last executing test programs: 1m30.451330922s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 1m12.411596673s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 57.173540447s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 42.386666989s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 27.907012064s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 14.355398145s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000bd2bb9531f6fbd50000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0xc2, "cb58f49d348194ba009f0e526b731ade5426b821a73fa4eb15cad0a4d5df2010b968ca3ed86de1e76c05dd5970f507b191eeab63be8bdd866fa61503a7acb14975e3d2406e67d523ee80c29986a3bbc0ac1a7fb3e5e1ce37f4ca9a28f45d2475a37042e3e7d32aff88446960469174bb16ffb666ef336ee1301d8dd46666a2824c9c51d0727d815ee6183749cd26d3980b9129e3c82a34175dec0406f70a51e9e69c083471e9af95b5c9489c2e2b8e3bd379e506be988453de9d4cb04d59b65e970a"}, &(0x7f0000000140)=0xe6) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x6, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 4.618688263s ago: executing program 0 (id=842): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4400c030) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@local, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}}, 0x24040800) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) listen(r2, 0xf) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x101, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5c2b93ff32a641d64f6e24322e2da48eeb882528661ecf108f09f551256456d8a678eacf42d29a0234b740ad2d2c0552ac94e363eb47338b918e038e180fca23de8e70785776755b181f396a0c66ab5e18b28d92feb5a6c906061d357716bdc74bfde5fae7851948fe7ec990a8fb5bb96856074ff41d44b5fff203441f5780b5d32c1", @ANYRES32=r9, @ANYRES16=r8], 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @null, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 3.944076336s ago: executing program 0 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x24044080) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7670}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r8, 0xb26074f916db9e7b, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x500}, [@IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x34, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x17, 0x0, 0x1, [@generic="b82f"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 3.128681067s ago: executing program 0 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.835493128s ago: executing program 0 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r4 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000400000000140012800b0001006970766c4d6e00000400028008000500fa861af5e89bd36e4d94d9c290a71c23b1418ba7115e25b4699151d73d6b84b806d2ced86f90b49bf2e1b355e66ab767e9f30f6843c8f9181841cf1793a04aa515abcc39ad1bf2fda079eb2c8e87ba0bf2c47aa057c51bcda13e97641a276d75a542744cd2a94ee6977958ee2c29299d3f31fdac423ddd388577b2", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB, @ANYRES8=r8, @ANYRES8=r8], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.498599891s ago: executing program 3 (id=857): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd70906", 0x14}, {&(0x7f00000000c0)="4fb9dd96d8c362a0580102", 0xb}, {&(0x7f0000000380)="e46fe38dfeaeceb179266beb7a9ab393447706aaa46b1932d1d0278e715746667ea9f73b3ed2a3beeb9f", 0x2a}], 0x3, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a21b6c92a601bc400d316859", 0xc}], 0x1}}], 0x1, 0x2604002c) 2.234542568s ago: executing program 0 (id=858): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000340)="032ab51e7cc1f0bdff9cb3c8d826d2005e91df521dbbccef1487b78b22e06025b216e4b1af1268ce7ce4988393491795ce5fa2b6d875e316b15e7d57d22ad7248ca9a5745fe58267c67e500fa46623714bafab56b44ec77d542204b49b8d268bb0aba1a86704bdffc31a40c4a4d028bab8a8e3f14b759e52dce5445f360d82e614da122bf70f8cc83c221c29015302bffe4681930f0e2baf024e462af7a4b0d559073f3a806147"}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1452f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793956b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2366dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d054ea410275658fe36f3d15cadc2404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r4, &(0x7f0000000480)="ce48ef5fb29f5f4f3ab95f1ba540f779beeae4d73c81e0f4318cc3da7ebb8e8a70f83d567950e486af3e23eaa2f3225113ab"}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5c2b93ff32a641d64f6e24322e2da48eeb882528661ecf108f09f551256456d8a678eacf42d29a0234b740ad2d2c0552ac94e363eb47338b918e038e180fca23de8e70785776755b181f396a0c66ab5e18b28d92feb5a6c906061d357716bdc74bfde5fae7851948fe7ec990a8fb5bb96856074ff41d44b5fff203441f5780b5d32c1", @ANYRES32=r3, @ANYRES16=r0], 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getneightbl={0x14, 0x42, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x8001) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @null, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 2.163671134s ago: executing program 3 (id=860): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.879113009s ago: executing program 0 (id=863): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', r1, 0x8, 0x700, 0x4, 0x2f73, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x65, 0x0, 0x4, 0x17, 0x0, @rand_addr=0x64010100, @broadcast, {[@rr={0x7, 0xb, 0xf9, [@rand_addr=0x64010102, @loopback]}, @noop, @cipso={0x86, 0x49, 0x1, [{0x5, 0x5, 'P1y'}, {0x7, 0x11, "3aac3f7fc922eac765ef56e6727e4d"}, {0x6, 0xe, "662763831de11ce0d07f4a79"}, {0x5, 0x10, "4da4169d32a51b89024be57a96af"}, {0x7, 0xf, "76d202e2ae8db11a2a15c4932f"}]}, @end, @generic={0x83, 0xa, "8e88cb730872ac55"}, @rr={0x7, 0x17, 0x45, [@remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2]}]}}}}}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0xc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, {0x17, 0x0, 0x0, @broadcast}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x20, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x1, 0x8, 0x0, 0x30, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x7, 0x8, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a4b4162}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x29000000}}, @generic={0x4, 0x2, 0x8, 0x7, 0x6d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f0000000840)='syzkaller\x00', 0x8, 0x4a, &(0x7f0000000880)=""/74, 0x41000, 0x23, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x1, 0x1], &(0x7f0000000980)=[{0x3, 0x1, 0xf, 0x7}, {0x1, 0x1, 0x9, 0x8}, {0x2, 0x3, 0x0, 0x5}, {0x0, 0x3, 0x6, 0xc}, {0x5, 0x5, 0xb, 0x7}], 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbeb39d47, 0x0, 0x0, 0x0, 0x28b1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6eed, 0x0, 0x0, 0x0, 0x80}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x33, &(0x7f0000000640)=""/51, 0x1f00, 0x8, '\x00', r1, 0x0, r9, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x7, 0x7ab44297, 0x2}, 0x10, 0x7a09, r10, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pI4 \x00'}, 0x20) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f000000b4c0)={0x0, 0x0, &(0x7f000000b480)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000031401002abd7000fddbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f3100000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f31"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x20044090) 1.734206449s ago: executing program 1 (id=864): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001240)={'vcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000200000000000000060007000800000008000500", @ANYRES32=r10, @ANYBLOB="18000880"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001380)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], 0x0, 0xd8, &(0x7f0000001500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x31, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f00000041c0)={0xcf0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6a}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7fff, 0x9, 0x9, 0x9}, {0x4, 0x4, 0x8, 0x7}, {0x6, 0x4, 0x8d, 0x80000001}, {0x4, 0x1, 0x1, 0x6}, {0x8, 0x4, 0x1, 0x8}, {0x9, 0x80, 0x5, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa24e}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4800000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x7, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fc}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x543}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r5}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x4}}, {{0x8, 0x1, r13}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r14}}}]}}]}, 0xcf0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r15 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r1}, 0x8) close(r15) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r15, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)}, 0x44) 1.616849655s ago: executing program 2 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="a153748560", 0x5}], 0x1, 0x0, 0x0, 0x40010}, 0x800) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @initial, {0x7, 0x81}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x1, 0x0, 0x2, 0x1}}, 0x1, 0x3, 0x2f, @val={0x10, 0x1, 0x19}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x46866e86d4f922a3, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x69}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4094) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4c, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy]}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 1.273143619s ago: executing program 2 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0xa, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xd) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x3) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x73}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104f2ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c0002800500170000000000080004000002"], 0x44}}, 0x0) 1.094022415s ago: executing program 1 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x2404c014) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x12, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x26}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x88}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r10], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x5}], 0x4, 0x20, 0x0) 1.093636574s ago: executing program 3 (id=868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r2, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 904.584484ms ago: executing program 3 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x488a008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r7, 0x120, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0x1e, 0x0, @random="d90f65c2b9edaba795c63f9b242a9d58ab1e46d9e250d1d75416"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf800}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000040)={0x208001}, 0x8) shutdown(r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="955375c9b013"}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x8, r8, 0x5, r5}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="c55d2bbd7000fddbdf256900000008000300", @ANYRESHEX=r1, @ANYBLOB="49809661fe1f701376fd9c857489da9d30c3c50658920d4e6abd7b15a0055f8cf9b04a61006dddc1582c131c8c"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 724.038524ms ago: executing program 1 (id=870): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x570, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@loopback, @private1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff000000], 'lo\x00', 'ip6erspan0\x00', {}, {0xff}, 0x2, 0x2f, 0x4, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xa363, 0x0, 0x0, [0x6, 0x3b, 0x9, 0xd13, 0xafa, 0xaa3a, 0xd, 0x81, 0x93, 0x8, 0x5, 0x10, 0x400, 0x708, 0x5, 0xfffc], 0xc}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@mcast1, @mcast1, [0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xff], 'vcan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x2e, 0x5b, 0x1, 0x4}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x92, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], 0x4e22, 0x4e22, 0x4e23, 0x4e23, 0x80, 0x3, 0x100, 0x1, 0x2f}}}, {{@uncond, 0x0, 0x228, 0x258, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7, 0x2, 0x9, 0x5, 0x2, 0xe, 0x5}}, @common=@rt={{0x138}, {0x5, [0x3, 0x10001], 0x3, 0x6, 0x4, [@private0, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @local, @remote, @mcast2, @mcast2, @empty, @mcast1, @local, @mcast2], 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x92, 0x677, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000680)=""/31, &(0x7f00000006c0)=0x1f) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x100000) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000800)={@multicast1, @empty}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000840)={{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, {0xa, 0x4e21, 0x200, @private2, 0x7f}, 0xffffffffffffffff, {[0x1, 0x3a0, 0xe, 0x8, 0x1, 0x613, 0x8, 0x6]}}, 0x5c) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000008c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000900)=0x28) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000940), &(0x7f0000000980)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000009c0)={0x0, @adiantum, 0x0, @desc4}) bind$isdn(0xffffffffffffffff, &(0x7f0000000a00)={0x22, 0x6, 0x8, 0xa, 0xb9}, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a40)='veth1_vlan\x00', 0x10) sendmsg$nl_route(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv4_getnetconf={0x24, 0x52, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x200}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r6) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000cc0)={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x0, {[0x3, 0x6, 0x400, 0x6, 0x5, 0x2, 0x8]}}, 0x5c) bind$inet(r4, &(0x7f0000000d40)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xda, 0x3, 0x44, @local, @local, 0x40, 0x80, 0x20cb, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000e80)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c010}, 0x40) r10 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000fc0)={{}, [@null, @rose, @remote, @netrom, @remote, @default, @null]}, &(0x7f0000001040)=0x48, 0x80000) ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f0000001080)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001280)={0x0, 0xfb, 0x7e42, 0x1, 0x9, 0x1000, 0xff5d, 0xc, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x50, 0x0, 0x7c4e, 0x38a1}}, &(0x7f0000001340)=0xb0) 671.751876ms ago: executing program 2 (id=871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) recvmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 596.972124ms ago: executing program 1 (id=872): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r0, 0x0, 0x21, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 502.867121ms ago: executing program 2 (id=873): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x800000000000000) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000980)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000001100006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868e6cd1678f74e30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b506971431bb6b1fb46b2aa425833f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa209000000000000003ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e09"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 295.416947ms ago: executing program 3 (id=874): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x4b0, 0xffffffff, 0x0, 0x1c0, 0x1c0, 0xfeffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'erspan0\x00', 'pim6reg0\x00'}, 0x2f2, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "855d60569bd62d192cffecebc395616666e4864226393ed55a10311ce87ede05c02d963e82d891b866f9f24d658abb00ec91030315954d1646b80a87e999ff3c7c64f9c5c1c415c80196f6a70066f78017ea3746b1613077d1b4b972f72226030d6df330c724e3aa4448e90ab673dbe681b057c9bd4be0385e3ade7e06d76e61", 0x7, 0x3}}, @common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80000017}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80000017}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r6, @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251a0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/18], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) 294.764262ms ago: executing program 1 (id=875): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @bcast}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 265.86111ms ago: executing program 2 (id=876): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) (rerun: 32) sendfile(r0, r1, 0x0, 0x8) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0xfffd, 0xfffe, 0x4e20, 0x0, 0x2}, {0x3752, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x1}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x4, 0x1, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 158.591679ms ago: executing program 1 (id=877): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)}, 0x44) 39.574468ms ago: executing program 2 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0xffffff27) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) poll(&(0x7f0000000080)=[{r7, 0x4000}, {r7, 0x80}], 0x2, 0x66) (async) poll(&(0x7f0000000080)=[{r7, 0x4000}, {r7, 0x80}], 0x2, 0x66) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e21, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6f8, 0x1ff, 0x9}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000000)={0xff, {{0x2, 0x4e21, @multicast1}}, 0x0, 0x3, [{{0x2, 0x101, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}, {{0x2, 0x4e21, @empty}}]}, 0x210) 0s ago: executing program 3 (id=879): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x5, &(0x7f00000006c0)=@raw=[@ldst={0x1, 0x1, 0x1, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x474, 0x0, 0x0, 0x0, 0xffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x4, 0x0, 0x6, 0x3, 0x1, 0x2}], &(0x7f0000000700)='syzkaller\x00', 0x10001, 0x82, &(0x7f0000000740)=""/130, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x8, 0x10, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x5}, {0x5, 0x4, 0xf}, {0x2, 0x3, 0x5, 0xc}, {0x0, 0x1, 0x3, 0x7}], 0x10, 0x8, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x3, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x18}, 0x18) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x6c, &(0x7f0000000300)=""/108, 0x41000, 0x24, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000b40)=[r5, r6, 0x1, r8, r9, r11, r12], &(0x7f0000000b80)=[{0x4, 0x5, 0x6, 0x8}, {0x0, 0x2, 0xa, 0x2}], 0x10, 0x168, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x2) kernel console output (not intermixed with test programs): 90 [ 98.784648][ T6064] do_syscall_64+0xfa/0x3b0 [ 98.784664][ T6064] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.784692][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.784710][ T6064] ? clear_bhb_loop+0x60/0xb0 [ 98.784733][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.784752][ T6064] RIP: 0033:0x7f217b18e929 [ 98.784768][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.784784][ T6064] RSP: 002b:00007f217c018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.784803][ T6064] RAX: ffffffffffffffda RBX: 00007f217b3b5fa0 RCX: 00007f217b18e929 [ 98.784817][ T6064] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 98.784835][ T6064] RBP: 00007f217c018090 R08: 0000000000000000 R09: 0000000000000000 [ 98.784847][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.784857][ T6064] R13: 0000000000000000 R14: 00007f217b3b5fa0 R15: 00007ffe505e9de8 [ 98.784887][ T6064] [ 99.375858][ T6072] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.597543][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.680372][ T6083] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 99.699007][ T6090] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 99.762664][ T6083] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 99.814776][ T6083] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 99.974756][ T6103] xt_time: unknown flags 0x4 [ 100.231933][ T6107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.269412][ T6107] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 100.287527][ T6110] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.501339][ T6122] __nla_validate_parse: 3 callbacks suppressed [ 100.501358][ T6122] netlink: 56 bytes leftover after parsing attributes in process `syz.3.59'. [ 100.525504][ T6122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.59'. [ 100.752808][ T6133] netlink: 17 bytes leftover after parsing attributes in process `syz.0.66'. [ 100.945269][ T6142] FAULT_INJECTION: forcing a failure. [ 100.945269][ T6142] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.972382][ T6137] tipc: Started in network mode [ 100.984133][ T6137] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 101.016680][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.0.69 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 101.016710][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.016722][ T6142] Call Trace: [ 101.016730][ T6142] [ 101.016739][ T6142] dump_stack_lvl+0x189/0x250 [ 101.016779][ T6142] ? __pfx____ratelimit+0x10/0x10 [ 101.016810][ T6142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.016843][ T6142] ? __pfx__printk+0x10/0x10 [ 101.016868][ T6142] ? fs_reclaim_acquire+0x7d/0x100 [ 101.016904][ T6142] should_fail_ex+0x414/0x560 [ 101.016936][ T6142] prepare_alloc_pages+0x213/0x610 [ 101.016970][ T6142] __alloc_frozen_pages_noprof+0x123/0x370 [ 101.017002][ T6142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 101.017040][ T6142] ? policy_nodemask+0x27c/0x720 [ 101.017059][ T6142] ? __lock_acquire+0xab9/0xd20 [ 101.017094][ T6142] alloc_pages_mpol+0x232/0x4a0 [ 101.017121][ T6142] vma_alloc_folio_noprof+0xe4/0x200 [ 101.017146][ T6142] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 101.017183][ T6142] folio_prealloc+0x30/0x180 [ 101.017218][ T6142] __handle_mm_fault+0x2c88/0x5620 [ 101.017248][ T6142] ? __lock_acquire+0xab9/0xd20 [ 101.017305][ T6142] ? __pfx___handle_mm_fault+0x10/0x10 [ 101.017335][ T6142] ? lock_vma_under_rcu+0xf8/0x710 [ 101.017366][ T6142] ? lock_vma_under_rcu+0xf8/0x710 [ 101.017386][ T6142] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 101.017414][ T6142] handle_mm_fault+0x40a/0x8e0 [ 101.017454][ T6142] do_user_addr_fault+0xa81/0x1390 [ 101.017487][ T6142] ? rcu_is_watching+0x15/0xb0 [ 101.017518][ T6142] ? trace_page_fault_user+0x84/0x1e0 [ 101.017545][ T6142] exc_page_fault+0x76/0xf0 [ 101.017575][ T6142] asm_exc_page_fault+0x26/0x30 [ 101.017593][ T6142] RIP: 0033:0x7fd1dc45a33b [ 101.017610][ T6142] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 101.017625][ T6142] RSP: 002b:00007fd1dd478fb0 EFLAGS: 00010202 [ 101.017651][ T6142] RAX: 0000000000000000 RBX: 00007fd1dc7b5fa0 RCX: 0000000000000000 [ 101.017663][ T6142] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000300 [ 101.017674][ T6142] RBP: 00007fd1dd47a090 R08: 0000000000000000 R09: 0000000000000000 [ 101.017685][ T6142] R10: 0000200000000300 R11: 0000000000000000 R12: 0000000000000001 [ 101.017696][ T6142] R13: 0000000000000000 R14: 00007fd1dc7b5fa0 R15: 00007fff03e44948 [ 101.017726][ T6142] [ 101.017911][ T6142] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.134700][ T6137] tipc: Enabling of bearer rejected, failed to enable media [ 101.510087][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.608039][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.708878][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 101.708945][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 101.761570][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.785806][ T6158] netlink: 'syz.1.72': attribute type 11 has an invalid length. [ 101.805640][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.196602][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.359964][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 102.398232][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.406614][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.414727][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.423677][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.434100][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.681188][ T6186] validate_nla: 6 callbacks suppressed [ 102.681206][ T6186] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 102.717254][ T6190] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 102.823033][ T6194] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 102.840950][ T6203] FAULT_INJECTION: forcing a failure. [ 102.840950][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.890516][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.1.81 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 102.890548][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.890558][ T6203] Call Trace: [ 102.890566][ T6203] [ 102.890574][ T6203] dump_stack_lvl+0x189/0x250 [ 102.890616][ T6203] ? __pfx____ratelimit+0x10/0x10 [ 102.890646][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.890676][ T6203] ? __pfx__printk+0x10/0x10 [ 102.890697][ T6203] ? __might_fault+0xb0/0x130 [ 102.890726][ T6203] should_fail_ex+0x414/0x560 [ 102.890756][ T6203] _copy_from_user+0x2d/0xb0 [ 102.890776][ T6203] __sys_sendto+0x25c/0x520 [ 102.890802][ T6203] ? __pfx___sys_sendto+0x10/0x10 [ 102.890835][ T6203] ? count_memcg_event_mm+0x21/0x260 [ 102.890876][ T6203] ? exc_page_fault+0x76/0xf0 [ 102.890907][ T6203] ? do_user_addr_fault+0xc8a/0x1390 [ 102.890936][ T6203] __x64_sys_sendto+0xde/0x100 [ 102.890961][ T6203] do_syscall_64+0xfa/0x3b0 [ 102.890977][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.891004][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.891022][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 102.891046][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.891064][ T6203] RIP: 0033:0x7f4151b907bc [ 102.891081][ T6203] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 102.891096][ T6203] RSP: 002b:00007f4152976ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 102.891116][ T6203] RAX: ffffffffffffffda RBX: 00007f4152976fc0 RCX: 00007f4151b907bc [ 102.891129][ T6203] RDX: 0000000000000020 RSI: 00007f4152977010 RDI: 0000000000000003 [ 102.891141][ T6203] RBP: 0000000000000000 R08: 00007f4152976f14 R09: 000000000000000c [ 102.891152][ T6203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 102.891163][ T6203] R13: 00007f4152976f68 R14: 00007f4152977010 R15: 0000000000000000 [ 102.891192][ T6203] [ 103.157398][ T6202] bridge: RTM_NEWNEIGH with invalid ether address [ 103.197783][ T13] bridge_slave_1: left allmulticast mode [ 103.205673][ T13] bridge_slave_1: left promiscuous mode [ 103.212096][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.258486][ T13] bridge_slave_0: left allmulticast mode [ 103.273378][ T13] bridge_slave_0: left promiscuous mode [ 103.280003][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.441584][ T6214] Zero length message leads to an empty skb [ 103.707592][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.738711][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.754476][ T13] bond0 (unregistering): Released all slaves [ 104.138270][ T6221] syzkaller0: entered promiscuous mode [ 104.145698][ T6221] syzkaller0: entered allmulticast mode [ 104.158809][ T6224] sctp: [Deprecated]: syz.2.88 (pid 6224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.158809][ T6224] Use struct sctp_sack_info instead [ 104.289811][ T6236] netlink: 668 bytes leftover after parsing attributes in process `syz.0.87'. [ 104.312721][ T6236] netlink: 668 bytes leftover after parsing attributes in process `syz.0.87'. [ 104.349723][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 104.430797][ T6234] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 104.454655][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.463253][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.525295][ T5155] Bluetooth: hci2: command tx timeout [ 104.654602][ T6239] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 104.673910][ T6248] FAULT_INJECTION: forcing a failure. [ 104.673910][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 104.732263][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.94 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 104.732291][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.732311][ T6248] Call Trace: [ 104.732319][ T6248] [ 104.732327][ T6248] dump_stack_lvl+0x189/0x250 [ 104.732361][ T6248] ? __pfx____ratelimit+0x10/0x10 [ 104.732390][ T6248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.732420][ T6248] ? __pfx__printk+0x10/0x10 [ 104.732446][ T6248] ? __pfx___might_resched+0x10/0x10 [ 104.732480][ T6248] should_fail_ex+0x414/0x560 [ 104.732509][ T6248] should_failslab+0xa8/0x100 [ 104.732532][ T6248] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 104.732551][ T6248] ? __alloc_skb+0x112/0x2d0 [ 104.732577][ T6248] __alloc_skb+0x112/0x2d0 [ 104.732602][ T6248] netlink_sendmsg+0x5c6/0xb30 [ 104.732635][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.732661][ T6248] ? aa_sock_msg_perm+0x94/0x160 [ 104.732687][ T6248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.732712][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.732735][ T6248] __sock_sendmsg+0x219/0x270 [ 104.732768][ T6248] __sys_sendto+0x3bd/0x520 [ 104.732792][ T6248] ? __pfx___sys_sendto+0x10/0x10 [ 104.732824][ T6248] ? count_memcg_event_mm+0x21/0x260 [ 104.732865][ T6248] ? exc_page_fault+0x76/0xf0 [ 104.732896][ T6248] ? do_user_addr_fault+0xc8a/0x1390 [ 104.732926][ T6248] __x64_sys_sendto+0xde/0x100 [ 104.732951][ T6248] do_syscall_64+0xfa/0x3b0 [ 104.732967][ T6248] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.732995][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.733013][ T6248] ? clear_bhb_loop+0x60/0xb0 [ 104.733037][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.733055][ T6248] RIP: 0033:0x7f217b1907bc [ 104.733072][ T6248] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 104.733087][ T6248] RSP: 002b:00007f217c016ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 104.733107][ T6248] RAX: ffffffffffffffda RBX: 00007f217c016fc0 RCX: 00007f217b1907bc [ 104.733121][ T6248] RDX: 0000000000000020 RSI: 00007f217c017010 RDI: 0000000000000003 [ 104.733131][ T6248] RBP: 0000000000000000 R08: 00007f217c016f14 R09: 000000000000000c [ 104.733142][ T6248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 104.733152][ T6248] R13: 00007f217c016f68 R14: 00007f217c017010 R15: 0000000000000000 [ 104.733179][ T6248] [ 104.991658][ T13] hsr_slave_0: left promiscuous mode [ 105.001825][ T13] hsr_slave_1: left promiscuous mode [ 105.010003][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.019179][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.062455][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.113829][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.190367][ T13] veth1_macvtap: left promiscuous mode [ 105.205524][ T13] veth0_macvtap: left promiscuous mode [ 105.212977][ T13] veth1_vlan: left promiscuous mode [ 105.227903][ T13] veth0_vlan: left promiscuous mode [ 105.741747][ T6280] netlink: 'syz.3.102': attribute type 2 has an invalid length. [ 105.918751][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.998544][ T13] team0 (unregistering): Port device team_slave_0 removed [ 106.502713][ T6240] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 106.512544][ T6251] gretap0: entered promiscuous mode [ 106.538939][ T6256] 0XD: renamed from gretap0 [ 106.559798][ T6256] 0XD: left promiscuous mode [ 106.567995][ T6256] 0XD: entered allmulticast mode [ 106.583021][ T6256] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 106.603594][ T5155] Bluetooth: hci2: command tx timeout [ 106.622200][ T6241] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 106.810272][ T6294] SET target dimension over the limit! [ 106.960967][ T6303] __nla_validate_parse: 2 callbacks suppressed [ 106.960984][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 106.964582][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 107.013557][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 107.022627][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 107.052783][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 107.276162][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 107.695840][ T6333] sctp: failed to load transform for md5: -2 [ 107.696002][ T6348] sctp: failed to load transform for md5: -2 [ 107.781186][ T6342] sctp: failed to load transform for md5: -2 [ 107.781431][ T6351] netlink: 240 bytes leftover after parsing attributes in process `syz.3.115'. [ 107.804549][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 108.088067][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.148059][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.176265][ T6180] bridge_slave_0: entered allmulticast mode [ 108.199402][ T6180] bridge_slave_0: entered promiscuous mode [ 108.236169][ T6373] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 108.249509][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.266439][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 108.269579][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.304724][ T6180] bridge_slave_1: entered allmulticast mode [ 108.325448][ T6180] bridge_slave_1: entered promiscuous mode [ 108.338866][ T6366] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 108.384346][ T6368] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 108.442429][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 108.469820][ T6383] netlink: 'syz.1.120': attribute type 11 has an invalid length. [ 108.481350][ T6371] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 108.539486][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 108.581800][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.591663][ T6381] xt_TCPMSS: Only works on TCP SYN packets [ 108.687579][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.700223][ T5155] Bluetooth: hci2: command tx timeout [ 108.986064][ T6403] netlink: 'syz.2.125': attribute type 21 has an invalid length. [ 109.022183][ T6180] team0: Port device team_slave_0 added [ 109.087050][ T6180] team0: Port device team_slave_1 added [ 109.265826][ T6410] bond1: entered promiscuous mode [ 109.290788][ T6410] bond1: entered allmulticast mode [ 109.297073][ T6410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.525539][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.532539][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.609633][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.687588][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.694747][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.741796][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.759466][ T6433] netlink: 'syz.1.132': attribute type 29 has an invalid length. [ 109.768960][ T6433] netlink: 'syz.1.132': attribute type 29 has an invalid length. [ 109.790639][ T6433] netlink: 'syz.1.132': attribute type 29 has an invalid length. [ 109.873672][ T6433] netlink: 'syz.1.132': attribute type 29 has an invalid length. [ 110.278999][ T6180] hsr_slave_0: entered promiscuous mode [ 110.298774][ T6180] hsr_slave_1: entered promiscuous mode [ 110.342421][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.351193][ T6180] Cannot create hsr debugfs directory [ 110.632951][ T6475] FAULT_INJECTION: forcing a failure. [ 110.632951][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 110.645671][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.145 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 110.645695][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.645706][ T6475] Call Trace: [ 110.645714][ T6475] [ 110.645721][ T6475] dump_stack_lvl+0x189/0x250 [ 110.645756][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 110.645785][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.645815][ T6475] ? __pfx__printk+0x10/0x10 [ 110.645839][ T6475] ? rcu_is_watching+0x15/0xb0 [ 110.645879][ T6475] should_fail_ex+0x414/0x560 [ 110.645909][ T6475] should_failslab+0xa8/0x100 [ 110.645932][ T6475] kmem_cache_alloc_noprof+0x73/0x3c0 [ 110.645962][ T6475] ? skb_clone+0x212/0x3a0 [ 110.645993][ T6475] skb_clone+0x212/0x3a0 [ 110.646027][ T6475] bpf_clone_redirect+0xad/0x3d0 [ 110.646085][ T6475] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 110.646112][ T6475] ? ktime_get+0x3e/0x1f0 [ 110.646150][ T6475] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 110.646174][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.646204][ T6475] ? ktime_get+0x3e/0x1f0 [ 110.646223][ T6475] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 110.646255][ T6475] ? __local_bh_disable_ip+0xf1/0x190 [ 110.646287][ T6475] ? __pfx___cant_migrate+0x10/0x10 [ 110.646318][ T6475] ? __local_bh_enable_ip+0x12d/0x1c0 [ 110.646349][ T6475] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 110.646385][ T6475] ? bpf_test_timer_continue+0x136/0x350 [ 110.646417][ T6475] bpf_test_run+0x38b/0x830 [ 110.646452][ T6475] ? bpf_test_run+0x205/0x830 [ 110.646482][ T6475] ? __pfx_bpf_test_run+0x10/0x10 [ 110.646531][ T6475] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 110.646554][ T6475] ? convert___skb_to_skb+0x3d/0x590 [ 110.646580][ T6475] bpf_prog_test_run_skb+0xb30/0x1560 [ 110.646621][ T6475] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 110.646647][ T6475] bpf_prog_test_run+0x2c7/0x340 [ 110.646682][ T6475] __sys_bpf+0x4a4/0x860 [ 110.646711][ T6475] ? __pfx___sys_bpf+0x10/0x10 [ 110.646753][ T6475] ? ksys_write+0x22a/0x250 [ 110.646776][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 110.646793][ T6475] ? rcu_is_watching+0x15/0xb0 [ 110.646835][ T6475] __x64_sys_bpf+0x7c/0x90 [ 110.646861][ T6475] do_syscall_64+0xfa/0x3b0 [ 110.646879][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.646909][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.646930][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 110.646956][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.646976][ T6475] RIP: 0033:0x7f4151b8e929 [ 110.646994][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.647012][ T6475] RSP: 002b:00007f4152978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.647034][ T6475] RAX: ffffffffffffffda RBX: 00007f4151db5fa0 RCX: 00007f4151b8e929 [ 110.647049][ T6475] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 110.647062][ T6475] RBP: 00007f4152978090 R08: 0000000000000000 R09: 0000000000000000 [ 110.647075][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.647087][ T6475] R13: 0000000000000000 R14: 00007f4151db5fa0 R15: 00007ffeafc1a918 [ 110.647121][ T6475] [ 110.984443][ T5155] Bluetooth: hci2: command tx timeout [ 111.051202][ T6478] syz.0.146 (6478) used greatest stack depth: 15976 bytes left [ 111.362750][ T6489] trusted_key: syz.2.152 sent an empty control message without MSG_MORE. [ 111.879709][ T6510] syz_tun: entered allmulticast mode [ 112.122288][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.122294][ T6503] syz_tun: left allmulticast mode [ 112.358276][ T6532] __nla_validate_parse: 8 callbacks suppressed [ 112.358294][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 112.492709][ T6542] gtp0: entered promiscuous mode [ 112.524761][ T6542] gtp0: entered allmulticast mode [ 112.568847][ T6545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.165'. [ 112.629194][ T6540] sctp: failed to load transform for md5: -2 [ 112.708606][ T6180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.744264][ T6555] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.752721][ T6180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.770658][ T6180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.805781][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 112.815503][ T6180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.839696][ T6553] netlink: 68 bytes leftover after parsing attributes in process `syz.3.166'. [ 113.113855][ T6578] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 113.166108][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 113.175560][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 113.222510][ T6578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.284481][ T6583] syz_tun: entered allmulticast mode [ 113.346387][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.447883][ T6582] syz_tun: left allmulticast mode [ 113.479000][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.506652][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.513908][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.575974][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.583208][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.612942][ T6594] netlink: 240 bytes leftover after parsing attributes in process `syz.2.175'. [ 113.660882][ T6596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.176'. [ 113.877911][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'. [ 114.119858][ T6618] validate_nla: 7 callbacks suppressed [ 114.119877][ T6618] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 114.146821][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 114.205271][ T6620] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 114.223408][ T6626] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 114.579722][ T6644] FAULT_INJECTION: forcing a failure. [ 114.579722][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 114.607146][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.3.186 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 114.607177][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.607190][ T6644] Call Trace: [ 114.607198][ T6644] [ 114.607207][ T6644] dump_stack_lvl+0x189/0x250 [ 114.607245][ T6644] ? __pfx____ratelimit+0x10/0x10 [ 114.607277][ T6644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.607310][ T6644] ? __pfx__printk+0x10/0x10 [ 114.607338][ T6644] ? __pfx___might_resched+0x10/0x10 [ 114.607376][ T6644] should_fail_ex+0x414/0x560 [ 114.607408][ T6644] should_failslab+0xa8/0x100 [ 114.607432][ T6644] __kmalloc_cache_noprof+0x70/0x3d0 [ 114.607452][ T6644] ? call_usermodehelper_setup+0x8e/0x270 [ 114.607482][ T6644] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 114.607508][ T6644] call_usermodehelper_setup+0x8e/0x270 [ 114.607536][ T6644] ? __pfx_free_modprobe_argv+0x10/0x10 [ 114.607570][ T6644] __request_module+0x39f/0x5e0 [ 114.607603][ T6644] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 114.607638][ T6644] ? __pfx___request_module+0x10/0x10 [ 114.607670][ T6644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.607729][ T6644] nfnetlink_rcv+0x68e/0x2520 [ 114.607777][ T6644] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 114.607814][ T6644] ? __dev_queue_xmit+0x27e/0x3a70 [ 114.607859][ T6644] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.607909][ T6644] ? ref_tracker_free+0x63a/0x7d0 [ 114.607936][ T6644] ? __copy_skb_header+0xa7/0x550 [ 114.607966][ T6644] ? __pfx_ref_tracker_free+0x10/0x10 [ 114.607994][ T6644] ? __skb_clone+0x63/0x7a0 [ 114.608024][ T6644] ? __skb_clone+0x483/0x7a0 [ 114.608057][ T6644] ? skb_clone+0x246/0x3a0 [ 114.608087][ T6644] ? __netlink_deliver_tap+0x807/0x850 [ 114.608110][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.608141][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.608165][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.608194][ T6644] netlink_unicast+0x75b/0x8d0 [ 114.608222][ T6644] netlink_sendmsg+0x805/0xb30 [ 114.608249][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.608277][ T6644] ? aa_sock_msg_perm+0x94/0x160 [ 114.608306][ T6644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.608333][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.608359][ T6644] __sock_sendmsg+0x219/0x270 [ 114.608393][ T6644] __sys_sendto+0x3bd/0x520 [ 114.608420][ T6644] ? __pfx___sys_sendto+0x10/0x10 [ 114.608460][ T6644] ? count_memcg_event_mm+0x21/0x260 [ 114.608505][ T6644] ? exc_page_fault+0x76/0xf0 [ 114.608539][ T6644] ? do_user_addr_fault+0xc8a/0x1390 [ 114.608572][ T6644] __x64_sys_sendto+0xde/0x100 [ 114.608600][ T6644] do_syscall_64+0xfa/0x3b0 [ 114.608617][ T6644] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.608647][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.608669][ T6644] ? clear_bhb_loop+0x60/0xb0 [ 114.608694][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.608722][ T6644] RIP: 0033:0x7f217b1907bc [ 114.608741][ T6644] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 114.608758][ T6644] RSP: 002b:00007f217c016ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 114.608780][ T6644] RAX: ffffffffffffffda RBX: 00007f217c016fc0 RCX: 00007f217b1907bc [ 114.608795][ T6644] RDX: 0000000000000020 RSI: 00007f217c017010 RDI: 0000000000000003 [ 114.608808][ T6644] RBP: 0000000000000000 R08: 00007f217c016f14 R09: 000000000000000c [ 114.608821][ T6644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 114.608831][ T6644] R13: 00007f217c016f68 R14: 00007f217c017010 R15: 0000000000000000 [ 114.608860][ T6644] [ 114.609921][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.176884][ T6650] syz_tun: entered allmulticast mode [ 115.321312][ T6648] syz_tun: left allmulticast mode [ 116.280365][ T6180] veth0_vlan: entered promiscuous mode [ 116.748760][ T6180] veth1_vlan: entered promiscuous mode [ 116.910105][ T6180] veth0_macvtap: entered promiscuous mode [ 116.933163][ T6740] FAULT_INJECTION: forcing a failure. [ 116.933163][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 116.945882][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.3.209 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 116.945906][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.945917][ T6740] Call Trace: [ 116.945925][ T6740] [ 116.945933][ T6740] dump_stack_lvl+0x189/0x250 [ 116.945966][ T6740] ? __pfx____ratelimit+0x10/0x10 [ 116.945995][ T6740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.946024][ T6740] ? __pfx__printk+0x10/0x10 [ 116.946048][ T6740] ? rcu_is_watching+0x15/0xb0 [ 116.946119][ T6740] should_fail_ex+0x414/0x560 [ 116.946151][ T6740] should_failslab+0xa8/0x100 [ 116.946176][ T6740] kmem_cache_alloc_noprof+0x73/0x3c0 [ 116.946208][ T6740] ? skb_clone+0x212/0x3a0 [ 116.946241][ T6740] skb_clone+0x212/0x3a0 [ 116.946273][ T6740] bpf_clone_redirect+0xad/0x3d0 [ 116.946317][ T6740] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 116.946343][ T6740] ? ktime_get+0x3e/0x1f0 [ 116.946373][ T6740] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 116.946396][ T6740] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.946426][ T6740] ? ktime_get+0x3e/0x1f0 [ 116.946445][ T6740] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 116.946476][ T6740] ? __local_bh_disable_ip+0xf1/0x190 [ 116.946507][ T6740] ? __pfx___cant_migrate+0x10/0x10 [ 116.946538][ T6740] ? __local_bh_enable_ip+0x12d/0x1c0 [ 116.946575][ T6740] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.946610][ T6740] ? bpf_test_timer_continue+0x136/0x350 [ 116.946640][ T6740] bpf_test_run+0x38b/0x830 [ 116.946676][ T6740] ? bpf_test_run+0x205/0x830 [ 116.946707][ T6740] ? __pfx_bpf_test_run+0x10/0x10 [ 116.946758][ T6740] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 116.946780][ T6740] ? convert___skb_to_skb+0x3d/0x590 [ 116.946806][ T6740] bpf_prog_test_run_skb+0xb30/0x1560 [ 116.946848][ T6740] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.946872][ T6740] bpf_prog_test_run+0x2c7/0x340 [ 116.946907][ T6740] __sys_bpf+0x4a4/0x860 [ 116.946937][ T6740] ? __pfx___sys_bpf+0x10/0x10 [ 116.946980][ T6740] ? ksys_write+0x22a/0x250 [ 116.947002][ T6740] ? __pfx_ksys_write+0x10/0x10 [ 116.947018][ T6740] ? rcu_is_watching+0x15/0xb0 [ 116.947058][ T6740] __x64_sys_bpf+0x7c/0x90 [ 116.947084][ T6740] do_syscall_64+0xfa/0x3b0 [ 116.947101][ T6740] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.947130][ T6740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.947151][ T6740] ? clear_bhb_loop+0x60/0xb0 [ 116.947176][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.947196][ T6740] RIP: 0033:0x7f217b18e929 [ 116.947214][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.947231][ T6740] RSP: 002b:00007f217c018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.947251][ T6740] RAX: ffffffffffffffda RBX: 00007f217b3b5fa0 RCX: 00007f217b18e929 [ 116.947266][ T6740] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 116.947291][ T6740] RBP: 00007f217c018090 R08: 0000000000000000 R09: 0000000000000000 [ 116.947303][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.947314][ T6740] R13: 0000000000000000 R14: 00007f217b3b5fa0 R15: 00007ffe505e9de8 [ 116.947357][ T6740] [ 116.950190][ T6180] veth1_macvtap: entered promiscuous mode [ 117.331711][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.361882][ T6743] syz_tun: entered allmulticast mode [ 117.429355][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.445185][ T6180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.473643][ T6180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.482383][ T6180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.504518][ T6180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.537969][ T6736] syz_tun: left allmulticast mode [ 117.828260][ T6774] __nla_validate_parse: 37 callbacks suppressed [ 117.828280][ T6774] netlink: 240 bytes leftover after parsing attributes in process `syz.0.216'. [ 117.859608][ T6775] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 117.963876][ T6778] netlink: 'syz.3.217': attribute type 33 has an invalid length. [ 117.996920][ T6778] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.217'. [ 118.180149][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.250770][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.389836][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.413415][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.509731][ T6796] tipc: Enabled bearer , priority 0 [ 118.537035][ T6796] syzkaller0: entered promiscuous mode [ 118.542650][ T6796] syzkaller0: entered allmulticast mode [ 118.617298][ T6796] tipc: Resetting bearer [ 118.639683][ T6804] block nbd0: not configured, cannot reconfigure [ 118.674637][ T6804] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 118.691625][ T6794] tipc: Resetting bearer [ 118.724846][ T6804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.732285][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 118.739724][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 118.747035][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 118.788085][ T6794] tipc: Disabling bearer [ 118.825852][ T6810] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 118.877939][ T6818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.885360][ T979] IPVS: starting estimator thread 0... [ 118.905161][ T6804] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.973474][ T6819] IPVS: using max 33 ests per chain, 79200 per kthread [ 119.099117][ T6828] netlink: 240 bytes leftover after parsing attributes in process `syz.3.229'. [ 119.224108][ T6835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.231'. [ 119.348646][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.480241][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.626555][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.770153][ T6851] FAULT_INJECTION: forcing a failure. [ 119.770153][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 119.773085][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.782901][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.0.232 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 119.782929][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.782942][ T6851] Call Trace: [ 119.782952][ T6851] [ 119.782962][ T6851] dump_stack_lvl+0x189/0x250 [ 119.783001][ T6851] ? __pfx____ratelimit+0x10/0x10 [ 119.783037][ T6851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.783078][ T6851] ? __pfx__printk+0x10/0x10 [ 119.783105][ T6851] ? rcu_is_watching+0x15/0xb0 [ 119.783150][ T6851] should_fail_ex+0x414/0x560 [ 119.783204][ T6851] should_failslab+0xa8/0x100 [ 119.783231][ T6851] kmem_cache_alloc_noprof+0x73/0x3c0 [ 119.783280][ T6851] ? skb_clone+0x212/0x3a0 [ 119.783318][ T6851] skb_clone+0x212/0x3a0 [ 119.783354][ T6851] bpf_clone_redirect+0xad/0x3d0 [ 119.783401][ T6851] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 119.783430][ T6851] ? preempt_schedule+0xae/0xc0 [ 119.783460][ T6851] ? bpf_test_run+0x205/0x830 [ 119.783488][ T6851] ? preempt_schedule_common+0x83/0xd0 [ 119.783522][ T6851] ? preempt_schedule+0xae/0xc0 [ 119.783552][ T6851] ? __pfx_preempt_schedule+0x10/0x10 [ 119.783583][ T6851] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 119.783611][ T6851] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 119.783654][ T6851] ? __local_bh_disable_ip+0xf1/0x190 [ 119.783690][ T6851] ? __pfx___cant_migrate+0x10/0x10 [ 119.783722][ T6851] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.783757][ T6851] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.783797][ T6851] ? bpf_test_timer_continue+0x136/0x350 [ 119.783831][ T6851] bpf_test_run+0x38b/0x830 [ 119.783881][ T6851] ? bpf_test_run+0x205/0x830 [ 119.783916][ T6851] ? __pfx_bpf_test_run+0x10/0x10 [ 119.784003][ T6851] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 119.784030][ T6851] ? convert___skb_to_skb+0x3d/0x590 [ 119.784059][ T6851] bpf_prog_test_run_skb+0xb30/0x1560 [ 119.784106][ T6851] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 119.784135][ T6851] bpf_prog_test_run+0x2c7/0x340 [ 119.784174][ T6851] __sys_bpf+0x4a4/0x860 [ 119.784209][ T6851] ? __pfx___sys_bpf+0x10/0x10 [ 119.784265][ T6851] ? ksys_write+0x22a/0x250 [ 119.784291][ T6851] ? __pfx_ksys_write+0x10/0x10 [ 119.784310][ T6851] ? rcu_is_watching+0x15/0xb0 [ 119.784358][ T6851] __x64_sys_bpf+0x7c/0x90 [ 119.784389][ T6851] do_syscall_64+0xfa/0x3b0 [ 119.784411][ T6851] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.784446][ T6851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.784471][ T6851] ? clear_bhb_loop+0x60/0xb0 [ 119.784500][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.784524][ T6851] RIP: 0033:0x7fd1dc58e929 [ 119.784544][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.784570][ T6851] RSP: 002b:00007fd1dd47a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.784595][ T6851] RAX: ffffffffffffffda RBX: 00007fd1dc7b5fa0 RCX: 00007fd1dc58e929 [ 119.784613][ T6851] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 119.784627][ T6851] RBP: 00007fd1dd47a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.784642][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.784655][ T6851] R13: 0000000000000000 R14: 00007fd1dc7b5fa0 R15: 00007fff03e44948 [ 119.784693][ T6851] [ 120.797087][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.805850][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.815270][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.823855][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.824527][ T13] bridge_slave_1: left allmulticast mode [ 120.841399][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.881850][ T13] bridge_slave_1: left promiscuous mode [ 120.894336][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.927754][ T13] bridge_slave_0: left allmulticast mode [ 120.937111][ T13] bridge_slave_0: left promiscuous mode [ 120.949836][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.268924][ T6896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.579961][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.599366][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.611604][ T13] bond0 (unregistering): Released all slaves [ 121.754976][ T6908] netlink: 240 bytes leftover after parsing attributes in process `syz.0.244'. [ 122.927157][ T5851] Bluetooth: hci2: command tx timeout [ 123.202004][ T6917] batadv1: entered allmulticast mode [ 123.243166][ T6922] batadv1: entered allmulticast mode [ 123.260003][ T6929] netem: unknown loss type 0 [ 123.269685][ T6929] netem: change failed [ 123.516253][ T6937] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 123.593571][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 123.623209][ T13] hsr_slave_0: left promiscuous mode [ 123.631768][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 123.652846][ T13] hsr_slave_1: left promiscuous mode [ 123.659074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.671896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.680959][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.688851][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.737220][ T13] veth1_macvtap: left promiscuous mode [ 123.750112][ T13] veth0_macvtap: left promiscuous mode [ 123.766282][ T13] veth1_vlan: left promiscuous mode [ 123.772034][ T13] veth0_vlan: left promiscuous mode [ 124.308531][ T6966] netlink: 240 bytes leftover after parsing attributes in process `syz.2.257'. [ 124.382079][ T6968] FAULT_INJECTION: forcing a failure. [ 124.382079][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 124.394896][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.2.258 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 124.394923][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.394935][ T6968] Call Trace: [ 124.394944][ T6968] [ 124.394953][ T6968] dump_stack_lvl+0x189/0x250 [ 124.394990][ T6968] ? __pfx____ratelimit+0x10/0x10 [ 124.395021][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.395053][ T6968] ? __pfx__printk+0x10/0x10 [ 124.395078][ T6968] ? rcu_is_watching+0x15/0xb0 [ 124.395121][ T6968] should_fail_ex+0x414/0x560 [ 124.395152][ T6968] should_failslab+0xa8/0x100 [ 124.395176][ T6968] kmem_cache_alloc_noprof+0x73/0x3c0 [ 124.395208][ T6968] ? skb_clone+0x212/0x3a0 [ 124.395240][ T6968] skb_clone+0x212/0x3a0 [ 124.395270][ T6968] bpf_clone_redirect+0xad/0x3d0 [ 124.395312][ T6968] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 124.395337][ T6968] ? ktime_get+0x3e/0x1f0 [ 124.395367][ T6968] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 124.395390][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.395419][ T6968] ? ktime_get+0x3e/0x1f0 [ 124.395437][ T6968] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 124.395468][ T6968] ? __local_bh_disable_ip+0xf1/0x190 [ 124.395499][ T6968] ? __pfx___cant_migrate+0x10/0x10 [ 124.395529][ T6968] ? __local_bh_enable_ip+0x12d/0x1c0 [ 124.395558][ T6968] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.395600][ T6968] ? bpf_test_timer_continue+0x136/0x350 [ 124.395630][ T6968] bpf_test_run+0x38b/0x830 [ 124.395665][ T6968] ? bpf_test_run+0x205/0x830 [ 124.395696][ T6968] ? __pfx_bpf_test_run+0x10/0x10 [ 124.395746][ T6968] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 124.395768][ T6968] ? convert___skb_to_skb+0x3d/0x590 [ 124.395794][ T6968] bpf_prog_test_run_skb+0xb30/0x1560 [ 124.395834][ T6968] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 124.395860][ T6968] bpf_prog_test_run+0x2c7/0x340 [ 124.395893][ T6968] __sys_bpf+0x4a4/0x860 [ 124.395924][ T6968] ? __pfx___sys_bpf+0x10/0x10 [ 124.395966][ T6968] ? ksys_write+0x22a/0x250 [ 124.395987][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 124.396003][ T6968] ? rcu_is_watching+0x15/0xb0 [ 124.396043][ T6968] __x64_sys_bpf+0x7c/0x90 [ 124.396086][ T6968] do_syscall_64+0xfa/0x3b0 [ 124.396103][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.396132][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.396153][ T6968] ? clear_bhb_loop+0x60/0xb0 [ 124.396179][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.396199][ T6968] RIP: 0033:0x7f8196b8e929 [ 124.396216][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.396234][ T6968] RSP: 002b:00007f8197913038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.396256][ T6968] RAX: ffffffffffffffda RBX: 00007f8196db5fa0 RCX: 00007f8196b8e929 [ 124.396271][ T6968] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 124.396284][ T6968] RBP: 00007f8197913090 R08: 0000000000000000 R09: 0000000000000000 [ 124.396296][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.396308][ T6968] R13: 0000000000000000 R14: 00007f8196db5fa0 R15: 00007fff3de1b368 [ 124.396341][ T6968] [ 124.933015][ T13] team0 (unregistering): Port device team_slave_1 removed [ 124.972711][ T13] team0 (unregistering): Port device team_slave_0 removed [ 125.005653][ T5851] Bluetooth: hci2: command tx timeout [ 125.348179][ T6978] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 125.358436][ T6979] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 125.433021][ T6980] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 125.490157][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 125.650197][ T6991] netlink: 140 bytes leftover after parsing attributes in process `syz.0.264'. [ 125.690221][ T6991] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.761238][ T6996] tipc: Cannot configure node identity twice [ 125.878245][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 126.787364][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.804329][ T7043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.275'. [ 126.822950][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.832116][ T6874] bridge_slave_0: entered allmulticast mode [ 126.852803][ T6874] bridge_slave_0: entered promiscuous mode [ 126.937817][ T7045] netlink: 'syz.0.276': attribute type 29 has an invalid length. [ 126.960119][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.968189][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.975499][ T6874] bridge_slave_1: entered allmulticast mode [ 126.984177][ T6874] bridge_slave_1: entered promiscuous mode [ 127.052939][ T7047] netlink: 'syz.0.276': attribute type 29 has an invalid length. [ 127.084202][ T5851] Bluetooth: hci2: command tx timeout [ 127.168713][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.232957][ T7045] netlink: 'syz.0.276': attribute type 29 has an invalid length. [ 127.261894][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.280779][ T7066] xt_hashlimit: size too large, truncated to 1048576 [ 127.352946][ T7068] xt_hashlimit: size too large, truncated to 1048576 [ 127.391473][ T6874] team0: Port device team_slave_0 added [ 127.429014][ T6874] team0: Port device team_slave_1 added [ 127.705070][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.725235][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.776102][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.804855][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.285'. [ 127.852101][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.879045][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.943641][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.975589][ T7103] delete_channel: no stack [ 128.047569][ T6874] hsr_slave_0: entered promiscuous mode [ 128.056432][ T6874] hsr_slave_1: entered promiscuous mode [ 128.066299][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.081201][ T6874] Cannot create hsr debugfs directory [ 128.486988][ T7121] netlink: 'syz.2.291': attribute type 29 has an invalid length. [ 128.531213][ T7121] netlink: 'syz.2.291': attribute type 29 has an invalid length. [ 128.569787][ T7121] netlink: 'syz.2.291': attribute type 29 has an invalid length. [ 128.618387][ T7121] netlink: 'syz.2.291': attribute type 29 has an invalid length. [ 129.095229][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 129.125044][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 129.163602][ T5851] Bluetooth: hci2: command tx timeout [ 129.210449][ T7142] bridge2: entered allmulticast mode [ 129.342603][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 129.695157][ T7179] netlink: 248 bytes leftover after parsing attributes in process `syz.2.305'. [ 129.948733][ T6874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.014893][ T6874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.060461][ T6874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.130900][ T6874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.192652][ T7209] netlink: 240 bytes leftover after parsing attributes in process `syz.0.311'. [ 130.398474][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 130.464689][ T7225] validate_nla: 5 callbacks suppressed [ 130.464708][ T7225] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 130.566308][ T7225] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 130.615391][ T7225] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 130.648936][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.692396][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 130.730835][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.855795][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.863083][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.928491][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.935705][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.949432][ T7244] netlink: 236 bytes leftover after parsing attributes in process `syz.3.322'. [ 131.562768][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.638068][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 131.701224][ T7281] netlink: 'syz.0.331': attribute type 29 has an invalid length. [ 131.734872][ T7281] netlink: 'syz.0.331': attribute type 29 has an invalid length. [ 131.784269][ T7281] netlink: 'syz.0.331': attribute type 29 has an invalid length. [ 132.282442][ T7303] FAULT_INJECTION: forcing a failure. [ 132.282442][ T7303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.312017][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.1.336 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 132.312047][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.312059][ T7303] Call Trace: [ 132.312068][ T7303] [ 132.312076][ T7303] dump_stack_lvl+0x189/0x250 [ 132.312114][ T7303] ? __pfx____ratelimit+0x10/0x10 [ 132.312164][ T7303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.312197][ T7303] ? __pfx__printk+0x10/0x10 [ 132.312221][ T7303] ? __might_fault+0xb0/0x130 [ 132.312253][ T7303] should_fail_ex+0x414/0x560 [ 132.312286][ T7303] _copy_from_user+0x2d/0xb0 [ 132.312308][ T7303] ___sys_sendmsg+0x158/0x2a0 [ 132.312338][ T7303] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.312413][ T7303] ? __fget_files+0x2a/0x420 [ 132.312436][ T7303] ? __fget_files+0x3a0/0x420 [ 132.312470][ T7303] __x64_sys_sendmsg+0x19b/0x260 [ 132.312500][ T7303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.312538][ T7303] ? __pfx_ksys_write+0x10/0x10 [ 132.312554][ T7303] ? rcu_is_watching+0x15/0xb0 [ 132.312598][ T7303] ? do_syscall_64+0xbe/0x3b0 [ 132.312622][ T7303] do_syscall_64+0xfa/0x3b0 [ 132.312640][ T7303] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.312669][ T7303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.312690][ T7303] ? clear_bhb_loop+0x60/0xb0 [ 132.312715][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.312735][ T7303] RIP: 0033:0x7f4151b8e929 [ 132.312754][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.312771][ T7303] RSP: 002b:00007f4152978038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.312793][ T7303] RAX: ffffffffffffffda RBX: 00007f4151db5fa0 RCX: 00007f4151b8e929 [ 132.312808][ T7303] RDX: 0000000004004012 RSI: 0000200000000140 RDI: 0000000000000003 [ 132.312821][ T7303] RBP: 00007f4152978090 R08: 0000000000000000 R09: 0000000000000000 [ 132.312834][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.312845][ T7303] R13: 0000000000000000 R14: 00007f4151db5fa0 R15: 00007ffeafc1a918 [ 132.312878][ T7303] [ 132.558306][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 132.690573][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.703840][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809535][ T6874] veth0_vlan: entered promiscuous mode [ 132.831008][ T6874] veth1_vlan: entered promiscuous mode [ 132.909690][ T6874] veth0_macvtap: entered promiscuous mode [ 132.924283][ T6874] veth1_macvtap: entered promiscuous mode [ 132.977087][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.999293][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.026751][ T6874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.037565][ T6874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.051104][ T6874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.061457][ T6874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.184383][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.192271][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.240744][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.251332][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.037441][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.073827][ T7353] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 134.220195][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.329463][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.537738][ T7366] raw_sendmsg: syz.3.347 forgot to set AF_INET. Fix it! [ 134.548499][ T7367] xt_l2tp: unknown flags: 18 [ 134.590595][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.708550][ T7369] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 134.774707][ T7374] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 134.830865][ T7376] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 135.178184][ T36] bridge_slave_1: left allmulticast mode [ 135.194173][ T7398] __nla_validate_parse: 2 callbacks suppressed [ 135.194189][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 135.233406][ T36] bridge_slave_1: left promiscuous mode [ 135.239218][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.255335][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 135.338216][ T36] bridge_slave_0: left allmulticast mode [ 135.357060][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.370009][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.380258][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.391355][ T36] bridge_slave_0: left promiscuous mode [ 135.400937][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.411561][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.420367][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.810018][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.821182][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.832986][ T36] bond0 (unregistering): Released all slaves [ 136.089577][ T30] audit: type=1800 audit(1750146034.420:2): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.360" name="bpf-map" dev="anon_inodefs" ino=1074 res=0 errno=0 [ 136.126186][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.135335][ T7433] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 136.147658][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.264903][ T7435] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 136.308129][ T7435] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 136.499269][ T7435] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 136.509235][ T7446] netlink: 'syz.0.365': attribute type 3 has an invalid length. [ 136.539290][ T7446] netlink: 76 bytes leftover after parsing attributes in process `syz.0.365'. [ 136.578250][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 136.598118][ T7450] netlink: 'syz.0.365': attribute type 7 has an invalid length. [ 136.625475][ T36] hsr_slave_0: left promiscuous mode [ 136.631788][ T36] hsr_slave_1: left promiscuous mode [ 136.638295][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.646165][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.665128][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.674293][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.712716][ T36] veth1_macvtap: left promiscuous mode [ 136.718746][ T36] veth0_macvtap: left promiscuous mode [ 136.720168][ T7457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'. [ 136.724634][ T36] veth1_vlan: left promiscuous mode [ 136.739095][ T36] veth0_vlan: left promiscuous mode [ 137.355083][ T36] team0 (unregistering): Port device team_slave_1 removed [ 137.391506][ T36] team0 (unregistering): Port device team_slave_0 removed [ 137.494112][ T5155] Bluetooth: hci2: command tx timeout [ 138.214592][ T7491] tunl0: entered promiscuous mode [ 138.253658][ T7491] netlink: 'syz.2.375': attribute type 3 has an invalid length. [ 138.269380][ T7491] netlink: 9 bytes leftover after parsing attributes in process `syz.2.375'. [ 138.280936][ T7404] chnl_net:caif_netlink_parms(): no params data found [ 138.583324][ T7501] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 138.642786][ T7501] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 138.681527][ T7501] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 138.904795][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.923951][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.962160][ T7404] bridge_slave_0: entered allmulticast mode [ 138.993884][ T7404] bridge_slave_0: entered promiscuous mode [ 139.020290][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.030290][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 139.053444][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.078736][ T7404] bridge_slave_1: entered allmulticast mode [ 139.106474][ T7404] bridge_slave_1: entered promiscuous mode [ 139.452322][ T7404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.499313][ T7404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.564616][ T5155] Bluetooth: hci2: command tx timeout [ 139.814866][ T7562] bridge0: port 3(vlan3) entered blocking state [ 139.838456][ T7562] bridge0: port 3(vlan3) entered disabled state [ 139.857417][ T7562] vlan3: entered allmulticast mode [ 139.878831][ T7562] bridge0: entered allmulticast mode [ 139.896872][ T7562] vlan3: left allmulticast mode [ 139.901787][ T7562] bridge0: left allmulticast mode [ 139.937158][ T7404] team0: Port device team_slave_0 added [ 139.964877][ T7404] team0: Port device team_slave_1 added [ 140.220129][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.249187][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.347250][ T7404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.428136][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.452470][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.559210][ T7404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.677481][ T7608] netlink: 240 bytes leftover after parsing attributes in process `syz.2.404'. [ 140.777774][ T7614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.405'. [ 141.643469][ T5155] Bluetooth: hci2: command tx timeout [ 142.081975][ T7404] hsr_slave_0: entered promiscuous mode [ 142.094488][ T7404] hsr_slave_1: entered promiscuous mode [ 142.104126][ T7404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.129919][ T7404] Cannot create hsr debugfs directory [ 142.176522][ T7630] validate_nla: 5 callbacks suppressed [ 142.176540][ T7630] netlink: 'syz.2.407': attribute type 29 has an invalid length. [ 142.225958][ T7638] netlink: 'syz.3.409': attribute type 178 has an invalid length. [ 142.545726][ T30] audit: type=1107 audit(1750146040.880:3): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.579682][ T30] audit: type=1107 audit(1750146040.890:4): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.936535][ T7664] sctp: [Deprecated]: syz.2.417 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.936535][ T7664] Use struct sctp_sack_info instead [ 143.174613][ T7661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.431556][ T7680] netlink: 'syz.1.420': attribute type 29 has an invalid length. [ 143.592734][ T7685] netlink: 'syz.1.420': attribute type 29 has an invalid length. [ 143.644366][ T7680] netlink: 'syz.1.420': attribute type 29 has an invalid length. [ 143.663418][ T7693] tipc: Started in network mode [ 143.683369][ T7693] tipc: Node identity , cluster identity 4711 [ 143.693869][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 143.715104][ T7693] tipc: Failed to obtain node identity [ 143.721333][ T7693] tipc: Enabling of bearer rejected, failed to enable media [ 143.732017][ T5155] Bluetooth: hci2: command tx timeout [ 144.072052][ T7705] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.378341][ T7720] 8021q: VLANs not supported on vxcan1 [ 144.388055][ T7719] 8021q: VLANs not supported on ipvlan0 [ 144.567301][ T7404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.672798][ T7731] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 144.681059][ T7736] netlink: 165 bytes leftover after parsing attributes in process `syz.3.437'. [ 144.709116][ T7404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.749150][ T7731] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 144.765902][ T7734] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 144.791291][ T7404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.834765][ T7731] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 144.881473][ T7404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.940635][ T7746] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 145.115086][ T7761] veth0_virt_wifi: mtu less than device minimum [ 145.312003][ T7404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.393171][ T7404] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.445183][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.452426][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.505380][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.512563][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.689164][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 145.922476][ T7799] xt_SECMARK: invalid mode: 0 [ 146.139404][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 146.184362][ T7811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.457'. [ 146.282801][ T7404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.026062][ T7851] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.466'. [ 147.184315][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 147.282216][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 147.382461][ T7864] netlink: 188 bytes leftover after parsing attributes in process `syz.2.470'. [ 147.415986][ T7404] veth0_vlan: entered promiscuous mode [ 147.465001][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 147.480069][ T7404] veth1_vlan: entered promiscuous mode [ 147.533630][ T7404] veth0_macvtap: entered promiscuous mode [ 147.616535][ T7404] veth1_macvtap: entered promiscuous mode [ 147.678578][ T7876] netlink: 240 bytes leftover after parsing attributes in process `syz.2.474'. [ 147.716000][ T7404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.742542][ T7404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.760930][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.476'. [ 147.786161][ T7404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.815025][ T7881] ip6t_srh: unknown srh match flags 4001 [ 147.827788][ T7404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.874912][ T7404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.893384][ T7404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.266687][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.310172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.433904][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.473799][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.506705][ T7910] ip6gretap0: entered promiscuous mode [ 148.591390][ T7908] ip6gretap0: left promiscuous mode [ 148.785898][ T7917] validate_nla: 10 callbacks suppressed [ 148.785916][ T7917] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 148.930368][ T7926] netlink: 'syz.2.487': attribute type 2 has an invalid length. [ 149.275471][ T7938] FAULT_INJECTION: forcing a failure. [ 149.275471][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 149.288186][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.0.494 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 149.288211][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.288222][ T7938] Call Trace: [ 149.288229][ T7938] [ 149.288238][ T7938] dump_stack_lvl+0x189/0x250 [ 149.288274][ T7938] ? __pfx____ratelimit+0x10/0x10 [ 149.288303][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.288334][ T7938] ? __pfx__printk+0x10/0x10 [ 149.288357][ T7938] ? rcu_is_watching+0x15/0xb0 [ 149.288396][ T7938] should_fail_ex+0x414/0x560 [ 149.288426][ T7938] should_failslab+0xa8/0x100 [ 149.288449][ T7938] kmem_cache_alloc_noprof+0x73/0x3c0 [ 149.288479][ T7938] ? skb_clone+0x212/0x3a0 [ 149.288509][ T7938] skb_clone+0x212/0x3a0 [ 149.288538][ T7938] bpf_clone_redirect+0xad/0x3d0 [ 149.288578][ T7938] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 149.288602][ T7938] ? ktime_get+0x3e/0x1f0 [ 149.288629][ T7938] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 149.288650][ T7938] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.288676][ T7938] ? ktime_get+0x3e/0x1f0 [ 149.288701][ T7938] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 149.288727][ T7938] ? __local_bh_disable_ip+0xf1/0x190 [ 149.288756][ T7938] ? __pfx___cant_migrate+0x10/0x10 [ 149.288784][ T7938] ? __local_bh_enable_ip+0x12d/0x1c0 [ 149.288812][ T7938] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 149.288845][ T7938] ? bpf_test_timer_continue+0x136/0x350 [ 149.288874][ T7938] bpf_test_run+0x38b/0x830 [ 149.288906][ T7938] ? bpf_test_run+0x205/0x830 [ 149.288934][ T7938] ? __pfx_bpf_test_run+0x10/0x10 [ 149.288981][ T7938] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 149.289001][ T7938] ? convert___skb_to_skb+0x3d/0x590 [ 149.289025][ T7938] bpf_prog_test_run_skb+0xb30/0x1560 [ 149.289063][ T7938] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 149.289085][ T7938] bpf_prog_test_run+0x2c7/0x340 [ 149.289116][ T7938] __sys_bpf+0x4a4/0x860 [ 149.289142][ T7938] ? __pfx___sys_bpf+0x10/0x10 [ 149.289179][ T7938] ? ksys_write+0x22a/0x250 [ 149.289198][ T7938] ? __pfx_ksys_write+0x10/0x10 [ 149.289212][ T7938] ? rcu_is_watching+0x15/0xb0 [ 149.289248][ T7938] __x64_sys_bpf+0x7c/0x90 [ 149.289270][ T7938] do_syscall_64+0xfa/0x3b0 [ 149.289285][ T7938] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.289312][ T7938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.289330][ T7938] ? clear_bhb_loop+0x60/0xb0 [ 149.289353][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.289371][ T7938] RIP: 0033:0x7fd1dc58e929 [ 149.289387][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.289403][ T7938] RSP: 002b:00007fd1dd47a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.289423][ T7938] RAX: ffffffffffffffda RBX: 00007fd1dc7b5fa0 RCX: 00007fd1dc58e929 [ 149.289437][ T7938] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 149.289449][ T7938] RBP: 00007fd1dd47a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.289460][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.289470][ T7938] R13: 0000000000000000 R14: 00007fd1dc7b5fa0 R15: 00007fff03e44948 [ 149.289499][ T7938] [ 149.938577][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.244193][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.546040][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.819191][ T7988] FAULT_INJECTION: forcing a failure. [ 150.819191][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 150.831929][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.3.506 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 150.831954][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.831967][ T7988] Call Trace: [ 150.831975][ T7988] [ 150.831983][ T7988] dump_stack_lvl+0x189/0x250 [ 150.832020][ T7988] ? __pfx____ratelimit+0x10/0x10 [ 150.832051][ T7988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.832083][ T7988] ? __pfx__printk+0x10/0x10 [ 150.832108][ T7988] ? rcu_is_watching+0x15/0xb0 [ 150.832150][ T7988] should_fail_ex+0x414/0x560 [ 150.832193][ T7988] should_failslab+0xa8/0x100 [ 150.832215][ T7988] kmem_cache_alloc_noprof+0x73/0x3c0 [ 150.832245][ T7988] ? skb_clone+0x212/0x3a0 [ 150.832275][ T7988] skb_clone+0x212/0x3a0 [ 150.832305][ T7988] bpf_clone_redirect+0xad/0x3d0 [ 150.832345][ T7988] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 150.832369][ T7988] ? ktime_get+0x3e/0x1f0 [ 150.832402][ T7988] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 150.832424][ T7988] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.832452][ T7988] ? ktime_get+0x3e/0x1f0 [ 150.832469][ T7988] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 150.832498][ T7988] ? __local_bh_disable_ip+0xf1/0x190 [ 150.832526][ T7988] ? __pfx___cant_migrate+0x10/0x10 [ 150.832554][ T7988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.832582][ T7988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.832615][ T7988] ? bpf_test_timer_continue+0x136/0x350 [ 150.832643][ T7988] bpf_test_run+0x38b/0x830 [ 150.832675][ T7988] ? bpf_test_run+0x205/0x830 [ 150.832704][ T7988] ? __pfx_bpf_test_run+0x10/0x10 [ 150.832750][ T7988] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 150.832771][ T7988] ? convert___skb_to_skb+0x3d/0x590 [ 150.832795][ T7988] bpf_prog_test_run_skb+0xb30/0x1560 [ 150.832833][ T7988] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 150.832855][ T7988] bpf_prog_test_run+0x2c7/0x340 [ 150.832886][ T7988] __sys_bpf+0x4a4/0x860 [ 150.832914][ T7988] ? __pfx___sys_bpf+0x10/0x10 [ 150.832953][ T7988] ? ksys_write+0x22a/0x250 [ 150.832973][ T7988] ? __pfx_ksys_write+0x10/0x10 [ 150.832988][ T7988] ? rcu_is_watching+0x15/0xb0 [ 150.833025][ T7988] __x64_sys_bpf+0x7c/0x90 [ 150.833048][ T7988] do_syscall_64+0xfa/0x3b0 [ 150.833082][ T7988] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.833111][ T7988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.833131][ T7988] ? clear_bhb_loop+0x60/0xb0 [ 150.833156][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.833176][ T7988] RIP: 0033:0x7f217b18e929 [ 150.833193][ T7988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.833210][ T7988] RSP: 002b:00007f217c018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.833231][ T7988] RAX: ffffffffffffffda RBX: 00007f217b3b5fa0 RCX: 00007f217b18e929 [ 150.833245][ T7988] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 150.833262][ T7988] RBP: 00007f217c018090 R08: 0000000000000000 R09: 0000000000000000 [ 150.833274][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.833285][ T7988] R13: 0000000000000000 R14: 00007f217b3b5fa0 R15: 00007ffe505e9de8 [ 150.833316][ T7988] [ 151.320028][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.371572][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.383090][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.393020][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.410551][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.419290][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.619090][ T8008] syz_tun: entered allmulticast mode [ 151.680257][ T8012] Bluetooth: MGMT ver 1.23 [ 151.764390][ T59] bridge_slave_1: left allmulticast mode [ 151.780342][ T59] bridge_slave_1: left promiscuous mode [ 151.793619][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.819002][ T59] bridge_slave_0: left allmulticast mode [ 151.825765][ T59] bridge_slave_0: left promiscuous mode [ 151.831593][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.094863][ T8022] __nla_validate_parse: 7 callbacks suppressed [ 152.094881][ T8022] netlink: 212392 bytes leftover after parsing attributes in process `syz.2.516'. [ 152.221740][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.234566][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.250141][ T59] bond0 (unregistering): Released all slaves [ 152.275506][ T8007] syz_tun: left allmulticast mode [ 152.550273][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.522'. [ 152.924387][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 152.989393][ T8058] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.297183][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 153.386684][ T8075] tipc: Started in network mode [ 153.391740][ T8075] tipc: Node identity 4, cluster identity 4711 [ 153.400187][ T8075] tipc: Node number set to 4 [ 153.497655][ T5851] Bluetooth: hci2: command tx timeout [ 153.794828][ T59] hsr_slave_0: left promiscuous mode [ 153.860046][ T59] hsr_slave_1: left promiscuous mode [ 153.888438][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.907145][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.922423][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.943432][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.016532][ T59] veth1_macvtap: left promiscuous mode [ 154.029791][ T59] veth0_macvtap: left promiscuous mode [ 154.041171][ T59] veth1_vlan: left promiscuous mode [ 154.047541][ T59] veth0_vlan: left promiscuous mode [ 154.141195][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 154.319753][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 154.541268][ T59] team0 (unregistering): Port device team_slave_1 removed [ 154.577656][ T59] team0 (unregistering): Port device team_slave_0 removed [ 154.913725][ T8105] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 154.923047][ T8105] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 155.233203][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 155.281477][ T8142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.545'. [ 155.466783][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.483798][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.501103][ T8000] bridge_slave_0: entered allmulticast mode [ 155.519646][ T8000] bridge_slave_0: entered promiscuous mode [ 155.531967][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.555401][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.563619][ T5851] Bluetooth: hci2: command tx timeout [ 155.577505][ T8000] bridge_slave_1: entered allmulticast mode [ 155.596105][ T8000] bridge_slave_1: entered promiscuous mode [ 155.730708][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.740272][ T12] wlan1: Trigger new scan to find an IBSS to join [ 155.765976][ T8154] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 155.779658][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.897898][ T8154] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.950999][ T8000] team0: Port device team_slave_0 added [ 155.973129][ T8000] team0: Port device team_slave_1 added [ 156.264723][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.271729][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.325222][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 156.341381][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.579806][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.592328][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.658574][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.872807][ T8204] netlink: 'syz.0.562': attribute type 11 has an invalid length. [ 156.885793][ T8000] hsr_slave_0: entered promiscuous mode [ 156.923614][ T8000] hsr_slave_1: entered promiscuous mode [ 156.936235][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.963329][ T8000] Cannot create hsr debugfs directory [ 157.525103][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 157.653771][ T5851] Bluetooth: hci2: command tx timeout [ 158.065268][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 158.360950][ T8000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.401436][ T8000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.431360][ T8000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.477237][ T8000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.531827][ T8264] syzkaller0: entered promiscuous mode [ 158.562138][ T8264] syzkaller0: entered allmulticast mode [ 158.594998][ T8264] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 158.819619][ T8281] netlink: 3 bytes leftover after parsing attributes in process `syz.3.583'. [ 158.870921][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.938089][ T30] audit: type=1107 audit(1750146057.260:5): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 159.000069][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.029860][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.037119][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.063092][ T8290] xt_l2tp: v2 tid > 0xffff: 150994944 [ 159.092767][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.100024][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.492118][ T8310] syz_tun: entered allmulticast mode [ 159.723556][ T5851] Bluetooth: hci2: command tx timeout [ 159.755836][ T8307] syz_tun: left allmulticast mode [ 159.827973][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.457859][ T8357] openvswitch: netlink: Missing valid actions attribute. [ 160.465190][ T8357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.489850][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 160.683979][ T59] wlan1: Trigger new scan to find an IBSS to join [ 160.943498][ T8380] syz_tun: entered allmulticast mode [ 160.962644][ T8000] veth0_vlan: entered promiscuous mode [ 161.158632][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 161.194667][ T8391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.608'. [ 161.231521][ T8000] veth1_vlan: entered promiscuous mode [ 161.440647][ T8000] veth0_macvtap: entered promiscuous mode [ 161.449391][ T8401] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.530079][ T8000] veth1_macvtap: entered promiscuous mode [ 161.581009][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 161.582184][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 161.631651][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.640520][ T153] wlan1: Creating new IBSS network, BSSID f2:96:c8:10:65:15 [ 161.691554][ T8403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.610'. [ 161.730433][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.786028][ T8000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.831569][ T8000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.846999][ T8000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.867588][ T8000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.921547][ T8421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.615'. [ 162.004329][ T8423] bridge3: entered promiscuous mode [ 162.022280][ T8423] bridge3: entered allmulticast mode [ 162.288695][ T8435] macvtap1: entered promiscuous mode [ 162.295244][ T8435] vlan0: entered promiscuous mode [ 162.305110][ T8435] macvtap1: entered allmulticast mode [ 162.310586][ T8435] vlan0: entered allmulticast mode [ 162.331655][ T8435] veth0_vlan: entered allmulticast mode [ 162.386343][ T8435] vlan0: left allmulticast mode [ 162.392111][ T8435] veth0_vlan: left allmulticast mode [ 162.405031][ T8435] vlan0: left promiscuous mode [ 162.448466][ T8441] syz_tun: entered allmulticast mode [ 162.674697][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.716816][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.865194][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.873061][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.025035][ T8472] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 163.045168][ T8477] __nla_validate_parse: 1 callbacks suppressed [ 163.045186][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 163.104602][ T8472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.187352][ T8472] bond1: (slave geneve2): making interface the new active one [ 163.250007][ T8472] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 163.388606][ T8482] bond1: entered promiscuous mode [ 163.419557][ T8482] geneve2: entered promiscuous mode [ 163.736821][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.750303][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 163.785695][ T8506] syz_tun: entered allmulticast mode [ 163.980596][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.044964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.114715][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.174790][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.352192][ T36] bridge_slave_1: left allmulticast mode [ 164.358337][ T36] bridge_slave_1: left promiscuous mode [ 164.368403][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.377790][ T36] bridge_slave_0: left allmulticast mode [ 164.383770][ T36] bridge_slave_0: left promiscuous mode [ 164.389500][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.961723][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.999229][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.028565][ T36] bond0 (unregistering): Released all slaves [ 165.411972][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.421830][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.436338][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.448546][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.448949][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 165.463336][ T8557] netlink: 'syz.2.646': attribute type 11 has an invalid length. [ 165.472668][ T8557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.646'. [ 165.484207][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.512309][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 165.521327][ T8570] netlink: 'syz.3.648': attribute type 11 has an invalid length. [ 165.909464][ T36] hsr_slave_0: left promiscuous mode [ 165.922496][ T36] hsr_slave_1: left promiscuous mode [ 165.936083][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.961890][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.995366][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.012093][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.059087][ T36] veth1_macvtap: left promiscuous mode [ 166.065330][ T36] veth0_macvtap: left promiscuous mode [ 166.072918][ T36] veth1_vlan: left promiscuous mode [ 166.078397][ T36] veth0_vlan: left promiscuous mode [ 166.698844][ T8608] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 166.719270][ T36] team0 (unregistering): Port device team_slave_1 removed [ 166.782612][ T36] team0 (unregistering): Port device team_slave_0 removed [ 167.294641][ T8614] veth5: entered allmulticast mode [ 167.398397][ T8620] openvswitch: netlink: IP tunnel dst address not specified [ 167.563377][ T5851] Bluetooth: hci2: command tx timeout [ 167.567675][ T8628] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.763410][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 167.796829][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 168.099948][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.116102][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.124427][ T8563] bridge_slave_0: entered allmulticast mode [ 168.133013][ T8563] bridge_slave_0: entered promiscuous mode [ 168.159975][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.186824][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.215552][ T8563] bridge_slave_1: entered allmulticast mode [ 168.235369][ T8563] bridge_slave_1: entered promiscuous mode [ 168.369294][ T8657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.390525][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.450135][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.642286][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.651218][ T8563] team0: Port device team_slave_0 added [ 168.668135][ T8670] pim6reg527: entered allmulticast mode [ 168.683074][ T8563] team0: Port device team_slave_1 added [ 168.704486][ T8671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.851328][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.868834][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.895620][ T8676] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 168.912223][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.932349][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.937572][ T8676] netlink: 172 bytes leftover after parsing attributes in process `syz.1.674'. [ 168.942429][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.004739][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.067444][ T8676] netlink: 204 bytes leftover after parsing attributes in process `syz.1.674'. [ 169.579760][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 169.643685][ T5851] Bluetooth: hci2: command tx timeout [ 169.724142][ T8727] netlink: 240 bytes leftover after parsing attributes in process `syz.1.681'. [ 169.796561][ T8563] hsr_slave_0: entered promiscuous mode [ 169.834538][ T8563] hsr_slave_1: entered promiscuous mode [ 169.849471][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.873346][ T8563] Cannot create hsr debugfs directory [ 170.019386][ T3427] IPVS: starting estimator thread 0... [ 170.070799][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 170.113393][ T8741] IPVS: using max 30 ests per chain, 72000 per kthread [ 170.429013][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 170.446218][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.690'. [ 170.466723][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 170.475469][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 170.478163][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.690'. [ 170.673001][ T8774] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 170.814478][ T8774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.839829][ T8775] bond2: (slave geneve2): making interface the new active one [ 170.858147][ T8775] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 170.916307][ T8782] bond2: entered promiscuous mode [ 170.921408][ T8782] geneve2: entered promiscuous mode [ 171.629720][ T8809] FAULT_INJECTION: forcing a failure. [ 171.629720][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 171.642435][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.3.702 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 171.642459][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.642471][ T8809] Call Trace: [ 171.642478][ T8809] [ 171.642485][ T8809] dump_stack_lvl+0x189/0x250 [ 171.642518][ T8809] ? __pfx____ratelimit+0x10/0x10 [ 171.642545][ T8809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.642573][ T8809] ? __pfx__printk+0x10/0x10 [ 171.642596][ T8809] ? rcu_is_watching+0x15/0xb0 [ 171.642633][ T8809] should_fail_ex+0x414/0x560 [ 171.642662][ T8809] should_failslab+0xa8/0x100 [ 171.642683][ T8809] kmem_cache_alloc_noprof+0x73/0x3c0 [ 171.642712][ T8809] ? skb_clone+0x212/0x3a0 [ 171.642740][ T8809] skb_clone+0x212/0x3a0 [ 171.642774][ T8809] bpf_clone_redirect+0xad/0x3d0 [ 171.642811][ T8809] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 171.642833][ T8809] ? preempt_schedule+0xae/0xc0 [ 171.642857][ T8809] ? bpf_test_run+0x205/0x830 [ 171.642877][ T8809] ? preempt_schedule_common+0x83/0xd0 [ 171.642903][ T8809] ? preempt_schedule+0xae/0xc0 [ 171.642927][ T8809] ? __pfx_preempt_schedule+0x10/0x10 [ 171.642955][ T8809] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 171.642988][ T8809] ? __local_bh_disable_ip+0xf1/0x190 [ 171.643015][ T8809] ? __pfx___cant_migrate+0x10/0x10 [ 171.643042][ T8809] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.643068][ T8809] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 171.643099][ T8809] ? bpf_test_timer_continue+0x136/0x350 [ 171.643125][ T8809] bpf_test_run+0x38b/0x830 [ 171.643173][ T8809] ? bpf_test_run+0x205/0x830 [ 171.643202][ T8809] ? __pfx_bpf_test_run+0x10/0x10 [ 171.643251][ T8809] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 171.643272][ T8809] ? convert___skb_to_skb+0x3d/0x590 [ 171.643296][ T8809] bpf_prog_test_run_skb+0xb30/0x1560 [ 171.643333][ T8809] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.643356][ T8809] bpf_prog_test_run+0x2c7/0x340 [ 171.643388][ T8809] __sys_bpf+0x4a4/0x860 [ 171.643416][ T8809] ? __pfx___sys_bpf+0x10/0x10 [ 171.643455][ T8809] ? ksys_write+0x22a/0x250 [ 171.643475][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 171.643489][ T8809] ? rcu_is_watching+0x15/0xb0 [ 171.643528][ T8809] __x64_sys_bpf+0x7c/0x90 [ 171.643551][ T8809] do_syscall_64+0xfa/0x3b0 [ 171.643566][ T8809] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.643594][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.643612][ T8809] ? clear_bhb_loop+0x60/0xb0 [ 171.643635][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.643653][ T8809] RIP: 0033:0x7f217b18e929 [ 171.643669][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.643687][ T8809] RSP: 002b:00007f217c018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.643707][ T8809] RAX: ffffffffffffffda RBX: 00007f217b3b5fa0 RCX: 00007f217b18e929 [ 171.643721][ T8809] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 171.643733][ T8809] RBP: 00007f217c018090 R08: 0000000000000000 R09: 0000000000000000 [ 171.643745][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.643762][ T8809] R13: 0000000000000000 R14: 00007f217b3b5fa0 R15: 00007ffe505e9de8 [ 171.643793][ T8809] [ 171.993573][ T8563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.996976][ T5851] Bluetooth: hci2: command tx timeout [ 172.137223][ T8817] netlink: 'syz.2.703': attribute type 2 has an invalid length. [ 172.162087][ T8563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.295753][ T8563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.357068][ T8563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.698556][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.768273][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.799309][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.806580][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.877539][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.884804][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.029125][ T8858] FAULT_INJECTION: forcing a failure. [ 173.029125][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 173.041838][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.1.716 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 173.041864][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.041876][ T8858] Call Trace: [ 173.041885][ T8858] [ 173.041893][ T8858] dump_stack_lvl+0x189/0x250 [ 173.041929][ T8858] ? __pfx____ratelimit+0x10/0x10 [ 173.041960][ T8858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.041990][ T8858] ? __pfx__printk+0x10/0x10 [ 173.042014][ T8858] ? rcu_is_watching+0x15/0xb0 [ 173.042054][ T8858] should_fail_ex+0x414/0x560 [ 173.042085][ T8858] should_failslab+0xa8/0x100 [ 173.042105][ T8858] kmem_cache_alloc_noprof+0x73/0x3c0 [ 173.042130][ T8858] ? skb_clone+0x212/0x3a0 [ 173.042155][ T8858] skb_clone+0x212/0x3a0 [ 173.042179][ T8858] bpf_clone_redirect+0xad/0x3d0 [ 173.042212][ T8858] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 173.042231][ T8858] ? ktime_get+0x3e/0x1f0 [ 173.042253][ T8858] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 173.042270][ T8858] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.042293][ T8858] ? ktime_get+0x3e/0x1f0 [ 173.042308][ T8858] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 173.042330][ T8858] ? __local_bh_disable_ip+0xf1/0x190 [ 173.042356][ T8858] ? __pfx___cant_migrate+0x10/0x10 [ 173.042379][ T8858] ? __local_bh_enable_ip+0x12d/0x1c0 [ 173.042402][ T8858] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 173.042429][ T8858] ? bpf_test_timer_continue+0x136/0x350 [ 173.042452][ T8858] bpf_test_run+0x38b/0x830 [ 173.042478][ T8858] ? bpf_test_run+0x205/0x830 [ 173.042501][ T8858] ? __pfx_bpf_test_run+0x10/0x10 [ 173.042536][ T8858] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 173.042553][ T8858] ? convert___skb_to_skb+0x3d/0x590 [ 173.042572][ T8858] bpf_prog_test_run_skb+0xb30/0x1560 [ 173.042611][ T8858] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 173.042629][ T8858] bpf_prog_test_run+0x2c7/0x340 [ 173.042655][ T8858] __sys_bpf+0x4a4/0x860 [ 173.042677][ T8858] ? __pfx___sys_bpf+0x10/0x10 [ 173.042708][ T8858] ? ksys_write+0x22a/0x250 [ 173.042724][ T8858] ? __pfx_ksys_write+0x10/0x10 [ 173.042736][ T8858] ? rcu_is_watching+0x15/0xb0 [ 173.042765][ T8858] __x64_sys_bpf+0x7c/0x90 [ 173.042784][ T8858] do_syscall_64+0xfa/0x3b0 [ 173.042797][ T8858] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.042819][ T8858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.042834][ T8858] ? clear_bhb_loop+0x60/0xb0 [ 173.042853][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.042868][ T8858] RIP: 0033:0x7f4151b8e929 [ 173.042881][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.042894][ T8858] RSP: 002b:00007f4152978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.042910][ T8858] RAX: ffffffffffffffda RBX: 00007f4151db5fa0 RCX: 00007f4151b8e929 [ 173.042922][ T8858] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 173.042932][ T8858] RBP: 00007f4152978090 R08: 0000000000000000 R09: 0000000000000000 [ 173.042942][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.042951][ T8858] R13: 0000000000000000 R14: 00007f4151db5fa0 R15: 00007ffeafc1a918 [ 173.042975][ T8858] [ 173.798446][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.044013][ T5155] Bluetooth: hci2: command tx timeout [ 174.471185][ T8910] __nla_validate_parse: 10 callbacks suppressed [ 174.471220][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 174.837870][ T8563] veth0_vlan: entered promiscuous mode [ 174.872928][ T8563] veth1_vlan: entered promiscuous mode [ 174.887068][ T8932] FAULT_INJECTION: forcing a failure. [ 174.887068][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 174.899789][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.3.732 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 174.899816][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.899829][ T8932] Call Trace: [ 174.899837][ T8932] [ 174.899846][ T8932] dump_stack_lvl+0x189/0x250 [ 174.899895][ T8932] ? __pfx____ratelimit+0x10/0x10 [ 174.899925][ T8932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.899955][ T8932] ? __pfx__printk+0x10/0x10 [ 174.899979][ T8932] ? rcu_is_watching+0x15/0xb0 [ 174.900018][ T8932] should_fail_ex+0x414/0x560 [ 174.900049][ T8932] should_failslab+0xa8/0x100 [ 174.900072][ T8932] kmem_cache_alloc_noprof+0x73/0x3c0 [ 174.900102][ T8932] ? skb_clone+0x212/0x3a0 [ 174.900133][ T8932] skb_clone+0x212/0x3a0 [ 174.900162][ T8932] bpf_clone_redirect+0xad/0x3d0 [ 174.900201][ T8932] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 174.900225][ T8932] ? ktime_get+0x3e/0x1f0 [ 174.900251][ T8932] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 174.900273][ T8932] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.900314][ T8932] ? ktime_get+0x3e/0x1f0 [ 174.900331][ T8932] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 174.900357][ T8932] ? __local_bh_disable_ip+0xf1/0x190 [ 174.900383][ T8932] ? __pfx___cant_migrate+0x10/0x10 [ 174.900410][ T8932] ? __local_bh_enable_ip+0x12d/0x1c0 [ 174.900437][ T8932] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.900477][ T8932] ? bpf_test_timer_continue+0x136/0x350 [ 174.900503][ T8932] bpf_test_run+0x38b/0x830 [ 174.900534][ T8932] ? bpf_test_run+0x205/0x830 [ 174.900561][ T8932] ? __pfx_bpf_test_run+0x10/0x10 [ 174.900605][ T8932] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 174.900625][ T8932] ? convert___skb_to_skb+0x3d/0x590 [ 174.900647][ T8932] bpf_prog_test_run_skb+0xb30/0x1560 [ 174.900683][ T8932] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 174.900704][ T8932] bpf_prog_test_run+0x2c7/0x340 [ 174.900734][ T8932] __sys_bpf+0x4a4/0x860 [ 174.900761][ T8932] ? __pfx___sys_bpf+0x10/0x10 [ 174.900798][ T8932] ? ksys_write+0x22a/0x250 [ 174.900817][ T8932] ? __pfx_ksys_write+0x10/0x10 [ 174.900831][ T8932] ? rcu_is_watching+0x15/0xb0 [ 174.900866][ T8932] __x64_sys_bpf+0x7c/0x90 [ 174.900889][ T8932] do_syscall_64+0xfa/0x3b0 [ 174.900904][ T8932] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.900929][ T8932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.900948][ T8932] ? clear_bhb_loop+0x60/0xb0 [ 174.900970][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.900988][ T8932] RIP: 0033:0x7f217b18e929 [ 174.901003][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.901020][ T8932] RSP: 002b:00007f217c018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.901039][ T8932] RAX: ffffffffffffffda RBX: 00007f217b3b5fa0 RCX: 00007f217b18e929 [ 174.901052][ T8932] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 174.901063][ T8932] RBP: 00007f217c018090 R08: 0000000000000000 R09: 0000000000000000 [ 174.901074][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.901085][ T8932] R13: 0000000000000000 R14: 00007f217b3b5fa0 R15: 00007ffe505e9de8 [ 174.901113][ T8932] [ 175.328816][ T8938] veth0: entered promiscuous mode [ 175.487982][ T8563] veth0_macvtap: entered promiscuous mode [ 175.593827][ T8937] veth0: left promiscuous mode [ 175.608499][ T8563] veth1_macvtap: entered promiscuous mode [ 175.640942][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 175.698578][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.777905][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.847817][ T8563] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.893411][ T8563] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.902583][ T8563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.917743][ T8968] netlink: 240 bytes leftover after parsing attributes in process `syz.3.741'. [ 175.945154][ T8563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.370165][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.394653][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.540476][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.579658][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.158639][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.271765][ T9027] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 177.286178][ T9030] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 177.297793][ T6173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.394692][ T9030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.452319][ T9027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.493481][ T9036] bond3: entered promiscuous mode [ 177.512617][ T9030] bond2: entered promiscuous mode [ 177.599423][ T6173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.727758][ T6173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.886013][ T6173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.067750][ T6173] bridge_slave_1: left allmulticast mode [ 178.083795][ T6173] bridge_slave_1: left promiscuous mode [ 178.089628][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.127049][ T6173] bridge_slave_0: left allmulticast mode [ 178.132736][ T6173] bridge_slave_0: left promiscuous mode [ 178.148674][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.330142][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 178.840352][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.849681][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.857818][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.866193][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.874586][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.891558][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 179.026389][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.042046][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.065147][ T6173] bond0 (unregistering): Released all slaves [ 179.930793][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 180.002866][ T6173] hsr_slave_0: left promiscuous mode [ 180.027415][ T6173] hsr_slave_1: left promiscuous mode [ 180.049219][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.093575][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.127879][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.146741][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.259215][ T6173] veth1_macvtap: left promiscuous mode [ 180.275042][ T6173] veth0_macvtap: left promiscuous mode [ 180.287228][ T6173] veth1_vlan: left promiscuous mode [ 180.292750][ T6173] veth0_vlan: left promiscuous mode [ 180.624433][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.2.784'. [ 180.740974][ T9144] xt_CT: No such helper "syz0" [ 180.968334][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 181.006436][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 181.013661][ T5851] Bluetooth: hci2: command tx timeout [ 181.360336][ T9136] tipc: Started in network mode [ 181.371315][ T9136] tipc: Node identity , cluster identity 4711 [ 181.568518][ T9151] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 181.592596][ T9151] netlink: 'syz.0.785': attribute type 2 has an invalid length. [ 181.629838][ T9159] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 181.653043][ T9151] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.785'. [ 181.787695][ T9159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.838466][ T9167] netlink: 'syz.2.790': attribute type 29 has an invalid length. [ 181.871639][ T9168] bond3: entered promiscuous mode [ 181.897505][ T9084] chnl_net:caif_netlink_parms(): no params data found [ 182.000339][ T9167] netlink: 'syz.2.790': attribute type 29 has an invalid length. [ 182.113851][ T9176] netlink: 'syz.2.790': attribute type 29 has an invalid length. [ 182.283972][ T9203] netlink: 240 bytes leftover after parsing attributes in process `syz.1.795'. [ 182.509506][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.542870][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.564794][ T9084] bridge_slave_0: entered allmulticast mode [ 182.572625][ T9084] bridge_slave_0: entered promiscuous mode [ 182.601541][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.632887][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.652835][ T9084] bridge_slave_1: entered allmulticast mode [ 182.676715][ T9084] bridge_slave_1: entered promiscuous mode [ 182.822478][ T9228] FAULT_INJECTION: forcing a failure. [ 182.822478][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 182.835340][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.1.803 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 182.835364][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.835379][ T9228] Call Trace: [ 182.835386][ T9228] [ 182.835394][ T9228] dump_stack_lvl+0x189/0x250 [ 182.835452][ T9228] ? __pfx____ratelimit+0x10/0x10 [ 182.835482][ T9228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.835512][ T9228] ? __pfx__printk+0x10/0x10 [ 182.835536][ T9228] ? rcu_is_watching+0x15/0xb0 [ 182.835576][ T9228] should_fail_ex+0x414/0x560 [ 182.835606][ T9228] should_failslab+0xa8/0x100 [ 182.835629][ T9228] kmem_cache_alloc_noprof+0x73/0x3c0 [ 182.835660][ T9228] ? skb_clone+0x212/0x3a0 [ 182.835690][ T9228] skb_clone+0x212/0x3a0 [ 182.835720][ T9228] bpf_clone_redirect+0xad/0x3d0 [ 182.835767][ T9228] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 182.835796][ T9228] ? ktime_get+0x3e/0x1f0 [ 182.835823][ T9228] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 182.835845][ T9228] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.835873][ T9228] ? ktime_get+0x3e/0x1f0 [ 182.835890][ T9228] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 182.835919][ T9228] ? __local_bh_disable_ip+0xf1/0x190 [ 182.835948][ T9228] ? __pfx___cant_migrate+0x10/0x10 [ 182.835976][ T9228] ? __local_bh_enable_ip+0x12d/0x1c0 [ 182.836005][ T9228] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 182.836036][ T9228] ? bpf_test_timer_continue+0x136/0x350 [ 182.836065][ T9228] bpf_test_run+0x38b/0x830 [ 182.836117][ T9228] ? bpf_test_run+0x205/0x830 [ 182.836149][ T9228] ? __pfx_bpf_test_run+0x10/0x10 [ 182.836202][ T9228] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 182.836225][ T9228] ? convert___skb_to_skb+0x3d/0x590 [ 182.836252][ T9228] bpf_prog_test_run_skb+0xb30/0x1560 [ 182.836294][ T9228] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 182.836319][ T9228] bpf_prog_test_run+0x2c7/0x340 [ 182.836355][ T9228] __sys_bpf+0x4a4/0x860 [ 182.836386][ T9228] ? __pfx___sys_bpf+0x10/0x10 [ 182.836429][ T9228] ? ksys_write+0x22a/0x250 [ 182.836451][ T9228] ? __pfx_ksys_write+0x10/0x10 [ 182.836468][ T9228] ? rcu_is_watching+0x15/0xb0 [ 182.836509][ T9228] __x64_sys_bpf+0x7c/0x90 [ 182.836536][ T9228] do_syscall_64+0xfa/0x3b0 [ 182.836554][ T9228] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.836585][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.836606][ T9228] ? clear_bhb_loop+0x60/0xb0 [ 182.836633][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.836654][ T9228] RIP: 0033:0x7f4151b8e929 [ 182.836673][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.836691][ T9228] RSP: 002b:00007f4152978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.836723][ T9228] RAX: ffffffffffffffda RBX: 00007f4151db5fa0 RCX: 00007f4151b8e929 [ 182.836738][ T9228] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 182.836758][ T9228] RBP: 00007f4152978090 R08: 0000000000000000 R09: 0000000000000000 [ 182.836772][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.836784][ T9228] R13: 0000000000000000 R14: 00007f4151db5fa0 R15: 00007ffeafc1a918 [ 182.836818][ T9228] [ 183.104014][ T5851] Bluetooth: hci2: command tx timeout [ 183.239288][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.338183][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.637369][ T9084] team0: Port device team_slave_0 added [ 183.669443][ T9252] netlink: 240 bytes leftover after parsing attributes in process `syz.0.809'. [ 183.829161][ T9243] netlink: 'syz.1.806': attribute type 29 has an invalid length. [ 183.853844][ T9084] team0: Port device team_slave_1 added [ 183.870397][ T9255] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.891955][ T9261] ipvlan0: entered promiscuous mode [ 183.897335][ T9261] ipvlan0: entered allmulticast mode [ 183.905100][ T9261] veth0_vlan: entered allmulticast mode [ 183.916331][ T9250] netlink: 'syz.1.806': attribute type 29 has an invalid length. [ 183.948789][ T9262] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 184.048398][ T9253] netlink: 'syz.1.806': attribute type 29 has an invalid length. [ 184.108658][ T9257] netlink: 'syz.1.806': attribute type 29 has an invalid length. [ 184.135773][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.142772][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.231880][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.251050][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.258725][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.299813][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.465462][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 184.621284][ T9084] hsr_slave_0: entered promiscuous mode [ 184.635757][ T9084] hsr_slave_1: entered promiscuous mode [ 184.657845][ T9084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.685745][ T9084] Cannot create hsr debugfs directory [ 185.164065][ T5851] Bluetooth: hci2: command tx timeout [ 185.384636][ T9307] x_tables: unsorted entry at hook 3 [ 185.861728][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 185.925220][ T9336] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 186.253882][ T9336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.324924][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 186.348206][ T9345] bond4: entered promiscuous mode [ 186.528590][ T9354] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 186.652359][ T9370] batadv0: entered promiscuous mode [ 186.674573][ T9370] batadv0: left promiscuous mode [ 186.762190][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.772650][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.783281][ T9375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.931653][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.940644][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.991991][ T9381] netlink: 'syz.2.840': attribute type 20 has an invalid length. [ 187.144441][ T9084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.197443][ T9084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.252935][ T5851] Bluetooth: hci2: command tx timeout [ 187.470047][ T9084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.488688][ T9398] netlink: 52 bytes leftover after parsing attributes in process `syz.2.844'. [ 187.633462][ T9084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.707640][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 187.745311][ T9403] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 187.806785][ T9419] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 188.043137][ T9419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.140629][ T9431] bond2: (slave geneve2): making interface the new active one [ 188.171725][ T9431] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 188.197774][ T9435] bond2: entered promiscuous mode [ 188.203044][ T9435] geneve2: entered promiscuous mode [ 188.351623][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.432019][ T9084] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.472228][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.479522][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.542083][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.549334][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.128095][ T9084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.367885][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 189.438361][ T9491] netlink: 'syz.0.858': attribute type 2 has an invalid length. [ 189.499149][ T9487] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 189.860013][ T9512] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 189.893645][ T9512] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 189.927575][ T9512] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 189.970317][ T9512] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 189.984422][ T9506] infiniband syz0: set active [ 189.989360][ T9506] infiniband syz0: added bond_slave_1 [ 190.037561][ T9506] RDS/IB: syz0: added [ 190.042439][ T9506] smc: adding ib device syz0 with port count 1 [ 190.051540][ T9506] smc: ib device syz0 port 1 has pnetid [ 190.161967][ T9519] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 190.211665][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.811272][ T9084] veth0_vlan: entered promiscuous mode [ 190.851338][ T9084] veth1_vlan: entered promiscuous mode [ 190.868439][ T9540] x_tables: duplicate underflow at hook 2 [ 190.947255][ T9084] veth0_macvtap: entered promiscuous mode [ 190.981308][ T9084] veth1_macvtap: entered promiscuous mode [ 191.033589][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.097319][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.141696][ T9084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.160439][ T9084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.170125][ T9084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.183018][ T9084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.249213][ T9552] netlink: 'syz.3.874': attribute type 28 has an invalid length. [ 191.268347][ T9554] netlink: 'syz.3.874': attribute type 28 has an invalid length. [ 191.292416][ T9552] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 191.316171][ T9554] __nla_validate_parse: 7 callbacks suppressed [ 191.316190][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.3.874'. [ 191.363448][ T9552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.874'. [ 191.445999][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.470283][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.552978][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.565640][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 191.593514][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.612841][ T9564] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 191.631358][ T9564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.640739][ T3511] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.640771][ T3511] ------------[ cut here ]------------ [ 191.640780][ T3511] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 191.640798][ T3511] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 191.640820][ T3511] CPU: 1 UID: 0 PID: 3511 Comm: kworker/u8:7 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 191.640843][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.640855][ T3511] Workqueue: events_unbound cfg80211_wiphy_work [ 191.640880][ T3511] Call Trace: [ 191.640887][ T3511] [ 191.640895][ T3511] dump_stack_lvl+0x189/0x250 [ 191.640930][ T3511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.640966][ T3511] ? __pfx__printk+0x10/0x10 [ 191.641006][ T3511] ubsan_epilogue+0xa/0x40 [ 191.641032][ T3511] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 191.641078][ T3511] ieee80211_request_ibss_scan+0x600/0x8b0 [ 191.641128][ T3511] ieee80211_ibss_work+0xd85/0x1060 [ 191.641158][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.641194][ T3511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.641225][ T3511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.641254][ T3511] ? kcov_remote_stop+0x17e/0x6d0 [ 191.641300][ T3511] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 191.641340][ T3511] ? skb_dequeue+0x10e/0x150 [ 191.641375][ T3511] ? ieee80211_iface_work+0xcd4/0xfe0 [ 191.641415][ T3511] ? ieee80211_iface_work+0xf39/0xfe0 [ 191.641463][ T3511] cfg80211_wiphy_work+0x2dc/0x460 [ 191.641489][ T3511] ? process_scheduled_works+0x9ef/0x17b0 [ 191.641529][ T3511] process_scheduled_works+0xae1/0x17b0 [ 191.641602][ T3511] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.641661][ T3511] worker_thread+0x8a0/0xda0 [ 191.641701][ T3511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.641752][ T3511] ? __kthread_parkme+0x7b/0x200 [ 191.641788][ T3511] kthread+0x70e/0x8a0 [ 191.641819][ T3511] ? __pfx_worker_thread+0x10/0x10 [ 191.641856][ T3511] ? __pfx_kthread+0x10/0x10 [ 191.641885][ T3511] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.641915][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.641948][ T3511] ? __pfx_kthread+0x10/0x10 [ 191.641976][ T3511] ret_from_fork+0x3fc/0x770 [ 191.642013][ T3511] ? __pfx_ret_from_fork+0x10/0x10 [ 191.642056][ T3511] ? __switch_to_asm+0x39/0x70 [ 191.642078][ T3511] ? __switch_to_asm+0x33/0x70 [ 191.642101][ T3511] ? __pfx_kthread+0x10/0x10 [ 191.642128][ T3511] ret_from_fork_asm+0x1a/0x30 [ 191.642174][ T3511] [ 191.642182][ T3511] ---[ end trace ]--- [ 191.905760][ T3511] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 191.913259][ T3511] CPU: 1 UID: 0 PID: 3511 Comm: kworker/u8:7 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 191.925424][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.935502][ T3511] Workqueue: events_unbound cfg80211_wiphy_work [ 191.941777][ T3511] Call Trace: [ 191.945067][ T3511] [ 191.948010][ T3511] dump_stack_lvl+0x99/0x250 [ 191.952626][ T3511] ? __asan_memcpy+0x40/0x70 [ 191.957238][ T3511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.962464][ T3511] ? __pfx__printk+0x10/0x10 [ 191.967087][ T3511] panic+0x2db/0x790 [ 191.971143][ T3511] ? __pfx_panic+0x10/0x10 [ 191.975620][ T3511] ? _printk+0xcf/0x120 [ 191.980871][ T3511] ? __pfx__printk+0x10/0x10 [ 191.985500][ T3511] check_panic_on_warn+0x89/0xb0 [ 191.990470][ T3511] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 191.996248][ T3511] ieee80211_request_ibss_scan+0x600/0x8b0 [ 192.002110][ T3511] ieee80211_ibss_work+0xd85/0x1060 [ 192.007335][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.012567][ T3511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.018492][ T3511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.024842][ T3511] ? kcov_remote_stop+0x17e/0x6d0 [ 192.029898][ T3511] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 192.035639][ T3511] ? skb_dequeue+0x10e/0x150 [ 192.040252][ T3511] ? ieee80211_iface_work+0xcd4/0xfe0 [ 192.045661][ T3511] ? ieee80211_iface_work+0xf39/0xfe0 [ 192.051077][ T3511] cfg80211_wiphy_work+0x2dc/0x460 [ 192.056206][ T3511] ? process_scheduled_works+0x9ef/0x17b0 [ 192.061950][ T3511] process_scheduled_works+0xae1/0x17b0 [ 192.067558][ T3511] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.073589][ T3511] worker_thread+0x8a0/0xda0 [ 192.078228][ T3511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.084596][ T3511] ? __kthread_parkme+0x7b/0x200 [ 192.089570][ T3511] kthread+0x70e/0x8a0 [ 192.093666][ T3511] ? __pfx_worker_thread+0x10/0x10 [ 192.098827][ T3511] ? __pfx_kthread+0x10/0x10 [ 192.103432][ T3511] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.108647][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.113878][ T3511] ? __pfx_kthread+0x10/0x10 [ 192.118483][ T3511] ret_from_fork+0x3fc/0x770 [ 192.123096][ T3511] ? __pfx_ret_from_fork+0x10/0x10 [ 192.128240][ T3511] ? __switch_to_asm+0x39/0x70 [ 192.133036][ T3511] ? __switch_to_asm+0x33/0x70 [ 192.137824][ T3511] ? __pfx_kthread+0x10/0x10 [ 192.142439][ T3511] ret_from_fork_asm+0x1a/0x30 [ 192.147238][ T3511] [ 192.150604][ T3511] Kernel Offset: disabled [ 192.154998][ T3511] Rebooting in 86400 seconds..