627196][T26405] macsec0: entered allmulticast mode [ 701.632551][T26405] veth1_macvtap: entered allmulticast mode [ 701.667499][T26405] veth1_macvtap: left allmulticast mode [ 701.879677][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6853'. [ 702.002532][T26368] lo speed is unknown, defaulting to 1000 [ 702.045945][T26424] netlink: del zone limit has 4 unknown bytes [ 702.106198][T26424] vxcan3: entered allmulticast mode [ 702.598718][T26448] netlink: 'syz.7.6861': attribute type 12 has an invalid length. [ 703.253601][T26472] macsec1: entered promiscuous mode [ 703.285512][T26472] macsec1: entered allmulticast mode [ 703.293724][T26472] veth1_macvtap: entered allmulticast mode [ 703.310085][T26472] veth1_macvtap: left allmulticast mode [ 703.368104][T26477] sctp: [Deprecated]: syz.7.6875 (pid 26477) Use of int in max_burst socket option. [ 703.368104][T26477] Use struct sctp_assoc_value instead [ 703.398903][T26480] netlink: 'syz.5.6876': attribute type 5 has an invalid length. [ 703.414169][T26476] netlink: 'syz.7.6875': attribute type 11 has an invalid length. [ 703.603555][T26486] netlink: 'syz.5.6878': attribute type 12 has an invalid length. [ 703.963275][T26507] netlink: 'syz.4.6886': attribute type 1 has an invalid length. [ 704.048242][T26511] FAULT_INJECTION: forcing a failure. [ 704.048242][T26511] name failslab, interval 1, probability 0, space 0, times 0 [ 704.091590][T26511] CPU: 0 UID: 0 PID: 26511 Comm: syz.3.6888 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 704.091641][T26511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.091656][T26511] Call Trace: [ 704.091666][T26511] [ 704.091675][T26511] dump_stack_lvl+0x189/0x250 [ 704.091716][T26511] ? __pfx____ratelimit+0x10/0x10 [ 704.091750][T26511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.091785][T26511] ? __pfx__printk+0x10/0x10 [ 704.091806][T26511] ? nla_put+0xd0/0x150 [ 704.091856][T26511] should_fail_ex+0x414/0x560 [ 704.091889][T26511] should_failslab+0xa8/0x100 [ 704.091916][T26511] kmem_cache_alloc_noprof+0x73/0x3c0 [ 704.091950][T26511] ? skb_clone+0x212/0x3a0 [ 704.091985][T26511] skb_clone+0x212/0x3a0 [ 704.092020][T26511] __netlink_deliver_tap+0x404/0x850 [ 704.092061][T26511] ? netlink_deliver_tap+0x2e/0x1b0 [ 704.092090][T26511] netlink_deliver_tap+0x19c/0x1b0 [ 704.092117][T26511] netlink_dump+0x8e4/0xe20 [ 704.092156][T26511] ? __pfx_netlink_dump+0x10/0x10 [ 704.092197][T26511] ? genl_start+0x499/0x6c0 [ 704.092238][T26511] __netlink_dump_start+0x5cb/0x7e0 [ 704.092273][T26511] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 704.092310][T26511] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 704.092342][T26511] ? genl_get_cmd+0x7d9/0x910 [ 704.092378][T26511] ? __pfx_genl_start+0x10/0x10 [ 704.092416][T26511] ? __pfx_genl_dumpit+0x10/0x10 [ 704.092446][T26511] ? __pfx_genl_done+0x10/0x10 [ 704.092480][T26511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 704.092524][T26511] genl_rcv_msg+0x5da/0x790 [ 704.092564][T26511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.092601][T26511] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 704.092642][T26511] netlink_rcv_skb+0x205/0x470 [ 704.092669][T26511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.092703][T26511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.092750][T26511] ? down_read+0x1ad/0x2e0 [ 704.092775][T26511] genl_rcv+0x28/0x40 [ 704.092804][T26511] netlink_unicast+0x758/0x8d0 [ 704.092840][T26511] netlink_sendmsg+0x805/0xb30 [ 704.092877][T26511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.092908][T26511] ? aa_sock_msg_perm+0x94/0x160 [ 704.092939][T26511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.092967][T26511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.092994][T26511] __sock_sendmsg+0x219/0x270 [ 704.093031][T26511] ____sys_sendmsg+0x505/0x830 [ 704.093068][T26511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.093107][T26511] ? import_iovec+0x74/0xa0 [ 704.093134][T26511] ___sys_sendmsg+0x21f/0x2a0 [ 704.093166][T26511] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.093238][T26511] ? __fget_files+0x2a/0x420 [ 704.093261][T26511] ? __fget_files+0x3a0/0x420 [ 704.093298][T26511] __x64_sys_sendmsg+0x19b/0x260 [ 704.093329][T26511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.093369][T26511] ? __pfx_ksys_write+0x10/0x10 [ 704.093387][T26511] ? rcu_is_watching+0x15/0xb0 [ 704.093438][T26511] ? do_syscall_64+0xbe/0x3b0 [ 704.093464][T26511] do_syscall_64+0xfa/0x3b0 [ 704.093482][T26511] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.093515][T26511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.093538][T26511] ? clear_bhb_loop+0x60/0xb0 [ 704.093567][T26511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.093589][T26511] RIP: 0033:0x7f4fd258e929 [ 704.093609][T26511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.093629][T26511] RSP: 002b:00007f4fd338d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.093653][T26511] RAX: ffffffffffffffda RBX: 00007f4fd27b5fa0 RCX: 00007f4fd258e929 [ 704.093670][T26511] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 704.093685][T26511] RBP: 00007f4fd338d090 R08: 0000000000000000 R09: 0000000000000000 [ 704.093699][T26511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.093713][T26511] R13: 0000000000000000 R14: 00007f4fd27b5fa0 R15: 00007fff4665d088 [ 704.093749][T26511] [ 704.619075][T26521] netlink: 'syz.3.6891': attribute type 1 has an invalid length. [ 704.667273][T26521] __nla_validate_parse: 8 callbacks suppressed [ 704.667296][T26521] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6891'. [ 704.670642][T26526] netlink: 'syz.5.6893': attribute type 5 has an invalid length. [ 704.697177][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6891'. [ 704.900905][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6897'. [ 704.937216][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6896'. [ 705.388811][T26565] FAULT_INJECTION: forcing a failure. [ 705.388811][T26565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.419857][T26562] macsec2: entered promiscuous mode [ 705.425351][T26562] macsec2: entered allmulticast mode [ 705.482446][T26565] CPU: 1 UID: 0 PID: 26565 Comm: syz.3.6907 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 705.482480][T26565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.482496][T26565] Call Trace: [ 705.482505][T26565] [ 705.482516][T26565] dump_stack_lvl+0x189/0x250 [ 705.482556][T26565] ? __pfx____ratelimit+0x10/0x10 [ 705.482597][T26565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.482631][T26565] ? __pfx__printk+0x10/0x10 [ 705.482669][T26565] should_fail_ex+0x414/0x560 [ 705.482702][T26565] _copy_to_user+0x31/0xb0 [ 705.482727][T26565] simple_read_from_buffer+0xe1/0x170 [ 705.482756][T26565] proc_fail_nth_read+0x1df/0x250 [ 705.482787][T26565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.482816][T26565] ? rw_verify_area+0x258/0x650 [ 705.482848][T26565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.482876][T26565] vfs_read+0x200/0x980 [ 705.482915][T26565] ? __pfx___mutex_lock+0x10/0x10 [ 705.482941][T26565] ? __pfx_vfs_read+0x10/0x10 [ 705.482976][T26565] ? __fget_files+0x2a/0x420 [ 705.483005][T26565] ? __fget_files+0x3a0/0x420 [ 705.483028][T26565] ? __fget_files+0x2a/0x420 [ 705.483063][T26565] ksys_read+0x145/0x250 [ 705.483099][T26565] ? __pfx_ksys_read+0x10/0x10 [ 705.483130][T26565] ? rcu_is_watching+0x15/0xb0 [ 705.483169][T26565] ? do_syscall_64+0xbe/0x3b0 [ 705.483194][T26565] do_syscall_64+0xfa/0x3b0 [ 705.483213][T26565] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.483244][T26565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.483267][T26565] ? clear_bhb_loop+0x60/0xb0 [ 705.483294][T26565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.483315][T26565] RIP: 0033:0x7f4fd258d33c [ 705.483335][T26565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 705.483354][T26565] RSP: 002b:00007f4fd338d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.483378][T26565] RAX: ffffffffffffffda RBX: 00007f4fd27b5fa0 RCX: 00007f4fd258d33c [ 705.483394][T26565] RDX: 000000000000000f RSI: 00007f4fd338d0a0 RDI: 0000000000000004 [ 705.483408][T26565] RBP: 00007f4fd338d090 R08: 0000000000000000 R09: 0000000000000000 [ 705.483422][T26565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.483435][T26565] R13: 0000000000000000 R14: 00007f4fd27b5fa0 R15: 00007fff4665d088 [ 705.483469][T26565] [ 705.506783][T26562] veth1_macvtap: entered allmulticast mode [ 705.774298][T26562] veth1_macvtap: left allmulticast mode [ 705.815647][T26577] netlink: 15 bytes leftover after parsing attributes in process `syz.3.6910'. [ 706.392867][T26599] netlink: 'syz.6.6920': attribute type 10 has an invalid length. [ 706.415896][T26599] bridge_slave_1: left allmulticast mode [ 706.430610][T26599] bridge_slave_1: left promiscuous mode [ 706.441032][T26599] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.499797][T26599] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 706.710814][T26620] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6929'. [ 706.912831][T26625] macsec0: entered promiscuous mode [ 706.922001][T26625] macsec0: entered allmulticast mode [ 706.935057][T26625] veth1_macvtap: entered allmulticast mode [ 706.963497][T26625] veth1_macvtap: left allmulticast mode [ 707.237987][T26642] IPVS: Unknown mcast interface: dvmrp0 [ 707.254942][T26642] x_tables: duplicate underflow at hook 1 [ 707.498698][T26652] tipc: Started in network mode [ 707.510164][T26652] tipc: Node identity 2000007, cluster identity 4711 [ 707.523982][T26652] tipc: Node number set to 33554439 [ 707.540923][T26652] tipc: Cannot configure node identity twice [ 707.556641][T26652] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6943'. [ 707.786829][T26665] macsec1: entered promiscuous mode [ 707.792401][T26665] macsec1: entered allmulticast mode [ 707.813820][T26665] veth1_macvtap: entered allmulticast mode [ 707.823758][T26670] netlink: zone id is out of range [ 707.841853][T26665] veth1_macvtap: left allmulticast mode [ 708.676289][T26710] macsec1: entered promiscuous mode [ 708.682123][T26710] macsec1: entered allmulticast mode [ 708.687999][T26710] veth1_macvtap: entered allmulticast mode [ 708.743411][T26710] veth1_macvtap: left allmulticast mode [ 709.045374][T26725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6970'. [ 709.562883][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6976'. [ 709.644465][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6976'. [ 709.925856][T26763] macsec2: entered promiscuous mode [ 709.943876][T26763] macsec2: entered allmulticast mode [ 709.958351][T26763] veth1_macvtap: entered allmulticast mode [ 709.988185][T26763] veth1_macvtap: left allmulticast mode [ 710.025276][T26766] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6985'. [ 710.333346][T26776] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 710.561088][ T30] audit: type=1804 audit(1749930359.163:19): pid=26787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6992" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=555 res=1 errno=0 [ 710.626185][ T30] audit: type=1800 audit(1749930359.163:20): pid=26787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6992" name="cgroup.controllers" dev="tmpfs" ino=555 res=0 errno=0 [ 710.705329][T26787] lo speed is unknown, defaulting to 1000 [ 710.940067][T26802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6996'. [ 710.951735][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6995'. [ 711.363794][T26821] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7001'. [ 711.438309][T26821] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7001'. [ 711.447509][T26821] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7001'. [ 711.530220][T26830] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7006'. [ 711.774944][T26842] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7010'. [ 711.817740][T26842] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7010'. [ 711.838162][T26842] netlink: del zone limit has 4 unknown bytes [ 711.865504][T26842] vxcan5: entered allmulticast mode [ 713.209555][T23827] syz_tun (unregistering): left allmulticast mode [ 713.216064][T23827] syz_tun (unregistering): left promiscuous mode [ 713.226992][T23827] bridge0: port 4(syz_tun) entered disabled state [ 713.487008][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 713.700690][ T8215] veth0_to_bridge: left allmulticast mode [ 713.706452][ T8215] veth0_to_bridge: left promiscuous mode [ 713.712583][ T8215] bridge0: port 3(veth0_to_bridge) entered disabled state [ 713.721753][ T8215] bridge_slave_1: left allmulticast mode [ 713.727663][ T8215] bridge_slave_1: left promiscuous mode [ 713.733497][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.743248][ T8215] bridge_slave_0: left allmulticast mode [ 713.749809][ T8215] bridge_slave_0: left promiscuous mode [ 713.756590][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.141371][ T8215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.152138][ T8215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.166088][ T8215] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 714.175779][ T8215] bond0 (unregistering): Released all slaves [ 714.428324][ T8215] ------------[ cut here ]------------ [ 714.433850][ T8215] kernel BUG at net/8021q/vlan.c:99! [ 714.439846][ T8215] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 714.446132][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: kworker/u8:14 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 714.458372][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.468428][ T8215] Workqueue: netns cleanup_net [ 714.473202][ T8215] RIP: 0010:unregister_vlan_dev+0x4da/0x4e0 [ 714.479099][ T8215] Code: f7 e8 ea 1f 84 f7 e9 e7 fe ff ff e8 d0 a8 20 f7 48 c7 c7 00 63 72 8f 4c 89 ee e8 c1 03 57 fa e9 c4 fd ff ff e8 b7 a8 20 f7 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 714.498712][ T8215] RSP: 0018:ffffc9001a2cf758 EFLAGS: 00010293 [ 714.504787][ T8215] RAX: ffffffff8a9fb639 RBX: ffff888024fe4000 RCX: ffff888031080000 [ 714.512761][ T8215] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 714.520731][ T8215] RBP: 0000000000000001 R08: ffffffff8f50fa27 R09: 1ffffffff1ea1f44 [ 714.528702][ T8215] R10: dffffc0000000000 R11: fffffbfff1ea1f45 R12: ffff888032a84000 [ 714.536694][ T8215] R13: ffffc9001a2cf860 R14: ffff888024fe4428 R15: 0000000000000000 [ 714.544686][ T8215] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 714.553615][ T8215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.560283][ T8215] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 714.568257][ T8215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 714.576235][ T8215] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 714.584223][ T8215] Call Trace: [ 714.587525][ T8215] [ 714.590483][ T8215] ? __pfx_unregister_vlan_dev+0x10/0x10 [ 714.596127][ T8215] default_device_exit_batch+0x769/0x890 [ 714.601768][ T8215] ? __pfx___might_resched+0x10/0x10 [ 714.607061][ T8215] ? __pfx_default_device_exit_batch+0x10/0x10 [ 714.613224][ T8215] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 714.618696][ T8215] ? net_generic+0x1e/0x240 [ 714.623214][ T8215] ? __pfx_default_device_exit_batch+0x10/0x10 [ 714.629380][ T8215] ops_undo_list+0x525/0x990 [ 714.633980][ T8215] ? __pfx_ops_undo_list+0x10/0x10 [ 714.639098][ T8215] cleanup_net+0x4c5/0x800 [ 714.643520][ T8215] ? __pfx_cleanup_net+0x10/0x10 [ 714.648458][ T8215] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.653676][ T8215] ? process_scheduled_works+0x9ef/0x17b0 [ 714.659400][ T8215] ? process_scheduled_works+0x9ef/0x17b0 [ 714.665125][ T8215] process_scheduled_works+0xae1/0x17b0 [ 714.670694][ T8215] ? __pfx_process_scheduled_works+0x10/0x10 [ 714.676691][ T8215] worker_thread+0x8a0/0xda0 [ 714.681321][ T8215] kthread+0x70e/0x8a0 [ 714.685413][ T8215] ? __pfx_worker_thread+0x10/0x10 [ 714.690543][ T8215] ? __pfx_kthread+0x10/0x10 [ 714.695138][ T8215] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.700428][ T8215] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.705635][ T8215] ? __pfx_kthread+0x10/0x10 [ 714.710242][ T8215] ret_from_fork+0x3fc/0x770 [ 714.714855][ T8215] ? __pfx_ret_from_fork+0x10/0x10 [ 714.719982][ T8215] ? __switch_to_asm+0x39/0x70 [ 714.724753][ T8215] ? __switch_to_asm+0x33/0x70 [ 714.729520][ T8215] ? __pfx_kthread+0x10/0x10 [ 714.734117][ T8215] ret_from_fork_asm+0x1a/0x30 [ 714.738898][ T8215] [ 714.741926][ T8215] Modules linked in: [ 714.746993][ T8215] ---[ end trace 0000000000000000 ]--- [ 714.752642][ T8215] RIP: 0010:unregister_vlan_dev+0x4da/0x4e0 [ 714.758623][ T8215] Code: f7 e8 ea 1f 84 f7 e9 e7 fe ff ff e8 d0 a8 20 f7 48 c7 c7 00 63 72 8f 4c 89 ee e8 c1 03 57 fa e9 c4 fd ff ff e8 b7 a8 20 f7 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 714.778372][ T8215] RSP: 0018:ffffc9001a2cf758 EFLAGS: 00010293 [ 714.785170][ T8215] RAX: ffffffff8a9fb639 RBX: ffff888024fe4000 RCX: ffff888031080000 [ 714.793307][ T8215] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 714.801632][ T8215] RBP: 0000000000000001 R08: ffffffff8f50fa27 R09: 1ffffffff1ea1f44 [ 714.809769][ T8215] R10: dffffc0000000000 R11: fffffbfff1ea1f45 R12: ffff888032a84000 [ 714.818219][ T8215] R13: ffffc9001a2cf860 R14: ffff888024fe4428 R15: 0000000000000000 [ 714.826201][ T8215] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 714.835221][ T8215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.841955][ T8215] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 714.850097][ T8215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 714.858428][ T8215] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 714.866424][ T8215] Kernel panic - not syncing: Fatal exception [ 714.872805][ T8215] Kernel Offset: disabled [ 714.877135][ T8215] Rebooting in 86400 seconds..