last executing test programs: 4m32.296387959s ago: executing program 2 (id=3433): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001e3e3965edd7849172aa8b833b399e24fd5e765fb09ecb1b37adc7a9c4d0c16824962966eb509d591359dd3721f11d60b837b4b05e41d116db560b7f9c486699905ad8aaa49d1824bdd8f80c6c89ebdccd7c211406cc4e43a971050a49c5a9936f9db866c88e47882d1270b5cc7608fd99c5c363113b1506f7ba3effd5f5db3e42ea8ec4eaed8affe917f639053ee3bcf223507dc88ce7d93708a4b55a8f59141fb8215f9fb25780aaa00dc628badd13ac21a31572df6d310ba698a44bee3cdc2828a75a83290344667fbbe6111aae0f0e8954bb19e0a8bc46f3080b6dbbec3cea29fd", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="28005080110001004abee339084eeef16f162471f400000005000200000000000800030001ac"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x23c, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x222, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x41, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea41a9edd7953485"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m32.254044097s ago: executing program 2 (id=3434): vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf7005c2c00fe8000f33a08cf000000000000000000ff0200000000000000000000000000013c00000000000000050200c9008b0090780000009857f581ed07af018f0315b572d434a7024c71f6b6607116d99657fc7567967b439266f0dea9a96d55788547614e0b3cda3100a6ab1d8ec8990c1aa0fad2bd9805541a9bd4"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, 0x0, 0x40040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 4m31.509104093s ago: executing program 2 (id=3444): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001e3e3965edd7849172aa8b833b399e24fd5e765fb09ecb1b37adc7a9c4d0c16824962966eb509d591359dd3721f11d60b837b4b05e41d116db560b7f9c486699905ad8aaa49d1824bdd8f80c6c89ebdccd7c211406cc4e43a971050a49c5a9936f9db866c88e47882d1270b5cc7608fd99c5c363113b1506f7ba3effd5f5db3e42ea8ec4eaed8affe917f639053ee3bcf223507dc88ce7d93708a4b55a8f59141fb8215f9fb25780aaa00dc628badd13ac21a31572df6d310ba698a44bee3cdc2828a75a83290344667fbbe6111aae0f0e8954bb19e0a8bc46f3080b6dbbec3cea29fd", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="28005080110001004abee339084eeef16f162471f400000005000200000000000800030001ac"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x23c, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x222, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x41, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea41a9edd7953485"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m31.26512779s ago: executing program 2 (id=3447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 4m31.090786948s ago: executing program 2 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r1, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 4m30.885210026s ago: executing program 2 (id=3452): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) read(r0, 0x0, 0x0) 4m15.768347893s ago: executing program 32 (id=3452): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) read(r0, 0x0, 0x0) 2m26.835907855s ago: executing program 5 (id=5126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2m26.657055487s ago: executing program 5 (id=5128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x98}}, 0x0) 2m26.621472574s ago: executing program 5 (id=5129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000019980)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0xc880) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)}, 0x80000003}], 0x4, 0x10100, 0x0) 2m26.3585162s ago: executing program 5 (id=5133): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m26.112410753s ago: executing program 5 (id=5137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000180)={0xb28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x640, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7f, @rand_addr=' \x01\x00', 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8ec0e230bc052c705232cb920f9b41f264b0a9bb3c2c75bf82e0f27e9dc04ed"}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "176a040b1eff3f389a9928647586369d3ba5b8b76c0fdc26410cc68ce45e0376"}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1a1}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffff9}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd7600cb376ce63c405faf43318f42b66c5325aaa607c793d6908030e22c7fc5"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6d7, @private0={0xfc, 0x0, '\x00', 0xfb}, 0x401}}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x320, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4cc, 0x8, 0x0, 0x1, [{0x30c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x76800b4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xaa0}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xa79b4cb197f84f2d}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x12a}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @empty, 0xc7f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffff241, @local, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d835983c7efe80eb30dc6de6ef89f4902e48ec9a74004f175171f62e011229db"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}]}]}]}, 0xb28}, 0x1, 0x0, 0x0, 0x10}, 0x4081) 2m26.017459983s ago: executing program 5 (id=5138): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001800dd8d29bd70000000000002000000ff02c5011d0000000600150005000000100016800c0008800800018004000300"], 0x34}}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1f1e, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) poll(&(0x7f0000000080)=[{r0, 0x2a0}, {r3, 0x242}, {r4, 0x520}], 0x3, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000801020000000000140000000000030600024063079a9438403faa050300010000000900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 2m20.876519135s ago: executing program 4 (id=5206): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000100)=[{r1, 0x1000}, {r1, 0x200a}], 0x2, 0x3) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%ps \x00'}, 0x20) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000b40)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000b40)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700001dcdf253500000008000300", @ANYRES32=r8, @ANYBLOB="1400fe000fadcd006b20000000000000f7ffffff0500fd000002000004003400e3"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040050) r9 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0a00000004000000080000000200000000000000", @ANYRESHEX=r13, @ANYRESDEC=r11, @ANYRES16=r10, @ANYRESDEC=r9, @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00', @ANYRESDEC=r5, @ANYRESDEC=r3], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000004c46c9adbd1f22fa4700007910080000000000630a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000004c46c9adbd1f22fa4700007910080000000000630a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x458}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x0, 0x68d1}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x2000002, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x458}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x0, 0x68d1}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x2000002, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r10, &(0x7f0000000040)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], &(0x7f0000000340)=""/155, 0x30, 0x9b, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x81, 0x108, &(0x7f0000000c00)=""/264, 0x41000, 0x40, '\x00', r13, @fallback=0xa, r9, 0x8, &(0x7f0000000480)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x48, 0xe27, 0x8}, 0x10, r15, r9, 0x4, 0x0, &(0x7f0000000880)=[{0x1, 0x6, 0x1, 0xf605bd66f53d7e2}, {0x2, 0x4, 0xb, 0x4}, {0x2, 0x5, 0xd, 0xaa31e7aea0d1e866}, {0x0, 0x4, 0xb, 0xb}], 0x10, 0x81, @void, @value}, 0x94) sendfile(r10, r2, 0x0, 0x8) (async) sendfile(r10, r2, 0x0, 0x8) 2m20.702085993s ago: executing program 4 (id=5209): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000018001101feffffff000000000a00984fa0d167efa8650002000b000000000800060001000000080017000200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x44840) 2m20.581433256s ago: executing program 4 (id=5213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01fffc000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m20.492225692s ago: executing program 4 (id=5214): r0 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r0, 0x891d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0700000004000000080000000b00000002100000", @ANYRES32, @ANYBLOB="fff45cf4bee7a80086741bbaded7ac531aa2017f000000000000000000000050ff4b881c557bfea4dc648607d9ebc837aa18badb50c18ce4325110a734f020fe5eee537c04bb68982cfdf29cb70bfe7d43d5abbfdc516de6fff0487290507faded87bbc1922da8f3371ca013c0d3f58c4354e1a4d2adec1c6e8c9b349ec56589c2aca93c5e946417e530f9f15186d49336bf7ee28ef9a5382624ab34080b5d97e01201da36ff4587b67198b81d26abf261ca39528ab2cd85b0362f1500acd8f4a0e0ab24e630e4c62c30d9322eeda5bf31e2132e36a649f36207d03b5a76302b", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000200)=0x2, 0x4) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000000)=""/7, 0x7}], 0x4, &(0x7f0000000500)=""/95, 0x5f}, 0x40000000) writev(r0, &(0x7f0000000900)=[{&(0x7f00000005c0)="d44cc937ca95b391c285cf7f320a82e59a34567532495b46c1183177586859020a30c98a26afabf9feced3cd980dbebc819b8b8b1891df235a762d64067903fb5dcfc35a2d1a943ac7fd98f262af3db283156dac22dc17b91ad933470567cd8b26131cb650a18efe5adc4b54577532625694cf9ae466f462490e27102da4bc4c118a14e276378ae8c55a406d991b198bfed20346eec2891571f350c852afa37fa5d4cb2fd4bd242d1052117643e08da4b0293fab4271c87ebca73c88293e7657d613397c01f3b37e754fdfc05010db3ce35d2fbcd31b042b0c83aa2eb0c44b6d441bc55a14718fcc906751fbcb0b", 0xee}, {&(0x7f00000006c0)="8f86090b6761b85730fda8ed224494b5b1e839b23aeb7fb928c849183febb4d1e3e8863a0cca37fc1b9ecca9a2815f7b8ec1e69a4129129023f10778fba793ff3a504bed58aa482eb5345164459a5b49d32d93c11b3efe136af9b6ab2c64393c295d3fdad7ab9f1180", 0x69}, {&(0x7f0000000740)="02eeeef3e97dde18fdad2c868e8e7e0ca3f3a40f34b4ae1735e3ddedcffc8ee63f32ed524b844c49732df2e72920ac7595fe8433fa103a788dac3b7606be49043e5998e41311a3aa6515c931bf86db33ae989a3c02b5d50a4401b2fff79e9aa1feb9a50b6bac8971f2f1b096b2a24fc192403da2fc32cfdb136efd52ba09010549e0a21539b9215452d81f714174959020f16c0db7132a80a55a4f62a576fe4907a3f162553dfafc508ca9c2c35ededf2328", 0xb2}, {&(0x7f0000000800)="8514266d53e7ca576aca7484a88603943d8c2fc5137ab3bfa2b7b94d237d66a3de2a283e6e15f2d9dfb474a5035778e73d0b2f97277df0decd9f4d98f3424ee2edd8d5543c647b0bc965e7f81b3986056027d48d686e24e0ff9adc35e88823495faf2774436f45b806e7e666a5fed5d8bedb5ec32ee2abc19c949ca4fbb389ddd69dde28978868148e262579905c53f7543d550dc774380ef821f841f0ddae52c03480c11e30a264068b420139bfae58b8067798435c8e4b4cf610d4600f3adb0591f066543abebdc3d0f37ede52c8b7dfa80665fc34589227a31c1ed4df74197fa8e4de684913", 0xe7}], 0x4) 2m20.351816146s ago: executing program 4 (id=5218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close(0x3) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 2m20.20835183s ago: executing program 4 (id=5221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf4ffffff}, 0x0) 2m10.93059648s ago: executing program 33 (id=5138): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001800dd8d29bd70000000000002000000ff02c5011d0000000600150005000000100016800c0008800800018004000300"], 0x34}}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1f1e, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) poll(&(0x7f0000000080)=[{r0, 0x2a0}, {r3, 0x242}, {r4, 0x520}], 0x3, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000801020000000000140000000000030600024063079a9438403faa050300010000000900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 2m5.145924858s ago: executing program 34 (id=5221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf4ffffff}, 0x0) 1m28.449073395s ago: executing program 6 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x5c}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x5c}}, 0x2000000) 1m28.250696476s ago: executing program 6 (id=5918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1m28.097875488s ago: executing program 6 (id=5921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x24) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) write(r5, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r5, 0x0, 0x0, 0x100000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010003", 0x7) 1m27.115299371s ago: executing program 6 (id=5945): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (fail_nth: 6) 1m26.445611904s ago: executing program 6 (id=5949): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r4, 0x5, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x4}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5044, 0x21000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x3c}}, 0x48000) 1m26.352731558s ago: executing program 6 (id=5952): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/226, &(0x7f0000000080)=0xe2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @struct={0xc, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, [{0x3, 0x1, 0x2}, {0xc, 0x2, 0x3}, {0xc, 0x1, 0x7f}, {0xe, 0x4}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x0, 0x61, 0x1e]}}, &(0x7f0000000480)=""/226, 0x6a, 0xe2, 0x0, 0x3, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x800442d3, 0x200000f3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x3}, 0x18) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@name, &(0x7f0000000580)=0x10, 0x80000) connect$tipc(r4, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000600)={0x7, 0x800d, 0x3, 0xffff0001}, 0x10) 1m11.255962292s ago: executing program 35 (id=5952): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/226, &(0x7f0000000080)=0xe2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @struct={0xc, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, [{0x3, 0x1, 0x2}, {0xc, 0x2, 0x3}, {0xc, 0x1, 0x7f}, {0xe, 0x4}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x0, 0x61, 0x1e]}}, &(0x7f0000000480)=""/226, 0x6a, 0xe2, 0x0, 0x3, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x800442d3, 0x200000f3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x3}, 0x18) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@name, &(0x7f0000000580)=0x10, 0x80000) connect$tipc(r4, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000600)={0x7, 0x800d, 0x3, 0xffff0001}, 0x10) 4.885790003s ago: executing program 3 (id=6408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x98}, 0x1, 0x2000000}, 0x0) 4.873051707s ago: executing program 3 (id=6412): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r4, 0x4000, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x44805) socket$inet6_udplite(0xa, 0x2, 0x88) 2.552885782s ago: executing program 0 (id=6435): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000006c0)={{r1}, 0x6, 0x40, 0x4b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, &(0x7f0000002240)=[{0x58, 0x116, 0x5, "1e36ea299f5dffa9655fbea831cd835dcaa5b9bc87888e8303e867402b7c1afd2167455d40533ba94ab53dbecd31ac830e9bdc14446a30849ebbc4edd3942a7c409c"}, {0x1010, 0x101, 0x2ed7a860, "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"}, {0x1010, 0x107, 0x4, "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"}, {0x1010, 0x118, 0x5, "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"}, {0x48, 0x1, 0xb25, "46f07fba52d1b45689eeb10bce020be8ad7bf973a07bed77237f0e345ab0d7b2f570b596326065375b18902f91d0bf2eaeac92"}, {0x50, 0x113, 0x0, "c84c84cd69f7facce80f6cf38a10db53a28acbb9bba98e1962bf7b940555ceb55f18916c1311830f652ab925e93179c1e86e928829040d96d921"}, {0xc0, 0x110, 0x3, "bd12506158318a42d043aa69837827352b604b69c6bc820614b4c1fd81001ff396f883e6e10e5f8032817df7ddc10e4eb362905b1f642daa2e678af0355c1a67887b66610639b43b08a6f57f821ef5c20dddcedc1118d8acd0a5e7044c1c8aa8ab7f016ca691a4c86f8b3f4dc3656ef1e3c0fe9401f6664b23347f3cae1e2580495529a7251496b6e7be5afce5b4bc5b0a98559685d84b34772c2862d4301e6d2761d1e980a3b825b55143"}, {0xd0, 0x98a978d21d295ed2, 0x6, "fed33bf318c839671c0c7cad3f8e8cbddb8a1ca74d0a757c3e05ac8c635da7fcc21d5d01328c0c9c66f4a01a8fcf3ac7b6dbb98b0c54ea1fca94602a2cdcccde22bfe98aac9dcffb2f1e1504b0b8caf9ffc7fa6bf1decbf70cc9c8c22e7939c33fdb3e4cac0fef55c1687163fab50c1a7320e69dbe48597812282b3fdb02f0f75b8d5baa4c2ac2360c591f27dd561909460276386282e94e85f5a2258f0a9fdd97a2cbe3e52cb59895a9248d1d669313834e53a8a95e670afbbe08"}, {0x60, 0x10e, 0xb, "78d2a40fa745edf457bf4091f69157738eaa9b609cc64cbdc6d68f444f1f85fff202f342876c80be31f69ffd1703a3a64e5c8d719ac52fb8fa8b6af0d585fc2f6bde0e5abcb7bece2e99832d37cfd5"}], 0x3310}, 0x20040090) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4040090) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) 2.434225815s ago: executing program 8 (id=6437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000020000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 2.225046103s ago: executing program 0 (id=6438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080), 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.094648228s ago: executing program 8 (id=6439): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4040000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 1.573941907s ago: executing program 1 (id=6443): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001e3e3965edd7849172aa8b833b399e24fd5e765fb09ecb1b37adc7a9c4d0c16824962966eb509d591359dd3721f11d60b837b4b05e41d116db560b7f9c486699905ad8aaa49d1824bdd8f80c6c89ebdccd7c211406cc4e43a971050a49c5a9936f9db866c88e47882d1270b5cc7608fd99c5c363113b1506f7ba3effd5f5db3e42ea8ec4eaed8affe917f639053ee3bcf223507dc88ce7d93708a4b55a8f59141fb8215f9fb25780aaa00dc628badd13ac21a31572df6d310ba698a44bee3cdc2828a75a83290344667fbbe6111aae0f0e8954bb19e0a8bc46f3080b6dbbec3cea29fd", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="28005080110001004abee339084eeef16f162471f400000005000200000000000800030001ac0f"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x23c, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x222, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x41, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea41a9edd7953485"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.482836775s ago: executing program 3 (id=6445): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.359844513s ago: executing program 7 (id=6446): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0) 1.257041431s ago: executing program 3 (id=6447): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1.250114889s ago: executing program 0 (id=6448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14, 0x10, 0x1, 0x0, 0xe00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0xa4}}, 0xa4}}, 0x0) 1.234122397s ago: executing program 1 (id=6449): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7801000017000100e25151892937c9a94e60b324b4ffffff00000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000004f0327fb4c6be74ae26e5d9a97d1398e9d7065b3f614067db43957b7974443cf7604711110451eac314a0a0e844aab50f5a8532b1ef6061a32f2fb35e2556cf0784d389790fa3abb3115adab2a33b2aa13759661670dcadc62db1a980566389314fef453801aabd3f0b181d348dda8576db84408d1bfb70f658791", @ANYRES32=0x0, @ANYBLOB="be424d6d83213c578cdcfeb88dcfe5869006eb377c54721aeefef9ddfb3809a89030d2ef8054e244f6"], 0x178}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000030004001400019757"], 0x28}}, 0x0) 1.109150197s ago: executing program 8 (id=6450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xefffffff}]}, 0x24}}, 0x0) 1.10790497s ago: executing program 0 (id=6451): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/12], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r1, 0x0, 0x0, 0x0) 1.07360564s ago: executing program 1 (id=6452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004}) 990.978636ms ago: executing program 3 (id=6453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030300000003000000010000000010084001000180200097d904f612d74e32ce68afb601e0b38713c1d219950e2efb54fe23ee71be26be8836a38bad99480267a264b2fcd4c09bc21f079293bf6a51d2bc975867fe352decc37012d1f5309977675542ef5311a8dba187d71ce43d1e62ea0427ed227b9c6ff9391fb9ed1935c3bfda2b9d7d90a69a2c5301930feba701d39779bbb15fb01bb10f7077db978eae90a9c049f1a6fbc31ef6f624530a2135ebc36f18b00df87b7c476c"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0xfffffffffffffffd, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f0000000400)=""/80, &(0x7f0000000480)=0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e21, @empty}, 0x10) sendto$packet(r8, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getchain={0x54, 0x66, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0xffe0}, {0xffff, 0x6}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3b}, {0x8, 0xb, 0x23}, {0x8}, {0x8, 0xb, 0x29a4}, {0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x804) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004}) 930.346874ms ago: executing program 0 (id=6454): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000002b80)=""/4118, 0x1016}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000440)=""/194, 0xc2}], 0x5}, 0xfffffffe}], 0x4, 0x20, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r5, {0xfff2, 0xe}, {0x10}, {0xfff3, 0x9}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) 929.527758ms ago: executing program 1 (id=6455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeac}, 0x32}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/262, 0x106}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000080)=""/238, 0xee}], 0x6}, 0x4}], 0x4, 0xa100, 0x0) 885.071951ms ago: executing program 8 (id=6456): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0x1, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x1d, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x0, 0x0, 0xb8, 0x8, 0x0, 0x0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 790.717957ms ago: executing program 1 (id=6457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x198, 0x4c, 0x1a, 0x0, 0x73, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xff}}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'pim6reg\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016605000000000000004f400000089049b6", @ANYRES32=r7, @ANYBLOB="40007a800c000300a0d4e01051d6ff631c00020072e1650cfd34d8d202193b3f818f5cb72545921e4ce7afed14000100cb437b1ec31102799ec86372a23189a5"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 747.989961ms ago: executing program 3 (id=6458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 736.275448ms ago: executing program 8 (id=6459): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001e3e3965edd7849172aa8b833b399e24fd5e765fb09ecb1b37adc7a9c4d0c16824962966eb509d591359dd3721f11d60b837b4b05e41d116db560b7f9c486699905ad8aaa49d1824bdd8f80c6c89ebdccd7c211406cc4e43a971050a49c5a9936f9db866c88e47882d1270b5cc7608fd99c5c363113b1506f7ba3effd5f5db3e42ea8ec4eaed8affe917f639053ee3bcf223507dc88ce7d93708a4b55a8f59141fb8215f9fb25780aaa00dc628badd13ac21a31572df6d310ba698a44bee3cdc2828a75a83290344667fbbe6111aae0f0e8954bb19e0a8bc46f3080b6dbbec3cea29fd", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="28005080110001004abee339084eeef16f162471f400000005000200000000000800030001ac0f"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x23c, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x222, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x41, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea41a9edd7953485"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 545.286585ms ago: executing program 8 (id=6460): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4040000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 437.049312ms ago: executing program 1 (id=6461): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$unix(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) 436.797069ms ago: executing program 7 (id=6462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) socket$inet6(0xa, 0x80000, 0x3) 325.196857ms ago: executing program 7 (id=6463): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 195.9796ms ago: executing program 7 (id=6464): sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) (async) 57.15304ms ago: executing program 7 (id=6465): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="03190700000046f8f8eb8adbecdd5c6c1974c009fe0aea2fce370999e24d08d7637504f6", 0xa) 39.046927ms ago: executing program 0 (id=6466): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value=0x12000000}, 0x28) 0s ago: executing program 7 (id=6467): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a758f3"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), r0) (fail_nth: 4) kernel console output (not intermixed with test programs): [T20021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.168206][T20021] ? __pfx_ksys_write+0x10/0x10 [ 443.168222][T20021] ? do_syscall_64+0xbe/0x3b0 [ 443.168241][T20021] do_syscall_64+0xfa/0x3b0 [ 443.168255][T20021] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.168276][T20021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.168292][T20021] ? clear_bhb_loop+0x60/0xb0 [ 443.168307][T20021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.168316][T20021] RIP: 0033:0x7f2092b8e929 [ 443.168325][T20021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.168333][T20021] RSP: 002b:00007f20939db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.168344][T20021] RAX: ffffffffffffffda RBX: 00007f2092db5fa0 RCX: 00007f2092b8e929 [ 443.168351][T20021] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 443.168357][T20021] RBP: 00007f20939db090 R08: 0000000000000000 R09: 0000000000000000 [ 443.168363][T20021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.168368][T20021] R13: 0000000000000000 R14: 00007f2092db5fa0 R15: 00007fffa513bfc8 [ 443.168384][T20021] [ 443.788502][T20038] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 443.832345][T20038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.938924][T20038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.058991][T20038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.179176][T20038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.306649][T20038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.339162][T20038] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.363894][T20038] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.401044][T20038] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.829187][T20091] netlink: 'syz.0.5319': attribute type 3 has an invalid length. [ 445.608056][T20123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5332'. [ 445.625927][T20121] netlink: 'syz.1.5331': attribute type 10 has an invalid length. [ 445.638261][ T3530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.651328][ T3530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.665000][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.732739][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5334'. [ 445.742549][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5334'. [ 445.756366][T20126] netlink: 'syz.3.5334': attribute type 5 has an invalid length. [ 445.982320][T20141] netlink: 'syz.3.5341': attribute type 11 has an invalid length. [ 445.995230][T20141] netlink: 'syz.3.5341': attribute type 11 has an invalid length. [ 446.003175][T20141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5341'. [ 446.146098][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.247149][T20159] FAULT_INJECTION: forcing a failure. [ 446.247149][T20159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.293160][T20159] CPU: 0 UID: 0 PID: 20159 Comm: syz.1.5347 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 446.293188][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.293199][T20159] Call Trace: [ 446.293207][T20159] [ 446.293215][T20159] dump_stack_lvl+0x189/0x250 [ 446.293244][T20159] ? __pfx____ratelimit+0x10/0x10 [ 446.293267][T20159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.293291][T20159] ? __pfx__printk+0x10/0x10 [ 446.293310][T20159] ? __might_fault+0xb0/0x130 [ 446.293338][T20159] should_fail_ex+0x414/0x560 [ 446.293364][T20159] _copy_from_iter+0x1db/0x16f0 [ 446.293391][T20159] ? rcu_is_watching+0x15/0xb0 [ 446.293415][T20159] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 446.293434][T20159] ? __pfx__copy_from_iter+0x10/0x10 [ 446.293458][T20159] ? __build_skb_around+0x257/0x3e0 [ 446.293481][T20159] ? netlink_sendmsg+0x642/0xb30 [ 446.293499][T20159] ? skb_put+0x11b/0x210 [ 446.293521][T20159] netlink_sendmsg+0x6b2/0xb30 [ 446.293549][T20159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.293579][T20159] ? aa_sock_msg_perm+0x94/0x160 [ 446.293602][T20159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.293622][T20159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.293642][T20159] __sock_sendmsg+0x219/0x270 [ 446.293670][T20159] ____sys_sendmsg+0x505/0x830 [ 446.293695][T20159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.293724][T20159] ? import_iovec+0x74/0xa0 [ 446.293744][T20159] ___sys_sendmsg+0x21f/0x2a0 [ 446.293768][T20159] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.293821][T20159] ? __fget_files+0x2a/0x420 [ 446.293839][T20159] ? __fget_files+0x3a0/0x420 [ 446.293867][T20159] __x64_sys_sendmsg+0x19b/0x260 [ 446.293890][T20159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.293921][T20159] ? __pfx_ksys_write+0x10/0x10 [ 446.293935][T20159] ? rcu_is_watching+0x15/0xb0 [ 446.293962][T20159] ? do_syscall_64+0xbe/0x3b0 [ 446.293984][T20159] do_syscall_64+0xfa/0x3b0 [ 446.293996][T20159] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.294017][T20159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.294031][T20159] ? clear_bhb_loop+0x60/0xb0 [ 446.294048][T20159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.294063][T20159] RIP: 0033:0x7f2092b8e929 [ 446.294079][T20159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.294093][T20159] RSP: 002b:00007f20939db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.294111][T20159] RAX: ffffffffffffffda RBX: 00007f2092db5fa0 RCX: 00007f2092b8e929 [ 446.294123][T20159] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000003 [ 446.294134][T20159] RBP: 00007f20939db090 R08: 0000000000000000 R09: 0000000000000000 [ 446.294145][T20159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.294155][T20159] R13: 0000000000000000 R14: 00007f2092db5fa0 R15: 00007fffa513bfc8 [ 446.294183][T20159] [ 446.614535][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.970720][ T5157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 446.973416][T20175] veth1_macvtap: left promiscuous mode [ 446.989475][ T5157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 446.998270][ T5157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 447.010656][ T5157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 447.018507][ T5157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.020292][T20175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5354'. [ 447.149127][ T36] net_ratelimit: 51 callbacks suppressed [ 447.149147][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.281335][T20185] Dead loop on virtual device ip6_vti0, fix it urgently! [ 447.305978][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.380401][T20176] C speed is unknown, defaulting to 1000 [ 447.425015][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.554137][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.666688][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.805418][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 447.915079][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 448.024663][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 448.158192][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 448.295244][T20239] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5373'. [ 448.489523][T20252] netlink: 'syz.3.5376': attribute type 13 has an invalid length. [ 448.497907][T20252] netlink: 'syz.3.5376': attribute type 17 has an invalid length. [ 448.546856][T20252] erspan0: refused to change device tx_queue_len [ 448.700780][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5377'. [ 448.748463][T20176] chnl_net:caif_netlink_parms(): no params data found [ 448.766237][T20260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5375'. [ 448.961199][T20248] C speed is unknown, defaulting to 1000 [ 449.064315][ T5839] Bluetooth: hci6: command tx timeout [ 449.240431][T20176] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.256101][T20176] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.263369][T20176] bridge_slave_0: entered allmulticast mode [ 449.286158][T20176] bridge_slave_0: entered promiscuous mode [ 449.303661][T20176] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.321520][T20176] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.329499][T20176] bridge_slave_1: entered allmulticast mode [ 449.356112][T20176] bridge_slave_1: entered promiscuous mode [ 449.525298][T20176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.566355][T20176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.688553][T20176] team0: Port device team_slave_0 added [ 449.708546][T20176] team0: Port device team_slave_1 added [ 449.778063][T20176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.788647][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.815040][T20176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.864228][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.881919][T20176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.889644][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.917761][T20176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.023062][T20288] netlink: 'syz.1.5384': attribute type 10 has an invalid length. [ 450.103528][T20176] hsr_slave_0: entered promiscuous mode [ 450.117430][T20176] hsr_slave_1: entered promiscuous mode [ 450.134329][T20176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.146633][T20176] Cannot create hsr debugfs directory [ 450.619933][T20296] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5387'. [ 450.658285][T20299] netlink: 'syz.0.5388': attribute type 1 has an invalid length. [ 450.680060][T20298] netlink: 'syz.0.5388': attribute type 1 has an invalid length. [ 450.714569][T20299] netlink: 'syz.0.5388': attribute type 2 has an invalid length. [ 450.731978][T20295] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 450.747600][T20298] netlink: 'syz.0.5388': attribute type 2 has an invalid length. [ 450.784317][T20299] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.5388'. [ 450.789842][T20176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 450.814333][T20298] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.5388'. [ 450.840814][T20176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.900180][T20176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 450.963098][T20176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.005826][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 451.144417][ T5839] Bluetooth: hci6: command tx timeout [ 451.303873][T20176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.369863][T20176] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.406080][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.413307][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.440419][T15431] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.447624][T15431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.844550][T20352] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5400'. [ 451.981856][T20176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.186689][ T3530] net_ratelimit: 17 callbacks suppressed [ 452.186710][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 452.325244][T20385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5407'. [ 452.354899][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 452.464151][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 452.577219][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 452.740037][T20176] veth0_vlan: entered promiscuous mode [ 452.787538][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 452.839497][T20176] veth1_vlan: entered promiscuous mode [ 452.944570][T20176] veth0_macvtap: entered promiscuous mode [ 452.974262][T20176] veth1_macvtap: entered promiscuous mode [ 452.975765][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5418'. [ 453.019231][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 453.091503][T20176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.143181][T20176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.201375][T20176] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.224387][ T5839] Bluetooth: hci6: command tx timeout [ 453.261149][T20176] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.297096][T20176] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.339356][T20176] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.400634][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 453.560302][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 453.574623][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 453.582299][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 453.591529][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 453.602891][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 453.715053][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 453.751214][T15431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.770840][T20444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5421'. [ 453.785039][T15431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.835749][T15431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.844378][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 453.853695][T15431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.955054][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 454.258977][ T1094] tipc: Subscription rejected, illegal request [ 454.276772][T20461] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5428'. [ 454.376471][T20467] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 454.431218][T20471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5429'. [ 454.530223][T20431] C speed is unknown, defaulting to 1000 [ 454.868807][T20486] netlink: 'syz.0.5437': attribute type 4 has an invalid length. [ 454.937281][ T9] C speed is unknown, defaulting to 1000 [ 454.974531][ T9] syz0: Port: 1 Link DOWN [ 454.990191][ T9] C speed is unknown, defaulting to 1000 [ 455.205795][T20501] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 455.307241][ T5157] Bluetooth: hci6: command tx timeout [ 455.704572][ T5157] Bluetooth: hci7: command tx timeout [ 456.120360][T20431] chnl_net:caif_netlink_parms(): no params data found [ 456.240532][T20549] __nla_validate_parse: 2 callbacks suppressed [ 456.240550][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5458'. [ 456.422519][T20431] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.440125][T20431] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.452397][T20431] bridge_slave_0: entered allmulticast mode [ 456.479849][T20431] bridge_slave_0: entered promiscuous mode [ 456.498326][T20431] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.518453][T20431] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.528385][T20562] netlink: 'syz.0.5460': attribute type 1 has an invalid length. [ 456.538383][T20431] bridge_slave_1: entered allmulticast mode [ 456.549897][T20431] bridge_slave_1: entered promiscuous mode [ 456.553787][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5460'. [ 456.682809][T20564] netlink: 'syz.6.5461': attribute type 13 has an invalid length. [ 456.709538][T20564] netlink: 'syz.6.5461': attribute type 17 has an invalid length. [ 456.723293][T20431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.819162][T20564] gretap0: refused to change device tx_queue_len [ 456.839545][T20431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.129095][T20431] team0: Port device team_slave_0 added [ 457.187729][T20431] team0: Port device team_slave_1 added [ 457.352259][T20566] C speed is unknown, defaulting to 1000 [ 457.373808][T20431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.381094][T20431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.423602][T20431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.459546][ T1094] net_ratelimit: 20 callbacks suppressed [ 457.459564][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 457.517708][T20431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.552329][T20431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.644437][T20431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.669486][T20591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5468'. [ 457.785503][ T5157] Bluetooth: hci7: command tx timeout [ 457.910085][T20431] hsr_slave_0: entered promiscuous mode [ 457.920562][T20431] hsr_slave_1: entered promiscuous mode [ 457.936321][T20431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.943912][T20431] Cannot create hsr debugfs directory [ 457.994975][T20574] C speed is unknown, defaulting to 1000 [ 458.192497][T20608] sctp: [Deprecated]: syz.1.5473 (pid 20608) Use of int in maxseg socket option. [ 458.192497][T20608] Use struct sctp_assoc_value instead [ 458.242921][T20608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5473'. [ 458.504260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.554951][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 458.767303][T20431] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.779118][T20431] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 458.853398][T20431] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.926316][T20431] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 458.980166][T20631] netlink: 'syz.1.5478': attribute type 10 has an invalid length. [ 459.011190][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 459.288773][T20647] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5481'. [ 459.315136][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 459.406997][T20431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.447706][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 459.462589][T20651] netlink: 'syz.1.5483': attribute type 4 has an invalid length. [ 459.471958][T20651] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5483'. [ 459.500685][T20431] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.583913][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.591122][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.633949][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5484'. [ 459.680647][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.687930][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.864554][ T5157] Bluetooth: hci7: command tx timeout [ 459.877024][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 459.895153][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5486'. [ 460.026031][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 460.148048][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 460.296719][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 460.436846][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 460.596051][T20680] netlink: 'syz.1.5490': attribute type 10 has an invalid length. [ 460.650252][T20431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.011101][T20688] FAULT_INJECTION: forcing a failure. [ 461.011101][T20688] name failslab, interval 1, probability 0, space 0, times 0 [ 461.060667][T20688] CPU: 0 UID: 0 PID: 20688 Comm: syz.1.5492 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 461.060696][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.060706][T20688] Call Trace: [ 461.060713][T20688] [ 461.060720][T20688] dump_stack_lvl+0x189/0x250 [ 461.060746][T20688] ? __pfx____ratelimit+0x10/0x10 [ 461.060767][T20688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.060789][T20688] ? __pfx__printk+0x10/0x10 [ 461.060813][T20688] ? kasan_save_track+0x4f/0x80 [ 461.060833][T20688] ? kasan_save_track+0x3e/0x80 [ 461.060858][T20688] should_fail_ex+0x414/0x560 [ 461.060884][T20688] should_failslab+0xa8/0x100 [ 461.060901][T20688] __kmalloc_noprof+0xcb/0x4f0 [ 461.060914][T20688] ? read_local_oob_ext_data+0x246/0x11a0 [ 461.060939][T20688] read_local_oob_ext_data+0x246/0x11a0 [ 461.060974][T20688] ? __pfx_read_local_oob_ext_data+0x10/0x10 [ 461.060992][T20688] ? bt_sock_create+0x1b0/0x240 [ 461.061035][T20688] hci_mgmt_cmd+0x9c6/0xef0 [ 461.061068][T20688] hci_sock_sendmsg+0x6ca/0xef0 [ 461.061094][T20688] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 461.061114][T20688] ? aa_sock_msg_perm+0x94/0x160 [ 461.061136][T20688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.061155][T20688] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 461.061175][T20688] __sock_sendmsg+0x219/0x270 [ 461.061202][T20688] sock_write_iter+0x258/0x330 [ 461.061227][T20688] ? __pfx_sock_write_iter+0x10/0x10 [ 461.061261][T20688] ? bpf_lsm_file_permission+0x9/0x20 [ 461.061280][T20688] ? security_file_permission+0x75/0x290 [ 461.061308][T20688] vfs_write+0x548/0xa90 [ 461.061337][T20688] ? __pfx_sock_write_iter+0x10/0x10 [ 461.061359][T20688] ? __pfx_vfs_write+0x10/0x10 [ 461.061391][T20688] ? __fget_files+0x2a/0x420 [ 461.061419][T20688] ksys_write+0x145/0x250 [ 461.061436][T20688] ? __pfx_ksys_write+0x10/0x10 [ 461.061448][T20688] ? rcu_is_watching+0x15/0xb0 [ 461.061474][T20688] ? do_syscall_64+0xbe/0x3b0 [ 461.061494][T20688] do_syscall_64+0xfa/0x3b0 [ 461.061508][T20688] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.061529][T20688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.061544][T20688] ? clear_bhb_loop+0x60/0xb0 [ 461.061563][T20688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.061577][T20688] RIP: 0033:0x7f2092b8e929 [ 461.061592][T20688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.061604][T20688] RSP: 002b:00007f20939db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.061622][T20688] RAX: ffffffffffffffda RBX: 00007f2092db5fa0 RCX: 00007f2092b8e929 [ 461.061634][T20688] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 461.061644][T20688] RBP: 00007f20939db090 R08: 0000000000000000 R09: 0000000000000000 [ 461.061654][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.061664][T20688] R13: 0000000000000000 R14: 00007f2092db5fa0 R15: 00007fffa513bfc8 [ 461.061692][T20688] [ 461.639224][T20431] veth0_vlan: entered promiscuous mode [ 461.679251][T20431] veth1_vlan: entered promiscuous mode [ 461.739096][T20431] veth0_macvtap: entered promiscuous mode [ 461.753786][T20431] veth1_macvtap: entered promiscuous mode [ 461.790267][T20700] Bluetooth: MGMT ver 1.23 [ 461.827971][T20431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.884224][T20431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.909679][T20431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.933874][T20431] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.945135][ T5157] Bluetooth: hci7: command tx timeout [ 461.956234][T20431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.991591][T20431] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.249537][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.294426][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.308984][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5505'. [ 462.355461][T20721] tc_dump_action: action bad kind [ 462.429700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.444832][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.485393][ T12] net_ratelimit: 11 callbacks suppressed [ 462.485411][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 462.550387][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'. [ 462.607911][T20737] bridge0: port 1(gretap0) entered blocking state [ 462.615490][T20737] bridge0: port 1(gretap0) entered disabled state [ 462.622291][T20737] gretap0: entered allmulticast mode [ 462.669314][T20737] gretap0: entered promiscuous mode [ 462.697372][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 462.731502][T20739] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2 [ 462.764184][T20739] netdevsim netdevsim7: Falling back to sysfs fallback for: ..€ [ 462.827709][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 462.955893][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.084517][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.215495][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.335094][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.472692][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.692172][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.776330][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5531'. [ 463.821556][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 463.892772][T20805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5533'. [ 463.902061][T20808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5534'. [ 464.078080][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.085826][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.299195][T20811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.322081][T20811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.468667][T20811] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.478526][T20811] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.487623][T20811] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.496712][T20811] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.637896][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5543'. [ 464.712679][T20843] netlink: 'syz.3.5546': attribute type 1 has an invalid length. [ 464.726842][T20843] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5546'. [ 464.758645][T20843] netlink: 'syz.3.5546': attribute type 1 has an invalid length. [ 464.805122][T20847] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 464.826748][T20847] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 464.917479][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5544'. [ 464.930026][T20851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5544'. [ 464.941728][T20851] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5544'. [ 465.692890][T20893] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 465.709992][T20893] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 466.191452][T20924] FAULT_INJECTION: forcing a failure. [ 466.191452][T20924] name failslab, interval 1, probability 0, space 0, times 0 [ 466.219905][T20924] CPU: 1 UID: 0 PID: 20924 Comm: syz.3.5574 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 466.219931][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.219941][T20924] Call Trace: [ 466.219948][T20924] [ 466.219956][T20924] dump_stack_lvl+0x189/0x250 [ 466.219983][T20924] ? __pfx____ratelimit+0x10/0x10 [ 466.220006][T20924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.220029][T20924] ? __pfx__printk+0x10/0x10 [ 466.220054][T20924] ? __pfx___might_resched+0x10/0x10 [ 466.220075][T20924] ? fs_reclaim_acquire+0x7d/0x100 [ 466.220098][T20924] should_fail_ex+0x414/0x560 [ 466.220122][T20924] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 466.220142][T20924] should_failslab+0xa8/0x100 [ 466.220161][T20924] __kvmalloc_node_noprof+0x161/0x5f0 [ 466.220179][T20924] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 466.220206][T20924] alloc_netdev_mqs+0x8e5/0x11e0 [ 466.220235][T20924] rtnl_create_link+0x31f/0xd10 [ 466.220272][T20924] rtnl_newlink_create+0x25c/0xb00 [ 466.220298][T20924] ? __pfx_aa_get_newest_label+0x10/0x10 [ 466.220323][T20924] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 466.220341][T20924] ? rtnl_newlink+0x8db/0x1c70 [ 466.220361][T20924] ? __pfx___mutex_lock+0x10/0x10 [ 466.220387][T20924] ? ns_capable+0x8a/0xf0 [ 466.220414][T20924] rtnl_newlink+0x16d6/0x1c70 [ 466.220432][T20924] ? netlink_sendmsg+0x805/0xb30 [ 466.220464][T20924] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.220506][T20924] ? kasan_quarantine_put+0xdd/0x220 [ 466.220528][T20924] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.220557][T20924] ? nlmon_xmit+0xb0/0x100 [ 466.220577][T20924] ? kmem_cache_free+0x18f/0x400 [ 466.220601][T20924] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.220623][T20924] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.220646][T20924] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.220667][T20924] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 466.220693][T20924] ? __dev_queue_xmit+0x27e/0x3a70 [ 466.220727][T20924] ? __lock_acquire+0xab9/0xd20 [ 466.220772][T20924] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.220788][T20924] rtnetlink_rcv_msg+0x7cf/0xb70 [ 466.220810][T20924] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 466.220826][T20924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.220840][T20924] ? ref_tracker_free+0x63a/0x7d0 [ 466.220859][T20924] ? __copy_skb_header+0xa7/0x550 [ 466.220882][T20924] ? __pfx_ref_tracker_free+0x10/0x10 [ 466.220916][T20924] netlink_rcv_skb+0x205/0x470 [ 466.220935][T20924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.220954][T20924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.220985][T20924] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.221002][T20924] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.221025][T20924] netlink_unicast+0x758/0x8d0 [ 466.221054][T20924] netlink_sendmsg+0x805/0xb30 [ 466.221083][T20924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.221111][T20924] ? aa_sock_msg_perm+0x94/0x160 [ 466.221132][T20924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.221150][T20924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.221170][T20924] __sock_sendmsg+0x219/0x270 [ 466.221196][T20924] ____sys_sendmsg+0x505/0x830 [ 466.221226][T20924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.221254][T20924] ? import_iovec+0x74/0xa0 [ 466.221281][T20924] ___sys_sendmsg+0x21f/0x2a0 [ 466.221304][T20924] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.221358][T20924] ? __fget_files+0x2a/0x420 [ 466.221374][T20924] ? __fget_files+0x3a0/0x420 [ 466.221403][T20924] __x64_sys_sendmsg+0x19b/0x260 [ 466.221426][T20924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.221455][T20924] ? __pfx_ksys_write+0x10/0x10 [ 466.221468][T20924] ? rcu_is_watching+0x15/0xb0 [ 466.221495][T20924] ? do_syscall_64+0xbe/0x3b0 [ 466.221513][T20924] do_syscall_64+0xfa/0x3b0 [ 466.221527][T20924] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.221548][T20924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.221564][T20924] ? clear_bhb_loop+0x60/0xb0 [ 466.221584][T20924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.221598][T20924] RIP: 0033:0x7efd2d38e929 [ 466.221613][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.221627][T20924] RSP: 002b:00007efd2e116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.221644][T20924] RAX: ffffffffffffffda RBX: 00007efd2d5b5fa0 RCX: 00007efd2d38e929 [ 466.221655][T20924] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 466.221665][T20924] RBP: 00007efd2e116090 R08: 0000000000000000 R09: 0000000000000000 [ 466.221674][T20924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.221684][T20924] R13: 0000000000000000 R14: 00007efd2d5b5fa0 R15: 00007ffec73c53e8 [ 466.221712][T20924] [ 466.940843][T20936] netlink: 'syz.1.5576': attribute type 1 has an invalid length. [ 466.952298][T20936] netlink: 'syz.1.5576': attribute type 1 has an invalid length. [ 467.538598][ T1167] net_ratelimit: 17 callbacks suppressed [ 467.538617][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 467.609281][T20968] FAULT_INJECTION: forcing a failure. [ 467.609281][T20968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.653087][T20968] CPU: 0 UID: 0 PID: 20968 Comm: syz.3.5590 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 467.653112][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.653121][T20968] Call Trace: [ 467.653128][T20968] [ 467.653136][T20968] dump_stack_lvl+0x189/0x250 [ 467.653165][T20968] ? __pfx____ratelimit+0x10/0x10 [ 467.653188][T20968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.653210][T20968] ? __pfx__printk+0x10/0x10 [ 467.653239][T20968] should_fail_ex+0x414/0x560 [ 467.653265][T20968] _copy_to_user+0x31/0xb0 [ 467.653284][T20968] simple_read_from_buffer+0xe1/0x170 [ 467.653306][T20968] proc_fail_nth_read+0x1df/0x250 [ 467.653328][T20968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.653349][T20968] ? rw_verify_area+0x258/0x650 [ 467.653371][T20968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.653391][T20968] vfs_read+0x1fd/0x980 [ 467.653419][T20968] ? __pfx___mutex_lock+0x10/0x10 [ 467.653446][T20968] ? __pfx_vfs_read+0x10/0x10 [ 467.653469][T20968] ? __fget_files+0x2a/0x420 [ 467.653490][T20968] ? __fget_files+0x3a0/0x420 [ 467.653506][T20968] ? __fget_files+0x2a/0x420 [ 467.653532][T20968] ksys_read+0x145/0x250 [ 467.653549][T20968] ? __pfx_ksys_read+0x10/0x10 [ 467.653569][T20968] ? rcu_is_watching+0x15/0xb0 [ 467.653597][T20968] ? do_syscall_64+0xbe/0x3b0 [ 467.653615][T20968] do_syscall_64+0xfa/0x3b0 [ 467.653629][T20968] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.653650][T20968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.653667][T20968] ? clear_bhb_loop+0x60/0xb0 [ 467.653686][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.653701][T20968] RIP: 0033:0x7efd2d38d33c [ 467.653717][T20968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 467.653730][T20968] RSP: 002b:00007efd2e116030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.653749][T20968] RAX: ffffffffffffffda RBX: 00007efd2d5b5fa0 RCX: 00007efd2d38d33c [ 467.653760][T20968] RDX: 000000000000000f RSI: 00007efd2e1160a0 RDI: 0000000000000003 [ 467.653770][T20968] RBP: 00007efd2e116090 R08: 0000000000000000 R09: 0000000000000000 [ 467.653780][T20968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.653790][T20968] R13: 0000000000000000 R14: 00007efd2d5b5fa0 R15: 00007ffec73c53e8 [ 467.653818][T20968] [ 467.885418][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 467.994375][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.204258][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.308784][T20991] __nla_validate_parse: 4 callbacks suppressed [ 468.308801][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5598'. [ 468.315316][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.487083][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.617593][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.685731][T21010] netlink: 'syz.3.5604': attribute type 10 has an invalid length. [ 468.749370][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.881203][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 468.925569][T21023] netlink: 'syz.6.5609': attribute type 10 has an invalid length. [ 468.952108][T21023] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 468.971754][T21028] FAULT_INJECTION: forcing a failure. [ 468.971754][T21028] name failslab, interval 1, probability 0, space 0, times 0 [ 469.036887][T21028] CPU: 1 UID: 0 PID: 21028 Comm: syz.7.5611 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 469.036914][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.036924][T21028] Call Trace: [ 469.036931][T21028] [ 469.036939][T21028] dump_stack_lvl+0x189/0x250 [ 469.036966][T21028] ? __pfx____ratelimit+0x10/0x10 [ 469.036989][T21028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.037011][T21028] ? __pfx__printk+0x10/0x10 [ 469.037032][T21028] ? __pfx___might_resched+0x10/0x10 [ 469.037054][T21028] ? fs_reclaim_acquire+0x7d/0x100 [ 469.037078][T21028] should_fail_ex+0x414/0x560 [ 469.037111][T21028] should_failslab+0xa8/0x100 [ 469.037131][T21028] __kmalloc_cache_noprof+0x70/0x3d0 [ 469.037148][T21028] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 469.037169][T21028] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 469.037192][T21028] alloc_netdev_mqs+0xbd5/0x11e0 [ 469.037221][T21028] rtnl_create_link+0x31f/0xd10 [ 469.037250][T21028] rtnl_newlink_create+0x25c/0xb00 [ 469.037275][T21028] ? __mutex_lock+0x51b/0xe80 [ 469.037295][T21028] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 469.037312][T21028] ? rtnl_newlink+0x8db/0x1c70 [ 469.037331][T21028] ? __pfx___mutex_lock+0x10/0x10 [ 469.037356][T21028] ? ns_capable+0x8a/0xf0 [ 469.037382][T21028] rtnl_newlink+0x16d6/0x1c70 [ 469.037400][T21028] ? netlink_sendmsg+0x805/0xb30 [ 469.037430][T21028] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.037469][T21028] ? kasan_quarantine_put+0xdd/0x220 [ 469.037490][T21028] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.037517][T21028] ? nlmon_xmit+0xb0/0x100 [ 469.037536][T21028] ? kmem_cache_free+0x18f/0x400 [ 469.037558][T21028] ? __local_bh_enable_ip+0x12d/0x1c0 [ 469.037580][T21028] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.037601][T21028] ? __local_bh_enable_ip+0x12d/0x1c0 [ 469.037623][T21028] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 469.037649][T21028] ? __dev_queue_xmit+0x27e/0x3a70 [ 469.037684][T21028] ? __lock_acquire+0xab9/0xd20 [ 469.037729][T21028] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.037745][T21028] rtnetlink_rcv_msg+0x7cf/0xb70 [ 469.037765][T21028] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 469.037781][T21028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.037794][T21028] ? ref_tracker_free+0x63a/0x7d0 [ 469.037811][T21028] ? __copy_skb_header+0xa7/0x550 [ 469.037833][T21028] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.037863][T21028] netlink_rcv_skb+0x205/0x470 [ 469.037882][T21028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.037901][T21028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.037934][T21028] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.037952][T21028] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.037977][T21028] netlink_unicast+0x758/0x8d0 [ 469.038004][T21028] netlink_sendmsg+0x805/0xb30 [ 469.038034][T21028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.038055][T21028] ? aa_sock_msg_perm+0x94/0x160 [ 469.038078][T21028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.038097][T21028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.038129][T21028] __sock_sendmsg+0x219/0x270 [ 469.038156][T21028] ____sys_sendmsg+0x505/0x830 [ 469.038181][T21028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.038211][T21028] ? import_iovec+0x74/0xa0 [ 469.038232][T21028] ___sys_sendmsg+0x21f/0x2a0 [ 469.038255][T21028] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.038309][T21028] ? __fget_files+0x2a/0x420 [ 469.038326][T21028] ? __fget_files+0x3a0/0x420 [ 469.038354][T21028] __x64_sys_sendmsg+0x19b/0x260 [ 469.038377][T21028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.038407][T21028] ? __pfx_ksys_write+0x10/0x10 [ 469.038428][T21028] ? do_syscall_64+0xbe/0x3b0 [ 469.038448][T21028] do_syscall_64+0xfa/0x3b0 [ 469.038462][T21028] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.038482][T21028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.038497][T21028] ? clear_bhb_loop+0x60/0xb0 [ 469.038515][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.038531][T21028] RIP: 0033:0x7fc3f078e929 [ 469.038546][T21028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.038559][T21028] RSP: 002b:00007fc3f1549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.038577][T21028] RAX: ffffffffffffffda RBX: 00007fc3f09b5fa0 RCX: 00007fc3f078e929 [ 469.038588][T21028] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 469.038599][T21028] RBP: 00007fc3f1549090 R08: 0000000000000000 R09: 0000000000000000 [ 469.038609][T21028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.038618][T21028] R13: 0000000000000000 R14: 00007fc3f09b5fa0 R15: 00007fff68bb9338 [ 469.038647][T21028] [ 469.484656][T21035] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 469.499350][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 469.813745][T21042] netlink: 23 bytes leftover after parsing attributes in process `syz.7.5618'. [ 469.870307][T21057] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.5625'. [ 469.895868][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5625'. [ 469.917460][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 470.086035][T21066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5626'. [ 470.117223][T21066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5626'. [ 470.133197][T21069] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5629'. [ 470.450228][T21085] bridge0: port 3(syz_tun) entered blocking state [ 470.457144][T21085] bridge0: port 3(syz_tun) entered disabled state [ 470.463813][T21085] syz_tun: entered allmulticast mode [ 470.470759][T21085] syz_tun: entered promiscuous mode [ 470.476581][T21085] bridge0: port 3(syz_tun) entered blocking state [ 470.483397][T21085] bridge0: port 3(syz_tun) entered forwarding state [ 470.498492][T21087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5637'. [ 470.501038][T21085] netlink: 'syz.7.5635': attribute type 10 has an invalid length. [ 470.550454][T21085] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 471.078664][T21106] netlink: 'syz.1.5643': attribute type 10 has an invalid length. [ 471.298259][T21110] bond1: entered promiscuous mode [ 471.334420][T21110] bond1: entered allmulticast mode [ 471.365844][T21110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.644140][T21128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5651'. [ 471.708756][T21110] bond1 (unregistering): Released all slaves [ 472.216990][T21153] x_tables: unsorted underflow at hook 1 [ 472.597885][ T1103] net_ratelimit: 27 callbacks suppressed [ 472.597905][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 472.811374][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.084954][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.227286][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.378858][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.595832][T21231] __nla_validate_parse: 7 callbacks suppressed [ 473.595849][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5686'. [ 473.611498][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5686'. [ 473.642080][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5686'. [ 473.697430][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.713574][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5686'. [ 473.755798][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5686'. [ 473.826711][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 473.995324][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 474.027611][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5691'. [ 474.124674][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 474.135211][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5693'. [ 474.192436][T21259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.248931][T21263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5694'. [ 474.297310][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 474.504971][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.857086][T21296] netlink: 'syz.1.5705': attribute type 1 has an invalid length. [ 474.875909][T21297] netlink: 'syz.0.5702': attribute type 10 has an invalid length. [ 474.914792][T21296] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5705'. [ 475.062546][T21306] netlink: 'syz.1.5709': attribute type 27 has an invalid length. [ 475.137387][T21305] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5708'. [ 476.038193][T21362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.353185][T21382] FAULT_INJECTION: forcing a failure. [ 476.353185][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 476.381963][T21382] CPU: 0 UID: 0 PID: 21382 Comm: syz.6.5734 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 476.381989][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.381999][T21382] Call Trace: [ 476.382006][T21382] [ 476.382013][T21382] dump_stack_lvl+0x189/0x250 [ 476.382040][T21382] ? __pfx____ratelimit+0x10/0x10 [ 476.382065][T21382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.382087][T21382] ? __pfx__printk+0x10/0x10 [ 476.382112][T21382] ? __pfx___might_resched+0x10/0x10 [ 476.382133][T21382] ? fs_reclaim_acquire+0x7d/0x100 [ 476.382157][T21382] should_fail_ex+0x414/0x560 [ 476.382184][T21382] should_failslab+0xa8/0x100 [ 476.382205][T21382] __kmalloc_cache_noprof+0x70/0x3d0 [ 476.382221][T21382] ? garp_init_applicant+0x13a/0x450 [ 476.382249][T21382] garp_init_applicant+0x13a/0x450 [ 476.382276][T21382] register_vlan_dev+0x225/0x800 [ 476.382304][T21382] vlan_newlink+0x4b2/0x610 [ 476.382325][T21382] ? __pfx_vlan_newlink+0x10/0x10 [ 476.382348][T21382] rtnl_newlink_create+0x310/0xb00 [ 476.382373][T21382] ? __pfx_aa_get_newest_label+0x10/0x10 [ 476.382398][T21382] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 476.382414][T21382] ? rtnl_newlink+0x8db/0x1c70 [ 476.382434][T21382] ? __pfx___mutex_lock+0x10/0x10 [ 476.382460][T21382] ? ns_capable+0x8a/0xf0 [ 476.382483][T21382] rtnl_newlink+0x16d6/0x1c70 [ 476.382518][T21382] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.382533][T21382] ? is_bpf_text_address+0x26/0x2b0 [ 476.382562][T21382] ? __lock_acquire+0xab9/0xd20 [ 476.382595][T21382] ? __lock_acquire+0xab9/0xd20 [ 476.382637][T21382] ? is_bpf_text_address+0x26/0x2b0 [ 476.382663][T21382] ? is_bpf_text_address+0x292/0x2b0 [ 476.382684][T21382] ? is_bpf_text_address+0x26/0x2b0 [ 476.382709][T21382] ? kernel_text_address+0xa5/0xe0 [ 476.382742][T21382] ? __lock_acquire+0xab9/0xd20 [ 476.382785][T21382] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.382801][T21382] rtnetlink_rcv_msg+0x7cf/0xb70 [ 476.382821][T21382] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 476.382844][T21382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.382879][T21382] netlink_rcv_skb+0x205/0x470 [ 476.382900][T21382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.382920][T21382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.382953][T21382] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.382974][T21382] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.382998][T21382] netlink_unicast+0x758/0x8d0 [ 476.383028][T21382] netlink_sendmsg+0x805/0xb30 [ 476.383056][T21382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.383078][T21382] ? aa_sock_msg_perm+0x94/0x160 [ 476.383099][T21382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.383118][T21382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.383138][T21382] __sock_sendmsg+0x219/0x270 [ 476.383165][T21382] ____sys_sendmsg+0x505/0x830 [ 476.383192][T21382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.383222][T21382] ? import_iovec+0x74/0xa0 [ 476.383243][T21382] ___sys_sendmsg+0x21f/0x2a0 [ 476.383266][T21382] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.383326][T21382] ? __fget_files+0x2a/0x420 [ 476.383343][T21382] ? __fget_files+0x3a0/0x420 [ 476.383372][T21382] __x64_sys_sendmsg+0x19b/0x260 [ 476.383395][T21382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.383425][T21382] ? __pfx_ksys_write+0x10/0x10 [ 476.383438][T21382] ? rcu_is_watching+0x15/0xb0 [ 476.383468][T21382] ? do_syscall_64+0xbe/0x3b0 [ 476.383488][T21382] do_syscall_64+0xfa/0x3b0 [ 476.383503][T21382] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.383525][T21382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.383541][T21382] ? clear_bhb_loop+0x60/0xb0 [ 476.383561][T21382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.383577][T21382] RIP: 0033:0x7f6e9f18e929 [ 476.383590][T21382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.383604][T21382] RSP: 002b:00007f6ea00cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.383623][T21382] RAX: ffffffffffffffda RBX: 00007f6e9f3b5fa0 RCX: 00007f6e9f18e929 [ 476.383635][T21382] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 476.383646][T21382] RBP: 00007f6ea00cb090 R08: 0000000000000000 R09: 0000000000000000 [ 476.383656][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.383665][T21382] R13: 0000000000000000 R14: 00007f6e9f3b5fa0 R15: 00007ffe634e9f78 [ 476.383694][T21382] [ 477.012912][T21398] FAULT_INJECTION: forcing a failure. [ 477.012912][T21398] name failslab, interval 1, probability 0, space 0, times 0 [ 477.026606][T21398] CPU: 0 UID: 0 PID: 21398 Comm: syz.0.5738 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 477.026631][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.026641][T21398] Call Trace: [ 477.026649][T21398] [ 477.026656][T21398] dump_stack_lvl+0x189/0x250 [ 477.026683][T21398] ? __pfx____ratelimit+0x10/0x10 [ 477.026707][T21398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.026731][T21398] ? __pfx__printk+0x10/0x10 [ 477.026756][T21398] ? __pfx___might_resched+0x10/0x10 [ 477.026778][T21398] ? fs_reclaim_acquire+0x7d/0x100 [ 477.026810][T21398] should_fail_ex+0x414/0x560 [ 477.026836][T21398] should_failslab+0xa8/0x100 [ 477.026857][T21398] __kmalloc_cache_noprof+0x70/0x3d0 [ 477.026873][T21398] ? netlbl_mgmt_add_common+0x6a1/0x13b0 [ 477.026897][T21398] netlbl_mgmt_add_common+0x6a1/0x13b0 [ 477.026923][T21398] ? end_current_label_crit_section+0x152/0x180 [ 477.026950][T21398] netlbl_mgmt_add+0x2ae/0x340 [ 477.026970][T21398] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 477.026992][T21398] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 477.027025][T21398] genl_family_rcv_msg_doit+0x212/0x300 [ 477.027054][T21398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 477.027088][T21398] ? bpf_lsm_capable+0x9/0x20 [ 477.027103][T21398] ? security_capable+0x7e/0x2e0 [ 477.027127][T21398] genl_rcv_msg+0x60e/0x790 [ 477.027155][T21398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.027176][T21398] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 477.027208][T21398] netlink_rcv_skb+0x205/0x470 [ 477.027228][T21398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.027251][T21398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.027289][T21398] ? down_read+0x1ad/0x2e0 [ 477.027309][T21398] genl_rcv+0x28/0x40 [ 477.027329][T21398] netlink_unicast+0x758/0x8d0 [ 477.027358][T21398] netlink_sendmsg+0x805/0xb30 [ 477.027388][T21398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.027411][T21398] ? aa_sock_msg_perm+0x94/0x160 [ 477.027433][T21398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.027452][T21398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.027472][T21398] __sock_sendmsg+0x219/0x270 [ 477.027500][T21398] ____sys_sendmsg+0x505/0x830 [ 477.027527][T21398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.027556][T21398] ? import_iovec+0x74/0xa0 [ 477.027577][T21398] ___sys_sendmsg+0x21f/0x2a0 [ 477.027600][T21398] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.027660][T21398] ? __fget_files+0x2a/0x420 [ 477.027677][T21398] ? __fget_files+0x3a0/0x420 [ 477.027706][T21398] __x64_sys_sendmsg+0x19b/0x260 [ 477.027730][T21398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.027761][T21398] ? __pfx_ksys_write+0x10/0x10 [ 477.027774][T21398] ? rcu_is_watching+0x15/0xb0 [ 477.027809][T21398] ? do_syscall_64+0xbe/0x3b0 [ 477.027830][T21398] do_syscall_64+0xfa/0x3b0 [ 477.027844][T21398] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.027865][T21398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.027882][T21398] ? clear_bhb_loop+0x60/0xb0 [ 477.027903][T21398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.027919][T21398] RIP: 0033:0x7f02ff78e929 [ 477.027934][T21398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.027948][T21398] RSP: 002b:00007f02fd5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.027965][T21398] RAX: ffffffffffffffda RBX: 00007f02ff9b5fa0 RCX: 00007f02ff78e929 [ 477.027977][T21398] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 477.027987][T21398] RBP: 00007f02fd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.027996][T21398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.028006][T21398] R13: 0000000000000000 R14: 00007f02ff9b5fa0 R15: 00007ffe457aede8 [ 477.028036][T21398] [ 477.654951][ T1094] net_ratelimit: 19 callbacks suppressed [ 477.654969][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 477.798599][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 477.821808][T21423] netlink: 'syz.1.5745': attribute type 10 has an invalid length. [ 477.917292][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 478.069136][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 478.242427][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 478.396392][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 478.491277][T21462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.545504][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 478.588376][T21469] FAULT_INJECTION: forcing a failure. [ 478.588376][T21469] name failslab, interval 1, probability 0, space 0, times 0 [ 478.626670][T21469] CPU: 0 UID: 0 PID: 21469 Comm: syz.0.5764 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 478.626696][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.626706][T21469] Call Trace: [ 478.626713][T21469] [ 478.626721][T21469] dump_stack_lvl+0x189/0x250 [ 478.626748][T21469] ? __pfx____ratelimit+0x10/0x10 [ 478.626771][T21469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.626794][T21469] ? __pfx__printk+0x10/0x10 [ 478.626818][T21469] ? __pfx___might_resched+0x10/0x10 [ 478.626844][T21469] should_fail_ex+0x414/0x560 [ 478.626870][T21469] should_failslab+0xa8/0x100 [ 478.626889][T21469] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 478.626906][T21469] ? __alloc_skb+0x112/0x2d0 [ 478.626927][T21469] __alloc_skb+0x112/0x2d0 [ 478.626948][T21469] netlink_sendmsg+0x5c6/0xb30 [ 478.626978][T21469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.627000][T21469] ? aa_sock_msg_perm+0x94/0x160 [ 478.627021][T21469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.627040][T21469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.627060][T21469] __sock_sendmsg+0x219/0x270 [ 478.627084][T21469] ____sys_sendmsg+0x505/0x830 [ 478.627110][T21469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.627139][T21469] ? import_iovec+0x74/0xa0 [ 478.627159][T21469] ___sys_sendmsg+0x21f/0x2a0 [ 478.627180][T21469] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.627236][T21469] ? __fget_files+0x2a/0x420 [ 478.627252][T21469] ? __fget_files+0x3a0/0x420 [ 478.627276][T21469] __x64_sys_sendmsg+0x19b/0x260 [ 478.627298][T21469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.627324][T21469] ? __pfx_ksys_write+0x10/0x10 [ 478.627345][T21469] ? do_syscall_64+0xbe/0x3b0 [ 478.627365][T21469] do_syscall_64+0xfa/0x3b0 [ 478.627378][T21469] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.627399][T21469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.627414][T21469] ? clear_bhb_loop+0x60/0xb0 [ 478.627444][T21469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.627459][T21469] RIP: 0033:0x7f02ff78e929 [ 478.627474][T21469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.627488][T21469] RSP: 002b:00007f02fd5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.627507][T21469] RAX: ffffffffffffffda RBX: 00007f02ff9b6080 RCX: 00007f02ff78e929 [ 478.627519][T21469] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 478.627530][T21469] RBP: 00007f02fd5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 478.627540][T21469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.627549][T21469] R13: 0000000000000001 R14: 00007f02ff9b6080 R15: 00007ffe457aede8 [ 478.627575][T21469] [ 478.900184][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 479.017273][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 479.175131][T21486] netlink: 'syz.6.5767': attribute type 1 has an invalid length. [ 479.187946][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 479.244421][T21486] netlink: 'syz.6.5767': attribute type 2 has an invalid length. [ 479.252179][T21486] netlink: 'syz.6.5767': attribute type 1 has an invalid length. [ 479.312155][T21486] __nla_validate_parse: 5 callbacks suppressed [ 479.312170][T21486] netlink: 1156 bytes leftover after parsing attributes in process `syz.6.5767'. [ 479.427948][T21500] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5771'. [ 479.741384][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5780'. [ 479.987356][T21536] SET target dimension over the limit! [ 481.474831][T21626] netlink: 'syz.0.5815': attribute type 1 has an invalid length. [ 481.497489][T21626] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5815'. [ 482.265005][T21669] netlink: 'syz.3.5829': attribute type 10 has an invalid length. [ 482.520614][T21678] bridge0: port 1(veth0_to_bridge) entered blocking state [ 482.542832][T21678] bridge0: port 1(veth0_to_bridge) entered disabled state [ 482.572412][T21678] veth0_to_bridge: entered allmulticast mode [ 482.597130][T21678] veth0_to_bridge: entered promiscuous mode [ 482.617670][T21678] bridge0: port 1(veth0_to_bridge) entered blocking state [ 482.624957][T21678] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 482.772430][ T3530] net_ratelimit: 29 callbacks suppressed [ 482.772449][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 482.918738][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 482.999926][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5844'. [ 483.035337][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.043454][T21708] netlink: 'syz.3.5845': attribute type 10 has an invalid length. [ 483.128232][T21711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5846'. [ 483.146603][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.274235][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.422876][T21721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5850'. [ 483.439649][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.542697][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5852'. [ 483.599752][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.621250][T21730] netlink: 'syz.7.5853': attribute type 1 has an invalid length. [ 483.704898][T21735] netlink: 'syz.7.5853': attribute type 21 has an invalid length. [ 483.747197][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.886890][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 483.945997][T21747] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 484.035321][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5860'. [ 484.061522][T21753] netlink: 'syz.6.5859': attribute type 2 has an invalid length. [ 484.072638][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5859'. [ 484.332269][T21745] team0 (unregistering): Port device team_slave_0 removed [ 484.341608][T21745] team0 (unregistering): Port device team_slave_1 removed [ 484.387225][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 485.045564][T21813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5875'. [ 485.066088][ T5157] Bluetooth: hci7: command tx timeout [ 485.451807][T21831] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5880'. [ 485.539162][T21839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 485.815743][T21847] syzkaller0: entered promiscuous mode [ 485.821261][T21847] syzkaller0: entered allmulticast mode [ 486.746574][T21899] netlink: 'syz.0.5899': attribute type 1 has an invalid length. [ 486.802973][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5901'. [ 486.827562][T21906] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5901'. [ 487.101721][T21927] netlink: 'syz.0.5905': attribute type 10 has an invalid length. [ 487.784886][T15431] net_ratelimit: 26 callbacks suppressed [ 487.784905][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 487.904282][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.014322][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.124368][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.234202][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.344612][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.464492][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.584581][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.694147][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 488.804464][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 489.018926][T21941] netlink: 'syz.6.5914': attribute type 10 has an invalid length. [ 489.569362][T21971] netlink: 'syz.6.5921': attribute type 12 has an invalid length. [ 489.592216][T21970] netlink: 'syz.3.5922': attribute type 10 has an invalid length. [ 490.247860][T22004] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5936'. [ 490.273012][T22004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5936'. [ 490.360029][T22011] pimreg: entered allmulticast mode [ 490.541632][T22023] FAULT_INJECTION: forcing a failure. [ 490.541632][T22023] name failslab, interval 1, probability 0, space 0, times 0 [ 490.591236][T22023] CPU: 1 UID: 0 PID: 22023 Comm: syz.6.5945 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 490.591265][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.591276][T22023] Call Trace: [ 490.591283][T22023] [ 490.591291][T22023] dump_stack_lvl+0x189/0x250 [ 490.591319][T22023] ? __pfx____ratelimit+0x10/0x10 [ 490.591342][T22023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.591365][T22023] ? __pfx__printk+0x10/0x10 [ 490.591389][T22023] ? __pfx___might_resched+0x10/0x10 [ 490.591411][T22023] ? fs_reclaim_acquire+0x7d/0x100 [ 490.591436][T22023] should_fail_ex+0x414/0x560 [ 490.591461][T22023] should_failslab+0xa8/0x100 [ 490.591481][T22023] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 490.591498][T22023] ? __alloc_skb+0x112/0x2d0 [ 490.591522][T22023] __alloc_skb+0x112/0x2d0 [ 490.591544][T22023] netlink_ack+0x146/0xa50 [ 490.591560][T22023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.591595][T22023] netlink_rcv_skb+0x28c/0x470 [ 490.591613][T22023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.591632][T22023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.591663][T22023] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.591681][T22023] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.591705][T22023] netlink_unicast+0x758/0x8d0 [ 490.591734][T22023] netlink_sendmsg+0x805/0xb30 [ 490.591763][T22023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.591785][T22023] ? aa_sock_msg_perm+0x94/0x160 [ 490.591807][T22023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.591827][T22023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.591848][T22023] __sock_sendmsg+0x219/0x270 [ 490.591874][T22023] ____sys_sendmsg+0x505/0x830 [ 490.591900][T22023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.591936][T22023] ? import_iovec+0x74/0xa0 [ 490.591957][T22023] ___sys_sendmsg+0x21f/0x2a0 [ 490.591979][T22023] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.592036][T22023] ? __fget_files+0x2a/0x420 [ 490.592053][T22023] ? __fget_files+0x3a0/0x420 [ 490.592081][T22023] __x64_sys_sendmsg+0x19b/0x260 [ 490.592105][T22023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.592134][T22023] ? __pfx_ksys_write+0x10/0x10 [ 490.592148][T22023] ? rcu_is_watching+0x15/0xb0 [ 490.592176][T22023] ? do_syscall_64+0xbe/0x3b0 [ 490.592197][T22023] do_syscall_64+0xfa/0x3b0 [ 490.592212][T22023] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.592234][T22023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.592251][T22023] ? clear_bhb_loop+0x60/0xb0 [ 490.592271][T22023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.592287][T22023] RIP: 0033:0x7f6e9f18e929 [ 490.592301][T22023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.592315][T22023] RSP: 002b:00007f6ea00cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.592333][T22023] RAX: ffffffffffffffda RBX: 00007f6e9f3b5fa0 RCX: 00007f6e9f18e929 [ 490.592345][T22023] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 490.592356][T22023] RBP: 00007f6ea00cb090 R08: 0000000000000000 R09: 0000000000000000 [ 490.592367][T22023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.592377][T22023] R13: 0000000000000000 R14: 00007f6e9f3b5fa0 R15: 00007ffe634e9f78 [ 490.592406][T22023] [ 491.073487][T22035] netlink: 'syz.0.5947': attribute type 1 has an invalid length. [ 491.094102][T22034] netlink: 'syz.1.5950': attribute type 8 has an invalid length. [ 491.104175][T22035] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5947'. [ 491.786530][T22072] netlink: 1236 bytes leftover after parsing attributes in process `syz.1.5960'. [ 491.863247][T22072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5960'. [ 492.052835][T22083] FAULT_INJECTION: forcing a failure. [ 492.052835][T22083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.084157][T22083] CPU: 1 UID: 0 PID: 22083 Comm: syz.3.5964 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 492.084184][T22083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.084195][T22083] Call Trace: [ 492.084202][T22083] [ 492.084210][T22083] dump_stack_lvl+0x189/0x250 [ 492.084237][T22083] ? __pfx____ratelimit+0x10/0x10 [ 492.084261][T22083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.084284][T22083] ? __pfx__printk+0x10/0x10 [ 492.084303][T22083] ? __might_fault+0xb0/0x130 [ 492.084331][T22083] should_fail_ex+0x414/0x560 [ 492.084357][T22083] _copy_from_iter+0x1db/0x16f0 [ 492.084389][T22083] ? policy_nodemask+0x27c/0x720 [ 492.084405][T22083] ? __pfx__copy_from_iter+0x10/0x10 [ 492.084435][T22083] ? set_page_refcounted+0xa0/0x1e0 [ 492.084462][T22083] af_alg_sendmsg+0x1436/0x22e0 [ 492.084482][T22083] ? __pfx___might_resched+0x10/0x10 [ 492.084536][T22083] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 492.084553][T22083] ? __lock_acquire+0xab9/0xd20 [ 492.084574][T22083] ? __pfx_aa_sk_perm+0x10/0x10 [ 492.084591][T22083] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 492.084619][T22083] ? aa_sock_msg_perm+0x94/0x160 [ 492.084642][T22083] ? skcipher_sendmsg+0x26/0xf0 [ 492.084661][T22083] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 492.084682][T22083] __sock_sendmsg+0x219/0x270 [ 492.084710][T22083] ____sys_sendmsg+0x52d/0x830 [ 492.084737][T22083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.084766][T22083] ? import_iovec+0x74/0xa0 [ 492.084786][T22083] ___sys_sendmsg+0x21f/0x2a0 [ 492.084809][T22083] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.084868][T22083] ? __fget_files+0x2a/0x420 [ 492.084885][T22083] ? __fget_files+0x3a0/0x420 [ 492.084913][T22083] __sys_sendmmsg+0x227/0x430 [ 492.084940][T22083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 492.084957][T22083] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 492.085002][T22083] ? ksys_write+0x22a/0x250 [ 492.085020][T22083] ? __pfx_ksys_write+0x10/0x10 [ 492.085033][T22083] ? rcu_is_watching+0x15/0xb0 [ 492.085064][T22083] __x64_sys_sendmmsg+0xa0/0xc0 [ 492.085086][T22083] do_syscall_64+0xfa/0x3b0 [ 492.085100][T22083] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.085121][T22083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.085138][T22083] ? clear_bhb_loop+0x60/0xb0 [ 492.085158][T22083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.085173][T22083] RIP: 0033:0x7efd2d38e929 [ 492.085188][T22083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.085203][T22083] RSP: 002b:00007efd2e116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.085221][T22083] RAX: ffffffffffffffda RBX: 00007efd2d5b5fa0 RCX: 00007efd2d38e929 [ 492.085234][T22083] RDX: 0000000000000001 RSI: 0000200000005500 RDI: 0000000000000004 [ 492.085245][T22083] RBP: 00007efd2e116090 R08: 0000000000000000 R09: 0000000000000000 [ 492.085256][T22083] R10: 0000000000004814 R11: 0000000000000246 R12: 0000000000000001 [ 492.085266][T22083] R13: 0000000000000000 R14: 00007efd2d5b5fa0 R15: 00007ffec73c53e8 [ 492.085295][T22083] [ 492.569922][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5969'. [ 492.579552][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5969'. [ 492.782220][T22108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5971'. [ 492.831426][T22106] tipc: Enabled bearer , priority 0 [ 492.997320][T22107] syzkaller0: entered promiscuous mode [ 493.002835][T22107] syzkaller0: entered allmulticast mode [ 493.022606][T22107] tipc: Resetting bearer [ 493.044964][ T1094] net_ratelimit: 29 callbacks suppressed [ 493.044981][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 493.093631][T22107] tipc: Resetting bearer [ 494.610392][T22107] tipc: Disabling bearer [ 494.656314][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 494.698115][T22129] FAULT_INJECTION: forcing a failure. [ 494.698115][T22129] name failslab, interval 1, probability 0, space 0, times 0 [ 494.718556][T22129] CPU: 1 UID: 0 PID: 22129 Comm: syz.1.5978 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 494.718581][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.718592][T22129] Call Trace: [ 494.718599][T22129] [ 494.718606][T22129] dump_stack_lvl+0x189/0x250 [ 494.718633][T22129] ? __pfx____ratelimit+0x10/0x10 [ 494.718655][T22129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.718678][T22129] ? __pfx__printk+0x10/0x10 [ 494.718702][T22129] ? __pfx___might_resched+0x10/0x10 [ 494.718722][T22129] ? fs_reclaim_acquire+0x7d/0x100 [ 494.718746][T22129] should_fail_ex+0x414/0x560 [ 494.718772][T22129] should_failslab+0xa8/0x100 [ 494.718791][T22129] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.718808][T22129] ? __alloc_skb+0x112/0x2d0 [ 494.718831][T22129] __alloc_skb+0x112/0x2d0 [ 494.718852][T22129] netlink_ack+0x146/0xa50 [ 494.718868][T22129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.718883][T22129] ? ref_tracker_free+0x63a/0x7d0 [ 494.718904][T22129] ? __copy_skb_header+0xa7/0x550 [ 494.718925][T22129] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.718956][T22129] netlink_rcv_skb+0x28c/0x470 [ 494.718975][T22129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.718994][T22129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.719026][T22129] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.719043][T22129] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.719067][T22129] netlink_unicast+0x758/0x8d0 [ 494.719095][T22129] netlink_sendmsg+0x805/0xb30 [ 494.719123][T22129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.719146][T22129] ? aa_sock_msg_perm+0x94/0x160 [ 494.719169][T22129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.719187][T22129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.719206][T22129] __sock_sendmsg+0x219/0x270 [ 494.719232][T22129] ____sys_sendmsg+0x505/0x830 [ 494.719258][T22129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.719286][T22129] ? import_iovec+0x74/0xa0 [ 494.719306][T22129] ___sys_sendmsg+0x21f/0x2a0 [ 494.719329][T22129] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.719395][T22129] ? __fget_files+0x2a/0x420 [ 494.719412][T22129] ? __fget_files+0x3a0/0x420 [ 494.719441][T22129] __x64_sys_sendmsg+0x19b/0x260 [ 494.719464][T22129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.719492][T22129] ? __pfx_ksys_write+0x10/0x10 [ 494.719505][T22129] ? rcu_is_watching+0x15/0xb0 [ 494.719533][T22129] ? do_syscall_64+0xbe/0x3b0 [ 494.719552][T22129] do_syscall_64+0xfa/0x3b0 [ 494.719566][T22129] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.719588][T22129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.719603][T22129] ? clear_bhb_loop+0x60/0xb0 [ 494.719624][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.719639][T22129] RIP: 0033:0x7f2092b8e929 [ 494.719655][T22129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.719667][T22129] RSP: 002b:00007f20939db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.719685][T22129] RAX: ffffffffffffffda RBX: 00007f2092db5fa0 RCX: 00007f2092b8e929 [ 494.719697][T22129] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 494.719707][T22129] RBP: 00007f20939db090 R08: 0000000000000000 R09: 0000000000000000 [ 494.719717][T22129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.719727][T22129] R13: 0000000000000000 R14: 00007f2092db5fa0 R15: 00007fffa513bfc8 [ 494.719753][T22129] [ 495.055212][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.168340][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.271317][T22145] netlink: 'syz.0.5980': attribute type 10 has an invalid length. [ 495.293849][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.426073][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.472378][T22156] netlink: 'syz.0.5988': attribute type 7 has an invalid length. [ 495.490790][T22156] : entered promiscuous mode [ 495.511979][T22159] netlink: 'syz.3.5987': attribute type 29 has an invalid length. [ 495.564162][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.684380][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.795369][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.905845][T22185] netlink: 'syz.3.5995': attribute type 1 has an invalid length. [ 495.914614][T22185] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5995'. [ 495.927046][T22185] netlink: 'syz.3.5995': attribute type 1 has an invalid length. [ 495.935290][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 495.947363][T22187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5993'. [ 496.322718][T22198] netlink: 'syz.3.5999': attribute type 10 has an invalid length. [ 496.346231][T22198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5999'. [ 496.358406][T22201] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 496.358422][T22201] sctp: [Deprecated]: syz.7.6000 (pid 22201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.358422][T22201] Use struct sctp_sack_info instead [ 496.391940][T22198] team0: Port device geneve0 added [ 496.397286][T22201] sctp: [Deprecated]: syz.7.6000 (pid 22201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.397286][T22201] Use struct sctp_sack_info instead [ 497.258337][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6011'. [ 497.299073][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6011'. [ 497.588185][T22265] netlink: 'syz.0.6019': attribute type 12 has an invalid length. [ 497.620169][T22265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6019'. [ 497.647804][T22268] FAULT_INJECTION: forcing a failure. [ 497.647804][T22268] name failslab, interval 1, probability 0, space 0, times 0 [ 497.667817][T22268] CPU: 0 UID: 0 PID: 22268 Comm: syz.7.6020 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 497.667844][T22268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.667855][T22268] Call Trace: [ 497.667863][T22268] [ 497.667870][T22268] dump_stack_lvl+0x189/0x250 [ 497.667899][T22268] ? __pfx____ratelimit+0x10/0x10 [ 497.667923][T22268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.667946][T22268] ? __pfx__printk+0x10/0x10 [ 497.667967][T22268] ? __pfx___might_resched+0x10/0x10 [ 497.667991][T22268] ? fs_reclaim_acquire+0x7d/0x100 [ 497.668014][T22268] should_fail_ex+0x414/0x560 [ 497.668041][T22268] should_failslab+0xa8/0x100 [ 497.668061][T22268] __kmalloc_noprof+0xcb/0x4f0 [ 497.668076][T22268] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 497.668104][T22268] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 497.668135][T22268] genl_family_rcv_msg_doit+0xb8/0x300 [ 497.668166][T22268] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.668192][T22268] ? __pfx_genl_get_cmd+0x10/0x10 [ 497.668212][T22268] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 497.668230][T22268] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 497.668262][T22268] genl_rcv_msg+0x60e/0x790 [ 497.668292][T22268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.668313][T22268] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 497.668347][T22268] netlink_rcv_skb+0x205/0x470 [ 497.668367][T22268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.668391][T22268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.668435][T22268] ? down_read+0x1ad/0x2e0 [ 497.668456][T22268] genl_rcv+0x28/0x40 [ 497.668475][T22268] netlink_unicast+0x758/0x8d0 [ 497.668506][T22268] netlink_sendmsg+0x805/0xb30 [ 497.668535][T22268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.668559][T22268] ? aa_sock_msg_perm+0x94/0x160 [ 497.668581][T22268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.668601][T22268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.668622][T22268] __sock_sendmsg+0x219/0x270 [ 497.668649][T22268] ____sys_sendmsg+0x505/0x830 [ 497.668675][T22268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.668706][T22268] ? import_iovec+0x74/0xa0 [ 497.668727][T22268] ___sys_sendmsg+0x21f/0x2a0 [ 497.668750][T22268] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.668812][T22268] ? __fget_files+0x2a/0x420 [ 497.668830][T22268] ? __fget_files+0x3a0/0x420 [ 497.668859][T22268] __x64_sys_sendmsg+0x19b/0x260 [ 497.668883][T22268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.668914][T22268] ? __pfx_ksys_write+0x10/0x10 [ 497.668927][T22268] ? rcu_is_watching+0x15/0xb0 [ 497.668956][T22268] ? do_syscall_64+0xbe/0x3b0 [ 497.668977][T22268] do_syscall_64+0xfa/0x3b0 [ 497.668991][T22268] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.669012][T22268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.669044][T22268] ? clear_bhb_loop+0x60/0xb0 [ 497.669065][T22268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.669082][T22268] RIP: 0033:0x7fc3f078e929 [ 497.669098][T22268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.669112][T22268] RSP: 002b:00007fc3f1549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.669131][T22268] RAX: ffffffffffffffda RBX: 00007fc3f09b5fa0 RCX: 00007fc3f078e929 [ 497.669144][T22268] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 497.669155][T22268] RBP: 00007fc3f1549090 R08: 0000000000000000 R09: 0000000000000000 [ 497.669166][T22268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.669176][T22268] R13: 0000000000000000 R14: 00007fc3f09b5fa0 R15: 00007fff68bb9338 [ 497.669206][T22268] [ 498.144362][ T1167] net_ratelimit: 21 callbacks suppressed [ 498.144381][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 498.314976][T17995] Dead loop on virtual device ip6_vti0, fix it urgently! [ 498.360337][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 498.535817][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'. [ 498.561144][T22292] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 498.593930][T22292] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.629684][T22292] gretap1: entered promiscuous mode [ 498.661645][T22292] gretap1: entered allmulticast mode [ 498.683443][T22305] netlink: 'syz.0.6030': attribute type 1 has an invalid length. [ 498.697309][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 498.721085][T22305] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6030'. [ 498.762266][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6029'. [ 498.771845][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6029'. [ 498.827778][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 498.944303][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 499.068278][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 499.194250][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 499.324113][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 499.445009][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 499.612103][T22352] netlink: 'syz.0.6046': attribute type 1 has an invalid length. [ 499.850420][T22362] sctp: [Deprecated]: syz.1.6050 (pid 22362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.850420][T22362] Use struct sctp_sack_info instead [ 500.621684][T22403] netlink: 'syz.1.6061': attribute type 1 has an invalid length. [ 500.955689][T22415] netlink: 'syz.1.6068': attribute type 1 has an invalid length. [ 500.984110][T22415] netlink: 'syz.1.6068': attribute type 1 has an invalid length. [ 501.018070][T22422] netlink: 'syz.7.6067': attribute type 1 has an invalid length. [ 501.051703][T22422] __nla_validate_parse: 5 callbacks suppressed [ 501.051721][T22422] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6067'. [ 501.702134][T22452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6077'. [ 501.717500][T22452] netlink: 'syz.3.6077': attribute type 7 has an invalid length. [ 501.727720][T22452] netlink: 'syz.3.6077': attribute type 8 has an invalid length. [ 501.750074][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6077'. [ 502.072973][T22470] netlink: 'syz.7.6081': attribute type 1 has an invalid length. [ 502.102635][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6081'. [ 502.114700][T22470] netlink: 'syz.7.6081': attribute type 1 has an invalid length. [ 502.122447][T22470] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6081'. [ 502.126060][T22476] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6082'. [ 502.313507][T22484] netlink: 'syz.0.6083': attribute type 1 has an invalid length. [ 502.329012][T22484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6083'. [ 502.342023][T22485] netlink: 'syz.7.6084': attribute type 10 has an invalid length. [ 502.412974][T22491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6087'. [ 502.782851][T22512] x_tables: duplicate underflow at hook 3 [ 502.798441][T22512] sctp: [Deprecated]: syz.7.6094 (pid 22512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.798441][T22512] Use struct sctp_sack_info instead [ 502.916138][T22516] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6097'. [ 502.985514][T22523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6100'. [ 503.175240][ T59] net_ratelimit: 31 callbacks suppressed [ 503.175258][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.306206][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.415119][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.589046][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.734312][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.857390][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 503.987948][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 504.030648][T22574] : renamed from bond0 (while UP) [ 504.054420][ T9] IPVS: starting estimator thread 0... [ 504.125114][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 504.155235][T22579] IPVS: using max 31 ests per chain, 74400 per kthread [ 504.254785][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 504.371440][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 504.468903][T22603] bridge0: entered allmulticast mode [ 504.545350][T22603] bridge0 (unregistering): left allmulticast mode [ 504.606642][T22607] netem: incorrect gi model size [ 504.616421][T22607] netem: change failed [ 505.864809][T22674] validate_nla: 5 callbacks suppressed [ 505.864827][T22674] netlink: 'syz.7.6150': attribute type 10 has an invalid length. [ 506.247505][T22695] __nla_validate_parse: 9 callbacks suppressed [ 506.247524][T22695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'. [ 506.889007][T22721] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 507.305234][T22738] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.314447][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.322721][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.331039][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.339421][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 507.359330][T22739] netlink: 'syz.0.6173': attribute type 1 has an invalid length. [ 507.409406][T22739] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6173'. [ 507.461952][T22739] netlink: 'syz.0.6173': attribute type 1 has an invalid length. [ 507.784291][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.865965][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6179'. [ 507.892637][T22735] C speed is unknown, defaulting to 1000 [ 508.086748][T22765] sctp: [Deprecated]: syz.1.6182 (pid 22765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.086748][T22765] Use struct sctp_sack_info instead [ 508.134407][T22765] sctp: [Deprecated]: syz.1.6182 (pid 22765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.134407][T22765] Use struct sctp_sack_info instead [ 508.235573][ T1094] net_ratelimit: 34 callbacks suppressed [ 508.235591][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 508.314257][T22781] netlink: 'syz.0.6187': attribute type 1 has an invalid length. [ 508.342425][T22781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6187'. [ 508.397542][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 508.544750][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 508.668376][T22797] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 508.701814][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6192'. [ 508.775042][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 508.907701][ T5839] Bluetooth: hci0: command tx timeout [ 508.913222][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 509.025056][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 509.174619][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 509.286586][T22821] netlink: 'syz.7.6201': attribute type 1 has an invalid length. [ 509.334038][T22821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6201'. [ 509.384498][ T5839] Bluetooth: hci8: command tx timeout [ 509.385948][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 509.517957][T22839] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6208'. [ 509.583296][T22843] netlink: 'syz.1.6206': attribute type 10 has an invalid length. [ 509.620274][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 509.669449][T22735] chnl_net:caif_netlink_parms(): no params data found [ 509.950544][T22735] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.965380][T22735] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.972753][T22735] bridge_slave_0: entered allmulticast mode [ 509.981382][T22735] bridge_slave_0: entered promiscuous mode [ 510.000109][T22735] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.007586][T22735] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.024286][T22735] bridge_slave_1: entered allmulticast mode [ 510.042418][T22735] bridge_slave_1: entered promiscuous mode [ 510.144984][T22735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.165557][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 510.193387][T22735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.279869][T22874] netlink: 'syz.1.6218': attribute type 2 has an invalid length. [ 510.314417][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 510.338308][T22735] team0: Port device team_slave_0 added [ 510.358112][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 510.371140][T22735] team0: Port device team_slave_1 added [ 510.585109][T22735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.592347][T22735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.632863][T22735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.695599][T22894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6227'. [ 510.699297][T22735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.715538][T22735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.743199][T22735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.863139][T22902] netlink: 'syz.0.6231': attribute type 1 has an invalid length. [ 510.978411][T22735] hsr_slave_0: entered promiscuous mode [ 510.993907][T22735] hsr_slave_1: entered promiscuous mode [ 511.043034][T22735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.074322][T22735] Cannot create hsr debugfs directory [ 511.092001][T22912] : renamed from bond0 (while UP) [ 511.305922][T22921] sctp: [Deprecated]: syz.0.6239 (pid 22921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.305922][T22921] Use struct sctp_sack_info instead [ 511.384913][T22923] sctp: [Deprecated]: syz.0.6239 (pid 22923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.384913][T22923] Use struct sctp_sack_info instead [ 511.464267][ T5839] Bluetooth: hci8: command tx timeout [ 511.730902][T22735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 511.783875][T22735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 511.842043][T22944] netlink: 'syz.3.6245': attribute type 10 has an invalid length. [ 511.847014][T22735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 511.945103][T22735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 512.083519][T22957] __nla_validate_parse: 3 callbacks suppressed [ 512.083538][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6247'. [ 512.118387][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6247'. [ 512.349207][T22735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.357645][T22970] netlink: 'syz.1.6251': attribute type 9 has an invalid length. [ 512.397021][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6251'. [ 512.461114][T22735] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.523519][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.530750][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.601651][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.608871][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.335185][ T1103] net_ratelimit: 15 callbacks suppressed [ 513.335203][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.448197][T23016] netlink: 'syz.1.6265': attribute type 1 has an invalid length. [ 513.480848][T23016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6265'. [ 513.481068][T22735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.544438][ T5839] Bluetooth: hci8: command tx timeout [ 513.554562][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.591100][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6267'. [ 513.669254][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.806522][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.925705][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.963783][T23047] netlink: 'syz.0.6273': attribute type 4 has an invalid length. [ 513.998952][T23047] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6273'. [ 514.046078][T23047] ÿ: mtu greater than device maximum [ 514.096063][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 514.277567][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 514.336624][T22735] veth0_vlan: entered promiscuous mode [ 514.372747][T22735] veth1_vlan: entered promiscuous mode [ 514.409564][T22735] veth0_macvtap: entered promiscuous mode [ 514.442003][T22735] veth1_macvtap: entered promiscuous mode [ 514.480647][T23065] netlink: 'syz.3.6278': attribute type 1 has an invalid length. [ 514.489139][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 514.503634][T23065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6278'. [ 514.521780][T22735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.563551][T22735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.592798][T22735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.614910][T22735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.623789][T22735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.643266][T22735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.674922][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 514.713284][T23080] trusted_key: syz.1.6280 sent an empty control message without MSG_MORE. [ 514.990317][T15431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.021890][T15431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.063919][T15431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.085789][T15431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.283377][T23102] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6290'. [ 515.618429][T23117] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6296'. [ 515.629944][ T5839] Bluetooth: hci8: command tx timeout [ 515.764374][T23123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6296'. [ 515.921612][T23134] FAULT_INJECTION: forcing a failure. [ 515.921612][T23134] name failslab, interval 1, probability 0, space 0, times 0 [ 515.976678][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.992405][T23134] CPU: 0 UID: 0 PID: 23134 Comm: syz.8.6302 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 515.992431][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.992446][T23134] Call Trace: [ 515.992454][T23134] [ 515.992463][T23134] dump_stack_lvl+0x189/0x250 [ 515.992492][T23134] ? __pfx____ratelimit+0x10/0x10 [ 515.992516][T23134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.992538][T23134] ? __pfx__printk+0x10/0x10 [ 515.992554][T23134] ? rcu_is_watching+0x15/0xb0 [ 515.992589][T23134] should_fail_ex+0x414/0x560 [ 515.992615][T23134] should_failslab+0xa8/0x100 [ 515.992636][T23134] kmem_cache_alloc_noprof+0x73/0x3c0 [ 515.992660][T23134] ? skb_clone+0x212/0x3a0 [ 515.992686][T23134] skb_clone+0x212/0x3a0 [ 515.992709][T23134] __netlink_deliver_tap+0x404/0x850 [ 515.992742][T23134] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.992763][T23134] netlink_deliver_tap+0x19c/0x1b0 [ 515.992782][T23134] netlink_dump+0x8e4/0xe20 [ 515.992796][T23134] ? __skb_try_recv_from_queue+0x58f/0x730 [ 515.992829][T23134] ? __pfx_netlink_dump+0x10/0x10 [ 515.992867][T23134] netlink_recvmsg+0x676/0xa30 [ 515.992896][T23134] ? __pfx_netlink_recvmsg+0x10/0x10 [ 515.992919][T23134] ? __lock_acquire+0xab9/0xd20 [ 515.992939][T23134] ? aa_sock_msg_perm+0x94/0x160 [ 515.992971][T23134] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 515.992991][T23134] ? security_socket_recvmsg+0x7e/0x2e0 [ 515.993015][T23134] ? __pfx_netlink_recvmsg+0x10/0x10 [ 515.993038][T23134] sock_recvmsg+0x229/0x270 [ 515.993066][T23134] ____sys_recvmsg+0x1c9/0x460 [ 515.993095][T23134] ? __pfx_____sys_recvmsg+0x10/0x10 [ 515.993132][T23134] ? import_iovec+0x74/0xa0 [ 515.993151][T23134] ___sys_recvmsg+0x1b5/0x510 [ 515.993176][T23134] ? __pfx____sys_recvmsg+0x10/0x10 [ 515.993222][T23134] ? __fget_files+0x3a0/0x420 [ 515.993253][T23134] do_recvmmsg+0x307/0x770 [ 515.993284][T23134] ? __pfx_do_recvmmsg+0x10/0x10 [ 515.993319][T23134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.993356][T23134] __x64_sys_recvmmsg+0x190/0x240 [ 515.993381][T23134] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 515.993400][T23134] ? rcu_is_watching+0x15/0xb0 [ 515.993430][T23134] ? do_syscall_64+0xbe/0x3b0 [ 515.993451][T23134] do_syscall_64+0xfa/0x3b0 [ 515.993466][T23134] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.993489][T23134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.993506][T23134] ? clear_bhb_loop+0x60/0xb0 [ 515.993528][T23134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.993545][T23134] RIP: 0033:0x7f828098e929 [ 515.993561][T23134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.993577][T23134] RSP: 002b:00007f82818a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 515.993597][T23134] RAX: ffffffffffffffda RBX: 00007f8280bb5fa0 RCX: 00007f828098e929 [ 515.993611][T23134] RDX: 0000000000000003 RSI: 0000200000000640 RDI: 0000000000000003 [ 515.993623][T23134] RBP: 00007f82818a6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.993634][T23134] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 515.993646][T23134] R13: 0000000000000000 R14: 00007f8280bb5fa0 R15: 00007fff735ebd08 [ 515.993677][T23134] [ 516.009094][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.319474][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.757549][ T5955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.944501][ T5955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.089058][T23163] C speed is unknown, defaulting to 1000 [ 518.397772][ T59] net_ratelimit: 28 callbacks suppressed [ 518.397799][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.514670][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.624121][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.734413][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.854668][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.964130][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 519.074513][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 519.184325][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 519.294370][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 519.404424][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 520.264988][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.486048][ T12] net_ratelimit: 36 callbacks suppressed [ 523.486069][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 523.605195][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 523.714271][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 523.825359][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 523.934449][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.044762][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.154339][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.264775][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.385062][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.494172][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 528.264283][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.594508][ T59] net_ratelimit: 36 callbacks suppressed [ 528.594531][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 528.714603][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 528.824645][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 528.935784][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.044567][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.164892][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.274314][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.385213][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.494699][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 529.604511][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 533.704943][T15431] net_ratelimit: 36 callbacks suppressed [ 533.704964][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 533.824339][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 533.934323][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.044322][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.164389][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.274394][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.384248][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.494122][ T3530] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.604759][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.714270][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 538.814436][ T1167] net_ratelimit: 36 callbacks suppressed [ 538.814458][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 538.944366][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.054149][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.164304][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.274186][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.384454][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.504683][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.614259][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.724400][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.834466][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 540.780266][T23173] netlink: 'syz.8.6312': attribute type 10 has an invalid length. [ 540.800181][T23177] netlink: 'syz.1.6311': attribute type 20 has an invalid length. [ 541.928227][T23238] netlink: 'syz.7.6329': attribute type 4 has an invalid length. [ 541.975701][T23238] __nla_validate_parse: 1 callbacks suppressed [ 541.975721][T23238] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6329'. [ 542.070254][T23238] !: renamed from  [ 542.660655][T23278] netlink: 'syz.0.6346': attribute type 10 has an invalid length. [ 542.676983][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6342'. [ 542.717723][T23282] sctp: [Deprecated]: syz.3.6345 (pid 23282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.717723][T23282] Use struct sctp_sack_info instead [ 542.762563][T23282] sctp: [Deprecated]: syz.3.6345 (pid 23282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.762563][T23282] Use struct sctp_sack_info instead [ 543.393043][T23308] netlink: 'syz.1.6356': attribute type 18 has an invalid length. [ 543.421680][T23308] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.430039][T23308] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.438279][T23308] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.446822][T23308] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.624730][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.662187][T23315] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6356'. [ 543.895554][ T1167] net_ratelimit: 35 callbacks suppressed [ 543.895575][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.064160][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.208878][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.233931][T23350] sctp: [Deprecated]: syz.8.6370 (pid 23350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.233931][T23350] Use struct sctp_sack_info instead [ 544.262094][T23350] sctp: [Deprecated]: syz.8.6370 (pid 23350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.262094][T23350] Use struct sctp_sack_info instead [ 544.338938][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.487024][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.625792][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 544.653458][T23373] netlink: 'syz.0.6376': attribute type 1 has an invalid length. [ 544.672481][T23374] netlink: 'syz.0.6376': attribute type 1 has an invalid length. [ 544.718710][T23380] FAULT_INJECTION: forcing a failure. [ 544.718710][T23380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.732626][T23380] CPU: 1 UID: 0 PID: 23380 Comm: syz.7.6378 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 544.732651][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.732662][T23380] Call Trace: [ 544.732670][T23380] [ 544.732678][T23380] dump_stack_lvl+0x189/0x250 [ 544.732708][T23380] ? __pfx____ratelimit+0x10/0x10 [ 544.732732][T23380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.732755][T23380] ? __pfx__printk+0x10/0x10 [ 544.732788][T23380] should_fail_ex+0x414/0x560 [ 544.732814][T23380] _copy_from_user+0x2d/0xb0 [ 544.732832][T23380] alg_setkey+0xb8/0x190 [ 544.732855][T23380] alg_setsockopt+0x3da/0x4a0 [ 544.732875][T23380] ? __pfx_alg_setsockopt+0x10/0x10 [ 544.732896][T23380] do_sock_setsockopt+0x257/0x3e0 [ 544.732920][T23380] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 544.732943][T23380] ? __fget_files+0x2a/0x420 [ 544.732969][T23380] __x64_sys_setsockopt+0x18b/0x220 [ 544.732994][T23380] do_syscall_64+0xfa/0x3b0 [ 544.733008][T23380] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.733030][T23380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.733046][T23380] ? clear_bhb_loop+0x60/0xb0 [ 544.733065][T23380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.733081][T23380] RIP: 0033:0x7fc3f078e929 [ 544.733096][T23380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.733109][T23380] RSP: 002b:00007fc3f1549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.733126][T23380] RAX: ffffffffffffffda RBX: 00007fc3f09b5fa0 RCX: 00007fc3f078e929 [ 544.733139][T23380] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 544.733149][T23380] RBP: 00007fc3f1549090 R08: 0000000000000009 R09: 0000000000000000 [ 544.733161][T23380] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 544.733172][T23380] R13: 0000000000000000 R14: 00007fc3f09b5fa0 R15: 00007fff68bb9338 [ 544.733201][T23380] [ 544.957079][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.964863][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 545.115323][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 545.224763][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 545.344879][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 545.688183][T23416] netlink: 'syz.8.6392': attribute type 4 has an invalid length. [ 545.705191][T23416] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6392'. [ 545.711029][T23419] sctp: [Deprecated]: syz.3.6391 (pid 23419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.711029][T23419] Use struct sctp_sack_info instead [ 545.731641][T23416] : renamed from bond0 (while UP) [ 545.770421][T23419] sctp: [Deprecated]: syz.3.6391 (pid 23419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.770421][T23419] Use struct sctp_sack_info instead [ 545.903497][T23428] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6397'. [ 546.141965][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6400'. [ 546.346046][T23440] netlink: 'syz.8.6403': attribute type 4 has an invalid length. [ 546.392406][T23440] netlink: 'syz.8.6403': attribute type 4 has an invalid length. [ 546.817229][T23444] C speed is unknown, defaulting to 1000 [ 548.924238][ T12] net_ratelimit: 31 callbacks suppressed [ 548.924259][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.044437][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.154276][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.264146][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.374298][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.484351][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.594136][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.704620][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.814265][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.924343][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.004427][ T1094] net_ratelimit: 36 callbacks suppressed [ 554.004449][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.124538][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.234647][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.344794][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.454243][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.574950][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.684191][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.794775][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.905533][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.014826][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.115749][ T12] net_ratelimit: 36 callbacks suppressed [ 559.115771][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.234391][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.344124][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.454447][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.564160][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.674427][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.784619][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.894415][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.004295][ T1103] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.114417][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.195197][ T1094] net_ratelimit: 36 callbacks suppressed [ 564.195222][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.315263][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.424212][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.535065][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.644191][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.764880][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.874750][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.984966][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.094372][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.204910][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.294803][T15431] net_ratelimit: 36 callbacks suppressed [ 569.294826][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.415006][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.524425][T15431] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.635247][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.744184][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.854979][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.964297][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.025885][T23460] Bluetooth: hci5: command 0x0406 tx timeout [ 570.026986][T23459] Bluetooth: hci6: command 0x0406 tx timeout [ 570.074326][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.184969][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.294346][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 572.732332][T23466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6410'. [ 572.759683][T23472] nft_compat: unsupported protocol 0 [ 572.776257][T23465] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.888197][T23471] netlink: 'syz.3.6412': attribute type 13 has an invalid length. [ 572.888976][T23465] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.907292][T23471] netlink: 'syz.3.6412': attribute type 17 has an invalid length. [ 572.961451][T23471] eql: refused to change device tx_queue_len [ 572.990940][T23465] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.066523][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.107927][T23465] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.143482][T23480] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6414'. [ 573.326471][T23465] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.380877][T23465] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.432987][T23465] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.442734][T23489] sctp: [Deprecated]: syz.7.6416 (pid 23489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.442734][T23489] Use struct sctp_sack_info instead [ 573.463044][T23489] sctp: [Deprecated]: syz.7.6416 (pid 23489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.463044][T23489] Use struct sctp_sack_info instead [ 573.587789][T23465] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.838415][T23475] C speed is unknown, defaulting to 1000 [ 574.169631][T23510] FAULT_INJECTION: forcing a failure. [ 574.169631][T23510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.187238][T23510] CPU: 0 UID: 0 PID: 23510 Comm: syz.0.6425 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 574.187266][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.187277][T23510] Call Trace: [ 574.187285][T23510] [ 574.187293][T23510] dump_stack_lvl+0x189/0x250 [ 574.187329][T23510] ? __pfx____ratelimit+0x10/0x10 [ 574.187355][T23510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.187378][T23510] ? __pfx__printk+0x10/0x10 [ 574.187397][T23510] ? __might_fault+0xb0/0x130 [ 574.187424][T23510] should_fail_ex+0x414/0x560 [ 574.187451][T23510] _copy_from_iter+0x3f5/0x16f0 [ 574.187486][T23510] ? __pfx__copy_from_iter+0x10/0x10 [ 574.187516][T23510] ? set_page_refcounted+0xa0/0x1e0 [ 574.187542][T23510] af_alg_sendmsg+0x1436/0x22e0 [ 574.187563][T23510] ? __pfx___might_resched+0x10/0x10 [ 574.187612][T23510] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 574.187630][T23510] ? __lock_acquire+0xab9/0xd20 [ 574.187650][T23510] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.187668][T23510] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 574.187698][T23510] ? aa_sock_msg_perm+0x94/0x160 [ 574.187720][T23510] ? skcipher_sendmsg+0x26/0xf0 [ 574.187741][T23510] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 574.187764][T23510] __sock_sendmsg+0x219/0x270 [ 574.187792][T23510] ____sys_sendmsg+0x52d/0x830 [ 574.187819][T23510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.187850][T23510] ? import_iovec+0x74/0xa0 [ 574.187872][T23510] ___sys_sendmsg+0x21f/0x2a0 [ 574.187897][T23510] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.187956][T23510] ? __fget_files+0x2a/0x420 [ 574.187974][T23510] ? __fget_files+0x3a0/0x420 [ 574.188004][T23510] __sys_sendmmsg+0x227/0x430 [ 574.188031][T23510] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.188050][T23510] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 574.188094][T23510] ? ksys_write+0x22a/0x250 [ 574.188114][T23510] ? __pfx_ksys_write+0x10/0x10 [ 574.188128][T23510] ? rcu_is_watching+0x15/0xb0 [ 574.188159][T23510] __x64_sys_sendmmsg+0xa0/0xc0 [ 574.188182][T23510] do_syscall_64+0xfa/0x3b0 [ 574.188198][T23510] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.188221][T23510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.188238][T23510] ? clear_bhb_loop+0x60/0xb0 [ 574.188259][T23510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.188276][T23510] RIP: 0033:0x7f02ff78e929 [ 574.188293][T23510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.188309][T23510] RSP: 002b:00007f02fd5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.188335][T23510] RAX: ffffffffffffffda RBX: 00007f02ff9b5fa0 RCX: 00007f02ff78e929 [ 574.188348][T23510] RDX: 0000000000000001 RSI: 0000200000005500 RDI: 0000000000000004 [ 574.188360][T23510] RBP: 00007f02fd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 574.188371][T23510] R10: 0000000000004814 R11: 0000000000000246 R12: 0000000000000002 [ 574.188382][T23510] R13: 0000000000000000 R14: 00007f02ff9b5fa0 R15: 00007ffe457aede8 [ 574.188410][T23510] [ 574.407300][ T49] net_ratelimit: 32 callbacks suppressed [ 574.407326][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 574.657100][ T49] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 574.728247][T23518] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6427'. [ 574.905067][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.046252][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.059995][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6434'. [ 575.064857][T23537] netlink: 4484 bytes leftover after parsing attributes in process `syz.1.6433'. [ 575.222022][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.240283][T23545] sctp: [Deprecated]: syz.7.6436 (pid 23545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.240283][T23545] Use struct sctp_sack_info instead [ 575.271908][T23545] sctp: [Deprecated]: syz.7.6436 (pid 23545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.271908][T23545] Use struct sctp_sack_info instead [ 575.342012][T23547] netlink: 'syz.8.6437': attribute type 4 has an invalid length. [ 575.374629][ T3557] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.379243][T23547] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6437'. [ 575.484960][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.605350][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.746072][ T1094] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.875322][ T1167] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 576.360561][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'. [ 576.420507][T23580] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6449'. [ 576.657220][T23590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6453'. [ 576.715799][T23596] sctp: [Deprecated]: syz.0.6454 (pid 23596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.715799][T23596] Use struct sctp_sack_info instead [ 576.759488][T23596] sctp: [Deprecated]: syz.0.6454 (pid 23596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.759488][T23596] Use struct sctp_sack_info instead [ 576.874440][T23600] xt_l2tp: missing protocol rule (udp|l2tpip) [ 576.933100][T23608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6457'. [ 577.442052][T23626] netlink: 'syz.7.6464': attribute type 4 has an invalid length. [ 577.554681][ T31] INFO: task syz.5.5138:19555 blocked for more than 143 seconds. [ 577.562459][ T31] Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 [ 577.581701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.603550][ T31] task:syz.5.5138 state:D stack:25032 pid:19555 tgid:19552 ppid:15157 task_flags:0x400140 flags:0x00004004 [ 577.633702][ T31] Call Trace: [ 577.644411][ T31] [ 577.647397][ T31] __schedule+0x16f5/0x4d00 [ 577.651924][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.657241][ T31] ? schedule+0x165/0x360 [ 577.661656][ T31] ? __pfx___schedule+0x10/0x10 [ 577.666732][ T31] ? schedule+0x91/0x360 [ 577.671043][ T31] schedule+0x165/0x360 [ 577.675827][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.681970][ T31] __mutex_lock+0x724/0xe80 [ 577.687155][ T31] ? __mutex_lock+0x51b/0xe80 [ 577.692263][T23636] FAULT_INJECTION: forcing a failure. [ 577.692263][T23636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.706712][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 577.712591][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.717803][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 577.724594][ T31] ? __nlmsg_put+0xef/0x1b0 [ 577.729180][T23636] CPU: 1 UID: 0 PID: 23636 Comm: syz.7.6467 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 577.729204][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.729215][T23636] Call Trace: [ 577.729223][T23636] [ 577.729231][T23636] dump_stack_lvl+0x189/0x250 [ 577.729258][T23636] ? __pfx____ratelimit+0x10/0x10 [ 577.729282][T23636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.729305][T23636] ? __pfx__printk+0x10/0x10 [ 577.729325][T23636] ? __might_fault+0xb0/0x130 [ 577.729354][T23636] should_fail_ex+0x414/0x560 [ 577.729380][T23636] _copy_from_iter+0x1db/0x16f0 [ 577.729408][T23636] ? rcu_is_watching+0x15/0xb0 [ 577.729433][T23636] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 577.729453][T23636] ? __pfx__copy_from_iter+0x10/0x10 [ 577.729477][T23636] ? __build_skb_around+0x257/0x3e0 [ 577.729500][T23636] ? netlink_sendmsg+0x642/0xb30 [ 577.729518][T23636] ? skb_put+0x11b/0x210 [ 577.729541][T23636] netlink_sendmsg+0x6b2/0xb30 [ 577.729570][T23636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.729593][T23636] ? aa_sock_msg_perm+0x94/0x160 [ 577.729617][T23636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.729637][T23636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.729657][T23636] __sock_sendmsg+0x219/0x270 [ 577.729685][T23636] __sys_sendto+0x3bd/0x520 [ 577.729706][T23636] ? __pfx___sys_sendto+0x10/0x10 [ 577.729723][T23636] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 577.729753][T23636] ? __fget_files+0x3a0/0x420 [ 577.729783][T23636] ? ksys_write+0x22a/0x250 [ 577.729802][T23636] ? __pfx_ksys_write+0x10/0x10 [ 577.729816][T23636] ? rcu_is_watching+0x15/0xb0 [ 577.729844][T23636] __x64_sys_sendto+0xde/0x100 [ 577.729866][T23636] do_syscall_64+0xfa/0x3b0 [ 577.729882][T23636] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.729905][T23636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.729921][T23636] ? clear_bhb_loop+0x60/0xb0 [ 577.729942][T23636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.729958][T23636] RIP: 0033:0x7fc3f07907bc [ 577.729974][T23636] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 577.729989][T23636] RSP: 002b:00007fc3f1547ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 577.730008][T23636] RAX: ffffffffffffffda RBX: 00007fc3f1547fc0 RCX: 00007fc3f07907bc [ 577.730021][T23636] RDX: 0000000000000020 RSI: 00007fc3f1548010 RDI: 0000000000000005 [ 577.730031][T23636] RBP: 0000000000000000 R08: 00007fc3f1547f14 R09: 000000000000000c [ 577.730042][T23636] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 577.730053][T23636] R13: 00007fc3f1547f68 R14: 00007fc3f1548010 R15: 0000000000000000 [ 577.730082][T23636] [ 577.730917][ T31] ? genlmsg_put+0x137/0x2e0 [ 578.020483][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 578.026239][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 578.031372][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 578.038182][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 578.043785][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 578.049928][ T31] genl_rcv_msg+0x60e/0x790 [ 578.054522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.059565][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 578.064802][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 578.071038][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.076474][ T31] netlink_rcv_skb+0x205/0x470 [ 578.081252][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.086329][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.091653][ T31] ? down_read+0x1ad/0x2e0 [ 578.096404][ T31] genl_rcv+0x28/0x40 [ 578.100401][ T31] netlink_unicast+0x758/0x8d0 [ 578.105647][ T31] netlink_sendmsg+0x805/0xb30 [ 578.110423][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.115843][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 578.120804][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 578.126553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.131870][ T31] __sock_sendmsg+0x219/0x270 [ 578.136670][ T31] ____sys_sendmsg+0x505/0x830 [ 578.141436][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.146860][ T31] ? import_iovec+0x74/0xa0 [ 578.151380][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 578.156227][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.161479][ T31] ? __fget_files+0x2a/0x420 [ 578.166165][ T31] ? __fget_files+0x3a0/0x420 [ 578.170921][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 578.175923][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.181401][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.189542][ T31] ? do_syscall_64+0xbe/0x3b0 [ 578.194291][ T31] do_syscall_64+0xfa/0x3b0 [ 578.195565][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.198791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.198827][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.217996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.222696][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.228687][ T31] RIP: 0033:0x7f8be778e929 [ 578.233093][ T31] RSP: 002b:00007f8be8694038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.241563][ T31] RAX: ffffffffffffffda RBX: 00007f8be79b6080 RCX: 00007f8be778e929 [ 578.249871][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000003 [ 578.258135][ T31] RBP: 00007f8be7810b39 R08: 0000000000000000 R09: 0000000000000000 [ 578.266307][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.274842][ T31] R13: 0000000000000000 R14: 00007f8be79b6080 R15: 00007fff207f13f8 [ 578.282913][ T31] [ 578.286080][ T31] [ 578.286080][ T31] Showing all locks held in the system: [ 578.294133][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 578.299505][ T31] 1 lock held by khungtaskd/31: [ 578.305047][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 578.315175][ T31] 2 locks held by getty/5599: [ 578.319866][ T31] #0: ffff888030d850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 578.329765][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 578.340352][ T31] 2 locks held by syz.2.3452/14519: [ 578.345697][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.354287][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 578.367256][ T31] 2 locks held by syz.5.5138/19555: [ 578.372489][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.380918][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 578.391162][ T31] 2 locks held by syz.4.5221/19809: [ 578.396770][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.405149][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 578.415469][ T31] 2 locks held by syz.6.5952/22046: [ 578.420752][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.429223][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 578.439565][ T31] 2 locks held by syz.3.6458/23604: [ 578.444870][ T31] #0: ffff8880570aa008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 578.455262][ T31] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 578.466205][ T31] [ 578.468539][ T31] ============================================= [ 578.468539][ T31] [ 578.477099][ T31] NMI backtrace for cpu 1 [ 578.477113][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 578.477134][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.477145][ T31] Call Trace: [ 578.477152][ T31] [ 578.477160][ T31] dump_stack_lvl+0x189/0x250 [ 578.477185][ T31] ? __wake_up_klogd+0xd9/0x110 [ 578.477207][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.477230][ T31] ? __pfx__printk+0x10/0x10 [ 578.477260][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 578.477285][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 578.477303][ T31] ? _printk+0xcf/0x120 [ 578.477325][ T31] ? __pfx__printk+0x10/0x10 [ 578.477346][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.477369][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 578.477393][ T31] watchdog+0xfee/0x1030 [ 578.477416][ T31] ? watchdog+0x1de/0x1030 [ 578.477445][ T31] kthread+0x70e/0x8a0 [ 578.477468][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.477488][ T31] ? __pfx_kthread+0x10/0x10 [ 578.477508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.477529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.477550][ T31] ? __pfx_kthread+0x10/0x10 [ 578.477569][ T31] ret_from_fork+0x3f9/0x770 [ 578.477594][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 578.477621][ T31] ? __switch_to_asm+0x39/0x70 [ 578.477637][ T31] ? __switch_to_asm+0x33/0x70 [ 578.477651][ T31] ? __pfx_kthread+0x10/0x10 [ 578.477671][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.477703][ T31] [ 578.477710][ T31] Sending NMI from CPU 1 to CPUs 0: [ 578.635741][ C0] NMI backtrace for cpu 0 [ 578.635761][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 578.635779][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.635789][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 578.635814][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 c6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 578.635828][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 578.635843][ C0] RAX: 32f7956894952400 RBX: ffffffff81975d58 RCX: 32f7956894952400 [ 578.635855][ C0] RDX: 0000000000000001 RSI: ffffffff8d982587 RDI: ffffffff8be28b80 [ 578.635867][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 578.635879][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa110f0 [ 578.635891][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 578.635902][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 578.635915][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.635926][ C0] CR2: 00007efd2d581178 CR3: 000000007f2ea000 CR4: 00000000003526f0 [ 578.635941][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.635951][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 578.635961][ C0] Call Trace: [ 578.635967][ C0] [ 578.635974][ C0] default_idle+0x13/0x20 [ 578.635990][ C0] default_idle_call+0x74/0xb0 [ 578.636005][ C0] do_idle+0x1e8/0x510 [ 578.636022][ C0] ? __pfx_do_idle+0x10/0x10 [ 578.636049][ C0] cpu_startup_entry+0x44/0x60 [ 578.636062][ C0] rest_init+0x2de/0x300 [ 578.636077][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 578.636097][ C0] start_kernel+0x47d/0x500 [ 578.636115][ C0] x86_64_start_reservations+0x24/0x30 [ 578.636133][ C0] x86_64_start_kernel+0x143/0x1c0 [ 578.636152][ C0] common_startup_64+0x13e/0x147 [ 578.636175][ C0] [ 578.636757][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 578.841097][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 578.852980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.863026][ T31] Call Trace: [ 578.866296][ T31] [ 578.869214][ T31] dump_stack_lvl+0x99/0x250 [ 578.873800][ T31] ? __asan_memcpy+0x40/0x70 [ 578.878382][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.883570][ T31] ? __pfx__printk+0x10/0x10 [ 578.888160][ T31] panic+0x2db/0x790 [ 578.892056][ T31] ? __pfx_panic+0x10/0x10 [ 578.896470][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 578.902270][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 578.907721][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 578.913870][ T31] watchdog+0x102d/0x1030 [ 578.918191][ T31] ? watchdog+0x1de/0x1030 [ 578.922604][ T31] kthread+0x70e/0x8a0 [ 578.926666][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.931341][ T31] ? __pfx_kthread+0x10/0x10 [ 578.935923][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.941112][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.946305][ T31] ? __pfx_kthread+0x10/0x10 [ 578.950884][ T31] ret_from_fork+0x3f9/0x770 [ 578.955465][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 578.960573][ T31] ? __switch_to_asm+0x39/0x70 [ 578.965322][ T31] ? __switch_to_asm+0x33/0x70 [ 578.970071][ T31] ? __pfx_kthread+0x10/0x10 [ 578.974648][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.979411][ T31] [ 578.982646][ T31] Kernel Offset: disabled [ 578.986962][ T31] Rebooting in 86400 seconds..