last executing test programs: 1m11.872350693s ago: executing program 2 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb0, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) 1m11.526957004s ago: executing program 2 (id=1121): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m10.743211747s ago: executing program 2 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @private=0xa010100}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r1, 0x4, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) 1m10.444165058s ago: executing program 2 (id=1133): r0 = socket$inet6(0xa, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x966, 0x0, 0xfffc, 0xa, 0x0, 0x10, 0x73}, {0x1, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x2, 0x9}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x2, @in=@loopback, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x402}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xdc, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x8864, @gre={{0x5, 0x4, 0x0, 0x8, 0xce, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m10.284131001s ago: executing program 2 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000f00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000080)={@rand_addr=' \x01\x00', @empty}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba0000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ff020000000000000000000000000001fc01000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) 1m9.856709792s ago: executing program 2 (id=1143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x98, 0x8, 0x0, 0x2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x34}, 0x8, 0x20, 0x5, 0x1}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x4001, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)="95bff58ec506fbb2985dd8f48f53b381b60899a463b3405844a0669b097424b56ddf854f085bf965aa645eee83246343c8cecddd039e78dca1b918d628ef293c1fc408afeda70829bb1dc3c32cc4af5b741183ccf01c1e7db86e3d3c6e94a7e29dced67350f64f9d74651014ef227a162c92231e03ef988b38999ff6abab13450a78b4675c3b2cebbe4e0fa54c48566e0c5aad5dfe2bebf58bd35a2a6cad2dfbd0fb", 0xa2}, {&(0x7f0000000480)="33faa931eb8d7d6ed91c43aaf76bcc4c947e60445ef9dffbb085ddcd3bed9b6fd5019e5e1be2e724ed4896d5bb35204b0415d33f46913b844b174eaa725b61e3c19df09043238ead60ca4718ea9c9855d1872cae30f95e4b529ddc758388a2515c5c5ac781d85d25fe7be4ed657d692269065a0ffb79466ee4ae975dfd91ab05f088fb4398bcb6e681fb99a7bf2d9c3d2faf72add82aa43d2032b80f5ea68b20", 0xa0}, {&(0x7f0000000540)="999c4da02b8c9fa7c63f0c230975e46c33eac40d08c63c7df18dce58afcdd1cd16ea368d1dea09cc086df289841bdec3544b2efab87b877a73134b1e29754a73fbb350dc68ad0de92b79212760ea77927ee8433959c3e0004c7e2f18ad4663caddcf8aa712f75c9533bc4210d292ce81e7c62c28e6bdb1848cd8a60b07887bf54dfbb1dc08c406fe3c32d07ee508908697e8af7cbecb0b9f4bf5744820f016b2d63ea3d8f026ffcead90144a2bd0e6b2bf232c81ab3a84416378bbdb8236e04637145b24699b771b60f982d33e5b00dfc0c50193d3935ea5b908eed9494d7af275d8c20410b8afa49f", 0xe9}, {&(0x7f0000000640)="d94f8a122c1a0f6582913ad23315227cf3b5833fa139327ecb00e34ea359c2905dfd30923506b51f5e9c2e3567bccdd12905277dc90cde5461bb48f3858a31310bf025166e7c863f02429f76ab8ebdfbe57d818828b33ab21e1cbf4f4940f04fbda251eb2c138978cb91e92cae34290fcf691333af42ac6ffe081f5412d04a1f35ccc31b391a0bf93cbad9fa630a309206212f42e6f7da1b4b60d4dd16b0f7aafaa014b38fecf25d881c0a1076f09a2dba12f34fd4a78dfbc4153918faf85273740ce6a18630690f851e22d0c97b2eb47d257a189e4da19b5ac87d2f39cf440870009625a531f456d4ee7845564d94f1a83ff95efaa3ad25801b2a3461ee2939de5f21ba380713475027065a17fa83668176401b5650a8bdc54dd852bccfad784e7ae2326f9b987ed068dd58d12bfc13ecb958f7140e63da1dd9811c9be426ef3b305f377842524c380f52a6f01736372293ec69ae2b336dc0fedb4736d92afa2b94ef2e61535777d250d4ceaef0cc10dc518bea877ab3b4046b39b06bba573284b3d5471d744fb4353b8510e2e028f9ec0699da066fa829e44586e2675694b4aee5e5848e15f19396d2db47f162cf201f45130f67dfc95a0b9506368a9818fa1832a4713818e1e7bfa5158696291100b9d8d6c37110d87c07e2b3568d0b8b01474ba762deca7688590c4c0a07dfda4c91ecf6e421560dfd1bdaecb57727cc7af939c69146aa1f6bf18cbb7529d537492af411f8f8dcdf046e4ff5b4ea2b44ae366829003f83d154f84a8f3ccb78ab2faf2ec11947cabf011947843d5154fe3b6fec9918bd15a2366e7b7e3a2589bd6f3db623d4103b476304e7b3f1c872d70f86aca61884be90b5fefbd00e5c59551eb0afd3916893d12378b69e77287080290e0ce3c1f13d99125133a0a06c398b8137ac319e54fbc8b0707e2f0b9b131233ea121c08578caeaa6b83bc3270255279322f6e0e37c8c710af55212488e1b28dc371314022f05794ecf5c1b46ab3a7e7642c6553b4e587dfefdef92756e14946cc7df30fde7d0a1436e1dc1760bd9e9222778d8e59b8e6c1e92dea62bbfe8ad5eca6a085d113b4951925eb63a61254868ced899b38d4a6e4812aa5b56d7c48ac551095972862ec65229020be2f19dfc2d4b180c74ee01f2c1c7679c80b0f811c304653674a3b2094f0928cda8ae645a77a694b93bc6a3b235298afdf294ec39bce5f705bdc2483988b0b42cbec4bd85886c7c8fd692c7b5603d74d8cde0ad1a39993e1422d0112a28c550e70a225846ce26604f7cf5417b7ecd2503b849228c6b296e4aae1a74800c0c2242022d14a34c7d67cca348afa6fa846cbf20b9b1f7d0e225ecf618e409a618324cf1454f28ede4e5cb8bad6a55c0026a52d6ec2e52c9b397382c7049abd1b75eedc087fdb354c6657fa7f86a6ee5abcc3446ef4724c7708fb1ba44a4c7c93c475dbc48a1fa91affb507659a6dbf2b1f5c75fbbe0d6db9305fc1b319bc658996b13cde7e7c02842cd407a801def347d6e6adcabb1b270d7c135f92c4687838688081a8e65b1209272a74bd58383b6fdd47040157603fe041fa923edbd62caf0d0dd9b56198ed8fe0576838bb28f2e781bf2df630fa0fc1afc807803b8173a0921318058a3980d25bac280dec032be9109260c4a160f4597b7fc10d728b86326b0d76c54202667cd56bf4e5290b4ce874b4ed92fae1d1e16eef0088c440f86a7855274b60bad02de2b3c66232b2b85000fb4d40957d009ac2104df654e9f690a1c61266fa441cd9ccd8c87e8fb50a3b4b8089ef1ab2c548686eaf862d31127216ee3469c06ea47be51632e46c5bfbd2b5e9fdbd7617e21b4b3fd8f8bd2f5ab5edd4c728a3a671991e8313a73af9ab4383be071d27c4497f783bb284b31515d424ed476a684d3e9e9b0a6d18788552a522ca3b7f32bc48b8a9adfb8872ee52615a40ed1756dded2c6adc3367e4c0575655c27b56fe0deefe257780cb25204b82083fef46d6f2cec1417716e89f679de91a5a1f2886a66ac625c2f7642e81f3be76ea1d460a48db5da50f3b2c4895de1ee24b37c488ddd1c5ed31471969c196582a3fa0386b526799a96b582d041b43cfb70533311d0453630e25e0c874d43e0e5f709e72c50160679fb9dfa20e0bd5c9e1dd4ba58fc1f6b3bd77b970c68f75cd606ba35b394f7a9bc432a239819dd9593d09facf893e7cc6d9b477c12407bc7ff784fe51b005f6317704faae9d1a2f805a1a42890dcf42ab0da14b1841f71520325fc786f85d11afd772bb392ba16fd198695b3cddb4c54699b7afb764f518161afe8fc69fdcd7476eb01296f5321972becf3cab25c4961d8b2c8f4d234949ee0791a1fad200921ad32c2081a918682169b50aaa62fd004bd5a009da5118a0066a9b02058498b092f19a80509d6af0d1057bec74a74a291c58374d17037445eb2cbc00985d766cb11c566903415ba917175736d1337b141761b1ec93ae77bcd5e3d00abe6b9ed6af103732cdcba0be4ea0bf353fd2b95bdbe660c7522e943e40d657a28da8f63ecc1eb25ce37b1377ea824dfe9d3c0b31e88bc5bb6779790752ae65545a895a6b5f7aa017aa73dc57bc7a45c593ceb09fb841c4fa4e9794aad1476d813cce2aa80f83d51fdacd4c3360a1bc4ee139bda5791e86f9e86a3d1486c0ccd31caa8230ab5ccc9b1b135fc8cd0017bb06de82f7228746a8cfc550e7064685f8df52965db5a19fd3c946cf8dcdad0faec9bf1b800a5686b0d397beed8d0fb11f73f8a09c9c5542b98160a3bdc3d1a61b35c2cc51593fed22f23eefcb4a12f2934352947693f88b9f31d75bcb9aaea712ffa64b7491299d218e248cdeb157079e0cc4023c558e77998cfb4c61d63002f89165d665fc71079b604fbf5e3539be063f88ad1700eb218d0fe70cb2218c0e1c2a6b79bb2bfd66cbc6a4116ba229238669f0a4a4da53e3f2bf83bc49bf58e296725fddbe7a845b688c7fb1eab62d19b78b952e183f712167095a6d5d8cae921311fdc5dd66863c45e56a431a94cb44178831b3596aabc0bf7a854497518fba9c5d5a27480a60d48dbf22cfdebf52fe696b0bd4b36f2782f546eaf5d04221890f05ae94416a56ecb715c15befbf2c7496a726d0cb577d11bfdb75069086f76bedfd27bee6355305fa1d7779bad8c1606cba119913bf095183182458628a1a4e9eb807e9b202c087d8c27b2149d22c50a2e500396647be491ecaa78dae476661b2000ac44d12f69852eaa49c52cb7233087c2915685697f15838ca3f9064b12533ae89b1c96f38393890832cf8dedd8da77aa0d82bd88167690d214e2983f95ff4b9e504bb058c4077a1373f922c8f63a10210368cceb2b728332d3e008b7662598a45f00afe9f3873959d98ae34e35020bc073c91fc18e320c1f9e22d9ce1c9e25494629ce430672839f48d9745b6e41526b8c686c3ab787f009c7a8c59041892371cab8cf43322d08dda94c617b0a2c5dd3057a4c54075c78561f5bc917c7b56cf64cc49e9de76fa2a19898c5152cb87977f58694301ee200d7c3f46baf07d674a3d09bc9b06b22149680c5fa80f122ef14f649e54a293511f9108eef7e2db1961018044bccd6e1db589951bbdf886d5aba0a660a354af1ab38d625f24728d68ca487b6ea743bae49728968aa256446985430045c2fad76a10eb4ec6a686f08c4dc5156a5475a2f68e9aff00808a976cb8bb225a4a7d25cc73ee9816c32f88f406d87533fdd64d1778f38b73394a7da2e1385cf1f51f2d485aa24fb93a43007a8c35c3678f62e4a9c4d2648457bf6833d2f8383df0c82326abf53d4cef284d56750376410b1e1404ffb28731b973bca3276634eafd169b2b2bfa382174aac3b4c3a30dbd2a01865b32c87b8987d693038883be37f5aa9df1806eb0db1c0cee29e2bfc863ca188fae43dd5bfe99b959e8721ef078e31dfbf90b3e394e81311e18dd8590cff4415aa9137a81c81a6c78823f32ccd8c1ce8d4a92bc1a1b1228e683fd6987dcb4a84ecc912c483a2184de4879645c3b78f9c7d309ef8b20a5f1f5fc706ff6030549d39ae5313521f2f729d58c872c5d289e946d9e1b484766e23d98767d083450e2d010700f416488f638051e1b41cccaef2e86e2b783f0255f7e2b2c9302cb292e58bdcb869a2e97c8ea7a1b64609ce8f6ccf2ca13fce87eb6b32118d7b43ec93040c55deb886adc52c94f67ab8f44f3c24748323db313a71ccc46e81870328a368930c8c4a96d04c4cb7fbbff3409d60d22475514f6186b51b8e897ea1fa3675cd2d7e50d06f691002214e1a9468b0e42978f4abd69b503b24b91041eaae5ac06ee89d4a00551fe24f7fc483429550f6a08df0b0937134495c248e70c7bb5b638c8b7631c496c6ddeaf7d0355d3cbdea2c85b49d073022a9eec29858320f7412b1b103c154f3330b71fe64bd50d4aa6999bf22cee1f2c03cd108ad60dcbe82b96bb4af733360640edb7e8391ddeab8800fc839ed26e65d6155e024e998ae81085d4c5af7942264669c9046e2cd8c4c5019969a91a4d41b58754384030ceb5118bed5a8cca137c7315236cdd3b31febceffcb3b3f6014b996547d028dcdf8d1a41dabf3bbeb1ed5e24beae7e44096652b77fe3d2187ee4b1053f57b57e67c46cbbb7e71aba994dd7d3858be0d028106c8a837ecd225af51fde57971857ea51aa22479642d2ee2228bf5672f73908a8fb473219840dc179fcc2d8bb9f56f2545795c63aa88792bee9d8994acca543715f5429482613f765785c07923dcbb89de36d510c39a5cf0dbb84865e4876fb03153d24274f7564d0654ed0fd6cdca4028b0042af6dadb63a997c4f50bda2e58cb6b8e04e06114e492e2671b451c1fa9254d7cd8db0e60d8feab55ed866abd503e2d758ddb53a9ae7173c6639736430de0e989c7f9ade3c4038de5de1bf6c8df653a6f88b75d5117a5fb0ae9aeae66f82e08d006dc3f45a8942d16a65ec69a9aa7d49c8bd77beaed64cdc50ea4180103395ab754b6a6d4715ac9b7f5abc161a50bb38ad82fa16a217048bf59d62950ff240ac50e069558d3648e92ebe43a89bde14f26a79d4f6e5963ff5063f8a686c93df8578fbdd2d7bc63ec74293bbd45fc9617add1c4f9e9ffe10a2c03135ec49abce322b0e562d0a88669b71e83b8456c7df7bfd9bc9a25bd2bf06158b7cf25ba70a03c7f8c754c662f45d4a19329632b46d93e04db8a4c1facf5bc4375c39589bc47f70446a507dbc27dea4740a248cd8351d33175e23e9382ed6dfe35b87a2162efde894f3046eca9f3722b10f80afd677a98ac86dba0b400d486933ee8a55b88d0ef0efbeacdb51681798e7b7c892f882dd109e40315a319fa0d4b9fe7652b92f510f7737b9e4f44015e0bf171a45d5352f141e65b7aefc9d01d3c08b8acb2cdba8933a4c0e93162d27f8d2d99493cbe23d6003d66ba1269c8fb9579b2335b61fefb2a53785e344bbfda3858494cebf4a5e694b135b112ccc7d1ff7122298cc841861f7d6e8ec76d1952ea1025efcb53651b0f831b0222967bd32894026d601e92612406eb8c5839215790dc5859b57ee3c1c4b0689cec325cc18e96f24ea8a4a34ce88d54b63aad269a691dca0aab8efeec7975761b5f6192f70e140c3c2704586296cbd2d30a5bcb4342759568ab8545324370a57d4d4196f348f8eb4833ad6ba58f77623f4a4bc5d9826d6d3170c716d5cf7010df50a78dacceaa9b15be6cf506bc0854dc144e7fd793b64d47a3491882fc4b2d1a0fc31a64f532347f853", 0x1000}, {&(0x7f0000001640)="affda2f8e6dbfae2922c19811fd3d33308105e88f2c6dbc1e2b848167458e2aa23f831f4e3f806f4a5c044cdb300e7ac2964e55c2f200be7e40694c7646ac0a9d3b85b71bdc74bd8dc0e2c725304329a5b0d79fff002c733913611503c6286321a4dbee76b12967b7631dc04eaf4549fe636544e04799854037531187adc6637fa7881500c8b6760d4becfee4c0427501e277449734d929bdc7d264c78ea1bfd1dc462ea1c918b17ac65978aa1ec", 0xae}, {&(0x7f0000001700)="0e1800efabd240b11ab5fe95bb1b4cec8cd0bac93163886625c069f0ceb608109c371ec4008194f55f2e6fdc8be2b1c6477eca1de81c4ed60f358a91030267c9e46e85ef1ac6e1d5c207eba931791c22c8209c3f3353585fd4d21e70fcf9991c6a08e2052f452dd11c81d20e2dc4c3f2b5ebb0f0095fc378ab4a4199526981ea5552629484cdc0f31c12fdfc040f5ee3e348da9c4501cafeff4b69fc937fde0f8b67580ebe9a0b6466da594dfc976ce769a08f2c17fa990c25cadc3279c2890885efe583fbcced1799679223d9a6fad66c199809011c1ed89844f063d945b24b568aad1c8aaa5e72f7569b7365651e260713", 0xf2}, {&(0x7f0000001800)="7b349d3a79db82ca9b", 0x9}, {&(0x7f0000001840)="e78b51d9c41458d33b9874c7ff8390aad39c920525df0537b50dedd1d86752755a93df954a4df88b0f4bb3249d3fdd5cffe1f02ea71271960ae65fca53790928fd74e34c59fd8f9ad1a6d0182c6e24f6141341a44fed3a2b4dbf3ffc56b1267a9df4b6af68e2e613570df52a55f10f405fad9e63c86b04a5338d437b8abcc400abf628cad64a6c2a073110e9bd2a073717964a91fd0924c897478f8434d311b584450b429554ee46f79ed8ce422fdbb1834d3308a12c387ee7f92c2130a07d45f2935608d8dd52553b3e351524e6", 0xce}, {&(0x7f0000001940)="d2de8af072ae5b671b920b86d05ebbc848b815e901246c5fa85b2383196aa6c847746863876d9f6aaa9fa5ffc12c9f0604ede23c0c6aae8ab63d08fcb561edb5539ee8553a4634d7268cc867e5b9e4f9d8152b592954374f30ea5408d3e0d3c6661e46f51e0cc77a5b50da74bb6751a5722f83c9838f97e282d1", 0x7a}, {&(0x7f00000019c0)}], 0xa}, 0x40014) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x1}, 0xfd, 0x9906e6df2a2a35ac}, {0x3, 0x2, {0x2, 0x1, 0x1}, {0x0, 0x1, 0x4}, 0xfd, 0x2}], 0x40) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000001ac0)={'tunl0\x00', r1, 0x20, 0x1, 0xca, 0x72, {{0x2a, 0x4, 0x3, 0x2, 0xa8, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @multicast1, {[@noop, @generic={0x94, 0xc, "9d5f133f012af28330b4"}, @rr={0x7, 0xb, 0x16, [@private=0xa010101, @local]}, @ra={0x94, 0x4, 0x21}, @lsrr={0x83, 0x3, 0x90}, @timestamp={0x44, 0x14, 0xb6, 0x0, 0xe, [0x1ff, 0x0, 0x409, 0x65b5]}, @end, @end, @timestamp_addr={0x44, 0x44, 0x54, 0x1, 0x3, [{@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x8000}, {@multicast2, 0x6}, {@loopback, 0x8}, {@local, 0x49cc}]}, @lsrr={0x83, 0x1b, 0x4d, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x0, &(0x7f0000000100)=""/214, &(0x7f0000000240)=0xd6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000028c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast1, 0x200000}, 0x1c, 0x0, 0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="240062000000000029000000320000c9ed00"/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x48880) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) (async) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000280)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010000000000000000002f000000"], 0x14}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet_sctp(0x2, 0x5, 0x84) 54.737699133s ago: executing program 32 (id=1143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x98, 0x8, 0x0, 0x2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x34}, 0x8, 0x20, 0x5, 0x1}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x4001, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)="95bff58ec506fbb2985dd8f48f53b381b60899a463b3405844a0669b097424b56ddf854f085bf965aa645eee83246343c8cecddd039e78dca1b918d628ef293c1fc408afeda70829bb1dc3c32cc4af5b741183ccf01c1e7db86e3d3c6e94a7e29dced67350f64f9d74651014ef227a162c92231e03ef988b38999ff6abab13450a78b4675c3b2cebbe4e0fa54c48566e0c5aad5dfe2bebf58bd35a2a6cad2dfbd0fb", 0xa2}, {&(0x7f0000000480)="33faa931eb8d7d6ed91c43aaf76bcc4c947e60445ef9dffbb085ddcd3bed9b6fd5019e5e1be2e724ed4896d5bb35204b0415d33f46913b844b174eaa725b61e3c19df09043238ead60ca4718ea9c9855d1872cae30f95e4b529ddc758388a2515c5c5ac781d85d25fe7be4ed657d692269065a0ffb79466ee4ae975dfd91ab05f088fb4398bcb6e681fb99a7bf2d9c3d2faf72add82aa43d2032b80f5ea68b20", 0xa0}, {&(0x7f0000000540)="999c4da02b8c9fa7c63f0c230975e46c33eac40d08c63c7df18dce58afcdd1cd16ea368d1dea09cc086df289841bdec3544b2efab87b877a73134b1e29754a73fbb350dc68ad0de92b79212760ea77927ee8433959c3e0004c7e2f18ad4663caddcf8aa712f75c9533bc4210d292ce81e7c62c28e6bdb1848cd8a60b07887bf54dfbb1dc08c406fe3c32d07ee508908697e8af7cbecb0b9f4bf5744820f016b2d63ea3d8f026ffcead90144a2bd0e6b2bf232c81ab3a84416378bbdb8236e04637145b24699b771b60f982d33e5b00dfc0c50193d3935ea5b908eed9494d7af275d8c20410b8afa49f", 0xe9}, {&(0x7f0000000640)="d94f8a122c1a0f6582913ad23315227cf3b5833fa139327ecb00e34ea359c2905dfd30923506b51f5e9c2e3567bccdd12905277dc90cde5461bb48f3858a31310bf025166e7c863f02429f76ab8ebdfbe57d818828b33ab21e1cbf4f4940f04fbda251eb2c138978cb91e92cae34290fcf691333af42ac6ffe081f5412d04a1f35ccc31b391a0bf93cbad9fa630a309206212f42e6f7da1b4b60d4dd16b0f7aafaa014b38fecf25d881c0a1076f09a2dba12f34fd4a78dfbc4153918faf85273740ce6a18630690f851e22d0c97b2eb47d257a189e4da19b5ac87d2f39cf440870009625a531f456d4ee7845564d94f1a83ff95efaa3ad25801b2a3461ee2939de5f21ba380713475027065a17fa83668176401b5650a8bdc54dd852bccfad784e7ae2326f9b987ed068dd58d12bfc13ecb958f7140e63da1dd9811c9be426ef3b305f377842524c380f52a6f01736372293ec69ae2b336dc0fedb4736d92afa2b94ef2e61535777d250d4ceaef0cc10dc518bea877ab3b4046b39b06bba573284b3d5471d744fb4353b8510e2e028f9ec0699da066fa829e44586e2675694b4aee5e5848e15f19396d2db47f162cf201f45130f67dfc95a0b9506368a9818fa1832a4713818e1e7bfa5158696291100b9d8d6c37110d87c07e2b3568d0b8b01474ba762deca7688590c4c0a07dfda4c91ecf6e421560dfd1bdaecb57727cc7af939c69146aa1f6bf18cbb7529d537492af411f8f8dcdf046e4ff5b4ea2b44ae366829003f83d154f84a8f3ccb78ab2faf2ec11947cabf011947843d5154fe3b6fec9918bd15a2366e7b7e3a2589bd6f3db623d4103b476304e7b3f1c872d70f86aca61884be90b5fefbd00e5c59551eb0afd3916893d12378b69e77287080290e0ce3c1f13d99125133a0a06c398b8137ac319e54fbc8b0707e2f0b9b131233ea121c08578caeaa6b83bc3270255279322f6e0e37c8c710af55212488e1b28dc371314022f05794ecf5c1b46ab3a7e7642c6553b4e587dfefdef92756e14946cc7df30fde7d0a1436e1dc1760bd9e9222778d8e59b8e6c1e92dea62bbfe8ad5eca6a085d113b4951925eb63a61254868ced899b38d4a6e4812aa5b56d7c48ac551095972862ec65229020be2f19dfc2d4b180c74ee01f2c1c7679c80b0f811c304653674a3b2094f0928cda8ae645a77a694b93bc6a3b235298afdf294ec39bce5f705bdc2483988b0b42cbec4bd85886c7c8fd692c7b5603d74d8cde0ad1a39993e1422d0112a28c550e70a225846ce26604f7cf5417b7ecd2503b849228c6b296e4aae1a74800c0c2242022d14a34c7d67cca348afa6fa846cbf20b9b1f7d0e225ecf618e409a618324cf1454f28ede4e5cb8bad6a55c0026a52d6ec2e52c9b397382c7049abd1b75eedc087fdb354c6657fa7f86a6ee5abcc3446ef4724c7708fb1ba44a4c7c93c475dbc48a1fa91affb507659a6dbf2b1f5c75fbbe0d6db9305fc1b319bc658996b13cde7e7c02842cd407a801def347d6e6adcabb1b270d7c135f92c4687838688081a8e65b1209272a74bd58383b6fdd47040157603fe041fa923edbd62caf0d0dd9b56198ed8fe0576838bb28f2e781bf2df630fa0fc1afc807803b8173a0921318058a3980d25bac280dec032be9109260c4a160f4597b7fc10d728b86326b0d76c54202667cd56bf4e5290b4ce874b4ed92fae1d1e16eef0088c440f86a7855274b60bad02de2b3c66232b2b85000fb4d40957d009ac2104df654e9f690a1c61266fa441cd9ccd8c87e8fb50a3b4b8089ef1ab2c548686eaf862d31127216ee3469c06ea47be51632e46c5bfbd2b5e9fdbd7617e21b4b3fd8f8bd2f5ab5edd4c728a3a671991e8313a73af9ab4383be071d27c4497f783bb284b31515d424ed476a684d3e9e9b0a6d18788552a522ca3b7f32bc48b8a9adfb8872ee52615a40ed1756dded2c6adc3367e4c0575655c27b56fe0deefe257780cb25204b82083fef46d6f2cec1417716e89f679de91a5a1f2886a66ac625c2f7642e81f3be76ea1d460a48db5da50f3b2c4895de1ee24b37c488ddd1c5ed31471969c196582a3fa0386b526799a96b582d041b43cfb70533311d0453630e25e0c874d43e0e5f709e72c50160679fb9dfa20e0bd5c9e1dd4ba58fc1f6b3bd77b970c68f75cd606ba35b394f7a9bc432a239819dd9593d09facf893e7cc6d9b477c12407bc7ff784fe51b005f6317704faae9d1a2f805a1a42890dcf42ab0da14b1841f71520325fc786f85d11afd772bb392ba16fd198695b3cddb4c54699b7afb764f518161afe8fc69fdcd7476eb01296f5321972becf3cab25c4961d8b2c8f4d234949ee0791a1fad200921ad32c2081a918682169b50aaa62fd004bd5a009da5118a0066a9b02058498b092f19a80509d6af0d1057bec74a74a291c58374d17037445eb2cbc00985d766cb11c566903415ba917175736d1337b141761b1ec93ae77bcd5e3d00abe6b9ed6af103732cdcba0be4ea0bf353fd2b95bdbe660c7522e943e40d657a28da8f63ecc1eb25ce37b1377ea824dfe9d3c0b31e88bc5bb6779790752ae65545a895a6b5f7aa017aa73dc57bc7a45c593ceb09fb841c4fa4e9794aad1476d813cce2aa80f83d51fdacd4c3360a1bc4ee139bda5791e86f9e86a3d1486c0ccd31caa8230ab5ccc9b1b135fc8cd0017bb06de82f7228746a8cfc550e7064685f8df52965db5a19fd3c946cf8dcdad0faec9bf1b800a5686b0d397beed8d0fb11f73f8a09c9c5542b98160a3bdc3d1a61b35c2cc51593fed22f23eefcb4a12f2934352947693f88b9f31d75bcb9aaea712ffa64b7491299d218e248cdeb157079e0cc4023c558e77998cfb4c61d63002f89165d665fc71079b604fbf5e3539be063f88ad1700eb218d0fe70cb2218c0e1c2a6b79bb2bfd66cbc6a4116ba229238669f0a4a4da53e3f2bf83bc49bf58e296725fddbe7a845b688c7fb1eab62d19b78b952e183f712167095a6d5d8cae921311fdc5dd66863c45e56a431a94cb44178831b3596aabc0bf7a854497518fba9c5d5a27480a60d48dbf22cfdebf52fe696b0bd4b36f2782f546eaf5d04221890f05ae94416a56ecb715c15befbf2c7496a726d0cb577d11bfdb75069086f76bedfd27bee6355305fa1d7779bad8c1606cba119913bf095183182458628a1a4e9eb807e9b202c087d8c27b2149d22c50a2e500396647be491ecaa78dae476661b2000ac44d12f69852eaa49c52cb7233087c2915685697f15838ca3f9064b12533ae89b1c96f38393890832cf8dedd8da77aa0d82bd88167690d214e2983f95ff4b9e504bb058c4077a1373f922c8f63a10210368cceb2b728332d3e008b7662598a45f00afe9f3873959d98ae34e35020bc073c91fc18e320c1f9e22d9ce1c9e25494629ce430672839f48d9745b6e41526b8c686c3ab787f009c7a8c59041892371cab8cf43322d08dda94c617b0a2c5dd3057a4c54075c78561f5bc917c7b56cf64cc49e9de76fa2a19898c5152cb87977f58694301ee200d7c3f46baf07d674a3d09bc9b06b22149680c5fa80f122ef14f649e54a293511f9108eef7e2db1961018044bccd6e1db589951bbdf886d5aba0a660a354af1ab38d625f24728d68ca487b6ea743bae49728968aa256446985430045c2fad76a10eb4ec6a686f08c4dc5156a5475a2f68e9aff00808a976cb8bb225a4a7d25cc73ee9816c32f88f406d87533fdd64d1778f38b73394a7da2e1385cf1f51f2d485aa24fb93a43007a8c35c3678f62e4a9c4d2648457bf6833d2f8383df0c82326abf53d4cef284d56750376410b1e1404ffb28731b973bca3276634eafd169b2b2bfa382174aac3b4c3a30dbd2a01865b32c87b8987d693038883be37f5aa9df1806eb0db1c0cee29e2bfc863ca188fae43dd5bfe99b959e8721ef078e31dfbf90b3e394e81311e18dd8590cff4415aa9137a81c81a6c78823f32ccd8c1ce8d4a92bc1a1b1228e683fd6987dcb4a84ecc912c483a2184de4879645c3b78f9c7d309ef8b20a5f1f5fc706ff6030549d39ae5313521f2f729d58c872c5d289e946d9e1b484766e23d98767d083450e2d010700f416488f638051e1b41cccaef2e86e2b783f0255f7e2b2c9302cb292e58bdcb869a2e97c8ea7a1b64609ce8f6ccf2ca13fce87eb6b32118d7b43ec93040c55deb886adc52c94f67ab8f44f3c24748323db313a71ccc46e81870328a368930c8c4a96d04c4cb7fbbff3409d60d22475514f6186b51b8e897ea1fa3675cd2d7e50d06f691002214e1a9468b0e42978f4abd69b503b24b91041eaae5ac06ee89d4a00551fe24f7fc483429550f6a08df0b0937134495c248e70c7bb5b638c8b7631c496c6ddeaf7d0355d3cbdea2c85b49d073022a9eec29858320f7412b1b103c154f3330b71fe64bd50d4aa6999bf22cee1f2c03cd108ad60dcbe82b96bb4af733360640edb7e8391ddeab8800fc839ed26e65d6155e024e998ae81085d4c5af7942264669c9046e2cd8c4c5019969a91a4d41b58754384030ceb5118bed5a8cca137c7315236cdd3b31febceffcb3b3f6014b996547d028dcdf8d1a41dabf3bbeb1ed5e24beae7e44096652b77fe3d2187ee4b1053f57b57e67c46cbbb7e71aba994dd7d3858be0d028106c8a837ecd225af51fde57971857ea51aa22479642d2ee2228bf5672f73908a8fb473219840dc179fcc2d8bb9f56f2545795c63aa88792bee9d8994acca543715f5429482613f765785c07923dcbb89de36d510c39a5cf0dbb84865e4876fb03153d24274f7564d0654ed0fd6cdca4028b0042af6dadb63a997c4f50bda2e58cb6b8e04e06114e492e2671b451c1fa9254d7cd8db0e60d8feab55ed866abd503e2d758ddb53a9ae7173c6639736430de0e989c7f9ade3c4038de5de1bf6c8df653a6f88b75d5117a5fb0ae9aeae66f82e08d006dc3f45a8942d16a65ec69a9aa7d49c8bd77beaed64cdc50ea4180103395ab754b6a6d4715ac9b7f5abc161a50bb38ad82fa16a217048bf59d62950ff240ac50e069558d3648e92ebe43a89bde14f26a79d4f6e5963ff5063f8a686c93df8578fbdd2d7bc63ec74293bbd45fc9617add1c4f9e9ffe10a2c03135ec49abce322b0e562d0a88669b71e83b8456c7df7bfd9bc9a25bd2bf06158b7cf25ba70a03c7f8c754c662f45d4a19329632b46d93e04db8a4c1facf5bc4375c39589bc47f70446a507dbc27dea4740a248cd8351d33175e23e9382ed6dfe35b87a2162efde894f3046eca9f3722b10f80afd677a98ac86dba0b400d486933ee8a55b88d0ef0efbeacdb51681798e7b7c892f882dd109e40315a319fa0d4b9fe7652b92f510f7737b9e4f44015e0bf171a45d5352f141e65b7aefc9d01d3c08b8acb2cdba8933a4c0e93162d27f8d2d99493cbe23d6003d66ba1269c8fb9579b2335b61fefb2a53785e344bbfda3858494cebf4a5e694b135b112ccc7d1ff7122298cc841861f7d6e8ec76d1952ea1025efcb53651b0f831b0222967bd32894026d601e92612406eb8c5839215790dc5859b57ee3c1c4b0689cec325cc18e96f24ea8a4a34ce88d54b63aad269a691dca0aab8efeec7975761b5f6192f70e140c3c2704586296cbd2d30a5bcb4342759568ab8545324370a57d4d4196f348f8eb4833ad6ba58f77623f4a4bc5d9826d6d3170c716d5cf7010df50a78dacceaa9b15be6cf506bc0854dc144e7fd793b64d47a3491882fc4b2d1a0fc31a64f532347f853", 0x1000}, {&(0x7f0000001640)="affda2f8e6dbfae2922c19811fd3d33308105e88f2c6dbc1e2b848167458e2aa23f831f4e3f806f4a5c044cdb300e7ac2964e55c2f200be7e40694c7646ac0a9d3b85b71bdc74bd8dc0e2c725304329a5b0d79fff002c733913611503c6286321a4dbee76b12967b7631dc04eaf4549fe636544e04799854037531187adc6637fa7881500c8b6760d4becfee4c0427501e277449734d929bdc7d264c78ea1bfd1dc462ea1c918b17ac65978aa1ec", 0xae}, {&(0x7f0000001700)="0e1800efabd240b11ab5fe95bb1b4cec8cd0bac93163886625c069f0ceb608109c371ec4008194f55f2e6fdc8be2b1c6477eca1de81c4ed60f358a91030267c9e46e85ef1ac6e1d5c207eba931791c22c8209c3f3353585fd4d21e70fcf9991c6a08e2052f452dd11c81d20e2dc4c3f2b5ebb0f0095fc378ab4a4199526981ea5552629484cdc0f31c12fdfc040f5ee3e348da9c4501cafeff4b69fc937fde0f8b67580ebe9a0b6466da594dfc976ce769a08f2c17fa990c25cadc3279c2890885efe583fbcced1799679223d9a6fad66c199809011c1ed89844f063d945b24b568aad1c8aaa5e72f7569b7365651e260713", 0xf2}, {&(0x7f0000001800)="7b349d3a79db82ca9b", 0x9}, {&(0x7f0000001840)="e78b51d9c41458d33b9874c7ff8390aad39c920525df0537b50dedd1d86752755a93df954a4df88b0f4bb3249d3fdd5cffe1f02ea71271960ae65fca53790928fd74e34c59fd8f9ad1a6d0182c6e24f6141341a44fed3a2b4dbf3ffc56b1267a9df4b6af68e2e613570df52a55f10f405fad9e63c86b04a5338d437b8abcc400abf628cad64a6c2a073110e9bd2a073717964a91fd0924c897478f8434d311b584450b429554ee46f79ed8ce422fdbb1834d3308a12c387ee7f92c2130a07d45f2935608d8dd52553b3e351524e6", 0xce}, {&(0x7f0000001940)="d2de8af072ae5b671b920b86d05ebbc848b815e901246c5fa85b2383196aa6c847746863876d9f6aaa9fa5ffc12c9f0604ede23c0c6aae8ab63d08fcb561edb5539ee8553a4634d7268cc867e5b9e4f9d8152b592954374f30ea5408d3e0d3c6661e46f51e0cc77a5b50da74bb6751a5722f83c9838f97e282d1", 0x7a}, {&(0x7f00000019c0)}], 0xa}, 0x40014) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x1}, 0xfd, 0x9906e6df2a2a35ac}, {0x3, 0x2, {0x2, 0x1, 0x1}, {0x0, 0x1, 0x4}, 0xfd, 0x2}], 0x40) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000001ac0)={'tunl0\x00', r1, 0x20, 0x1, 0xca, 0x72, {{0x2a, 0x4, 0x3, 0x2, 0xa8, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @multicast1, {[@noop, @generic={0x94, 0xc, "9d5f133f012af28330b4"}, @rr={0x7, 0xb, 0x16, [@private=0xa010101, @local]}, @ra={0x94, 0x4, 0x21}, @lsrr={0x83, 0x3, 0x90}, @timestamp={0x44, 0x14, 0xb6, 0x0, 0xe, [0x1ff, 0x0, 0x409, 0x65b5]}, @end, @end, @timestamp_addr={0x44, 0x44, 0x54, 0x1, 0x3, [{@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x8000}, {@multicast2, 0x6}, {@loopback, 0x8}, {@local, 0x49cc}]}, @lsrr={0x83, 0x1b, 0x4d, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x0, &(0x7f0000000100)=""/214, &(0x7f0000000240)=0xd6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000028c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast1, 0x200000}, 0x1c, 0x0, 0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="240062000000000029000000320000c9ed00"/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x48880) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) (async) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000280)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010000000000000000002f000000"], 0x14}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet_sctp(0x2, 0x5, 0x84) 3.578268354s ago: executing program 0 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25040000001800018014000200766c616e310000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 2.793340204s ago: executing program 0 (id=1895): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800}, 0x8, 0x10, &(0x7f00000002c0), 0x10, r4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r5, 0x1}, 0x14) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080001000d000000", 0x24) 2.548291885s ago: executing program 0 (id=1899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) 2.54763046s ago: executing program 4 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f077de986070af26e441ce47f0810e0000000000000000462995545e64849260498e0c7d11faf6798cd2f310eaf63a1c01c90dd562998fcdcb8a1cd9020700bd08c6647d9335d9806905fc93d6d9472ef25714b01d0660610d8e80c984f96fc1607a14a5345e4e1e606ed6f304b75b8e99f0d771"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}]}, 0x54}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x40, 0x8, 0xffffffff}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.355747268s ago: executing program 0 (id=1903): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f00000030c0)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f00000008c0)=""/251, 0xfb}, {&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f00000009c0)=""/135, 0x87}, {&(0x7f0000000700)=""/47, 0x2f}], 0x8}, 0x47b}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/149, 0x95}, {&(0x7f0000000cc0)=""/191, 0xbf}, {&(0x7f0000000d80)=""/164, 0xa4}, {&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000ec0)=""/66, 0x42}, {&(0x7f0000000f40)=""/170, 0xaa}], 0x7, &(0x7f0000001080)=""/155, 0x9b}, 0x8}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/127, 0x7f}, {&(0x7f0000001340)=""/106, 0x6a}, {&(0x7f00000013c0)=""/20, 0x14}], 0x5}, 0x7f}, {{&(0x7f00000024c0)=@nfc, 0x80, &(0x7f0000002980)=[{&(0x7f0000002540)=""/204, 0xcc}, {&(0x7f0000002640)=""/122, 0x7a}, {&(0x7f00000026c0)=""/175, 0xaf}, {&(0x7f0000002780)=""/203, 0xcb}, {&(0x7f0000002880)=""/206, 0xce}], 0x5}, 0xe}, {{&(0x7f0000002a00), 0x80, &(0x7f0000003000)=[{&(0x7f0000002a80)=""/236, 0xec}, {&(0x7f0000002b80)=""/91, 0x5b}, {&(0x7f0000002c00)=""/205, 0xcd}, {&(0x7f0000002d00)=""/117, 0x75}, {&(0x7f0000002d80)=""/237, 0xed}, {&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/155, 0x9b}, {&(0x7f0000002f80)=""/87, 0x57}], 0x8, &(0x7f0000003080)=""/52, 0x34}, 0x6}], 0x5, 0x80000060, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r9], 0xa) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd078, 0xffff7fff}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0xb, 0x1}, {0xb}, {0x1b}, {0x30, 0x1}, {0x9}, {0x5}, {0x60, 0x1}, {0x18, 0x1}, {0x3, 0x1}, {0x1b}, {0x24}, {0x12, 0x1}, {0x12, 0x1}, {0x6, 0x1}, {0x36}, {0x30, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x16}, {0x18}, {0x7e06146f002227d4, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1f6]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x23e}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.02359443s ago: executing program 1 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100094ec6"}) 1.920421555s ago: executing program 4 (id=1909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c5514d80836fa18763c0d48b7a9616e00200002801c0005800a000400aaaaaaaaaaaa00000400000000000000b43a0000"], 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d00090027bd700000000014000a0002000000000000000000000000200001"], 0x28}}, 0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000008180)=0x5, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000008200), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.613138263s ago: executing program 5 (id=1912): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 1.476267576s ago: executing program 3 (id=1913): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x0, 0x4, 0xb5, 0xffffffc4}, {0x652, 0x9, 0x0, 0x400}, {0x1, 0x6a, 0x9, 0x5}, {0x4, 0xf2, 0x1, 0x6}, {0xf, 0x9, 0x3, 0xe}, {0x0, 0x7, 0x9, 0x46e6}, {0x3, 0x0, 0x7, 0x1}, {0x41f, 0x7, 0x0, 0x7}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.395007248s ago: executing program 5 (id=1914): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x92, @loopback, 0x1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x2}, 0x48) 1.379626921s ago: executing program 3 (id=1915): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xa8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xd, '\x00', r2, r5, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.268291096s ago: executing program 1 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="fb000000160001000000000000000000fe88000000000000000000000000f7011b0200000000000000000000000000010000000000000000000080000c00000040ca488626d49655cb85b43a1160cadca12ea62b00271b10c9f07993827abd813c68700d1c95708efdcf387e87940d21b059e9709f746164dac0fb56e181607f20cf362814431230e44bb180f9f49fc65a105f9ea70e0706ac8fe805d373", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0002000032000000ffffffff00000000000000000000000000080000000000000000000000000000000000000800000000000000000000000800000000000000000000000000000000000000000000000f00000000000000ffffffffffffffff03000000000000000a00000000000000000000000000000000000000210000000000000028bd7000000000000a000000000000000000000000000000feffffff08002400ff7f0000"], 0x100}}, 0x0) (async) socket(0x28, 0x3, 0x81) 1.267690553s ago: executing program 5 (id=1917): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 1.082230394s ago: executing program 5 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x40000) 1.061236806s ago: executing program 1 (id=1919): syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="cf599d3baed500000005000086dd1a43179700442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0002000800000000fc01000000000000000000000000000000004e2402784cf371badd587d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0001000907800000104021e1489060000000000000040000000000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x8d38, 0x20, @empty, @local, 0x8, 0x700, 0x7, 0x8}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@empty, r1}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="cf599d3baed500000005000086dd1a43179700442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0002000800000000fc01000000000000000000000000000000004e2402784cf371badd587d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0001000907800000104021e1489060000000000000040000000000000000000"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x8d38, 0x20, @empty, @local, 0x8, 0x700, 0x7, 0x8}}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@empty, r1}, 0x14) (async) 966.541343ms ago: executing program 0 (id=1920): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730129000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_ifindex, @remote}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4) 912.239354ms ago: executing program 4 (id=1921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (fail_nth: 67) 911.795964ms ago: executing program 3 (id=1922): socket$nl_route(0x10, 0x3, 0x0) 873.193567ms ago: executing program 5 (id=1923): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000000010104000000090000000002000000240001801400018008000100e0c6000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80050001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x800442d3, 0x200000f3) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r2, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x48fa4fe0e7e9679f, 0x6) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) socket$kcm(0x29, 0x7, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x8001}, [@alu={0x7, 0x1, 0xb, 0xa, 0xb, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x3, 0x5, 0xd, 0x8}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xffffffffffffffba, 0x0, &(0x7f0000000580)="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", 0x0, 0xfffffffd, 0x0, 0x0, 0x60, 0x0, 0x0, 0x5b7bd3494084d536, 0x9, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000000010104000000090000000002000000240001801400018008000100e0c6000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80050001"], 0x80}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_READY(r3, 0x800442d3, 0x200000f3) (async) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) accept(r2, 0x0, 0x0) (async) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x48fa4fe0e7e9679f, 0x6) (async) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x8001}, [@alu={0x7, 0x1, 0xb, 0xa, 0xb, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x3, 0x5, 0xd, 0x8}], 0x10, 0x100}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xffffffffffffffba, 0x0, &(0x7f0000000580)="d136ac7eb024f6eb18080000000000000054785969290000000000000000000075648d8cb8e8d678810b46eacaed3375f14fa3380ea2c7f4b7956db83a13d47b13060000a7f43b8151d6b64af8c354d3c101d879b72a966926db4127321062d8812b9cc6dfe9919889851c0fbfc82f019e1fe7dfb3f3268170ee6c6fe7ab0252153bfb78dcf3a3bf442891db57e39cc046bc87680334ce98ce0935d1b7e5550971314553cfe96ce04660cfb1c49e1df7af9a3bbcb4e086048aeefd78664daa6cc52ebf5950760de1899073ddc8bd5d6dd7ac2dbe3de550a203000000cd5876eee75795dd68e54a23768c6a1c732215e322ade581acb06bb0e5524383a650b6fa1b9df4aba21129ae1d7287efcd3a96958175a7db3ffceeaa00ecee7474a5e257783115d7fe6753e818f72d018162461a6eb28c0920c89fa4777401b806b449339cd4c35c61f20d696075448db07101f96315c74492e86ede6f4b4570150ed1d4530dbce7314a2c03271c9bc51a39737e710000000000000000000000000000a00ffa2f70c14b55cfab41b7c6cfc0b3bf99f1707a28f1f5c19d0b64d9ba8c1c00002e8288b89c2cacb715c2a2134f5c34be8c8e1f27de47170b8edc9d9b1f7da4c3cae28f098d58248760c2c4fade86d16ce4b5b678faa735a73e33275ed44480bdb8ce", 0x0, 0xfffffffd, 0x0, 0x0, 0x60, 0x0, 0x0, 0x5b7bd3494084d536, 0x9, 0x5}, 0x50) (async) 857.910046ms ago: executing program 1 (id=1924): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000448ee6bfa48e056450d5f875f1d7bfa4cfe25319cc69d6e3628f268c47cf3c8a7f7f6530a1dfd18a4a9b2781a2b113743dcdfe9ecaedf01bdeebaa1818a3e28f87991383d9f3c955e256ccdbf89133e678752dfec5580189deeaebc662ee12e35971d4aa1a8d7a5f8d022c948755dfe89b28aecc25386b8f4c"], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) sendfile(r1, r2, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x0, 0xb, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x65, 0x0, 0x7f, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x6, [0xeaba, 0x6, 0x0, 0xfffffff8, 0xb4]}, @lsrr={0x83, 0x27, 0x9a, [@multicast1, @multicast2, @empty, @multicast2, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @local]}, @generic={0x88, 0x5, "b76b5b"}, @lsrr={0x83, 0x1f, 0xbe, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @empty, @multicast2, @multicast1]}, @generic={0x86, 0x7, "d7f1242513"}, @timestamp={0x44, 0xc, 0x4c, 0x0, 0x9, [0x200, 0x99c]}, @timestamp={0x44, 0x18, 0x47, 0x0, 0x8, [0x5ad7, 0x3ff, 0xc, 0xb, 0x80000001]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r4, 0x40, 0x700, 0x9, 0x5, {{0x8, 0x4, 0x1, 0x3c, 0x20, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x7, [{@private=0xa010102}]}]}}}}}) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x1e, 0x1, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r6) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/218, &(0x7f0000000000)=0xda) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000080)="76000000000f0018f12dcab999eb71", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 484.134339ms ago: executing program 4 (id=1925): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r3, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x64}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x4af}, 0x38) r4 = socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8508"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 482.407016ms ago: executing program 0 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b01000a4ec6"}) 451.478905ms ago: executing program 3 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040820}, 0x880) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100004400010000000000ffdbdf25010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) (async) unshare(0x28000400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x22, 0x2, 0x3) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x2, 0x2}, 0x6) (async) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) 411.616302ms ago: executing program 4 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0xa, 0x10000) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x40080077, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket(0x11, 0xa, 0x10000) (async) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x40080077, 0x4) (async) 256.264243ms ago: executing program 1 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r0, 0x991fa000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 253.967326ms ago: executing program 5 (id=1930): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xe8}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x3a) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff3}, 0x90) 222.619683ms ago: executing program 3 (id=1931): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x92, @loopback, 0x1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 43) 215.018995ms ago: executing program 4 (id=1932): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff07, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000004f50c3a202e6b558ed839f568d1a254841c72f23d7debe35d4d54ca09b79b5f1a99edf0f05aa1803140a94f8cf4a4ddbfea3a8db8128f66c25820b9978b244b2d103615d56c90f94534291d5ab5db36d2bc4020e06498fbece8ff64b2587db1ae62440fc003dc960371e0d0a973572139318", @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c65723063eccb06718759e19b5e2b5b4b90fbe26c57da01d0defdd8fb640df310dcc999fdd5ea4149250c6daeff7953d8aee66f0e334467aca1feb224a7"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) shutdown(r2, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x17}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffa}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r13, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random}) 369.065µs ago: executing program 3 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000080)=""/129, 0x81}, {0x0}], 0x2, 0x80000001, 0x1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 0s ago: executing program 1 (id=1934): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x560, '\x00', 0x0, r1, 0x3, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): tables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.923376][ T8827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.961190][ T8827] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.035475][ T8827] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 177.044452][ T8827] Node 0 DMA32 free:1429588kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20992kB inactive_anon:0kB active_file:5668kB inactive_file:157684kB unevictable:1536kB writepending:700kB present:3129332kB managed:2558400kB mlocked:0kB bounce:0kB free_pcp:37136kB local_pcp:15792kB free_cma:0kB [ 177.077458][ T8827] lowmem_reserve[]: 0 0 1 1 1 [ 177.082343][ T8827] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 177.111744][ T8827] lowmem_reserve[]: 0 0 0 0 0 [ 177.116533][ T8827] Node 1 Normal free:3900952kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18304kB local_pcp:6560kB free_cma:0kB [ 177.148169][ T8827] lowmem_reserve[]: 0 0 0 0 0 [ 177.153010][ T8827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.165905][ T8827] Node 0 DMA32: 2509*4kB (UME) 848*8kB (UM) 588*16kB (UM) 557*32kB (UME) 145*64kB (UM) 55*128kB (UME) 46*256kB (UM) 26*512kB (UME) 19*1024kB (UM) 9*2048kB (UM) 319*4096kB (M) = 1429972kB [ 177.190500][ T8827] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 177.203008][ T8827] Node 1 Normal: 210*4kB (UME) 44*8kB (UME) 39*16kB (UME) 98*32kB (UME) 35*64kB (UME) 8*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3900952kB [ 177.221355][ T8827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.230943][ T8827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.240345][ T8827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.250396][ T8827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.260087][ T8827] 42644 total pagecache pages [ 177.264875][ T8827] 0 pages in swap cache [ 177.269057][ T8827] Free swap = 124996kB [ 177.273309][ T8827] Total swap = 124996kB [ 177.277488][ T8827] 2097051 pages RAM [ 177.281415][ T8827] 0 pages HighMem/MovableOnly [ 177.286124][ T8827] 425409 pages reserved [ 177.290307][ T8827] 0 pages cma reserved [ 177.452051][ T8852] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20007 [ 177.739453][ T8865] tipc: Enabled bearer , priority 0 [ 177.769533][ T8865] tipc: Resetting bearer [ 177.837149][ T8864] tipc: Disabling bearer [ 177.858213][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 178.007034][ T8874] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 178.245993][ T8882] netlink: 96 bytes leftover after parsing attributes in process `syz.2.855'. [ 178.306253][ T8882] netlink: 96 bytes leftover after parsing attributes in process `syz.2.855'. [ 178.377406][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'. [ 178.414888][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 178.599683][ T51] Bluetooth: hci4: link tx timeout [ 178.606047][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.674045][ T8902] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 178.759851][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.799251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.898350][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 179.154066][ T8920] xt_hashlimit: size too large, truncated to 1048576 [ 179.154119][ T8923] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 179.295726][ T8926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.852820][ T8954] netlink: 'syz.4.886': attribute type 2 has an invalid length. [ 179.881425][ T8954] netlink: 'syz.4.886': attribute type 8 has an invalid length. [ 179.901932][ T8954] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.886'. [ 179.916739][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 180.086803][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 180.691330][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 180.782476][ T30] audit: type=1800 audit(1752045804.776:12): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.885" name="cgroup.controllers" dev="tmpfs" ino=879 res=0 errno=0 [ 180.886793][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 180.961916][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 181.093461][ T9020] xt_hashlimit: size too large, truncated to 1048576 [ 181.818224][ T9052] netlink: 'syz.4.910': attribute type 8 has an invalid length. [ 182.002615][ T9061] netlink: 'syz.2.913': attribute type 7 has an invalid length. [ 182.021226][ T9061] netlink: 'syz.2.913': attribute type 8 has an invalid length. [ 182.176905][ T9070] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.192864][ T9070] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.440414][ T9077] netlink: 'syz.1.922': attribute type 5 has an invalid length. [ 182.594064][ T9082] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 182.639549][ T9082] team0: Port device geneve0 added [ 182.738210][ T9095] netlink: 'syz.3.927': attribute type 7 has an invalid length. [ 182.791447][ T9095] netlink: 'syz.3.927': attribute type 8 has an invalid length. [ 182.908565][ T9102] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 183.415095][ T9130] __nla_validate_parse: 7 callbacks suppressed [ 183.415117][ T9130] netlink: 216 bytes leftover after parsing attributes in process `syz.2.940'. [ 183.450557][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 184.107087][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 184.117226][ T9158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.949'. [ 184.197390][ T9160] syz_tun: entered allmulticast mode [ 184.232983][ T9160] sctp: [Deprecated]: syz.1.950 (pid 9160) Use of int in maxseg socket option. [ 184.232983][ T9160] Use struct sctp_assoc_value instead [ 184.374475][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 184.377766][ T9159] syz_tun: left allmulticast mode [ 184.383788][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 184.567526][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 184.579365][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 184.674018][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 184.710054][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 184.733988][ T9177] netlink: 'syz.3.957': attribute type 7 has an invalid length. [ 184.757539][ T9177] netlink: 'syz.3.957': attribute type 8 has an invalid length. [ 184.917520][ T9184] syzkaller0: entered promiscuous mode [ 184.937089][ T9184] syzkaller0: entered allmulticast mode [ 185.077578][ T9199] No such timeout policy "syz0" [ 185.090129][ T9193] xt_CT: No such helper "snmp" [ 185.296304][ T9205] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 185.764658][ T9229] netlink: 'syz.3.974': attribute type 7 has an invalid length. [ 185.790899][ T9229] netlink: 'syz.3.974': attribute type 8 has an invalid length. [ 186.147290][ T9252] netlink: 'syz.2.979': attribute type 23 has an invalid length. [ 186.475501][ T9276] openvswitch: netlink: Message has -1 unknown bytes. [ 186.727195][ T9284] syzkaller1: entered promiscuous mode [ 186.749139][ T9284] syzkaller1: entered allmulticast mode [ 186.803531][ T9292] IPv6: addrconf: prefix option has invalid lifetime [ 187.043370][ T9301] openvswitch: netlink: Missing key (keys=40, expected=80) [ 188.800402][ T9370] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20004 [ 189.095889][ T9387] __nla_validate_parse: 15 callbacks suppressed [ 189.095910][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 189.165844][ T9387] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 189.216978][ T9392] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1024'. [ 189.363332][ T9400] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 189.967349][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 190.193426][ T9426] bridge_slave_0: left allmulticast mode [ 190.260999][ T9426] bridge_slave_0: left promiscuous mode [ 190.296461][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.476971][ T9426] bridge_slave_1: left allmulticast mode [ 190.498840][ T9426] bridge_slave_1: left promiscuous mode [ 190.508671][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.555107][ T9426] bond0: (slave bond_slave_0): Releasing backup interface [ 190.622512][ T9426] bond0: (slave bond_slave_1): Releasing backup interface [ 190.659285][ T9426] team0: Port device team_slave_0 removed [ 190.683040][ T9426] team0: Port device team_slave_1 removed [ 190.703599][ T9426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.715003][ T9426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.728048][ T9426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.736591][ T9426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.013683][ T9458] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20007 [ 191.095615][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 191.667275][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 191.847998][ T9498] tipc: Enabled bearer , priority 0 [ 191.862798][ T9498] syzkaller0: entered promiscuous mode [ 191.879338][ T9498] syzkaller0: entered allmulticast mode [ 191.907961][ T9498] tipc: Resetting bearer [ 191.924583][ T9497] tipc: Resetting bearer [ 191.950223][ T9497] tipc: Disabling bearer [ 192.316920][ T9509] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20007 [ 192.820093][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 192.861979][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 192.940534][ T9543] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 192.971219][ T9543] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1066'. [ 192.980406][ T9543] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 193.325673][ T9560] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 193.604402][ T9571] vlan1: entered allmulticast mode [ 193.622320][ T9571] veth0_vlan: entered allmulticast mode [ 194.145641][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 194.283663][ T9596] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 194.552784][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 194.575306][ T9606] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 194.586353][ T9606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.772060][ T9612] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.1085'. [ 194.827603][ T9617] syzkaller0: entered promiscuous mode [ 194.833956][ T9617] syzkaller0: entered allmulticast mode [ 195.938796][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 195.957132][ T9636] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1090'. [ 196.134676][ T9641] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 196.188758][ T9643] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1093'. [ 196.580175][ T9663] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20007 [ 196.784548][ T9669] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 196.898132][ T9671] bond5: (slave bridge1): making interface the new active one [ 196.901770][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 196.948121][ T9671] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 197.046845][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1103'. [ 197.242080][ T9684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1104'. [ 197.280231][ T9687] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1105'. [ 197.322003][ T9687] NCSI netlink: No device for ifindex 0 [ 197.572219][ T9699] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20007 [ 197.616628][ T9703] syzkaller0: entered promiscuous mode [ 197.645029][ T9703] syzkaller0: entered allmulticast mode [ 197.767583][ T9713] FAULT_INJECTION: forcing a failure. [ 197.767583][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.824141][ T9713] CPU: 0 UID: 0 PID: 9713 Comm: syz.4.1113 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 197.824171][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.824183][ T9713] Call Trace: [ 197.824191][ T9713] [ 197.824200][ T9713] dump_stack_lvl+0x189/0x250 [ 197.824228][ T9713] ? __pfx____ratelimit+0x10/0x10 [ 197.824259][ T9713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.824283][ T9713] ? __pfx__printk+0x10/0x10 [ 197.824310][ T9713] ? __might_fault+0xb0/0x130 [ 197.824346][ T9713] should_fail_ex+0x414/0x560 [ 197.824381][ T9713] fpu__restore_sig+0x1bb/0x1100 [ 197.824416][ T9713] ? __lock_acquire+0xab9/0xd20 [ 197.824440][ T9713] ? __pfx_fpu__restore_sig+0x10/0x10 [ 197.824503][ T9713] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 197.824530][ T9713] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 197.824548][ T9713] ? _raw_spin_unlock_irq+0x2e/0x50 [ 197.824608][ T9713] ? __task_pid_nr_ns+0x28/0x470 [ 197.824642][ T9713] ? do_syscall_64+0xbe/0x3b0 [ 197.824666][ T9713] do_syscall_64+0xfa/0x3b0 [ 197.824684][ T9713] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.824702][ T9713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.824721][ T9713] ? clear_bhb_loop+0x60/0xb0 [ 197.824746][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.824765][ T9713] RIP: 0033:0x7fd3a558e927 [ 197.824782][ T9713] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 197.824798][ T9713] RSP: 002b:00007fd3a6433038 EFLAGS: 00000246 [ 197.824816][ T9713] RAX: 000000000000012b RBX: 00007fd3a57b5fa0 RCX: 00007fd3a558e929 [ 197.824829][ T9713] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 197.824842][ T9713] RBP: 00007fd3a6433090 R08: 0000000000000000 R09: 0000000000000000 [ 197.824854][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.824866][ T9713] R13: 0000000000000000 R14: 00007fd3a57b5fa0 R15: 00007ffcb0956788 [ 197.824898][ T9713] [ 198.605300][ T9736] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 199.039640][ T9751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.080179][ T9751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.127457][ T9751] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 199.148824][ T9751] bond0 (unregistering): Released all slaves [ 199.191597][ T9766] C: renamed from lo (while UP) [ 199.207488][ T9766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 199.555836][ T9781] __nla_validate_parse: 5 callbacks suppressed [ 199.555856][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 199.883756][ T9791] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 199.930259][ T9791] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 199.949406][ T9798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.960503][ T9796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1136'. [ 200.001725][ T9798] netlink: 'syz.2.1137': attribute type 39 has an invalid length. [ 200.029411][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1136'. [ 200.054511][ T9802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1137'. [ 200.079973][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1136'. [ 200.312319][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 200.427138][ T9817] syzkaller0: entered promiscuous mode [ 200.451141][ T9817] syzkaller0: entered allmulticast mode [ 200.764008][ T9828] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1147'. [ 200.854534][ T9831] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.823237][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'. [ 202.068459][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'. [ 202.328030][ T9899] xt_hashlimit: size too large, truncated to 1048576 [ 202.328908][ T9897] netlink: 'syz.1.1163': attribute type 6 has an invalid length. [ 202.457455][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 202.994778][ T9923] team0: Device gtp0 is of different type [ 203.154993][ T9929] tipc: Enabled bearer , priority 10 [ 203.235172][ T9931] xt_NFQUEUE: number of total queues is 0 [ 203.445476][ T9942] xt_hashlimit: size too large, truncated to 1048576 [ 203.804935][ T9957] xt_hashlimit: size too large, truncated to 1048576 [ 203.821953][ T9961] tipc: Bearer : already 2 bearers with priority 10 [ 203.839433][ T9961] tipc: Bearer : trying with adjusted priority [ 203.851997][ T9961] tipc: Enabled bearer , priority 9 [ 203.858650][ T9959] netlink: 'syz.4.1183': attribute type 7 has an invalid length. [ 204.180101][ T9974] veth3: entered allmulticast mode [ 204.184595][ T9979] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 204.559131][ T9987] netlink: 'syz.0.1192': attribute type 2 has an invalid length. [ 204.630772][ T9992] __nla_validate_parse: 5 callbacks suppressed [ 204.630792][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 204.648929][ T9992] netlink: 'syz.1.1194': attribute type 7 has an invalid length. [ 204.658411][ T9992] netlink: 'syz.1.1194': attribute type 8 has an invalid length. [ 204.669973][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 204.690372][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 204.855545][T10000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 205.079061][T10007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1198'. [ 205.217945][T10011] syzkaller0: entered promiscuous mode [ 205.228722][T10011] syzkaller0: entered allmulticast mode [ 205.567341][T10021] sock: sock_set_timeout: `syz.1.1204' (pid 10021) tries to set negative timeout [ 205.883486][T10021] bridge1: entered promiscuous mode [ 205.888784][T10021] bridge1: entered allmulticast mode [ 206.124385][T10025] netlink: 'syz.3.1206': attribute type 4 has an invalid length. [ 206.154252][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 206.171711][T10027] netlink: 'syz.1.1207': attribute type 7 has an invalid length. [ 206.201375][T10027] netlink: 'syz.1.1207': attribute type 8 has an invalid length. [ 206.209362][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 206.258250][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 206.335184][T10040] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 206.360219][T10040] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 206.369329][T10040] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1210'. [ 206.391151][T10040] nbd: illegal input index 1048576 [ 206.570944][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'. [ 206.731776][T10059] netlink: 'syz.0.1216': attribute type 30 has an invalid length. [ 206.800154][T10059] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.809332][T10059] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.818105][T10059] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.826916][T10059] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.853712][T10070] xt_hashlimit: size too large, truncated to 1048576 [ 206.972308][T10072] syzkaller0: entered promiscuous mode [ 206.998288][T10072] syzkaller0: entered allmulticast mode [ 207.221871][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.263198][T10081] netlink: 'syz.4.1222': attribute type 7 has an invalid length. [ 207.476917][T10086] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 207.743603][T10083] wg2: left promiscuous mode [ 207.753156][T10083] wg2: left allmulticast mode [ 207.959219][T10083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.061265][T10165] validate_nla: 2 callbacks suppressed [ 209.061284][T10165] netlink: 'syz.3.1248': attribute type 11 has an invalid length. [ 209.114549][T10167] syzkaller0: entered promiscuous mode [ 209.120092][T10167] syzkaller0: entered allmulticast mode [ 209.187020][T10172] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 209.195882][T10172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.390152][T10181] FAULT_INJECTION: forcing a failure. [ 209.390152][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.448617][T10188] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 209.470173][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.3.1254 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 209.470206][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.470219][T10181] Call Trace: [ 209.470227][T10181] [ 209.470236][T10181] dump_stack_lvl+0x189/0x250 [ 209.470267][T10181] ? __pfx____ratelimit+0x10/0x10 [ 209.470300][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.470324][T10181] ? __pfx__printk+0x10/0x10 [ 209.470356][T10181] ? get_sigframe+0x596/0x7d0 [ 209.470396][T10181] should_fail_ex+0x414/0x560 [ 209.470432][T10181] _copy_to_user+0x31/0xb0 [ 209.470460][T10181] copy_siginfo_to_user+0x22/0xc0 [ 209.470486][T10181] x64_setup_rt_frame+0x776/0xd40 [ 209.470531][T10181] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 209.470563][T10181] arch_do_signal_or_restart+0x3d7/0x750 [ 209.470603][T10181] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 209.470653][T10181] ? exit_to_user_mode_loop+0x40/0x110 [ 209.470680][T10181] exit_to_user_mode_loop+0x75/0x110 [ 209.470702][T10181] do_syscall_64+0x2bd/0x3b0 [ 209.470721][T10181] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.470759][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.470779][T10181] ? clear_bhb_loop+0x60/0xb0 [ 209.470803][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.470822][T10181] RIP: 0033:0x7fed7f58e927 [ 209.470850][T10181] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 209.470866][T10181] RSP: 002b:00007fed7d3f6038 EFLAGS: 00000246 [ 209.470882][T10181] RAX: 000000000000012b RBX: 00007fed7f7b5fa0 RCX: 00007fed7f58e929 [ 209.470895][T10181] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 209.470913][T10181] RBP: 00007fed7d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.470925][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.470936][T10181] R13: 0000000000000000 R14: 00007fed7f7b5fa0 R15: 00007ffde2e6d068 [ 209.470966][T10181] [ 210.577490][T10217] __nla_validate_parse: 12 callbacks suppressed [ 210.577511][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 210.607295][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 210.842751][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.869660][T10223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.243449][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 211.900994][T10194] Bluetooth: hci1: command 0x0401 tx timeout [ 211.907147][T10194] Bluetooth: hci2: command 0x0406 tx timeout [ 211.913872][T10193] Bluetooth: hci3: command 0x0406 tx timeout [ 212.375996][T10317] Cannot find del_set index 128 as target [ 212.396245][T10316] FAULT_INJECTION: forcing a failure. [ 212.396245][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 212.415400][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.3.1294 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 212.415431][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.415443][T10316] Call Trace: [ 212.415451][T10316] [ 212.415461][T10316] dump_stack_lvl+0x189/0x250 [ 212.415497][T10316] ? __pfx____ratelimit+0x10/0x10 [ 212.415529][T10316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.415553][T10316] ? __pfx__printk+0x10/0x10 [ 212.415583][T10316] ? __pfx___might_resched+0x10/0x10 [ 212.415606][T10316] ? fs_reclaim_acquire+0x7d/0x100 [ 212.415640][T10316] should_fail_ex+0x414/0x560 [ 212.415674][T10316] should_failslab+0xa8/0x100 [ 212.415703][T10316] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 212.415729][T10316] ? page_pool_create_percpu+0x76/0xbe0 [ 212.415766][T10316] page_pool_create_percpu+0x76/0xbe0 [ 212.415793][T10316] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 212.415819][T10316] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 212.415850][T10316] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 212.415879][T10316] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 212.415908][T10316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.415940][T10316] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 212.415964][T10316] ? bpf_dispatcher_xdp+0x800/0x1000 [ 212.415983][T10316] ? bpf_dispatcher_xdp+0x800/0x1000 [ 212.416057][T10316] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 212.416092][T10316] ? _copy_from_user+0x94/0xb0 [ 212.416116][T10316] ? bpf_test_init+0x133/0x170 [ 212.416136][T10316] ? xdp_convert_md_to_buff+0x5b/0x330 [ 212.416164][T10316] bpf_prog_test_run_xdp+0x713/0x1000 [ 212.416206][T10316] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 212.416236][T10316] ? __fget_files+0x2a/0x420 [ 212.416269][T10316] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 212.416295][T10316] bpf_prog_test_run+0x2c4/0x340 [ 212.416321][T10316] __sys_bpf+0x4a4/0x860 [ 212.416343][T10316] ? __pfx___sys_bpf+0x10/0x10 [ 212.416397][T10316] ? ksys_write+0x22a/0x250 [ 212.416454][T10316] ? __pfx_ksys_write+0x10/0x10 [ 212.416475][T10316] ? rcu_is_watching+0x15/0xb0 [ 212.416519][T10316] __x64_sys_bpf+0x7c/0x90 [ 212.416550][T10316] do_syscall_64+0xfa/0x3b0 [ 212.416570][T10316] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.416588][T10316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.416608][T10316] ? clear_bhb_loop+0x60/0xb0 [ 212.416634][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.416654][T10316] RIP: 0033:0x7fed7f58e929 [ 212.416673][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.416690][T10316] RSP: 002b:00007fed7d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.416712][T10316] RAX: ffffffffffffffda RBX: 00007fed7f7b5fa0 RCX: 00007fed7f58e929 [ 212.416727][T10316] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 212.416739][T10316] RBP: 00007fed7d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.416752][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.416764][T10316] R13: 0000000000000000 R14: 00007fed7f7b5fa0 R15: 00007ffde2e6d068 [ 212.416797][T10316] [ 213.125811][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 213.315063][T10351] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 213.786419][T10371] xt_l2tp: invalid flags combination: c [ 213.826786][T10371] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 213.849133][T10379] x_tables: duplicate underflow at hook 1 [ 213.857065][T10371] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1310'. [ 214.109273][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 214.186057][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 214.192610][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 214.199152][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 214.205653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.369251][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1317'. [ 214.520348][T10409] FAULT_INJECTION: forcing a failure. [ 214.520348][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.541870][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.0.1319 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 214.541901][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.541914][T10409] Call Trace: [ 214.541921][T10409] [ 214.541929][T10409] dump_stack_lvl+0x189/0x250 [ 214.541957][T10409] ? __pfx____ratelimit+0x10/0x10 [ 214.541986][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.542010][T10409] ? __pfx__printk+0x10/0x10 [ 214.542036][T10409] ? __might_fault+0xb0/0x130 [ 214.542067][T10409] should_fail_ex+0x414/0x560 [ 214.542111][T10409] fpu__restore_sig+0x1bb/0x1100 [ 214.542143][T10409] ? __lock_acquire+0xab9/0xd20 [ 214.542164][T10409] ? __pfx_fpu__restore_sig+0x10/0x10 [ 214.542225][T10409] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 214.542255][T10409] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 214.542270][T10409] ? _raw_spin_unlock_irq+0x2e/0x50 [ 214.542324][T10409] ? __task_pid_nr_ns+0x28/0x470 [ 214.542356][T10409] ? do_syscall_64+0xbe/0x3b0 [ 214.542379][T10409] do_syscall_64+0xfa/0x3b0 [ 214.542395][T10409] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.542412][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.542430][T10409] ? clear_bhb_loop+0x60/0xb0 [ 214.542452][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.542468][T10409] RIP: 0033:0x7f219cb8e927 [ 214.542486][T10409] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 214.542501][T10409] RSP: 002b:00007f219dad6038 EFLAGS: 00000246 [ 214.542516][T10409] RAX: 000000000000012b RBX: 00007f219cdb5fa0 RCX: 00007f219cb8e929 [ 214.542529][T10409] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 214.542540][T10409] RBP: 00007f219dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.542551][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.542562][T10409] R13: 0000000000000000 R14: 00007f219cdb5fa0 R15: 00007ffc95afa268 [ 214.542590][T10409] [ 214.761146][T10416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1320'. [ 214.897558][T10416] veth3: entered allmulticast mode [ 214.904460][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.014941][T10423] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1322'. [ 215.264334][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 215.317775][T10438] tipc: Enabling of bearer rejected, failed to enable media [ 215.390139][T10430] syzkaller0: entered promiscuous mode [ 215.412473][T10430] syzkaller0: entered allmulticast mode [ 215.486275][T10433] xt_CT: No such helper "syz0" [ 215.955106][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.964942][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.973996][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.982179][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.990135][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.077336][T10461] netlink: 'syz.1.1335': attribute type 7 has an invalid length. [ 216.597829][T10458] chnl_net:caif_netlink_parms(): no params data found [ 217.549818][T10498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1345'. [ 217.636454][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.667774][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.725903][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.859650][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.970621][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.997116][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 218.024474][T10510] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1347'. [ 218.035919][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.046593][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.054794][T10458] bridge_slave_0: entered allmulticast mode [ 218.063319][ T5846] Bluetooth: hci5: command tx timeout [ 218.089184][T10458] bridge_slave_0: entered promiscuous mode [ 218.111725][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.140655][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.165918][T10458] bridge_slave_1: entered allmulticast mode [ 218.184765][T10458] bridge_slave_1: entered promiscuous mode [ 218.217133][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 218.226359][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 218.260206][T10535] : entered promiscuous mode [ 218.645632][T10536] bridge0: port 1(vlan2) entered blocking state [ 218.667500][T10536] bridge0: port 1(vlan2) entered disabled state [ 218.682549][T10536] vlan2: entered allmulticast mode [ 218.696947][T10536] bridge0: entered allmulticast mode [ 218.742441][T10536] vlan2: left allmulticast mode [ 218.754624][T10536] bridge0: left allmulticast mode [ 218.857283][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.935365][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.068449][T10458] team0: Port device team_slave_0 added [ 219.099282][T10458] team0: Port device team_slave_1 added [ 219.229679][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.245738][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.282226][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.331065][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.348625][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.401127][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.537954][T10458] hsr_slave_0: entered promiscuous mode [ 219.562850][T10458] hsr_slave_1: entered promiscuous mode [ 219.574747][T10458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.593090][T10458] Cannot create hsr debugfs directory [ 219.815297][T10566] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 220.009424][T10458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.045931][T10458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.107933][T10458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.131719][ T5846] Bluetooth: hci5: command tx timeout [ 220.178543][T10458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.588156][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.666437][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.776183][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.783457][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.855118][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.862370][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.997140][T10620] netlink: 'syz.3.1377': attribute type 6 has an invalid length. [ 221.446930][T10631] xt_CT: No such helper "snmp" [ 221.709047][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.721625][T10652] tipc: Enabled bearer , priority 0 [ 221.745110][T10652] syzkaller0: entered promiscuous mode [ 221.750658][T10652] syzkaller0: entered allmulticast mode [ 221.891577][T10662] tipc: Resetting bearer [ 221.937451][T10651] tipc: Resetting bearer [ 221.981127][T10651] tipc: Disabling bearer [ 222.060063][T10670] FAULT_INJECTION: forcing a failure. [ 222.060063][T10670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.128256][T10670] CPU: 1 UID: 0 PID: 10670 Comm: syz.1.1389 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 222.128304][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.128325][T10670] Call Trace: [ 222.128332][T10670] [ 222.128342][T10670] dump_stack_lvl+0x189/0x250 [ 222.128370][T10670] ? __pfx____ratelimit+0x10/0x10 [ 222.128401][T10670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.128425][T10670] ? __pfx__printk+0x10/0x10 [ 222.128451][T10670] ? __might_fault+0xb0/0x130 [ 222.128505][T10670] should_fail_ex+0x414/0x560 [ 222.128542][T10670] _copy_from_user+0x2d/0xb0 [ 222.128568][T10670] __ia32_sys_rt_sigreturn+0x228/0x7b0 [ 222.128597][T10670] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 222.128614][T10670] ? _raw_spin_unlock_irq+0x2e/0x50 [ 222.128677][T10670] ? __task_pid_nr_ns+0x28/0x470 [ 222.128712][T10670] ? do_syscall_64+0xbe/0x3b0 [ 222.128737][T10670] do_syscall_64+0xfa/0x3b0 [ 222.128755][T10670] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.128774][T10670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.128800][T10670] ? clear_bhb_loop+0x60/0xb0 [ 222.128825][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.128845][T10670] RIP: 0033:0x7f5fdcb2ab19 [ 222.128862][T10670] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 222.128891][T10670] RSP: 002b:00007f5fdd919a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 222.128912][T10670] RAX: ffffffffffffffda RBX: 00007f5fdcdb5fa0 RCX: 00007f5fdcb2ab19 [ 222.128927][T10670] RDX: 00007f5fdd919a80 RSI: 00007f5fdd919bb0 RDI: 0000000000000021 [ 222.128940][T10670] RBP: 00007f5fdd91a090 R08: 0000000000000000 R09: 0000000000000000 [ 222.128952][T10670] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 222.128963][T10670] R13: 0000000000000000 R14: 00007f5fdcdb5fa0 R15: 00007ffde9fae828 [ 222.128995][T10670] [ 222.321439][ T5846] Bluetooth: hci5: command tx timeout [ 222.547455][T10680] bond7: entered promiscuous mode [ 222.637309][T10680] bond7: entered allmulticast mode [ 222.646229][T10690] netlink: 'syz.4.1390': attribute type 2 has an invalid length. [ 222.654363][T10680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.043371][T10680] bond7 (unregistering): Released all slaves [ 223.122007][T10699] netlink: 'syz.3.1397': attribute type 4 has an invalid length. [ 223.419458][T10717] __nla_validate_parse: 22 callbacks suppressed [ 223.419501][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'. [ 223.716403][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 223.876328][T10458] veth0_vlan: entered promiscuous mode [ 223.949165][T10458] veth1_vlan: entered promiscuous mode [ 224.054700][T10458] veth0_macvtap: entered promiscuous mode [ 224.160280][T10458] veth1_macvtap: entered promiscuous mode [ 224.168777][T10744] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 224.204514][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.314525][T10744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.366016][T10745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.372897][ T5846] Bluetooth: hci5: command tx timeout [ 224.390457][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1409'. [ 224.399981][T10745] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 224.412563][T10745] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 224.482838][T10748] gretap1: entered promiscuous mode [ 224.495980][T10748] bond3: (slave gretap1): making interface the new active one [ 224.508599][T10748] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 224.520146][T10744] ip6gre0: entered promiscuous mode [ 224.536464][T10744] ip6gre0: entered allmulticast mode [ 224.560369][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.603247][T10458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.624918][T10458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.648512][T10458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.661671][T10458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.681014][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 224.721125][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 224.877455][T10763] FAULT_INJECTION: forcing a failure. [ 224.877455][T10763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.893505][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.3.1414 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 224.893532][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.893544][T10763] Call Trace: [ 224.893551][T10763] [ 224.893559][T10763] dump_stack_lvl+0x189/0x250 [ 224.893586][T10763] ? __pfx____ratelimit+0x10/0x10 [ 224.893616][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.893639][T10763] ? __pfx__printk+0x10/0x10 [ 224.893664][T10763] ? __might_fault+0xb0/0x130 [ 224.893698][T10763] should_fail_ex+0x414/0x560 [ 224.893731][T10763] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 224.893758][T10763] ? __kasan_slab_free+0x62/0x70 [ 224.893781][T10763] ? arch_do_signal_or_restart+0x9a/0x750 [ 224.893806][T10763] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 224.893840][T10763] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 224.893892][T10763] ? fpu__alloc_mathframe+0xad/0x130 [ 224.893922][T10763] get_sigframe+0x58d/0x7d0 [ 224.893955][T10763] ? __pfx_get_sigframe+0x10/0x10 [ 224.893982][T10763] ? kmem_cache_free+0x18f/0x400 [ 224.894035][T10763] x64_setup_rt_frame+0x15b/0xd40 [ 224.894060][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.894079][T10763] ? _raw_spin_unlock_irq+0x2e/0x50 [ 224.894105][T10763] ? get_signal+0x1151/0x1340 [ 224.894134][T10763] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 224.894165][T10763] arch_do_signal_or_restart+0x3d7/0x750 [ 224.894202][T10763] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 224.894251][T10763] ? exit_to_user_mode_loop+0x40/0x110 [ 224.894275][T10763] exit_to_user_mode_loop+0x75/0x110 [ 224.894307][T10763] do_syscall_64+0x2bd/0x3b0 [ 224.894326][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.894342][T10763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.894361][T10763] ? clear_bhb_loop+0x60/0xb0 [ 224.894383][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.894401][T10763] RIP: 0033:0x7fed7f58e927 [ 224.894418][T10763] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 224.894435][T10763] RSP: 002b:00007fed7d3f6038 EFLAGS: 00000246 [ 224.894453][T10763] RAX: 000000000000012b RBX: 00007fed7f7b5fa0 RCX: 00007fed7f58e929 [ 224.894466][T10763] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 224.894479][T10763] RBP: 00007fed7d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.894491][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.894503][T10763] R13: 0000000000000000 R14: 00007fed7f7b5fa0 R15: 00007ffde2e6d068 [ 224.894534][T10763] [ 225.174309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.224122][T10768] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1415'. [ 225.317895][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.326100][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.335796][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.343773][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.372360][T10772] sctp: [Deprecated]: syz.1.1418 (pid 10772) Use of int in maxseg socket option. [ 225.372360][T10772] Use struct sctp_assoc_value instead [ 225.744580][T10792] netlink: 'syz.5.1425': attribute type 1 has an invalid length. [ 225.757073][T10791] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.774745][T10792] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1425'. [ 225.827671][T10797] netlink: 'syz.5.1425': attribute type 10 has an invalid length. [ 225.867267][T10797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.941679][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1426'. [ 226.246498][T10812] FAULT_INJECTION: forcing a failure. [ 226.246498][T10812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.268505][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.5.1428 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 226.268535][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.268546][T10812] Call Trace: [ 226.268554][T10812] [ 226.268562][T10812] dump_stack_lvl+0x189/0x250 [ 226.268589][T10812] ? __pfx____ratelimit+0x10/0x10 [ 226.268619][T10812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.268642][T10812] ? __pfx__printk+0x10/0x10 [ 226.268670][T10812] ? get_sigframe+0x596/0x7d0 [ 226.268705][T10812] should_fail_ex+0x414/0x560 [ 226.268739][T10812] _copy_to_user+0x31/0xb0 [ 226.268764][T10812] copy_siginfo_to_user+0x22/0xc0 [ 226.268788][T10812] x64_setup_rt_frame+0x776/0xd40 [ 226.268827][T10812] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 226.268856][T10812] arch_do_signal_or_restart+0x3d7/0x750 [ 226.268890][T10812] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.268932][T10812] ? exit_to_user_mode_loop+0x40/0x110 [ 226.268955][T10812] exit_to_user_mode_loop+0x75/0x110 [ 226.268974][T10812] do_syscall_64+0x2bd/0x3b0 [ 226.268991][T10812] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.269008][T10812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.269026][T10812] ? clear_bhb_loop+0x60/0xb0 [ 226.269048][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.269065][T10812] RIP: 0033:0x7f4fcbf8e927 [ 226.269081][T10812] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 226.269097][T10812] RSP: 002b:00007f4fcce71038 EFLAGS: 00000246 [ 226.269113][T10812] RAX: 000000000000012b RBX: 00007f4fcc1b6080 RCX: 00007f4fcbf8e929 [ 226.269126][T10812] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 226.269146][T10812] RBP: 00007f4fcce71090 R08: 0000000000000000 R09: 0000000000000000 [ 226.269157][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.269167][T10812] R13: 0000000000000001 R14: 00007f4fcc1b6080 R15: 00007ffd17637878 [ 226.269206][T10812] [ 226.481576][ T5846] Bluetooth: hci5: command tx timeout [ 226.551623][T10818] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1432'. [ 226.586764][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 226.872934][T10834] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 227.029232][T10844] netlink: 'syz.3.1439': attribute type 6 has an invalid length. [ 227.092122][T10844] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 227.115043][T10844] netlink: 'syz.3.1439': attribute type 6 has an invalid length. [ 227.144453][T10844] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 227.290272][T10854] tipc: Started in network mode [ 227.308558][T10854] tipc: Node identity ac1414aa, cluster identity 4711 [ 227.322879][T10854] tipc: Enabled bearer , priority 10 [ 228.073661][T10903] validate_nla: 94 callbacks suppressed [ 228.073681][T10903] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 228.195661][T10908] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20007 [ 228.220708][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.230352][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.441507][ T7841] tipc: Node number set to 2886997162 [ 228.739093][T10926] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 228.895066][T10932] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 228.918182][T10932] __nla_validate_parse: 52 callbacks suppressed [ 228.918203][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 229.127329][T10943] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 229.250649][T10923] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1468'. [ 229.675062][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 229.722070][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 229.834593][T10969] raw_sendmsg: syz.1.1485 forgot to set AF_INET. Fix it! [ 229.919948][T10973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 229.963158][T10978] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.734767][ T36] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 230.996715][T11002] tipc: Enabled bearer , priority 0 [ 231.033590][T11003] syzkaller0: entered promiscuous mode [ 231.041497][T11003] syzkaller0: entered allmulticast mode [ 231.118038][T11008] macvtap1: entered promiscuous mode [ 231.126890][T11008] vlan0: entered promiscuous mode [ 231.133577][T11008] macvtap1: entered allmulticast mode [ 231.139132][T11008] vlan0: entered allmulticast mode [ 231.149257][T11008] veth0_vlan: entered allmulticast mode [ 231.191458][T11008] vlan0: left allmulticast mode [ 231.200590][T11018] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 231.201719][T11008] veth0_vlan: left allmulticast mode [ 231.235872][T11008] vlan0: left promiscuous mode [ 231.285580][T11009] tipc: Resetting bearer [ 231.298797][T10996] tipc: Resetting bearer [ 231.317900][T10996] tipc: Disabling bearer [ 231.520568][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 231.890845][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 231.958824][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 231.981165][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 232.114421][T11059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1503'. [ 232.245831][T11065] netlink: 'syz.5.1506': attribute type 9 has an invalid length. [ 232.468461][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1507'. [ 232.531975][T11072] tipc: Enabled bearer , priority 0 [ 232.542941][T11072] syzkaller0: entered promiscuous mode [ 232.560996][T11072] syzkaller0: entered allmulticast mode [ 232.625272][T11071] tipc: Resetting bearer [ 232.693477][T11083] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 232.703945][T11071] tipc: Disabling bearer [ 232.716912][T11082] FAULT_INJECTION: forcing a failure. [ 232.716912][T11082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.730549][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.5.1509 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 232.730578][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.730591][T11082] Call Trace: [ 232.730599][T11082] [ 232.730608][T11082] dump_stack_lvl+0x189/0x250 [ 232.730638][T11082] ? __pfx____ratelimit+0x10/0x10 [ 232.730671][T11082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.730696][T11082] ? __pfx__printk+0x10/0x10 [ 232.730723][T11082] ? __might_fault+0xb0/0x130 [ 232.730761][T11082] should_fail_ex+0x414/0x560 [ 232.730797][T11082] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 232.730845][T11082] ? __kasan_slab_free+0x62/0x70 [ 232.730870][T11082] ? arch_do_signal_or_restart+0x9a/0x750 [ 232.730900][T11082] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 232.730936][T11082] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 232.730993][T11082] ? fpu__alloc_mathframe+0xad/0x130 [ 232.731041][T11082] get_sigframe+0x58d/0x7d0 [ 232.731074][T11082] ? __pfx_get_sigframe+0x10/0x10 [ 232.731100][T11082] ? kmem_cache_free+0x18f/0x400 [ 232.731135][T11082] x64_setup_rt_frame+0x15b/0xd40 [ 232.731159][T11082] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.731177][T11082] ? _raw_spin_unlock_irq+0x2e/0x50 [ 232.731201][T11082] ? get_signal+0x1151/0x1340 [ 232.731229][T11082] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 232.731255][T11082] arch_do_signal_or_restart+0x3d7/0x750 [ 232.731290][T11082] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 232.731329][T11082] ? exit_to_user_mode_loop+0x40/0x110 [ 232.731350][T11082] exit_to_user_mode_loop+0x75/0x110 [ 232.731368][T11082] do_syscall_64+0x2bd/0x3b0 [ 232.731386][T11082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.731402][T11082] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.731418][T11082] ? clear_bhb_loop+0x60/0xb0 [ 232.731439][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.731455][T11082] RIP: 0033:0x7f4fcbf8e927 [ 232.731471][T11082] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 232.731486][T11082] RSP: 002b:00007f4fcce92038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 232.731504][T11082] RAX: 000000000000012b RBX: 00007f4fcc1b5fa0 RCX: 00007f4fcbf8e929 [ 232.731516][T11082] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 232.731527][T11082] RBP: 00007f4fcce92090 R08: 0000000000000000 R09: 0000000000000000 [ 232.731537][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.731547][T11082] R13: 0000000000000000 R14: 00007f4fcc1b5fa0 R15: 00007ffd17637878 [ 232.731573][T11082] [ 233.431735][T11102] netlink: 'syz.5.1515': attribute type 1 has an invalid length. [ 233.466413][T11103] netlink: 'syz.5.1515': attribute type 10 has an invalid length. [ 233.504515][T11102] netlink: 'syz.5.1515': attribute type 4 has an invalid length. [ 233.513950][T11112] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 233.558692][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.592052][T11103] team0: Port device bond0 added [ 233.865275][T11129] FAULT_INJECTION: forcing a failure. [ 233.865275][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.879901][T11129] CPU: 1 UID: 0 PID: 11129 Comm: syz.0.1522 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 233.879932][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.879945][T11129] Call Trace: [ 233.879953][T11129] [ 233.879962][T11129] dump_stack_lvl+0x189/0x250 [ 233.879991][T11129] ? __pfx____ratelimit+0x10/0x10 [ 233.880024][T11129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.880048][T11129] ? __pfx__printk+0x10/0x10 [ 233.880080][T11129] ? get_sigframe+0x596/0x7d0 [ 233.880119][T11129] should_fail_ex+0x414/0x560 [ 233.880155][T11129] _copy_to_user+0x31/0xb0 [ 233.880182][T11129] copy_siginfo_to_user+0x22/0xc0 [ 233.880208][T11129] x64_setup_rt_frame+0x776/0xd40 [ 233.880253][T11129] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 233.880284][T11129] arch_do_signal_or_restart+0x3d7/0x750 [ 233.880323][T11129] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 233.880373][T11129] ? exit_to_user_mode_loop+0x40/0x110 [ 233.880399][T11129] exit_to_user_mode_loop+0x75/0x110 [ 233.880420][T11129] do_syscall_64+0x2bd/0x3b0 [ 233.880440][T11129] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.880458][T11129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.880479][T11129] ? clear_bhb_loop+0x60/0xb0 [ 233.880504][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.880531][T11129] RIP: 0033:0x7f219cb8e927 [ 233.880549][T11129] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 233.880566][T11129] RSP: 002b:00007f219dad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.880587][T11129] RAX: 000000000000012b RBX: 00007f219cdb5fa0 RCX: 00007f219cb8e929 [ 233.880601][T11129] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 233.880614][T11129] RBP: 00007f219dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.880627][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.880639][T11129] R13: 0000000000000000 R14: 00007f219cdb5fa0 R15: 00007ffc95afa268 [ 233.880671][T11129] [ 234.188146][T11131] __nla_validate_parse: 3 callbacks suppressed [ 234.188166][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1521'. [ 234.204563][ C0] vcan0: j1939_session_tx_dat: 0xffff8880330ce800: queue data error: -100 [ 234.213750][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 234.221402][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 234.229155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.237081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.245068][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.252958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.260987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.268872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.276867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.284826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.292799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.300735][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.308723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.316693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.324693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.332616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.340571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.348479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.356465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.364358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.372348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.380207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.388195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.396076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.404061][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.411955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.419932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.427853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.435829][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.443725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.451703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.459574][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.467592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.475471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.483451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.491317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.499223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.507085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.515027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.522914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.530880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.538767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.546765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.554683][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.562677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.570526][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.578552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.586440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.594452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.602361][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.610323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.618208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.626189][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.634073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.642054][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.649904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.657881][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.665765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.673742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.681623][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.689578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.697499][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.705505][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.713387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.721397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.729296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.737282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.745153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.753204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.761089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.769043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.776924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.784879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.792756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.800734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.808627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.816596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.824490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.832473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.840305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.848232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.856068][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.863975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.871817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.879736][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.887581][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.895524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.903370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.911315][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.919156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.927110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.934962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.942907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.950735][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.958703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.966565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.974586][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.982442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.990333][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.998174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.006131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.013972][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.021888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.029698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.037605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.045467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.053360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.061223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.069120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.076992][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.084915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.092770][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.100661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.109374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.117327][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.125173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.133085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.140896][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.148840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.156724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.164634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.172474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.180381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.188266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.196190][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.204039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.211954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.219811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.231930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.239903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.247889][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.255765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.263754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.271630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.279517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.287357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.295321][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.303210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.311175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.319016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.326978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.334854][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.342810][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.350652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.358643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.366513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.374516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.382414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.390454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.398350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.406310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.414205][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.422161][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.430003][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.437962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.445855][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.453924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.461809][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.469752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.477655][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.485642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.493538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.501509][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.509351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.517317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.525198][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.533173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.541055][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.548976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.556867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.564827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.572723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.580660][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.588586][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.596539][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.604431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.612385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.620229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.628204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.636097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.644083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.652008][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.659949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.667853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.675843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.683739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.691707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.699557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.707546][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.715439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.723410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.731288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.739214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.747107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.755075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.762961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.770904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.778799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.786759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.794637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.802629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.810478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.818578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.826467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.834473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.842362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.850380][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.858280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.866267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.874176][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.882134][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.889979][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.898316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.906206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.914167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.922048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.926729][T11165] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 235.929952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.945592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.945959][T11165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1529'. [ 235.953549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.953570][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.953652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.953669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.953745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 235.953761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 235.953838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.017841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.025788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.033675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.041642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.049476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.057655][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.065508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.073556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.081434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.089330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.097180][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.105133][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.112997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.120899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.128771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.136692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.144555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.152553][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.160414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.168369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.176248][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.184181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.192062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.199970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.207904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.215843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.223739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.231697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.239531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.247486][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.255446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.603093][T11172] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.737586][T11177] veth3: entered allmulticast mode [ 237.166630][T11196] FAULT_INJECTION: forcing a failure. [ 237.166630][T11196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.187186][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 237.269736][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.3.1540 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 237.269768][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.269780][T11196] Call Trace: [ 237.269789][T11196] [ 237.269798][T11196] dump_stack_lvl+0x189/0x250 [ 237.269827][T11196] ? __pfx____ratelimit+0x10/0x10 [ 237.269859][T11196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.269883][T11196] ? __pfx__printk+0x10/0x10 [ 237.269911][T11196] ? __might_fault+0xb0/0x130 [ 237.269949][T11196] should_fail_ex+0x414/0x560 [ 237.269984][T11196] _copy_from_iter+0x1db/0x16f0 [ 237.270010][T11196] ? rcu_is_watching+0x15/0xb0 [ 237.270035][T11196] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 237.270063][T11196] ? __pfx__copy_from_iter+0x10/0x10 [ 237.270087][T11196] ? __build_skb_around+0x257/0x3e0 [ 237.270116][T11196] ? netlink_sendmsg+0x642/0xb30 [ 237.270139][T11196] ? skb_put+0x11b/0x210 [ 237.270168][T11196] netlink_sendmsg+0x6b2/0xb30 [ 237.270202][T11196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.270231][T11196] ? aa_sock_msg_perm+0x94/0x160 [ 237.270265][T11196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.270284][T11196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.270310][T11196] __sock_sendmsg+0x219/0x270 [ 237.270333][T11196] ____sys_sendmsg+0x505/0x830 [ 237.270365][T11196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.270403][T11196] ? import_iovec+0x74/0xa0 [ 237.270433][T11196] ___sys_sendmsg+0x21f/0x2a0 [ 237.270463][T11196] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.270534][T11196] ? __fget_files+0x2a/0x420 [ 237.270561][T11196] ? __fget_files+0x3a0/0x420 [ 237.270599][T11196] __x64_sys_sendmsg+0x19b/0x260 [ 237.270629][T11196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.270667][T11196] ? __pfx_ksys_write+0x10/0x10 [ 237.270688][T11196] ? rcu_is_watching+0x15/0xb0 [ 237.270718][T11196] ? do_syscall_64+0xbe/0x3b0 [ 237.270743][T11196] do_syscall_64+0xfa/0x3b0 [ 237.270781][T11196] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.270799][T11196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.270816][T11196] ? clear_bhb_loop+0x60/0xb0 [ 237.270838][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.270854][T11196] RIP: 0033:0x7fed7f58e929 [ 237.270870][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.270885][T11196] RSP: 002b:00007fed7d3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.270904][T11196] RAX: ffffffffffffffda RBX: 00007fed7f7b5fa0 RCX: 00007fed7f58e929 [ 237.270918][T11196] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 237.270930][T11196] RBP: 00007fed7d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.270941][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.270952][T11196] R13: 0000000000000000 R14: 00007fed7f7b5fa0 R15: 00007ffde2e6d068 [ 237.270981][T11196] [ 237.707522][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 237.768127][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 237.921571][T11208] netlink: 'syz.5.1542': attribute type 1 has an invalid length. [ 237.930535][T11208] netlink: 'syz.5.1542': attribute type 2 has an invalid length. [ 237.988491][T11221] netlink: 'syz.3.1547': attribute type 11 has an invalid length. [ 238.013843][T11221] netlink: 'syz.3.1547': attribute type 11 has an invalid length. [ 238.038888][T11221] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1547'. [ 238.078680][T11224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1547'. [ 238.187869][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 238.433916][T11224] tipc: Disabling bearer [ 238.470593][T11249] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 238.508251][T11224] vlan1 (unregistering): left allmulticast mode [ 238.515618][T11224] veth0_vlan (unregistering): left allmulticast mode [ 238.535284][T11234] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 238.552384][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 238.738741][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 238.750422][T11254] FAULT_INJECTION: forcing a failure. [ 238.750422][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 238.774928][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.4.1557 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 238.774960][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.774973][T11254] Call Trace: [ 238.774982][T11254] [ 238.774992][T11254] dump_stack_lvl+0x189/0x250 [ 238.775021][T11254] ? __pfx____ratelimit+0x10/0x10 [ 238.775055][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.775080][T11254] ? __pfx__printk+0x10/0x10 [ 238.775115][T11254] ? ref_tracker_alloc+0x318/0x460 [ 238.775139][T11254] should_fail_ex+0x414/0x560 [ 238.775174][T11254] should_failslab+0xa8/0x100 [ 238.775204][T11254] kmem_cache_alloc_noprof+0x73/0x3c0 [ 238.775230][T11254] ? skb_clone+0x212/0x3a0 [ 238.775274][T11254] skb_clone+0x212/0x3a0 [ 238.775305][T11254] __netlink_deliver_tap+0x404/0x850 [ 238.775352][T11254] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.775378][T11254] netlink_deliver_tap+0x19c/0x1b0 [ 238.775403][T11254] netlink_unicast+0x730/0x8e0 [ 238.775438][T11254] netlink_sendmsg+0x805/0xb30 [ 238.775473][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.775502][T11254] ? aa_sock_msg_perm+0x94/0x160 [ 238.775534][T11254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.775552][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.775578][T11254] __sock_sendmsg+0x219/0x270 [ 238.775601][T11254] ____sys_sendmsg+0x505/0x830 [ 238.775634][T11254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.775671][T11254] ? import_iovec+0x74/0xa0 [ 238.775699][T11254] ___sys_sendmsg+0x21f/0x2a0 [ 238.775728][T11254] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.775794][T11254] ? __fget_files+0x2a/0x420 [ 238.775821][T11254] ? __fget_files+0x3a0/0x420 [ 238.775859][T11254] __x64_sys_sendmsg+0x19b/0x260 [ 238.775893][T11254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.775963][T11254] ? __pfx_ksys_write+0x10/0x10 [ 238.775985][T11254] ? rcu_is_watching+0x15/0xb0 [ 238.776014][T11254] ? do_syscall_64+0xbe/0x3b0 [ 238.776039][T11254] do_syscall_64+0xfa/0x3b0 [ 238.776057][T11254] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.776076][T11254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.776096][T11254] ? clear_bhb_loop+0x60/0xb0 [ 238.776120][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.776139][T11254] RIP: 0033:0x7fd3a558e929 [ 238.776157][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.776173][T11254] RSP: 002b:00007fd3a6433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.776195][T11254] RAX: ffffffffffffffda RBX: 00007fd3a57b5fa0 RCX: 00007fd3a558e929 [ 238.776210][T11254] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 238.776222][T11254] RBP: 00007fd3a6433090 R08: 0000000000000000 R09: 0000000000000000 [ 238.776234][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.776246][T11254] R13: 0000000000000000 R14: 00007fd3a57b5fa0 R15: 00007ffcb0956788 [ 238.776278][T11254] [ 239.406943][T11272] openvswitch: netlink: Missing valid actions attribute. [ 239.419233][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.796844][T11285] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.149152][T11296] bridge: RTM_NEWNEIGH with invalid ether address [ 240.212253][T11300] FAULT_INJECTION: forcing a failure. [ 240.212253][T11300] name failslab, interval 1, probability 0, space 0, times 0 [ 240.243633][T11300] CPU: 1 UID: 0 PID: 11300 Comm: syz.5.1572 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 240.243665][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.243678][T11300] Call Trace: [ 240.243686][T11300] [ 240.243694][T11300] dump_stack_lvl+0x189/0x250 [ 240.243723][T11300] ? __pfx____ratelimit+0x10/0x10 [ 240.243754][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.243779][T11300] ? __pfx__printk+0x10/0x10 [ 240.243809][T11300] ? __pfx___might_resched+0x10/0x10 [ 240.243833][T11300] ? fs_reclaim_acquire+0x7d/0x100 [ 240.243868][T11300] should_fail_ex+0x414/0x560 [ 240.243903][T11300] should_failslab+0xa8/0x100 [ 240.243939][T11300] __kmalloc_cache_noprof+0x70/0x3d0 [ 240.243964][T11300] ? tcf_chain_create+0xb0/0x310 [ 240.244000][T11300] tcf_chain_create+0xb0/0x310 [ 240.244033][T11300] __tcf_chain_get+0x111/0x3c0 [ 240.244061][T11300] tc_new_tfilter+0x753/0x15b0 [ 240.244102][T11300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.244140][T11300] ? __pfx_tc_new_tfilter+0x10/0x10 [ 240.244207][T11300] ? __pfx_tc_new_tfilter+0x10/0x10 [ 240.244234][T11300] rtnetlink_rcv_msg+0x7cc/0xb70 [ 240.244262][T11300] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 240.244282][T11300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.244302][T11300] ? ref_tracker_free+0x63a/0x7d0 [ 240.244318][T11300] ? __copy_skb_header+0xa7/0x550 [ 240.244348][T11300] ? __pfx_ref_tracker_free+0x10/0x10 [ 240.244366][T11300] ? __skb_clone+0x63/0x7a0 [ 240.244402][T11300] netlink_rcv_skb+0x205/0x470 [ 240.244429][T11300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.244453][T11300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.244493][T11300] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.244516][T11300] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.244547][T11300] netlink_unicast+0x759/0x8e0 [ 240.244583][T11300] netlink_sendmsg+0x805/0xb30 [ 240.244619][T11300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.244648][T11300] ? aa_sock_msg_perm+0x94/0x160 [ 240.244681][T11300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.244699][T11300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.244725][T11300] __sock_sendmsg+0x219/0x270 [ 240.244748][T11300] ____sys_sendmsg+0x505/0x830 [ 240.244782][T11300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.244820][T11300] ? import_iovec+0x74/0xa0 [ 240.244849][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 240.244878][T11300] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.244985][T11300] ? __fget_files+0x2a/0x420 [ 240.245012][T11300] ? __fget_files+0x3a0/0x420 [ 240.245051][T11300] __x64_sys_sendmsg+0x19b/0x260 [ 240.245081][T11300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.245117][T11300] ? __pfx_ksys_write+0x10/0x10 [ 240.245137][T11300] ? rcu_is_watching+0x15/0xb0 [ 240.245167][T11300] ? do_syscall_64+0xbe/0x3b0 [ 240.245191][T11300] do_syscall_64+0xfa/0x3b0 [ 240.245226][T11300] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.245245][T11300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.245265][T11300] ? clear_bhb_loop+0x60/0xb0 [ 240.245290][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.245309][T11300] RIP: 0033:0x7f4fcbf8e929 [ 240.245328][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.245345][T11300] RSP: 002b:00007f4fcce92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.245367][T11300] RAX: ffffffffffffffda RBX: 00007f4fcc1b5fa0 RCX: 00007f4fcbf8e929 [ 240.245382][T11300] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 240.245393][T11300] RBP: 00007f4fcce92090 R08: 0000000000000000 R09: 0000000000000000 [ 240.245405][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.245418][T11300] R13: 0000000000000000 R14: 00007f4fcc1b5fa0 R15: 00007ffd17637878 [ 240.245450][T11300] [ 240.361463][T11306] delete_channel: no stack [ 240.959454][T11316] tipc: Enabled bearer , priority 0 [ 240.992350][T11316] syzkaller0: entered promiscuous mode [ 240.997896][T11316] syzkaller0: entered allmulticast mode [ 241.022072][T11319] __nla_validate_parse: 2 callbacks suppressed [ 241.022098][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1578'. [ 241.069123][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 241.090449][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 241.119679][T11316] tipc: Resetting bearer [ 241.147742][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 241.164291][T11315] tipc: Resetting bearer [ 241.270747][T11315] tipc: Disabling bearer [ 241.422657][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 241.472955][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 241.570385][T11347] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 241.590273][T11345] syzkaller0: entered promiscuous mode [ 241.596448][T11345] syzkaller0: entered allmulticast mode [ 241.651749][T11352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1586'. [ 241.761958][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1590'. [ 241.915570][T11363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 242.465411][T11370] xt_hashlimit: max too large, truncated to 1048576 [ 242.807101][T11385] tipc: Enabled bearer , priority 0 [ 242.820585][T11385] syzkaller0: entered promiscuous mode [ 242.902170][T11385] syzkaller0: entered allmulticast mode [ 242.929672][T11385] FAULT_INJECTION: forcing a failure. [ 242.929672][T11385] name failslab, interval 1, probability 0, space 0, times 0 [ 242.948639][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.3.1599 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 242.948670][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.948693][T11385] Call Trace: [ 242.948701][T11385] [ 242.948710][T11385] dump_stack_lvl+0x189/0x250 [ 242.948739][T11385] ? __pfx____ratelimit+0x10/0x10 [ 242.948771][T11385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.948795][T11385] ? __pfx__printk+0x10/0x10 [ 242.948829][T11385] ? __pfx___might_resched+0x10/0x10 [ 242.948851][T11385] ? fs_reclaim_acquire+0x7d/0x100 [ 242.948886][T11385] should_fail_ex+0x414/0x560 [ 242.948921][T11385] should_failslab+0xa8/0x100 [ 242.948950][T11385] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 242.948982][T11385] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 242.949002][T11385] ? __alloc_skb+0x112/0x2d0 [ 242.949031][T11385] __alloc_skb+0x112/0x2d0 [ 242.949060][T11385] rtmsg_ifinfo_build_skb+0x84/0x260 [ 242.949100][T11385] rtnetlink_event+0x1b7/0x270 [ 242.949128][T11385] notifier_call_chain+0x1b3/0x3e0 [ 242.949161][T11385] netif_set_mtu_ext+0x438/0x620 [ 242.949186][T11385] ? __lock_acquire+0xab9/0xd20 [ 242.949211][T11385] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 242.949238][T11385] ? __mutex_trylock_common+0x153/0x260 [ 242.949274][T11385] ? rcu_is_watching+0x15/0xb0 [ 242.949306][T11385] netif_set_mtu+0xa4/0x150 [ 242.949331][T11385] ? __pfx_netif_set_mtu+0x10/0x10 [ 242.949354][T11385] ? __lock_acquire+0xab9/0xd20 [ 242.949388][T11385] ? netdev_name_node_lookup+0xdf/0x120 [ 242.949427][T11385] dev_set_mtu+0x126/0x260 [ 242.949456][T11385] dev_ioctl+0x7b4/0x1150 [ 242.949486][T11385] sock_do_ioctl+0x22c/0x300 [ 242.949509][T11385] ? __pfx_sock_do_ioctl+0x10/0x10 [ 242.949537][T11385] ? __lock_acquire+0xab9/0xd20 [ 242.949579][T11385] sock_ioctl+0x576/0x790 [ 242.949632][T11385] ? __pfx_sock_ioctl+0x10/0x10 [ 242.949663][T11385] ? __fget_files+0x2a/0x420 [ 242.949690][T11385] ? __fget_files+0x3a0/0x420 [ 242.949716][T11385] ? __fget_files+0x2a/0x420 [ 242.949748][T11385] ? bpf_lsm_file_ioctl+0x9/0x20 [ 242.949770][T11385] ? __pfx_sock_ioctl+0x10/0x10 [ 242.949801][T11385] __se_sys_ioctl+0xf9/0x170 [ 242.949827][T11385] do_syscall_64+0xfa/0x3b0 [ 242.949846][T11385] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.949865][T11385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.949886][T11385] ? clear_bhb_loop+0x60/0xb0 [ 242.949911][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.949931][T11385] RIP: 0033:0x7fed7f58e929 [ 242.949949][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.949967][T11385] RSP: 002b:00007fed7d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.949994][T11385] RAX: ffffffffffffffda RBX: 00007fed7f7b5fa0 RCX: 00007fed7f58e929 [ 242.950010][T11385] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 242.950023][T11385] RBP: 00007fed7d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.950036][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.950048][T11385] R13: 0000000000000000 R14: 00007fed7f7b5fa0 R15: 00007ffde2e6d068 [ 242.950081][T11385] [ 243.288106][T11385] tipc: Resetting bearer [ 243.302852][T11382] tipc: Resetting bearer [ 243.336510][T11382] tipc: Disabling bearer [ 243.350446][T11392] netlink: 'syz.5.1601': attribute type 4 has an invalid length. [ 243.367707][T11395] tipc: Enabling of bearer rejected, failed to enable media [ 243.560466][T11402] syzkaller0: entered promiscuous mode [ 243.587953][T11402] syzkaller0: entered allmulticast mode [ 243.741494][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 245.076589][T11465] syzkaller0: entered promiscuous mode [ 245.083218][T11465] syzkaller0: entered allmulticast mode [ 245.177407][T11468] tipc: Started in network mode [ 245.190879][T11468] tipc: Node identity d64d8e54b08b, cluster identity 4711 [ 245.200474][T11468] tipc: Enabled bearer , priority 0 [ 245.316574][T11471] syzkaller0: entered promiscuous mode [ 245.330552][T11471] syzkaller0: entered allmulticast mode [ 245.381190][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.475913][T11478] bridge_slave_1 (unregistering): left allmulticast mode [ 245.499634][T11478] bridge_slave_1 (unregistering): left promiscuous mode [ 245.507920][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.044435][T11485] tipc: Resetting bearer [ 246.059745][T11493] veth0: entered promiscuous mode [ 246.068421][T11494] veth0: left promiscuous mode [ 246.076938][T11467] tipc: Resetting bearer [ 246.137790][T11467] tipc: Disabling bearer [ 246.223625][ T7817] tipc: Node number set to 1724288596 [ 246.864873][T11529] tipc: Enabled bearer , priority 0 [ 246.890549][T11523] syzkaller0: entered promiscuous mode [ 246.914813][T11523] syzkaller0: entered allmulticast mode [ 247.001634][T11523] syzkaller0: MTU too low for tipc bearer [ 247.007443][T11523] tipc: Disabling bearer [ 247.083081][T11535] sctp: [Deprecated]: syz.1.1642 (pid 11535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.083081][T11535] Use struct sctp_sack_info instead [ 247.147397][T11540] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.221877][T11541] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.319129][T11546] __nla_validate_parse: 3 callbacks suppressed [ 247.319149][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 247.769524][T11560] xt_socket: unknown flags 0x4 [ 247.811253][T11564] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.238511][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 248.680236][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1656'. [ 248.760318][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 248.854925][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 248.914660][T11616] netlink: 'syz.3.1659': attribute type 2 has an invalid length. [ 249.240497][T11628] tipc: Enabled bearer , priority 0 [ 249.277541][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 249.327997][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 249.357639][T11620] syzkaller0: entered promiscuous mode [ 249.376232][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 249.381773][T11620] syzkaller0: entered allmulticast mode [ 249.467912][T11620] tipc: Resetting bearer [ 249.502713][T11618] tipc: Resetting bearer [ 249.583744][T11643] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 249.588825][T11618] tipc: Disabling bearer [ 249.673699][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.687718][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.205636][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1673'. [ 250.290101][T11673] tipc: Enabled bearer , priority 0 [ 250.355170][T11673] syzkaller0: entered promiscuous mode [ 250.367413][T11673] syzkaller0: entered allmulticast mode [ 250.399948][T11673] tipc: Resetting bearer [ 250.419779][T11671] tipc: Resetting bearer [ 250.455717][T11671] tipc: Disabling bearer [ 250.467947][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 250.500602][T11691] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 250.830538][T11700] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 251.679262][T11740] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20007 [ 251.920319][T11750] tipc: Enabled bearer , priority 0 [ 251.951585][T11750] syzkaller0: entered promiscuous mode [ 251.957124][T11750] syzkaller0: entered allmulticast mode [ 252.028321][T11750] FAULT_INJECTION: forcing a failure. [ 252.028321][T11750] name failslab, interval 1, probability 0, space 0, times 0 [ 252.041307][T11750] CPU: 1 UID: 0 PID: 11750 Comm: syz.4.1701 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 252.041335][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.041347][T11750] Call Trace: [ 252.041356][T11750] [ 252.041364][T11750] dump_stack_lvl+0x189/0x250 [ 252.041392][T11750] ? __pfx____ratelimit+0x10/0x10 [ 252.041424][T11750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.041448][T11750] ? __pfx__printk+0x10/0x10 [ 252.041488][T11750] should_fail_ex+0x414/0x560 [ 252.041523][T11750] should_failslab+0xa8/0x100 [ 252.041552][T11750] __kmalloc_noprof+0xcb/0x4f0 [ 252.041575][T11750] ? nsim_fib_event_nb+0x295/0x1080 [ 252.041628][T11750] nsim_fib_event_nb+0x295/0x1080 [ 252.041671][T11750] notifier_call_chain+0x1b3/0x3e0 [ 252.041701][T11750] ? atomic_notifier_call_chain+0x26/0x180 [ 252.041727][T11750] atomic_notifier_call_chain+0xda/0x180 [ 252.041756][T11750] call_fib_notifiers+0x31/0x60 [ 252.041782][T11750] fib6_del+0x104d/0x1550 [ 252.041812][T11750] ? fib6_del+0x671/0x1550 [ 252.041855][T11750] ? __pfx_fib6_del+0x10/0x10 [ 252.041879][T11750] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.041920][T11750] fib6_clean_node+0x29f/0x590 [ 252.041952][T11750] ? __pfx_fib6_clean_node+0x10/0x10 [ 252.041977][T11750] ? __lock_acquire+0xab9/0xd20 [ 252.042005][T11750] ? __local_bh_enable_ip+0x12d/0x1c0 [ 252.042034][T11750] fib6_walk_continue+0x67b/0x910 [ 252.042077][T11750] fib6_walk+0x149/0x290 [ 252.042113][T11750] __fib6_clean_all+0x234/0x380 [ 252.042138][T11750] ? __fib6_clean_all+0x9b/0x380 [ 252.042164][T11750] ? __pfx_fib6_ifdown+0x10/0x10 [ 252.042193][T11750] ? __pfx___fib6_clean_all+0x10/0x10 [ 252.042224][T11750] ? __pfx_fib6_clean_node+0x10/0x10 [ 252.042250][T11750] ? __pfx_fib6_ifdown+0x10/0x10 [ 252.042293][T11750] rt6_disable_ip+0x120/0x720 [ 252.042330][T11750] ? rcu_is_watching+0x15/0xb0 [ 252.042354][T11750] ? __pfx_rt6_disable_ip+0x10/0x10 [ 252.042394][T11750] addrconf_ifdown+0x15d/0x1880 [ 252.042419][T11750] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 252.042444][T11750] ? __pfx___mutex_lock+0x10/0x10 [ 252.042466][T11750] ? tls_dev_event+0x717/0xec0 [ 252.042486][T11750] ? __pfx_addrconf_ifdown+0x10/0x10 [ 252.042527][T11750] addrconf_notify+0x1bc/0x1010 [ 252.042561][T11750] notifier_call_chain+0x1b3/0x3e0 [ 252.042595][T11750] netif_set_mtu_ext+0x438/0x620 [ 252.042621][T11750] ? __lock_acquire+0xab9/0xd20 [ 252.042646][T11750] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 252.042673][T11750] ? __mutex_trylock_common+0x153/0x260 [ 252.042707][T11750] ? rcu_is_watching+0x15/0xb0 [ 252.042739][T11750] netif_set_mtu+0xa4/0x150 [ 252.042764][T11750] ? __pfx_netif_set_mtu+0x10/0x10 [ 252.042785][T11750] ? __lock_acquire+0xab9/0xd20 [ 252.042820][T11750] ? netdev_name_node_lookup+0xdf/0x120 [ 252.042860][T11750] dev_set_mtu+0x126/0x260 [ 252.042890][T11750] dev_ioctl+0x7b4/0x1150 [ 252.042917][T11750] sock_do_ioctl+0x22c/0x300 [ 252.042940][T11750] ? __pfx_sock_do_ioctl+0x10/0x10 [ 252.042968][T11750] ? __lock_acquire+0xab9/0xd20 [ 252.043008][T11750] sock_ioctl+0x576/0x790 [ 252.043042][T11750] ? __pfx_sock_ioctl+0x10/0x10 [ 252.043072][T11750] ? __fget_files+0x2a/0x420 [ 252.043107][T11750] ? __fget_files+0x3a0/0x420 [ 252.043133][T11750] ? __fget_files+0x2a/0x420 [ 252.043165][T11750] ? bpf_lsm_file_ioctl+0x9/0x20 [ 252.043187][T11750] ? __pfx_sock_ioctl+0x10/0x10 [ 252.043217][T11750] __se_sys_ioctl+0xf9/0x170 [ 252.043243][T11750] do_syscall_64+0xfa/0x3b0 [ 252.043263][T11750] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.043280][T11750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.043301][T11750] ? clear_bhb_loop+0x60/0xb0 [ 252.043326][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.043346][T11750] RIP: 0033:0x7fd3a558e929 [ 252.043365][T11750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.043383][T11750] RSP: 002b:00007fd3a6433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.043403][T11750] RAX: ffffffffffffffda RBX: 00007fd3a57b5fa0 RCX: 00007fd3a558e929 [ 252.043418][T11750] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 252.043432][T11750] RBP: 00007fd3a6433090 R08: 0000000000000000 R09: 0000000000000000 [ 252.043444][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.043456][T11750] R13: 0000000000000000 R14: 00007fd3a57b5fa0 R15: 00007ffcb0956788 [ 252.043491][T11750] [ 252.496087][T11750] tipc: Resetting bearer [ 252.529055][T11749] tipc: Resetting bearer [ 252.578203][T11749] tipc: Disabling bearer [ 252.596752][T11759] __nla_validate_parse: 7 callbacks suppressed [ 252.596767][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1703'. [ 252.623455][T11760] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1705'. [ 252.654299][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.681866][T11763] tipc: Enabled bearer , priority 0 [ 252.689438][T11763] syzkaller0: entered promiscuous mode [ 252.733433][T11763] syzkaller0: entered allmulticast mode [ 252.825574][T11766] batman_adv: batadv0: Adding interface: ipvlan2 [ 252.832748][T11766] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.858604][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.869584][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.879569][T11766] batman_adv: batadv0: Interface activated: ipvlan2 [ 252.955924][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 252.968141][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 252.982733][T11774] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1712'. [ 253.007161][T11768] tipc: Resetting bearer [ 253.046104][T11778] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20007 [ 253.087929][T11762] tipc: Resetting bearer [ 253.170022][T11762] tipc: Disabling bearer [ 253.252701][T11792] syzkaller0: entered promiscuous mode [ 253.258277][T11792] syzkaller0: entered allmulticast mode [ 253.470882][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 253.481076][T11800] bond0: entered promiscuous mode [ 253.489495][T11805] netlink: 'syz.1.1717': attribute type 9 has an invalid length. [ 253.495764][T11800] bond0: entered allmulticast mode [ 253.520970][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.551181][T11800] netlink: 'syz.1.1717': attribute type 9 has an invalid length. [ 253.658360][T11811] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 253.804800][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 253.854749][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 254.063434][T11828] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 254.078342][T11829] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 254.104472][T11829] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 254.348014][T11851] netlink: 'syz.1.1738': attribute type 5 has an invalid length. [ 254.382441][T11852] syz.0.1737 (11852) used obsolete PPPIOCDETACH ioctl [ 254.471891][T11857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1739'. [ 254.518349][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'. [ 255.132538][T11883] netlink: 'syz.5.1748': attribute type 1 has an invalid length. [ 255.147985][T11885] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 255.171836][T11883] netlink: 'syz.5.1748': attribute type 3 has an invalid length. [ 256.756195][T11945] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 256.965165][T11957] netlink: 'syz.5.1773': attribute type 11 has an invalid length. [ 257.042597][T11964] netlink: 'syz.3.1775': attribute type 3 has an invalid length. [ 257.072125][T11964] netlink: 'syz.3.1775': attribute type 2 has an invalid length. [ 257.158423][T11968] veth0: entered promiscuous mode [ 257.187668][T11967] veth0: left promiscuous mode [ 257.885209][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.893796][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.168640][T12004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.206221][T12004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.307536][T12004] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.316773][T12004] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.327317][T12004] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.336326][T12004] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.349993][T12004] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 258.389963][T12004] veth3: left allmulticast mode [ 258.409486][T12016] netlink: 'syz.4.1788': attribute type 29 has an invalid length. [ 258.596521][T12033] __nla_validate_parse: 12 callbacks suppressed [ 258.596542][T12033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1790'. [ 258.717386][T12040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1794'. [ 258.778787][T12039] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1794'. [ 258.857744][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 258.868290][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 258.917246][T12042] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 258.929058][ T7841] IPVS: starting estimator thread 0... [ 259.023041][T12051] IPVS: using max 32 ests per chain, 76800 per kthread [ 259.121395][T12033] bond0 (unregistering): Released all slaves [ 259.292244][T12043] tipc: Enabled bearer , priority 0 [ 259.304785][T12046] syzkaller0: entered promiscuous mode [ 259.311569][T12046] syzkaller0: entered allmulticast mode [ 259.353693][T12057] syzkaller0: mtu greater than device maximum [ 259.377534][T12036] tipc: Resetting bearer [ 259.410739][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 259.449973][T12036] tipc: Disabling bearer [ 259.465741][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 259.532581][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 259.834524][T12073] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1802'. [ 259.985897][T12073] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 260.057032][T12073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.084062][T12087] netlink: 'syz.4.1806': attribute type 2 has an invalid length. [ 260.097926][T12073] bond0 (unregistering): Released all slaves [ 260.521417][T12105] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 260.645754][T12110] tipc: Enabled bearer , priority 0 [ 260.664014][T12107] syzkaller0: entered promiscuous mode [ 260.669578][T12107] syzkaller0: entered allmulticast mode [ 260.748585][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 260.753849][T12107] syzkaller0: mtu greater than device maximum [ 260.795753][T12118] netlink: 'syz.3.1816': attribute type 5 has an invalid length. [ 260.826071][T12106] tipc: Resetting bearer [ 260.902570][T12106] tipc: Disabling bearer [ 261.136377][T12129] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 261.554830][T12141] syz.3.1823 uses old SIOCAX25GETINFO [ 262.122475][T12159] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 262.172880][T12161] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 262.449088][T12172] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 262.485552][T12172] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 262.706543][T12177] bridge0: port 2(veth0_to_bridge) entered blocking state [ 262.739070][T12177] bridge0: port 2(veth0_to_bridge) entered disabled state [ 262.772025][T12177] veth0_to_bridge: entered allmulticast mode [ 262.840804][T12177] veth0_to_bridge: entered promiscuous mode [ 262.871434][T12177] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.910557][T12177] bridge0: port 2(veth0_to_bridge) entered blocking state [ 262.918191][T12177] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 263.364497][T12205] tipc: Enabled bearer , priority 0 [ 263.380213][T12205] syzkaller0: entered promiscuous mode [ 263.401323][T12205] syzkaller0: entered allmulticast mode [ 263.512669][T12205] sit0: mtu greater than device maximum [ 263.531395][T12204] tipc: Resetting bearer [ 263.594065][T12204] tipc: Disabling bearer [ 263.767684][T12213] bond0: entered promiscuous mode [ 263.787808][T12213] bond0: entered allmulticast mode [ 263.805119][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.504146][T12256] tipc: Enabled bearer , priority 0 [ 264.530529][T12256] __nla_validate_parse: 5 callbacks suppressed [ 264.530552][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1860'. [ 264.657451][T12256] syzkaller0: entered promiscuous mode [ 264.675995][T12256] syzkaller0: entered allmulticast mode [ 264.726326][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 264.755032][T12256] tipc: Resetting bearer [ 264.778924][T12251] tipc: Resetting bearer [ 264.922252][T12251] tipc: Disabling bearer [ 264.992936][T12279] netlink: 'syz.5.1865': attribute type 1 has an invalid length. [ 265.010949][T12279] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1865'. [ 265.526266][T12308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 265.619763][T12308] netlink: 'syz.3.1874': attribute type 11 has an invalid length. [ 265.643021][T12316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1875'. [ 266.056807][T12344] C: renamed from team_slave_0 [ 266.081217][T12344] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 266.089098][T12344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.114035][T12339] netlink: 'syz.3.1881': attribute type 5 has an invalid length. [ 266.173722][T12345] netlink: 'syz.5.1880': attribute type 6 has an invalid length. [ 266.184217][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'. [ 266.373498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.385997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.398127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.508303][T12354] tipc: Enabled bearer , priority 0 [ 266.527135][T12354] syzkaller0: entered promiscuous mode [ 266.541533][T12354] syzkaller0: entered allmulticast mode [ 266.571907][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 266.994449][T12376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1893'. [ 267.120976][T12378] netlink: 604 bytes leftover after parsing attributes in process `syz.1.1893'. [ 267.132952][T12357] syzkaller0: mtu greater than device maximum [ 267.146616][T12376] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 267.159264][T12377] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 267.163557][T12376] xt_l2tp: wrong L2TP version: 0 [ 267.198126][T12353] tipc: Resetting bearer [ 267.266082][T12353] tipc: Disabling bearer [ 267.411732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.428870][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1895'. [ 267.587104][T12394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.605232][T12394] tipc: Enabled bearer , priority 0 [ 267.617776][T12394] syzkaller0: entered promiscuous mode [ 267.626618][T12394] syzkaller0: entered allmulticast mode [ 267.707117][T12400] sctp: [Deprecated]: syz.1.1902 (pid 12400) Use of int in maxseg socket option. [ 267.707117][T12400] Use struct sctp_assoc_value instead [ 267.739618][T12401] tipc: Resetting bearer [ 267.799351][T12393] tipc: Resetting bearer [ 267.907442][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 267.937212][T12393] tipc: Disabling bearer [ 268.118411][T12417] netlink: 'syz.5.1906': attribute type 24 has an invalid length. [ 268.244535][T12422] tipc: Enabled bearer , priority 0 [ 268.305326][T12432] syzkaller0: entered promiscuous mode [ 268.310877][T12432] syzkaller0: entered allmulticast mode [ 268.451818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.454867][T12422] syzkaller0: mtu greater than device maximum [ 268.510085][T12421] tipc: Resetting bearer [ 268.617022][T12421] tipc: Disabling bearer [ 268.647544][T12433] tipc: Enabled bearer , priority 0 [ 268.659401][T12444] syzkaller0: entered promiscuous mode [ 268.692508][T12444] syzkaller0: entered allmulticast mode [ 268.835032][T12438] tipc: Resetting bearer [ 268.907129][T12431] tipc: Resetting bearer [ 268.966107][T12431] tipc: Disabling bearer [ 269.280986][T12467] pimreg: entered allmulticast mode [ 269.297822][T12469] FAULT_INJECTION: forcing a failure. [ 269.297822][T12469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.313632][T12469] CPU: 1 UID: 0 PID: 12469 Comm: syz.4.1921 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 269.313663][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.313675][T12469] Call Trace: [ 269.313684][T12469] [ 269.313693][T12469] dump_stack_lvl+0x189/0x250 [ 269.313723][T12469] ? __pfx____ratelimit+0x10/0x10 [ 269.313757][T12469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.313781][T12469] ? __pfx__printk+0x10/0x10 [ 269.313809][T12469] ? __might_fault+0xb0/0x130 [ 269.313846][T12469] should_fail_ex+0x414/0x560 [ 269.313881][T12469] _copy_from_user+0x2d/0xb0 [ 269.313907][T12469] ___sys_recvmsg+0x12e/0x510 [ 269.313942][T12469] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.314000][T12469] ? __fget_files+0x3a0/0x420 [ 269.314042][T12469] do_recvmmsg+0x307/0x770 [ 269.314080][T12469] ? __pfx_do_recvmmsg+0x10/0x10 [ 269.314105][T12469] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 269.314163][T12469] __x64_sys_recvmmsg+0x190/0x240 [ 269.314208][T12469] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 269.314233][T12469] ? __task_pid_nr_ns+0x28/0x470 [ 269.314268][T12469] ? do_syscall_64+0xbe/0x3b0 [ 269.314292][T12469] do_syscall_64+0xfa/0x3b0 [ 269.314336][T12469] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.314355][T12469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.314376][T12469] ? clear_bhb_loop+0x60/0xb0 [ 269.314405][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.314425][T12469] RIP: 0033:0x7fd3a558e929 [ 269.314448][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.314465][T12469] RSP: 002b:00007fd3a6433038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 269.314488][T12469] RAX: ffffffffffffffda RBX: 00007fd3a57b5fa0 RCX: 00007fd3a558e929 [ 269.314503][T12469] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000005 [ 269.314515][T12469] RBP: 00007fd3a6433090 R08: 0000000000000000 R09: 0000000000000000 [ 269.314528][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.314540][T12469] R13: 0000000000000000 R14: 00007fd3a57b5fa0 R15: 00007ffcb0956788 [ 269.314578][T12469] [ 269.559186][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 269.619229][T12480] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 269.740641][T12488] TCP: TCP_TX_DELAY enabled [ 269.777009][T12487] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 269.798762][T12487] __nla_validate_parse: 6 callbacks suppressed [ 269.798782][T12487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1927'. [ 269.822062][T12485] tipc: Enabled bearer , priority 0 [ 269.830324][T12485] syzkaller0: entered promiscuous mode [ 269.854488][T12485] syzkaller0: entered allmulticast mode [ 269.940323][T12485] syzkaller0: mtu greater than device maximum [ 269.968983][T12481] tipc: Resetting bearer [ 270.030890][T12481] tipc: Disabling bearer [ 270.123204][T12503] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 270.135173][T12503] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 270.143608][T12503] CPU: 1 UID: 0 PID: 12503 Comm: syz.4.1932 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 270.155681][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.165747][T12503] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 270.172182][T12503] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 270.191803][T12503] RSP: 0018:ffffc9001951f0a8 EFLAGS: 00010202 [ 270.197902][T12503] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 270.205890][T12503] RDX: ffff888078465a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.213876][T12503] RBP: 0000000000000000 R08: ffff888078465a00 R09: 0000000000000002 [ 270.221871][T12503] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 270.229880][T12503] R13: ffff888027e84000 R14: dffffc0000000000 R15: ffff888027e84000 [ 270.237867][T12503] FS: 00007fd3a64336c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 270.246819][T12503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.253410][T12503] CR2: 000000110c372d75 CR3: 000000007ed24000 CR4: 00000000003526f0 [ 270.261394][T12503] Call Trace: [ 270.264683][T12503] [ 270.267626][T12503] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 270.273362][T12503] fq_codel_change+0xa96/0xef0 [ 270.278140][T12503] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 270.283796][T12503] ? __pfx_fq_codel_change+0x10/0x10 [ 270.289095][T12503] ? __sock_sendmsg+0x219/0x270 [ 270.293961][T12503] fq_codel_init+0x355/0x960 [ 270.298565][T12503] ? lockdep_rtnl_is_held+0x26/0x40 [ 270.303780][T12503] ? __pfx_fq_codel_init+0x10/0x10 [ 270.308902][T12503] qdisc_create+0x7a9/0xea0 [ 270.313418][T12503] tc_modify_qdisc+0x1426/0x2010 [ 270.318368][T12503] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 270.323676][T12503] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 270.328994][T12503] rtnetlink_rcv_msg+0x77c/0xb70 [ 270.333953][T12503] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 270.339076][T12503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.344549][T12503] ? ref_tracker_free+0x63a/0x7d0 [ 270.349579][T12503] ? __copy_skb_header+0xa7/0x550 [ 270.354617][T12503] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.359999][T12503] netlink_rcv_skb+0x205/0x470 [ 270.364776][T12503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.370246][T12503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.375551][T12503] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.380763][T12503] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.385990][T12503] netlink_unicast+0x759/0x8e0 [ 270.390808][T12503] netlink_sendmsg+0x805/0xb30 [ 270.395611][T12503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.400923][T12503] ? aa_sock_msg_perm+0x94/0x160 [ 270.405887][T12503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.411185][T12503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.416507][T12503] __sock_sendmsg+0x219/0x270 [ 270.421201][T12503] ____sys_sendmsg+0x505/0x830 [ 270.425991][T12503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.431296][T12503] ? import_iovec+0x74/0xa0 [ 270.435817][T12503] ___sys_sendmsg+0x21f/0x2a0 [ 270.440515][T12503] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.445748][T12503] ? __fget_files+0x2a/0x420 [ 270.450357][T12503] ? __fget_files+0x3a0/0x420 [ 270.455078][T12503] __x64_sys_sendmsg+0x19b/0x260 [ 270.460057][T12503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.465550][T12503] ? rcu_is_watching+0x15/0xb0 [ 270.470342][T12503] ? do_syscall_64+0xbe/0x3b0 [ 270.475032][T12503] do_syscall_64+0xfa/0x3b0 [ 270.479560][T12503] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.484796][T12503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.490885][T12503] ? clear_bhb_loop+0x60/0xb0 [ 270.495580][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.501483][T12503] RIP: 0033:0x7fd3a558e929 [ 270.505922][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.525547][T12503] RSP: 002b:00007fd3a6433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.533980][T12503] RAX: ffffffffffffffda RBX: 00007fd3a57b5fa0 RCX: 00007fd3a558e929 [ 270.541994][T12503] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 000000000000000a [ 270.549978][T12503] RBP: 00007fd3a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.557958][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.565961][T12503] R13: 0000000000000000 R14: 00007fd3a57b5fa0 R15: 00007ffcb0956788 [ 270.573956][T12503] [ 270.576982][T12503] Modules linked in: [ 270.581082][T12503] ---[ end trace 0000000000000000 ]--- [ 270.586584][T12503] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 270.593065][T12503] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 270.593736][T12514] netlink: 'syz.3.1933': attribute type 11 has an invalid length. [ 270.612734][T12503] RSP: 0018:ffffc9001951f0a8 EFLAGS: 00010202 [ 270.612764][T12503] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 270.612778][T12503] RDX: ffff888078465a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.612791][T12503] RBP: 0000000000000000 R08: ffff888078465a00 R09: 0000000000000002 [ 270.612805][T12503] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 270.612819][T12503] R13: ffff888027e84000 R14: dffffc0000000000 R15: ffff888027e84000 [ 270.612837][T12503] FS: 00007fd3a64336c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 270.612856][T12503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.612872][T12503] CR2: 000000110c372d75 CR3: 000000007ed24000 CR4: 00000000003526f0 [ 270.612893][T12503] Kernel panic - not syncing: Fatal exception in interrupt [ 270.613360][T12503] Kernel Offset: disabled