last executing test programs: 2m55.984961246s ago: executing program 1 (id=57): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (fail_nth: 12) 2m55.364670299s ago: executing program 1 (id=59): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xffffc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x25, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x7, 0x4, 0x40, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r4, 0x0, 0x0, 0x4000000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8, 0x2, 0xe, r6}, &(0x7f0000000100)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [@exit, @call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r10) sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000001880)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001940)="147c000000000000000066c982", 0xd}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0) 2m53.326122895s ago: executing program 1 (id=69): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m50.501996529s ago: executing program 1 (id=79): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xffffc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x25, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x7, 0x4, 0x40, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r4, 0x0, 0x0, 0x4000000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8, 0x2, 0xe, r6}, &(0x7f0000000100)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [@exit, @call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r10) sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000001880)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001940)="147c000000000000000066c982", 0xd}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0) 2m48.737547902s ago: executing program 1 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xb4, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x4}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) unshare(0x2a020400) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r7 = epoll_create1(0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f7508", 0x19) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000240)={0xa000001a}) 2m45.525916157s ago: executing program 1 (id=100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)="fda57409d524ba0bd7b660a5311953930fa716dee3e67e559d7eee438f", 0x1d}, 0x1, 0x0, 0x0, 0x8435}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000081) 2m30.154071382s ago: executing program 32 (id=100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)="fda57409d524ba0bd7b660a5311953930fa716dee3e67e559d7eee438f", 0x1d}, 0x1, 0x0, 0x0, 0x8435}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000081) 2m19.326180286s ago: executing program 5 (id=107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m18.728675423s ago: executing program 33 (id=107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m9.390035897s ago: executing program 2 (id=209): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) close(0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001014000806bd7000fddbdf2508004c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x168, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}]}, @NFQA_PAYLOAD={0xdd, 0xa, "866b03efb6ec88c5f74429cd1348cbef479125f6ebb2c5a86e48a93a74836be89907ddda8ef7c816b3c2963ae8108d66b90ec7c89c470cde295f6711d43a8709f665a9370c2e81da308a4076e027adb0650cbaa39d3a8e6ff4680d42a49a2644ba58ec2b891df4fe2960422277f5228066cbbc4b0262667461fa4da42936e34156c572f3eac06fad44300c9fd969211a0b85804d939d23d3ba9f55fe6b73b7486065842aa714b147b1359c160f96307b6a77861ed0a9444a9ad30b66629a479663a8f1aa9a416a5ca3a9b41fc07852eb8c97bc95874ec780e1"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x1213f000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x604, 0x4) socket$kcm(0x28, 0x6, 0x0) 2m7.588006037s ago: executing program 2 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, 0x0, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 2m7.496060195s ago: executing program 3 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2m7.399072366s ago: executing program 3 (id=222): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000076000d0b00400000008000000300000000000000080001000223000008000a"], 0x28}}, 0x0) (fail_nth: 3) 2m7.227949229s ago: executing program 3 (id=225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m7.087452922s ago: executing program 3 (id=227): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)}, 0x2000000}], 0x2, 0x101, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) 2m6.687615285s ago: executing program 2 (id=229): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x463, 0x6c, &(0x7f0000000000)=""/108, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'syzkaller1\x00', @random="131d7073e0e9"}) 2m6.434478001s ago: executing program 2 (id=230): syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@mpls_mc={0x8848, {[{0x3}], @llc={@snap={0xc8068f512a68817, 0xaa, 'oX', "f00297", 0x22f0, "64f73a943eac37aa53deaf44d06c37f7932065bf4e865647318e3d0f25faf0b24f587efc50349dab42a9e5e8c7643e53e8c0e03e068dbb1959629aee7f8c29f9fb6d9ece721fb9c011872a08eb3844787509935dfeec95649c544012e0404d87"}}}}}}, 0x0) 2m6.297662726s ago: executing program 2 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2m6.296692936s ago: executing program 3 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 2m4.915485288s ago: executing program 6 (id=161): socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m4.468268787s ago: executing program 34 (id=161): socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m4.441245816s ago: executing program 2 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket(0x6, 0x3, 0x8001) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 2m4.354743994s ago: executing program 35 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket(0x6, 0x3, 0x8001) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 2m4.311663467s ago: executing program 3 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) connect$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r7}, 0x0, 0x0}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000980)=[r7, r7, r7, r7, r7, 0xffffffffffffffff, r7, r7, 0x1]}, 0x94) close(r1) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r11, 0x100) shutdown(r11, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000600000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 2m4.10717223s ago: executing program 36 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) connect$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r7}, 0x0, 0x0}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000980)=[r7, r7, r7, r7, r7, 0xffffffffffffffff, r7, r7, 0x1]}, 0x94) close(r1) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r11, 0x100) shutdown(r11, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000600000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 7.935903207s ago: executing program 4 (id=1000): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000540)="2309937b786aa9adcd3ac7f0b6007e1d5cf5f964a25ee6eaaf3db802e1e8428077749d40196ef1945e80ad895ab461b357eb33df0dd19b33e495a8e6d77ef1bd7972a16a2e41554dd20900006bb86277640061f251116661fe5d78d680ccd076b40b2b184b494b7df7e25f5e7328283c44", 0x71) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000500)=0x9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x10, 0x800, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b595000000000000b5f50def0000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) unshare(0x2c060000) unshare(0x22020600) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r9, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r9, 0x0, 0x0, 0x80000) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000380)={'dvmrp0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) 7.666180288s ago: executing program 4 (id=1004): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)={0x5c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @pid}]}, @nested={0x3e, 0xa6, 0x0, 0x1, [@generic="bd01f7162bab402c7595e07365152fbf1ebad79a89a315ad92ea092e7e5518e8cc60", @typed={0xc, 0xf9, 0x0, 0x0, @u64=0x400}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x143}]}]}, 0x5c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, 0x0, 0x0) 4.629698584s ago: executing program 9 (id=1035): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 22) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.495689761s ago: executing program 4 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000001) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) r3 = socket$isdn(0x22, 0x2, 0x3) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@typed={0xc, 0xcc, 0x0, 0x0, @u64=0x20081}]}, 0x1c}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e7a87456b28a0ca2af4932c8c957e99e49644e340475966296c32d31311d50997249342eab958200250733a9621c4c68b8e9f3084ab912da3b34ccaf7bf2d88375589e811eef629f8546509e75c3bb2e68a2df38b4407a32aa75861be424de7749e09d7f9da71db6fe80cf0b6b46e802b50a2e01a54e6116865b6c6c0afb6fc6a59cffc4859fa32f8b22381725ed668907f27c369312a3ba2d1608a13db780d86a9d9b3cf65383708756a0df42059a75c3f4fc9c08f8e785df058cf395528d", 0xbf}, {&(0x7f0000000280)="bf686c83feff054ca9e34bb0d7f67d675af7f251480f5a25e3d1d92ac8613bbd486b5e4c4d90295af42ed39bcdf1cf02ce69fb02fcc308badd9b90d07cb303360d73875d9f987ebcdf7ac614626bbb54c6cce8fd3be17ed071c93a9e7908c272b5c23e0c9af6782d317b1420", 0x6c}, {&(0x7f0000000300)="374446ec410922aeef2fc38e19bff5585bc254b97a14891d365048841b7269783a3c8bed6919b40ed21a35df7fff3f5c9449ef7d6e0efffa91564a8e18cb526eebe2372e9e22b8160d5585a4b62b1304d1d9d1232112a2bf4c2b6361984dccd2be10d1a3db088503d002111806915e51587c123cfd07", 0x76}], 0x3, &(0x7f0000000d40)=[{0xb0, 0x116, 0x4, "29159d89d4f09018d868a8c22bd3dbd4ca1cef397173e2bd890df052cc420bc0f40c29b1d87580815fa198a9b7776f63e442083fb83a5baed86214a38a17fbe95f6ba601a0e60924d03561f11efe491befd382af7dd75e1a159980a82715052a22582212f1ce73dc30a8f8e520b19775b898936c813feb3f6519faf0302bd3f66bbf769025f778258f2a44897146f2219443cb27ab0a53ed333fe398f42542"}, {0xf0, 0x101, 0xf7, "5a11ec91ee15f90bc8fe409ae48dc81e48a3abc84e6413d1a4c228c28867deb13e9ca21a8ecdb09f47c04ab6b7a2f01fe3fcf7d9248b35fb4ed78cfba7563a1cc32470402fc0067a8dcb546e78d4d434f90030913153b62fb228411791d47e114ef38442ba4746cb9c0aa4fbfc5fc16a5dcc5ad480232b327695dde0ecb8f8d496efcc069160983cb4d4108da56fc62b9f9c34ae037688fc3656c0db9865583b7f402553f23ce3dc2e5741c54c2a6aaa24e61b9a5114d65862b50acbf36ca3ed4015e67d72ae2158285e9bb2bf8d079e764c7aa989c601a8ed9164"}, {0xd0, 0x107, 0x4, "50a0ea19264bc05c1b148b3fb0ee249006d4e189a5e4beb0f2e6cf0198c9f562d8901aa22b23f5099396aed8b979ec50db8a986f0ad58307d1e0bb586e065bff0a4ad1f4a4d7a90f292875e0e906cfd7d34e36f00e45d161e6773fbe4b939e9fbe198428d57fc3c8a394fd60fc2d98dabb895fe6894df8d313908d4a1f0ea061b62a437f8ba5a9a0d1803ad6bc705969ffe1a9602a9fb28ad46f2ea52cf7a235cef1c2c141428506c4a655009eaa6c691d4084d721a5ab0124"}, {0x90, 0x11, 0xca7, "326a6b21435dc57c07da6db11ee75a9eb4d22cd6f7c1f0656e0410cad698c755015df5b98220a7727ed7d3309dde1d126125b156eebcdd8eccce406028ed12e8277fd1044daa63f69ee9bbf086f33ef680214e3a12d55a9fc1a73f84ab3fa3bb7e3e581afbd42cbb221774c95f8d7f5bcbeeefb348454d72127fbd5d"}], 0x300}}], 0x1, 0x40001) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 4.059608417s ago: executing program 9 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) connect$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r7}, 0x0, 0x0}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000980)=[r7, r7, r7, r7, r7, 0xffffffffffffffff, r7, r7, 0x1]}, 0x94) close(r1) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r11, 0x100) shutdown(r11, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000600000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 3.931985646s ago: executing program 4 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 3.819147598s ago: executing program 4 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) unshare(0x20000400) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r7, 0xc, 0x7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x6) r10 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000240)={0xa0000010}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000001d80)={0x78, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x400]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xfff, 0xfffffffd]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000844) bind$nfc_llcp(r1, &(0x7f0000000780)={0x27, r6, 0x1, 0x6, 0x6, 0x7a, "88b8548d7252e7f47740f31eb8987a2c48a0cf8954999c0cae3b8f508bc37df222bcd07ef2618a475fc8b527b22adfe860c542a6e767b3116465c670e3de4f", 0x5}, 0x60) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r14}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}]}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x48}}, 0x0) 3.768498949s ago: executing program 7 (id=1042): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080)={0x2a, 0xffffffff}, 0xc) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @broadcast}], 0x64) 3.004563368s ago: executing program 9 (id=1044): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0x57}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.917849884s ago: executing program 7 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x48, 0x8001, 0x3, 0xd, 0xfffffffc, 0x50, 0x6, 0xd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.753273663s ago: executing program 4 (id=1047): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)={0x5c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @pid}]}, @nested={0x3e, 0xa6, 0x0, 0x1, [@generic="bd01f7162bab402c7595e07365152fbf1ebad79a89a315ad92ea092e7e5518e8cc60", @typed={0xc, 0xf9, 0x0, 0x0, @u64=0x400}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x143}]}]}, 0x5c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, 0x0, 0x0) 2.63627067s ago: executing program 8 (id=1048): syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x300}}}}}}}, 0x0) 2.630805051s ago: executing program 0 (id=1049): bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.583906999s ago: executing program 7 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) 2.516957813s ago: executing program 7 (id=1051): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) pipe(0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) (fail_nth: 12) 2.453908812s ago: executing program 9 (id=1052): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="480200001a0007000000000000000000fc020000000000000000000000000000e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000100000000e40c00000000000007000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.419115856s ago: executing program 8 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x7, 0xa, 0x80000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x200}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettaction={0x110, 0x32, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x8008000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) bind$xdp(r9, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.368410937s ago: executing program 0 (id=1054): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={0x1bc, r2, 0x310, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b3}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "840bfd4273fcd01ea073ebb8004ca6ab0da966bc3ed2f20619aa2acca5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x142}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32bf3767}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x834}, 0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) r6 = socket(0x2, 0x3, 0xff) (async) sendmmsg$inet(r3, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fb77ce58aa74a588fdabe427a9e9b1ed53f450ce6c2", 0x2d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x48844) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xb9, "85b9b4616a304062a2892d8ce4544607f0c41cdeff1c340833efb0438d92c4dbc808c7d1a445af2a2326213f4c267056ccfa9f8554a967089eb2196ab66b575e2641e7ce9117d65a5f3b042802209ec217f546179d5c48c2b51a2da51219d7b08063d0f5b01f67acc6d02d69f32fd39218df24a6cdecb814e8df0c4c7cb03aa6209858b16b188e5ffc27c5d05652f8eeccbc53583670ed9d638243ed1178cfac8ab2fd356eb0be22ea3cff052556c584663da64ba7981335b7"}, &(0x7f0000000240)=0xc1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e22, @local}}, 0x3ff, 0x3}, 0x90) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0xfc, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1c13}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1c}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) (async) socket$kcm(0x2, 0x3, 0x2) (async) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) ioctl$SIOCAX25NOUID(r11, 0x89e3, &(0x7f0000000040)=0x1) 2.367156485s ago: executing program 9 (id=1055): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) ioctl$IMGETCOUNT(r0, 0x5411, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0xd6, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val, @void, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x9}}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a3}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000001500)={r6, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}}, 0x90) 2.151490639s ago: executing program 0 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) unshare(0x20000400) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r7, 0xc, 0x7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x6) r10 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000240)={0xa0000010}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000001d80)={0x78, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x400]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xfff, 0xfffffffd]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000844) bind$nfc_llcp(r1, &(0x7f0000000780)={0x27, r6, 0x1, 0x6, 0x6, 0x7a, "88b8548d7252e7f47740f31eb8987a2c48a0cf8954999c0cae3b8f508bc37df222bcd07ef2618a475fc8b527b22adfe860c542a6e767b3116465c670e3de4f", 0x5}, 0x60) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000280)={0xa, 0x4e20, 0xd5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000002c0)="b5030dc4a949570adddb0e7c5a055c9ae5", 0x11}, {&(0x7f0000000380)="bc1460a5709d2f908ecca614b7284b3919bdf0bcaa24c7b7d78d5cbbd9d26ad979f270f737ca4eb14cdcf4f9806c665b9188b278763bb4830d05d506098111b8eb4060c4be1592b244dc8f83ac39f6940e4eac796cf193017a8f4eda042ad6ebbc0ae0f9efcf891be7ef33692675bd8f76c8b2c8af759bac8badd16c111ea7b0fa59971d67ca87baedfe1e11b3f8ba72c8f5cbd33ed250c2", 0x98}, {&(0x7f00000006c0)="aaaefba44117fa2ca9e41f0c2a678af6ad1ce4f440c19d839960be80f53f5693e22dce0c3d080c4e256c56a5fc15529d5e14db2dec3c3daf432240544ce089c83e56b907faa6421aa2db9d2e7f042ed10e23116f2d7f6e9eb15266c11c2bc80b71f648fd6dbf51dfde809b234bf161b76a5b42a7adcacacb3105f032c51a7bc410af9e2008019264", 0x88}, {&(0x7f0000000440)="6012d94d1762a1353dc17c21d0", 0xd}, {&(0x7f0000000480)="55420bbc0ff15ba88ceef8a191d1f56dd14a0aa0c805dde5af7709f948711bbbb8f5f00c729e1681ba39b96457ead0dc", 0x30}], 0x5, &(0x7f0000000a40)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x5c, 0x3, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0x1000, [0xfffffffffffffffc]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts={{0x1048, 0x29, 0x36, {0x6c, 0x205, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0x1, [0x5, 0x6]}}, @ra={0x5, 0x2, 0x8}, @generic={0x8, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra, @enc_lim={0x4, 0x1, 0xd5}]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x8, 0x1e, '\x00', [@generic={0x0, 0x65, "372dc9bb41516f8d5c01ccc4297258e87cc935c67de3489712753cf3402229bb99f429d933ff9d312bd0336e1e8dc872cecb9adb5e9bd8ecc937b4c1b7a9ac7f8ec41061e933bf6be1d4f9ab7fc5ed12188d014de87c21ba6a7e268d6e8a9597a3db801501"}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0xfff, [0x0, 0x1, 0x7fffffffffffffff, 0x6, 0x5, 0x1, 0x1000]}}, @ra={0x5, 0x2, 0x5e86}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x30, {0x1, 0xa, 0xa, 0x4ba1, [0xfffffffffffffff2, 0x5, 0x3ff, 0x46, 0x7fff]}}]}}}, @dstopts={{0x160, 0x29, 0x37, {0x5e, 0x28, '\x00', [@generic={0x1, 0xde, "2d56f185e3169528854f236862ff5239e4999dde726c4d6db60e401a99a03409dcf401bfe9a05b6ccf3210ef34ef3ea2c17f938676dc01dad6ab68c1e6a2df376f5e1d60638d2e1ac9436915267ac2f1f3bdc9270a54d4c81a8643f85330a54b642af483e77bc75092292569cf644c5ec86cdebea2642d684d7fbd3198018cad8b0e0c81db1a7a70ad08c9c66b244c3dc971f236b952c21195ddb021bf6da63be7c9ac44bca2b6b8a515eeb319eefd9029b4d745ec935fe913feda31a0f0f3215cc0ef8020c376edd31f5ff4dfd072c01cb0aec6a3594d32c919a673ee23"}, @generic={0x7, 0x48, "efb493b129f82d92f310c9620873bc6fb487bb796b222c7d5bcbc0fdea1e31ca1ec02b40b38fb276b6501deabb15a919141a392fb5a37d91da0838c967da150e29000bfb4dc1e2c1"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x101}]}}}], 0x1308}, 0x4000001) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r14}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 1.683033139s ago: executing program 8 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.545562186s ago: executing program 7 (id=1058): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r6}, 0x99) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000000000)=0x4, &(0x7f00000017c0)='%+9llu \x00'}, 0x20) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x24, 0x0, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.499775129s ago: executing program 8 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400030500008000ffa563a52d"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100c0000009af4efc54eb49854185db1d14a55000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES64=r0, @ANYRES8=r2, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64=r0, @ANYRESDEC=r3], 0x8) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18, 0x7000000}, 0xf401}, {{&(0x7f0000000940)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, 0x0}}], 0x2, 0x0) sendto$rxrpc(r5, &(0x7f0000000240)="1a27bcf73c7343d9bd8c3e8238e2978c236721d3ba1993e65356c932ee555fee4116f7ab72768abe100a95e521feafdd3181913f707fa9b82616ae775ea0a5161084e9604a7bb3c17c9aceb7f9f5bea8a168f63f69204646d26dc9ba04677c96754acc78c74afe0d88b9394da9a5cf6453f1ea9323634ac681763c2851e45b9f1993f37e1a62868db68567ce9babf562e90d4c842f7369f2d924ae73ca7783b708e27aaed4a40716405f860853558bc824719208b593f32b65779fb402863b1c22f301e344255cf7e410721e4c544345d0133e7c500fc43624c4fa5a9cecdc92035e8b36a1a0dbc2d04c27ff8073140fa01f788a6375d9cc0bb865edefe4116c58118e16820f13f32ee75d076bfc545002558382853207d6c0290fe9cbfa11d126812964040265b4bfd7b08dbe441e1b5c70b608180892d1f17559b835c50c51920a887d5a7ec40c62b66b9ec3fae288a08ae8693886b4e0c5ec8ff43c3f8da0c33f8edad78b5eaccb7e762cad35343cf29e31cf361792af2855f0855e3a22e9303a0b48757cf39f6ed315c8581c0645be0ddcb5acf850d15369676721ec60af6b3aa865a0b589aeb34d834762f4a4ebf55d90593b2b494320932a597b1a3e3a5e392394231d6e4787b306e7aaddadfd516463df3b569e3049340c31b7bb96585e9db6b7a86bc225b18402a354ff9abb41a97df42334d2673516a40d6131977963dbcbca24cd239ded106fd6e73be2b04f48dbc40244f686936bf52017d688a549ecb8fbcbdba50ceb9382ec41282e9e667a3acb66dbdaca97d45e0e03c91664a343bb158f57392389d07fd7f1986b958a1e2c9f32f94b50aae5b79be9da03fdb05c8224dd7c60726d036ec8d7d4cbb008e51349f36a72b20294b165820c247552e949a346c1d5a3b9be3a11840e17546ac17a7cc71f351ab51d4b7468fd3317caa86e26305fb9cd6c2220605ce0950118627a1185e7fb5b1c7c0788afde8a1a35c1d657a33a39d2fd59e0d3fe4a7e922c48cd47f76ee4f0bdc3db58cb057cc69045e37d42c1e454b6b002a8dcac1d7f65ab21e52b115d9b4960f7cc1ad7b6a29dbb5752982a4b12c6bb1ff762edf9bbebf5e4815e17f888158cc4725c235705a4512b20ea5e3cda96058a42755a1c58b88869080b8f12cad0e5ee1ed81dba31fcf2b0db6c429daa17bed3de8217d8b6841cce1f8a692344dbefbd6fbb0304c3a71934afaf46ed7a3708ec22983e2b055233df0856e552219b7ded3ac2e8a5f2323249174c581e3189b3226faaa02880e609f162acd992c718137770d7905faa5ef33ed4fa8b2c98d021bc0e6e4b85d3a2b212a7ade5407fb9fb175d9fe9815841a63d519de494c7da93a9b5bee31a7db966910d6e36e96127eddf3f0d2034afcc379042c3eb0d53c3d38b3375d24b3bd46dfa8f76939237bd1d1824943d5c89ba0e10c29ab4c011e9cda759c0bfc3ac002e14937de26e6ba5f0149a11a12857f50e89079fcd5f7f3c1c736e4f0921a86907306776888f850fa33741fd0bb37af66e3f1274cdb5c34ed288431e73d9fcdb79e6d3103ea9d2c1bbcb351019913b924fe6f3ecad0711544bc5a5aa9eb3530c83dd36f4a5cd80e62d2904f820e374f20b2fabe4fcf13eb51d692e63f0860c6c6dfdb0f22623b606e7c12539c004ccc4a11e81bae5fc1b9798eb68084326eac88b9371ce46dcd67d87bca5e97149352f24d6f0230e57ae8228c4ee316b9a8a3d54ef31bb1096975c8bf82bc2e3596d67030ad8ce43d9a22062ff634d25749f7046b45861f905c3710e47f430a8e915e443942bef3060fe59de7d7405293f74ec342096aa9610dd8ef15656384bd9f86dd785b8ceb6b46bc586c413e4903354a0c255807583bd1d4317743f74ccd0b1ee4d8572285bdd4636124b14ee1b8a192518546a24d168ff24459ea31bd51577b832cb7ffe5b516f8de0b22e2209d57c3176d0450ae5361c9d19be21c901a358a538a3c89530806386706f9e5f15799cfc5c143a3af6c6c224a33c424c1e2282fe1c486af28fd03a74d9c6433d127688e893c1a9ebdd2ad80b5507a66b0c06cd04fd3a42b8bcc014df6aaa54e414779c680f2d2cd5762ff22b706387d7d75dccbc876c3c89da41204a7ffba2cbea633f765965b7b1600bf2b697d2d7f4adcfd392af1baee48d91d5e42d1db63fb67b8bc7f6ea421030af1afa713b1d5d8682801b2a86bd7b3e5dea7037a6143a53c9935ffee4f4eeb718dc58a4c6d1331940ff8c3105196b82d780f1ce4be911c008a51fe9dcfb06bb929b644e37df514aa5452736daee1fe4e352cccc9f5f63de8116a5ccc648616cc7f760a27ac4cf4b61ca8bbb7d70126a65723811880d2beaaa0d60d59f1a5025b68f06beb26da9128f6f0b3c6e8807f0ba1495ade65ab5251afdfce4f059a99c6191f6400fd65dcf4e08d8ce86ad57f3ef7e24d0fbb2451f601351e2332fe7853da742096fa375c78969a797ba1229c7b4e410959fc6785de3ca39b9385e62ac9047080ca43462d0b628e195da1f9dae7ca28aa100da1a1a98985e2521e9f4c1640f5da1d3072789ebaab09ee60e5068de3243bf5f6d88f710c0d50b5b41cd11d5b976686268f793c030966ad6b238c75a383e580814f6a8b8b046408a67137146488f38c37c91fbd5ece8b314cb2b66b9ec79e2c23c0990be927a47cd84842fc171442322d7ab3dd7eeee2b8594ff15d88c7e25b55f55039f028de13cf2f3cf88a88aac50fcd9fb9c995ae548c7752d6beca251d2a088342bb5875fa7925a70efdf5a34510130cb9dd230c763efb5fa0cef71a86f32e0324c7f7fa91491928d0f8c98e2f2c4b4e978054bf4aac96067e9c318b2a7ceb8ee6486c5bcd2f508ef8ad8884cd8ece49ae0e1e782242aee32e70521cf4fe246d9599fbba23ec6fdc78687f792486ce721e89c959968d9a6b5d5447a08f6b71b9e2554badecabc847f5a0aa2a6463644e6c4cd484147e41c0f321f38710b2e535bd33789fb21871343ba10cf102ffcc2c67b4b6061ee6ef5a5472a76adee03320c879de3d2f625fcda81b45db5ff20c38b11d9bc000548c3e11a31a8ea385c2b74d037edd21f734c17f1313044f6e97895032b3392fba875cb507977d69661bde2a1bb8237e14e8208c8d03bd93124eb2d7a52ec614dc6773dc2bcabf993b4e0b2e2429ff610c55c7cf16c92ec6d3f7d42fdd73bfc1926fcf700489d20ef1eaf5ff6d8dbea0ffaee16f7f082ca1f51e0485d6fc33444d9e5c3031f866fa78e12ff98ddc6d8dbcdc64fc4dd4531a6adb194e2316e425095b9ec46aa58f2448d8b4734397ec9c84f5ee35d174de9ac6b7fa508ccec74f0f38438646b9f416dbf9427b1fe8780a0a991ad573a2cdda56efe0a84b4cc641bbe368fe544b2d0eb49165a5eda71814be3305ab5a4cc49b4168c1eb7373bcae1468dda0cc474bd228817d44ce7e51742d25a989b909a0b532ff0eba466a1c385573ba74f30893859ed923146496cbdfa0e19bb14e0b23a52285d93ce896f96030cb53cf542b2fd153ab4aabff49ab9e6d2f638ae06dfcdd13ff1b7a0d06d248b0fda34087091484cc3421d448ab977ef0df584a08af4ed1cc91a4bf851be23b184285a039941556ba7860cfee4cf6bc69f49d4a25e53d771d759afd1c8a52ac890c8d23f3686b46486dffe1461db82d4e323c979de8d4bb7f976044c7f2e289329b648a775c9f5b86459e32ccd88be69f9e30e11edb7782e525975099880abab8edc79b279097cc0ec4757a940570b2a1986bc16ddd6fa3cd26bfef7f473d95bf199069e2fadc301d0b5b1737116068665c6e8e4af6bbaf4666fdca194292cfc5ee28cb8d401a539a78bc3222e62c34b989af5b71f41b9341bb30e7ca7aa5b2cefb360e68a8da13d8534e430b15c65bcffe736f152f7b21dd8c6c6847cf49f01a9b4106a56f1172afcb4c2ee8ea38c98d827cc6539b48831c5594549781db42064d846fe17608b4fdaacbb077a889f72348cf12b3e72737956d5005eea461c313ddc0c914d57e78b51893bf171bfb5ef240dba3fd223f4f3e2c9ddd54f5ef4a8d0db231116fe7d6966586ddc27693d23813fae38293fe94798adb753ef01cd984ebce72e975c5e064051f252cf715c7872dea057f7abaf2972802a891782a8a1e405cc676fd01b88c8199f3875bd3c28bad4f61eec19592e8176bd7e5fe606fa0b9e2a5384f1d87a888e20da2814c9d58e0b3ac7e4b2a71338b20f78ef927e828127803a6af02c034b7612e8ee28f63e5d496905b3d442b7c9a3ec1c6c7b3dac4ad9f4fb6510193a35ac12ad699336725c4250a0046245471be85829905128e4d37f77fcef720e76c4f79f8eb53518c33a20ed26b051b3b3ac6d7a4477118bac27718233dd3b88ae2d0195f4f9a42def28768b12701b29267d092a0c5f954bc5ca59152ad11a6fb736ff0d688fc74d029e557bae06041b4783b250be9b4b1bc14cdc42477a7eab91cea5ab9b225ac86ce1235e45816fce3660ef23baf7f939ed41451ed7ddac0f360970948c649a578bc4ad7faaf4ba8814ffcc661e669e5065df027c6be7e2d2be8864a28b071e4fffdd1aaf180bfc1f2ad3fe98b95ad3bf58b207beb3d06073945b905c50d0fabc97083e3e5e10652cff6e4a6d065cc783e7d763e899b376d6136d7b165e327202a27233bea466200480aa114ea6d6958f9554e8fb24a2aa9bedd3df0a868c539dc17ec937963ea8a72a2ad2734639106207779a0777b4528e38e8919d2ca1dcce8a945d62d42a8f596074f48511e998a6d7a338e1e204884625da40f8b9afec2e23ed96be4fde5a4c35107b48858643e8b2dbe453920e9154f5f33fb9cb473bbd504e3d0780b9edf70267ce0496e23f8c0649edb4ac9c68fb1fc09ce1947aade85efafb84f0fad2a0f200e646e4eb59422766e7be96a97223ef6d6ca98e88a3c1d2a58d3aa5abd1296b6c3fb8918dd4b69ebcc44847746a035f7bc650672bb74c3136535fb55e808ae514861974d2789ba09dd4a5ad2f2cedf4180d82e3c498f03dbcce81d4b20ca557892af97644396d0d419d8742953f9a8d0fcbec76ba9f6b1da18fafdfd74abdd49fe357fa190ad51ee9ff03a1866aabf2a13cbb626f2f4fbf51e0a0ba4bf60a58dcd5ad09a8de8918648958c8e544ca8f0d86a1eea5200a0219f3d8e64449d0610d3369880ad8d001a26493adc1edd0102cb00afebb9e0622d3c80b04e3c24501626d8330dcd2e8e4c1d071e5bc419b2503fcc3fd3a0f2eb47dd40025c7c58f7829eba8402ac573b3b70f25560a6a89d6f10e4fd5ac385be07ce195c49ac4b9a7a1bd2b44daa3650dafe7d4b4245662f71017dbdaec564198c11b0ac9b742a1634e9f81486164a48d76542a3d626eb79356a9137e0e2a04604e1c7f9a68b741ecc07f2ce88114fecf3f383969b785cb2ebb2bb6009494394a28f1b5923fb4696e8ba78446497af71d255f4280404ade1965fb3328f5d5a2dd5c285d1406b3691a3c0e431829f317262239795331210a77d3f233e07caa81fb4b222dbfe9eac575a05b2d778335b55feb14187b90e036a34018baf5dba79a4fcbd9fbd1566817fbe3a0f7440e1ea67dbcda3fbf5672fb2d92009a240daa5d7c4224a59c7516a21019880ead95e0e6d1ec5eb604ae0deb6ab921a4582c58e96049765e04b1569f9a523a93d51894eb37c5d074a456efb9ace65b89727f98f3b44bb7688ea21c58c9c614aebd19785c8a8576c7a632b26261ff3033fbf64ac29e88fb44250f0260b7799c8efed8", 0x1000, 0x20000020, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7c28aa4c, @remote, 0x2000000}}, 0x24) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008"], 0x1c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.449088677s ago: executing program 9 (id=1060): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x31e4, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}], 0x1, 0x400c0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.150105191s ago: executing program 8 (id=1061): r0 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) gettid() (async) r5 = gettid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x28000600) (async) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7fffffff, 0x9, 0xffff, 0x800, r8, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x4}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x6004) socket$kcm(0x29, 0x5, 0x0) (async) r9 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2048080) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) 1.096821733s ago: executing program 0 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) 1.011987198s ago: executing program 0 (id=1063): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f_listen={0x2, 0x3, 0x4, 0x82, 0x92, 0x7, 0x8, {0x2, "fac1"}, 0x3, 0x7, 0x8, 0xff, 0x2, "a8e6"}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 978.26428ms ago: executing program 7 (id=1064): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f_listen={0x2, 0x3, 0x4, 0x82, 0x92, 0x7, 0x8, {0x2, "fac1"}, 0x3, 0x7, 0x8, 0xff, 0x2, "a8e6"}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 44.181375ms ago: executing program 8 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)="b7ffffff07000000000000f1dd0fccd5de05", 0x12}], 0x2) 0s ago: executing program 0 (id=1066): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) kernel console output (not intermixed with test programs): 9.121379][ T5921] IPVS: starting estimator thread 0... [ 189.216197][ T7747] IPVS: using max 36 ests per chain, 86400 per kthread [ 189.647616][ T7751] FAULT_INJECTION: forcing a failure. [ 189.647616][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 189.663123][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.7.419 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 189.663153][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.663166][ T7751] Call Trace: [ 189.663174][ T7751] [ 189.663183][ T7751] dump_stack_lvl+0x189/0x250 [ 189.663211][ T7751] ? __pfx____ratelimit+0x10/0x10 [ 189.663243][ T7751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.663266][ T7751] ? __pfx__printk+0x10/0x10 [ 189.663310][ T7751] should_fail_ex+0x414/0x560 [ 189.663350][ T7751] should_failslab+0xa8/0x100 [ 189.663373][ T7751] __kmalloc_cache_noprof+0x70/0x3d0 [ 189.663404][ T7751] ? sctp_add_bind_addr+0x8c/0x370 [ 189.663439][ T7751] sctp_add_bind_addr+0x8c/0x370 [ 189.663474][ T7751] sctp_copy_local_addr_list+0x30b/0x4e0 [ 189.663507][ T7751] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 189.663537][ T7751] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 189.663572][ T7751] ? sctp_v4_is_any+0x35/0x60 [ 189.663602][ T7751] ? sctp_copy_one_addr+0x93/0x360 [ 189.663635][ T7751] sctp_bind_addr_copy+0xb3/0x3c0 [ 189.663666][ T7751] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 189.663696][ T7751] sctp_connect_new_asoc+0x2e0/0x690 [ 189.663722][ T7751] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 189.663741][ T7751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 189.663783][ T7751] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 189.663810][ T7751] ? security_sctp_bind_connect+0x7e/0x2e0 [ 189.663839][ T7751] sctp_sendmsg+0x155c/0x2810 [ 189.663888][ T7751] ? __pfx_sctp_sendmsg+0x10/0x10 [ 189.663926][ T7751] ? aa_sk_perm+0x81e/0x950 [ 189.663967][ T7751] ? __pfx_aa_sk_perm+0x10/0x10 [ 189.663997][ T7751] ? sock_rps_record_flow+0x19/0x410 [ 189.664028][ T7751] ? inet_sendmsg+0x2f4/0x370 [ 189.664060][ T7751] __sock_sendmsg+0x19c/0x270 [ 189.664094][ T7751] ____sys_sendmsg+0x505/0x830 [ 189.664123][ T7751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.664166][ T7751] ? import_iovec+0x74/0xa0 [ 189.664199][ T7751] ___sys_sendmsg+0x21f/0x2a0 [ 189.664223][ T7751] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.664285][ T7751] ? __fget_files+0x2a/0x420 [ 189.664304][ T7751] ? __fget_files+0x3a0/0x420 [ 189.664337][ T7751] __x64_sys_sendmsg+0x19b/0x260 [ 189.664361][ T7751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.664394][ T7751] ? __pfx_ksys_write+0x10/0x10 [ 189.664421][ T7751] ? rcu_is_watching+0x15/0xb0 [ 189.664459][ T7751] ? do_syscall_64+0xbe/0x3b0 [ 189.664494][ T7751] do_syscall_64+0xfa/0x3b0 [ 189.664523][ T7751] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.664551][ T7751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.664571][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 189.664598][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.664617][ T7751] RIP: 0033:0x7f52e7f8ebe9 [ 189.664636][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.664653][ T7751] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.664676][ T7751] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 189.664691][ T7751] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 189.664704][ T7751] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 189.664716][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.664728][ T7751] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 189.664762][ T7751] [ 190.039314][ T7754] __nla_validate_parse: 4 callbacks suppressed [ 190.039334][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 190.157923][ T7757] netlink: 'syz.9.422': attribute type 1 has an invalid length. [ 190.257831][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.7.423'. [ 190.704481][ T7780] veth3: entered promiscuous mode [ 191.115548][ T7787] netlink: 16 bytes leftover after parsing attributes in process `syz.9.431'. [ 191.167154][ T7788] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 191.259516][ T7791] syzkaller0: entered promiscuous mode [ 191.278152][ T7791] syzkaller0: entered allmulticast mode [ 191.348422][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.438'. [ 191.362667][ T7791] tipc: Started in network mode [ 191.367760][ T7791] tipc: Node identity , cluster identity 4711 [ 191.379577][ T7791] tipc: Failed to obtain node identity [ 191.386753][ T7791] tipc: Enabling of bearer rejected, failed to enable media [ 191.623901][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.8.438'. [ 192.185294][ T7826] FAULT_INJECTION: forcing a failure. [ 192.185294][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 192.198362][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.9.446 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 192.198390][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.198403][ T7826] Call Trace: [ 192.198411][ T7826] [ 192.198420][ T7826] dump_stack_lvl+0x189/0x250 [ 192.198447][ T7826] ? __pfx____ratelimit+0x10/0x10 [ 192.198477][ T7826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.198499][ T7826] ? __pfx__printk+0x10/0x10 [ 192.198531][ T7826] ? __pfx___might_resched+0x10/0x10 [ 192.198568][ T7826] should_fail_ex+0x414/0x560 [ 192.198606][ T7826] should_failslab+0xa8/0x100 [ 192.198628][ T7826] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 192.198660][ T7826] ? __alloc_skb+0x112/0x2d0 [ 192.198698][ T7826] __alloc_skb+0x112/0x2d0 [ 192.198734][ T7826] netlink_sendmsg+0x5c6/0xb30 [ 192.198776][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.198811][ T7826] ? aa_sock_msg_perm+0x94/0x160 [ 192.198842][ T7826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.198866][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.198899][ T7826] __sock_sendmsg+0x219/0x270 [ 192.198931][ T7826] ____sys_sendmsg+0x505/0x830 [ 192.198958][ T7826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.198990][ T7826] ? import_iovec+0x74/0xa0 [ 192.199031][ T7826] ___sys_sendmsg+0x21f/0x2a0 [ 192.199056][ T7826] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.199118][ T7826] ? __fget_files+0x2a/0x420 [ 192.199138][ T7826] ? __fget_files+0x3a0/0x420 [ 192.199172][ T7826] __x64_sys_sendmsg+0x19b/0x260 [ 192.199197][ T7826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.199230][ T7826] ? __pfx_ksys_write+0x10/0x10 [ 192.199257][ T7826] ? rcu_is_watching+0x15/0xb0 [ 192.199295][ T7826] ? do_syscall_64+0xbe/0x3b0 [ 192.199331][ T7826] do_syscall_64+0xfa/0x3b0 [ 192.199360][ T7826] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.199388][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.199409][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 192.199434][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.199454][ T7826] RIP: 0033:0x7f83f938ebe9 [ 192.199472][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.199489][ T7826] RSP: 002b:00007f83fa245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.199512][ T7826] RAX: ffffffffffffffda RBX: 00007f83f95b5fa0 RCX: 00007f83f938ebe9 [ 192.199527][ T7826] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 192.199539][ T7826] RBP: 00007f83fa245090 R08: 0000000000000000 R09: 0000000000000000 [ 192.199551][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.199563][ T7826] R13: 00007f83f95b6038 R14: 00007f83f95b5fa0 R15: 00007ffe7e0cedc8 [ 192.199594][ T7826] [ 192.969635][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 193.105479][ T7847] hsr0: entered promiscuous mode [ 193.323163][ T7854] veth9: entered promiscuous mode [ 193.908219][ T7874] netlink: 324 bytes leftover after parsing attributes in process `syz.8.461'. [ 194.224464][ T7893] netlink: 388 bytes leftover after parsing attributes in process `syz.4.462'. [ 194.427895][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434454][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.605956][ T7906] netlink: 10 bytes leftover after parsing attributes in process `syz.0.468'. [ 194.639550][ T7906] netlink: 'syz.0.468': attribute type 12 has an invalid length. [ 194.754996][ T7908] netlink: 'syz.7.466': attribute type 10 has an invalid length. [ 194.786345][ T7908] team0: Device dummy0 is up. Set it down before adding it as a team port [ 194.974782][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'. [ 195.018810][ T7913] veth9: entered promiscuous mode [ 195.376494][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.9.473'. [ 195.517656][ T7922] FAULT_INJECTION: forcing a failure. [ 195.517656][ T7922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.574471][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.477'. [ 195.589414][ T7929] netlink: 'syz.9.477': attribute type 18 has an invalid length. [ 195.589409][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.7.474 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 195.589436][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.589449][ T7922] Call Trace: [ 195.589457][ T7922] [ 195.589464][ T7922] dump_stack_lvl+0x189/0x250 [ 195.589491][ T7922] ? __pfx____ratelimit+0x10/0x10 [ 195.589541][ T7922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.589568][ T7922] ? __pfx__printk+0x10/0x10 [ 195.589598][ T7922] ? __might_fault+0xb0/0x130 [ 195.589647][ T7922] should_fail_ex+0x414/0x560 [ 195.589692][ T7922] _copy_from_user+0x2d/0xb0 [ 195.589727][ T7922] ___sys_recvmsg+0x12e/0x510 [ 195.589762][ T7922] ? __pfx____sys_recvmsg+0x10/0x10 [ 195.589825][ T7922] ? __might_fault+0xb0/0x130 [ 195.589865][ T7922] do_recvmmsg+0x307/0x770 [ 195.589902][ T7922] ? __pfx_do_recvmmsg+0x10/0x10 [ 195.589943][ T7922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.590001][ T7922] __x64_sys_recvmmsg+0x190/0x240 [ 195.590032][ T7922] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 195.590065][ T7922] ? do_syscall_64+0xbe/0x3b0 [ 195.590106][ T7922] do_syscall_64+0xfa/0x3b0 [ 195.590144][ T7922] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.590176][ T7922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.590200][ T7922] ? clear_bhb_loop+0x60/0xb0 [ 195.590229][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.590252][ T7922] RIP: 0033:0x7f52e7f8ebe9 [ 195.590275][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.590296][ T7922] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 195.590323][ T7922] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 195.590341][ T7922] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 195.590356][ T7922] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 195.590370][ T7922] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 195.590385][ T7922] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 195.590422][ T7922] [ 195.670708][ T7932] netlink: 'syz.4.476': attribute type 12 has an invalid length. [ 195.887945][ T7927] netlink: 10 bytes leftover after parsing attributes in process `syz.4.476'. [ 195.934299][ T34] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.960208][ T34] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.995658][ T34] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.008127][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.480'. [ 196.045421][ T34] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.055531][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.480'. [ 196.129474][ T7945] FAULT_INJECTION: forcing a failure. [ 196.129474][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.172781][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.4.482 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 196.172814][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.172828][ T7945] Call Trace: [ 196.172836][ T7945] [ 196.172845][ T7945] dump_stack_lvl+0x189/0x250 [ 196.172884][ T7945] ? __pfx____ratelimit+0x10/0x10 [ 196.172914][ T7945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.172935][ T7945] ? __pfx__printk+0x10/0x10 [ 196.172961][ T7945] ? __might_fault+0xb0/0x130 [ 196.173003][ T7945] should_fail_ex+0x414/0x560 [ 196.173042][ T7945] _copy_from_iter+0x1db/0x16f0 [ 196.173072][ T7945] ? rcu_is_watching+0x15/0xb0 [ 196.173106][ T7945] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 196.173138][ T7945] ? __pfx__copy_from_iter+0x10/0x10 [ 196.173166][ T7945] ? __build_skb_around+0x257/0x3e0 [ 196.173202][ T7945] ? netlink_sendmsg+0x642/0xb30 [ 196.173232][ T7945] ? skb_put+0x11b/0x210 [ 196.173255][ T7945] netlink_sendmsg+0x6b2/0xb30 [ 196.173296][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.173331][ T7945] ? aa_sock_msg_perm+0x94/0x160 [ 196.173360][ T7945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.173384][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.173416][ T7945] __sock_sendmsg+0x219/0x270 [ 196.173448][ T7945] ____sys_sendmsg+0x505/0x830 [ 196.173476][ T7945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.173508][ T7945] ? import_iovec+0x74/0xa0 [ 196.173540][ T7945] ___sys_sendmsg+0x21f/0x2a0 [ 196.173564][ T7945] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.173625][ T7945] ? __fget_files+0x2a/0x420 [ 196.173643][ T7945] ? __fget_files+0x3a0/0x420 [ 196.173680][ T7945] __x64_sys_sendmsg+0x19b/0x260 [ 196.173705][ T7945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.173738][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 196.173765][ T7945] ? rcu_is_watching+0x15/0xb0 [ 196.173801][ T7945] ? do_syscall_64+0xbe/0x3b0 [ 196.173836][ T7945] do_syscall_64+0xfa/0x3b0 [ 196.173865][ T7945] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.173893][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.173913][ T7945] ? clear_bhb_loop+0x60/0xb0 [ 196.173939][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.173958][ T7945] RIP: 0033:0x7f7148b8ebe9 [ 196.173977][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.173995][ T7945] RSP: 002b:00007f714999d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.174018][ T7945] RAX: ffffffffffffffda RBX: 00007f7148db5fa0 RCX: 00007f7148b8ebe9 [ 196.174033][ T7945] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 196.174046][ T7945] RBP: 00007f714999d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.174060][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.174072][ T7945] R13: 00007f7148db6038 R14: 00007f7148db5fa0 R15: 00007ffe9f4b4da8 [ 196.174105][ T7945] [ 196.501994][ T7956] tipc: Enabling of bearer rejected, failed to enable media [ 196.638278][ T7955] netlink: 44 bytes leftover after parsing attributes in process `syz.9.484'. [ 196.904482][ T7974] netlink: 'syz.7.485': attribute type 10 has an invalid length. [ 196.975212][ T7974] team0: Device dummy0 is up. Set it down before adding it as a team port [ 197.146840][ T7983] netlink: 'syz.0.492': attribute type 5 has an invalid length. [ 197.293825][ T7985] netlink: 356 bytes leftover after parsing attributes in process `syz.0.493'. [ 197.315153][ T7985] netlink: 176 bytes leftover after parsing attributes in process `syz.0.493'. [ 197.974870][ T8003] netlink: 324 bytes leftover after parsing attributes in process `syz.8.498'. [ 198.280264][ T8010] FAULT_INJECTION: forcing a failure. [ 198.280264][ T8010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.293690][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 60 seconds [ 198.304854][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 198.317335][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 60 seconds [ 198.328894][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 60 seconds [ 198.343301][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.0.499 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 198.343330][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.343344][ T8010] Call Trace: [ 198.343351][ T8010] [ 198.343360][ T8010] dump_stack_lvl+0x189/0x250 [ 198.343388][ T8010] ? __pfx____ratelimit+0x10/0x10 [ 198.343417][ T8010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.343439][ T8010] ? __pfx__printk+0x10/0x10 [ 198.343465][ T8010] ? __might_fault+0xb0/0x130 [ 198.343519][ T8010] should_fail_ex+0x414/0x560 [ 198.343567][ T8010] _copy_from_user+0x2d/0xb0 [ 198.343597][ T8010] __sys_connect+0x123/0x440 [ 198.343630][ T8010] ? __fget_files+0x3a0/0x420 [ 198.343649][ T8010] ? __pfx___sys_connect+0x10/0x10 [ 198.343690][ T8010] ? __pfx_ksys_write+0x10/0x10 [ 198.343726][ T8010] __x64_sys_connect+0x7a/0x90 [ 198.343756][ T8010] do_syscall_64+0xfa/0x3b0 [ 198.343790][ T8010] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.343817][ T8010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.343836][ T8010] ? clear_bhb_loop+0x60/0xb0 [ 198.343859][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.343878][ T8010] RIP: 0033:0x7f922938ebe9 [ 198.343895][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.343911][ T8010] RSP: 002b:00007f922a13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 198.343937][ T8010] RAX: ffffffffffffffda RBX: 00007f92295b6180 RCX: 00007f922938ebe9 [ 198.343951][ T8010] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 198.343982][ T8010] RBP: 00007f922a13f090 R08: 0000000000000000 R09: 0000000000000000 [ 198.343995][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.344006][ T8010] R13: 00007f92295b6218 R14: 00007f92295b6180 R15: 00007ffebe26ee08 [ 198.344038][ T8010] [ 198.739490][ T8015] netlink: 10 bytes leftover after parsing attributes in process `syz.7.503'. [ 199.931833][ T8057] 8021q: VLANs not supported on ip6_vti0 [ 200.266906][ T8064] veth3: entered promiscuous mode [ 200.531507][ T8072] __nla_validate_parse: 4 callbacks suppressed [ 200.531527][ T8072] netlink: 388 bytes leftover after parsing attributes in process `syz.4.521'. [ 200.712217][ T8080] netlink: 10 bytes leftover after parsing attributes in process `syz.9.523'. [ 201.473062][ T8089] netlink: 'syz.4.525': attribute type 10 has an invalid length. [ 201.597170][ T8089] team0: Device dummy0 is up. Set it down before adding it as a team port [ 202.173728][ T8113] netlink: 388 bytes leftover after parsing attributes in process `syz.8.535'. [ 202.490401][ T8123] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 202.524486][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.547186][ T8123] bond0: (slave gretap1): making interface the new active one [ 202.556760][ T8123] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 203.509153][ T8153] syz_tun: entered allmulticast mode [ 203.538475][ T8155] tipc: Enabling of bearer rejected, failed to enable media [ 203.615718][ T8142] syz_tun: left allmulticast mode [ 203.828926][ T8152] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 203.852519][ T8169] netlink: 388 bytes leftover after parsing attributes in process `syz.0.551'. [ 203.871548][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.9.549'. [ 203.885505][ T8160] tipc: Enabling of bearer rejected, failed to enable media [ 203.984082][ T8173] netlink: 324 bytes leftover after parsing attributes in process `syz.0.552'. [ 204.002776][ T8175] FAULT_INJECTION: forcing a failure. [ 204.002776][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.018734][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.4.553 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 204.018765][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.018779][ T8175] Call Trace: [ 204.018787][ T8175] [ 204.018796][ T8175] dump_stack_lvl+0x189/0x250 [ 204.018823][ T8175] ? __pfx____ratelimit+0x10/0x10 [ 204.018851][ T8175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.018872][ T8175] ? __pfx__printk+0x10/0x10 [ 204.018908][ T8175] should_fail_ex+0x414/0x560 [ 204.018944][ T8175] _copy_to_user+0x31/0xb0 [ 204.018973][ T8175] simple_read_from_buffer+0xe1/0x170 [ 204.019008][ T8175] proc_fail_nth_read+0x1b3/0x220 [ 204.019034][ T8175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.019070][ T8175] ? rw_verify_area+0x258/0x650 [ 204.019096][ T8175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.019120][ T8175] vfs_read+0x1fd/0x980 [ 204.019145][ T8175] ? fdget_pos+0x247/0x320 [ 204.019168][ T8175] ? __pfx___mutex_lock+0x10/0x10 [ 204.019197][ T8175] ? __pfx_vfs_read+0x10/0x10 [ 204.019227][ T8175] ? __fget_files+0x2a/0x420 [ 204.019252][ T8175] ? __fget_files+0x3a0/0x420 [ 204.019270][ T8175] ? __fget_files+0x2a/0x420 [ 204.019300][ T8175] ksys_read+0x145/0x250 [ 204.019331][ T8175] ? __pfx_ksys_read+0x10/0x10 [ 204.019356][ T8175] ? rcu_is_watching+0x15/0xb0 [ 204.019394][ T8175] ? do_syscall_64+0xbe/0x3b0 [ 204.019429][ T8175] do_syscall_64+0xfa/0x3b0 [ 204.019457][ T8175] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.019485][ T8175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.019505][ T8175] ? clear_bhb_loop+0x60/0xb0 [ 204.019531][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.019551][ T8175] RIP: 0033:0x7f7148b8d5fc [ 204.019570][ T8175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.019588][ T8175] RSP: 002b:00007f714999d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.019610][ T8175] RAX: ffffffffffffffda RBX: 00007f7148db5fa0 RCX: 00007f7148b8d5fc [ 204.019626][ T8175] RDX: 000000000000000f RSI: 00007f714999d0a0 RDI: 0000000000000008 [ 204.019639][ T8175] RBP: 00007f714999d090 R08: 0000000000000000 R09: 0000000000000000 [ 204.019651][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.019663][ T8175] R13: 00007f7148db6038 R14: 00007f7148db5fa0 R15: 00007ffe9f4b4da8 [ 204.019697][ T8175] [ 205.731866][ T8170] vlan2: entered promiscuous mode [ 205.737246][ T8170] macvtap0: entered promiscuous mode [ 206.036472][ T8205] netlink: 388 bytes leftover after parsing attributes in process `syz.7.562'. [ 207.998739][ T8220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 208.150815][ T8220] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.420106][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.435858][ T8246] FAULT_INJECTION: forcing a failure. [ 208.435858][ T8246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.441081][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.449565][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.8.572 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 208.449598][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.449613][ T8246] Call Trace: [ 208.449623][ T8246] [ 208.449633][ T8246] dump_stack_lvl+0x189/0x250 [ 208.449665][ T8246] ? __pfx____ratelimit+0x10/0x10 [ 208.449715][ T8246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.449740][ T8246] ? __pfx__printk+0x10/0x10 [ 208.449785][ T8246] should_fail_ex+0x414/0x560 [ 208.449829][ T8246] _copy_to_user+0x31/0xb0 [ 208.449867][ T8246] simple_read_from_buffer+0xe1/0x170 [ 208.449910][ T8246] proc_fail_nth_read+0x1b3/0x220 [ 208.449941][ T8246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.449974][ T8246] ? rw_verify_area+0x258/0x650 [ 208.450006][ T8246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.450036][ T8246] vfs_read+0x1fd/0x980 [ 208.450069][ T8246] ? fdget_pos+0x247/0x320 [ 208.450096][ T8246] ? __pfx___mutex_lock+0x10/0x10 [ 208.450134][ T8246] ? __pfx_vfs_read+0x10/0x10 [ 208.450170][ T8246] ? __fget_files+0x2a/0x420 [ 208.450198][ T8246] ? __fget_files+0x3a0/0x420 [ 208.450220][ T8246] ? __fget_files+0x2a/0x420 [ 208.450254][ T8246] ksys_read+0x145/0x250 [ 208.450291][ T8246] ? __pfx_ksys_read+0x10/0x10 [ 208.450331][ T8246] ? do_syscall_64+0xbe/0x3b0 [ 208.450373][ T8246] do_syscall_64+0xfa/0x3b0 [ 208.450410][ T8246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.450433][ T8246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.450456][ T8246] ? clear_bhb_loop+0x60/0xb0 [ 208.450487][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.450512][ T8246] RIP: 0033:0x7f693338d5fc [ 208.450534][ T8246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.450556][ T8246] RSP: 002b:00007f69341ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.450583][ T8246] RAX: ffffffffffffffda RBX: 00007f69335b6090 RCX: 00007f693338d5fc [ 208.450603][ T8246] RDX: 000000000000000f RSI: 00007f69341ae0a0 RDI: 0000000000000006 [ 208.450617][ T8246] RBP: 00007f69341ae090 R08: 0000000000000000 R09: 0000000000000000 [ 208.450632][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.450647][ T8246] R13: 00007f69335b6128 R14: 00007f69335b6090 R15: 00007ffd22072478 [ 208.450691][ T8246] [ 208.887518][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 209.243986][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.575'. [ 209.271429][ T8255] FAULT_INJECTION: forcing a failure. [ 209.271429][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 209.311363][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.576 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 209.311402][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.311414][ T8255] Call Trace: [ 209.311422][ T8255] [ 209.311431][ T8255] dump_stack_lvl+0x189/0x250 [ 209.311456][ T8255] ? __pfx____ratelimit+0x10/0x10 [ 209.311484][ T8255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.311503][ T8255] ? __pfx__printk+0x10/0x10 [ 209.311529][ T8255] ? __lock_acquire+0xab9/0xd20 [ 209.311564][ T8255] should_fail_ex+0x414/0x560 [ 209.311601][ T8255] should_failslab+0xa8/0x100 [ 209.311622][ T8255] kmem_cache_alloc_noprof+0x73/0x3c0 [ 209.311650][ T8255] ? skb_clone+0x212/0x3a0 [ 209.311677][ T8255] skb_clone+0x212/0x3a0 [ 209.311704][ T8255] __netlink_deliver_tap+0x404/0x850 [ 209.311748][ T8255] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.311780][ T8255] netlink_deliver_tap+0x19c/0x1b0 [ 209.311811][ T8255] netlink_unicast+0x7fa/0x9e0 [ 209.311848][ T8255] ? __pfx_netlink_unicast+0x10/0x10 [ 209.311875][ T8255] ? netlink_sendmsg+0x642/0xb30 [ 209.311902][ T8255] ? skb_put+0x11b/0x210 [ 209.311925][ T8255] netlink_sendmsg+0x805/0xb30 [ 209.311964][ T8255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.311998][ T8255] ? aa_sock_msg_perm+0x94/0x160 [ 209.312027][ T8255] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.312049][ T8255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.312080][ T8255] __sock_sendmsg+0x219/0x270 [ 209.312109][ T8255] ____sys_sendmsg+0x505/0x830 [ 209.312136][ T8255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.312167][ T8255] ? import_iovec+0x74/0xa0 [ 209.312198][ T8255] ___sys_sendmsg+0x21f/0x2a0 [ 209.312221][ T8255] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.312282][ T8255] ? __fget_files+0x2a/0x420 [ 209.312301][ T8255] ? __fget_files+0x3a0/0x420 [ 209.312329][ T8255] __x64_sys_sendmsg+0x19b/0x260 [ 209.312353][ T8255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.312466][ T8255] ? __pfx_ksys_write+0x10/0x10 [ 209.312502][ T8255] ? rcu_is_watching+0x15/0xb0 [ 209.312539][ T8255] ? do_syscall_64+0xbe/0x3b0 [ 209.312571][ T8255] do_syscall_64+0xfa/0x3b0 [ 209.312600][ T8255] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.312627][ T8255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.312731][ T8255] ? clear_bhb_loop+0x60/0xb0 [ 209.312755][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.312775][ T8255] RIP: 0033:0x7f922938ebe9 [ 209.312793][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.312809][ T8255] RSP: 002b:00007f922a181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.312832][ T8255] RAX: ffffffffffffffda RBX: 00007f92295b5fa0 RCX: 00007f922938ebe9 [ 209.312845][ T8255] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 209.312858][ T8255] RBP: 00007f922a181090 R08: 0000000000000000 R09: 0000000000000000 [ 209.312869][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.312881][ T8255] R13: 00007f92295b6038 R14: 00007f92295b5fa0 R15: 00007ffebe26ee08 [ 209.312908][ T8255] [ 209.385661][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.716974][ T8266] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20002 [ 209.750829][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 209.831656][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 210.033253][ T8278] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 210.066602][ T8271] netlink: 'syz.7.583': attribute type 12 has an invalid length. [ 210.097659][ T8271] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.583'. [ 210.710959][ T8298] netlink: 'syz.4.589': attribute type 4 has an invalid length. [ 211.541153][ T8323] netlink: 'syz.9.594': attribute type 10 has an invalid length. [ 211.557651][ T8324] netlink: 'syz.7.593': attribute type 10 has an invalid length. [ 211.741630][ T8323] team0: Device dummy0 is up. Set it down before adding it as a team port [ 211.752628][ T8324] team0: Device dummy0 is up. Set it down before adding it as a team port [ 211.767585][ T8329] syz_tun: entered allmulticast mode [ 211.807448][ T8317] syz_tun: left allmulticast mode [ 211.864599][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 212.071549][ T8341] netlink: 'syz.8.604': attribute type 3 has an invalid length. [ 212.103700][ T8341] syz_tun: entered allmulticast mode [ 212.168281][ T8341] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 212.185988][ T8346] FAULT_INJECTION: forcing a failure. [ 212.185988][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.188370][ T8341] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 212.208867][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.604'. [ 212.251131][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.0.603 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 212.251171][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.251185][ T8346] Call Trace: [ 212.251194][ T8346] [ 212.251204][ T8346] dump_stack_lvl+0x189/0x250 [ 212.251232][ T8346] ? __pfx____ratelimit+0x10/0x10 [ 212.251265][ T8346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.251288][ T8346] ? __pfx__printk+0x10/0x10 [ 212.251316][ T8346] ? __might_fault+0xb0/0x130 [ 212.251361][ T8346] should_fail_ex+0x414/0x560 [ 212.251401][ T8346] _copy_from_user+0x2d/0xb0 [ 212.251433][ T8346] kstrtouint_from_user+0xc4/0x170 [ 212.251462][ T8346] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 212.251507][ T8346] proc_fail_nth_write+0x88/0x200 [ 212.251532][ T8346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.251565][ T8346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.251593][ T8346] vfs_write+0x27b/0xa90 [ 212.251634][ T8346] ? __pfx_vfs_write+0x10/0x10 [ 212.251667][ T8346] ? __fget_files+0x2a/0x420 [ 212.251693][ T8346] ? __fget_files+0x3a0/0x420 [ 212.251712][ T8346] ? __fget_files+0x2a/0x420 [ 212.251743][ T8346] ksys_write+0x145/0x250 [ 212.251778][ T8346] ? __pfx_ksys_write+0x10/0x10 [ 212.251814][ T8346] ? do_syscall_64+0xbe/0x3b0 [ 212.251850][ T8346] do_syscall_64+0xfa/0x3b0 [ 212.251880][ T8346] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.251910][ T8346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.251931][ T8346] ? clear_bhb_loop+0x60/0xb0 [ 212.251962][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.251983][ T8346] RIP: 0033:0x7f922938d69f [ 212.252002][ T8346] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 212.252021][ T8346] RSP: 002b:00007f922a160030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 212.252047][ T8346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f922938d69f [ 212.252063][ T8346] RDX: 0000000000000001 RSI: 00007f922a1600a0 RDI: 0000000000000004 [ 212.252076][ T8346] RBP: 00007f922a160090 R08: 0000000000000000 R09: 0000000000000000 [ 212.252090][ T8346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 212.252103][ T8346] R13: 00007f92295b6128 R14: 00007f92295b6090 R15: 00007ffebe26ee08 [ 212.252138][ T8346] [ 212.553976][ T8353] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 212.608753][ T8354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 212.694578][ T8354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 213.012559][ T8340] syz_tun: left allmulticast mode [ 213.057387][ T5920] IPVS: starting estimator thread 0... [ 213.106298][ T8372] syz_tun: entered allmulticast mode [ 213.181750][ T8371] syz_tun: left allmulticast mode [ 213.187252][ T8368] IPVS: using max 24 ests per chain, 57600 per kthread [ 213.578390][ T8394] netlink: 388 bytes leftover after parsing attributes in process `syz.8.615'. [ 213.608476][ T8356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.941357][ T8404] netlink: 'syz.4.620': attribute type 12 has an invalid length. [ 214.160768][ T8410] FAULT_INJECTION: forcing a failure. [ 214.160768][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 214.213731][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.4.622 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 214.213765][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.213780][ T8410] Call Trace: [ 214.213788][ T8410] [ 214.213799][ T8410] dump_stack_lvl+0x189/0x250 [ 214.213827][ T8410] ? __pfx____ratelimit+0x10/0x10 [ 214.213859][ T8410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.213882][ T8410] ? __pfx__printk+0x10/0x10 [ 214.213927][ T8410] should_fail_ex+0x414/0x560 [ 214.213968][ T8410] should_failslab+0xa8/0x100 [ 214.213992][ T8410] __kmalloc_cache_noprof+0x70/0x3d0 [ 214.214025][ T8410] ? sctp_add_bind_addr+0x8c/0x370 [ 214.214072][ T8410] sctp_add_bind_addr+0x8c/0x370 [ 214.214106][ T8410] sctp_copy_local_addr_list+0x30b/0x4e0 [ 214.214138][ T8410] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 214.214167][ T8410] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 214.214202][ T8410] ? sctp_v4_is_any+0x35/0x60 [ 214.214230][ T8410] ? sctp_copy_one_addr+0x93/0x360 [ 214.214269][ T8410] sctp_bind_addr_copy+0xb3/0x3c0 [ 214.214299][ T8410] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 214.214329][ T8410] sctp_connect_new_asoc+0x2e0/0x690 [ 214.214355][ T8410] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 214.214374][ T8410] ? __local_bh_enable_ip+0x12d/0x1c0 [ 214.214415][ T8410] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 214.214441][ T8410] ? security_sctp_bind_connect+0x7e/0x2e0 [ 214.214469][ T8410] sctp_sendmsg+0x155c/0x2810 [ 214.214517][ T8410] ? __pfx_sctp_sendmsg+0x10/0x10 [ 214.214554][ T8410] ? aa_sk_perm+0x81e/0x950 [ 214.214587][ T8410] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.214616][ T8410] ? sock_rps_record_flow+0x19/0x410 [ 214.214647][ T8410] ? inet_sendmsg+0x2f4/0x370 [ 214.214677][ T8410] __sock_sendmsg+0x19c/0x270 [ 214.214709][ T8410] ____sys_sendmsg+0x505/0x830 [ 214.214744][ T8410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.214777][ T8410] ? import_iovec+0x74/0xa0 [ 214.214811][ T8410] ___sys_sendmsg+0x21f/0x2a0 [ 214.214837][ T8410] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.214903][ T8410] ? __fget_files+0x2a/0x420 [ 214.214922][ T8410] ? __fget_files+0x3a0/0x420 [ 214.214952][ T8410] __x64_sys_sendmsg+0x19b/0x260 [ 214.214975][ T8410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.215006][ T8410] ? __pfx_ksys_write+0x10/0x10 [ 214.215031][ T8410] ? rcu_is_watching+0x15/0xb0 [ 214.215066][ T8410] ? do_syscall_64+0xbe/0x3b0 [ 214.215098][ T8410] do_syscall_64+0xfa/0x3b0 [ 214.215124][ T8410] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.215150][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.215169][ T8410] ? clear_bhb_loop+0x60/0xb0 [ 214.215192][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.215210][ T8410] RIP: 0033:0x7f7148b8ebe9 [ 214.215228][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.215250][ T8410] RSP: 002b:00007f714999d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.215272][ T8410] RAX: ffffffffffffffda RBX: 00007f7148db5fa0 RCX: 00007f7148b8ebe9 [ 214.215286][ T8410] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 214.215298][ T8410] RBP: 00007f714999d090 R08: 0000000000000000 R09: 0000000000000000 [ 214.215310][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.215321][ T8410] R13: 00007f7148db6038 R14: 00007f7148db5fa0 R15: 00007ffe9f4b4da8 [ 214.215353][ T8410] [ 214.796880][ T8417] netlink: 10 bytes leftover after parsing attributes in process `syz.9.624'. [ 215.075415][ T8426] Illegal XDP return value 260 on prog (id 269) dev N/A, expect packet loss! [ 215.079625][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 215.370070][ T8437] netlink: 'syz.7.634': attribute type 1 has an invalid length. [ 215.440380][ T8437] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 215.454412][ T8437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.454803][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.479910][ T8437] veth3: entered promiscuous mode [ 215.488683][ T8437] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 215.577865][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 215.615887][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.632599][ T8442] bond1: (slave ip6gretap1): Removing an active aggregator [ 215.650281][ T8442] bond1: (slave ip6gretap1): Releasing active interface [ 215.652959][ T8448] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.636'. [ 215.660140][ T8442] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 06:59:ab:3d:37:83 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 215.733618][ T8442] bond1: (slave veth3): Releasing backup interface [ 215.758660][ T8449] syz_tun: entered allmulticast mode [ 215.768664][ T8452] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 215.815637][ T8447] syz_tun: left allmulticast mode [ 215.983933][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 216.460071][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.9.644'. [ 216.918376][ T8484] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 217.009444][ T8495] syz_tun: entered allmulticast mode [ 217.076997][ T8494] syz_tun: left allmulticast mode [ 217.269003][ T8505] netlink: 388 bytes leftover after parsing attributes in process `syz.9.652'. [ 217.390376][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.7.655'. [ 217.401080][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.654'. [ 217.502409][ T8514] veth5: entered promiscuous mode [ 217.645799][ T8524] FAULT_INJECTION: forcing a failure. [ 217.645799][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.667165][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.0.658 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 217.667198][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.667212][ T8524] Call Trace: [ 217.667222][ T8524] [ 217.667230][ T8524] dump_stack_lvl+0x189/0x250 [ 217.667263][ T8524] ? __pfx____ratelimit+0x10/0x10 [ 217.667295][ T8524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.667317][ T8524] ? __pfx__printk+0x10/0x10 [ 217.667358][ T8524] should_fail_ex+0x414/0x560 [ 217.667398][ T8524] _copy_to_user+0x31/0xb0 [ 217.667430][ T8524] simple_read_from_buffer+0xe1/0x170 [ 217.667469][ T8524] proc_fail_nth_read+0x1b3/0x220 [ 217.667499][ T8524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.667527][ T8524] ? rw_verify_area+0x258/0x650 [ 217.667556][ T8524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.667582][ T8524] vfs_read+0x1fd/0x980 [ 217.667609][ T8524] ? fdget_pos+0x247/0x320 [ 217.667633][ T8524] ? __pfx___mutex_lock+0x10/0x10 [ 217.667663][ T8524] ? __pfx_vfs_read+0x10/0x10 [ 217.667692][ T8524] ? __fget_files+0x2a/0x420 [ 217.667726][ T8524] ? __fget_files+0x3a0/0x420 [ 217.667743][ T8524] ? __fget_files+0x2a/0x420 [ 217.667771][ T8524] ksys_read+0x145/0x250 [ 217.667801][ T8524] ? __pfx_ksys_read+0x10/0x10 [ 217.667825][ T8524] ? rcu_is_watching+0x15/0xb0 [ 217.667861][ T8524] ? do_syscall_64+0xbe/0x3b0 [ 217.667894][ T8524] do_syscall_64+0xfa/0x3b0 [ 217.667922][ T8524] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.667949][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.667969][ T8524] ? clear_bhb_loop+0x60/0xb0 [ 217.667993][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.668011][ T8524] RIP: 0033:0x7f922938d5fc [ 217.668029][ T8524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.668047][ T8524] RSP: 002b:00007f922a181030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.668069][ T8524] RAX: ffffffffffffffda RBX: 00007f92295b5fa0 RCX: 00007f922938d5fc [ 217.668084][ T8524] RDX: 000000000000000f RSI: 00007f922a1810a0 RDI: 0000000000000004 [ 217.668097][ T8524] RBP: 00007f922a181090 R08: 0000000000000000 R09: 0000000000000000 [ 217.668109][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.668120][ T8524] R13: 00007f92295b6038 R14: 00007f92295b5fa0 R15: 00007ffebe26ee08 [ 217.668152][ T8524] [ 217.943348][ T8522] pim6reg: entered allmulticast mode [ 217.952972][ T8522] pim6reg: left allmulticast mode [ 218.059412][ T8528] FAULT_INJECTION: forcing a failure. [ 218.059412][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.166332][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.4.659 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 218.166366][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.166381][ T8528] Call Trace: [ 218.166389][ T8528] [ 218.166399][ T8528] dump_stack_lvl+0x189/0x250 [ 218.166433][ T8528] ? __pfx____ratelimit+0x10/0x10 [ 218.166465][ T8528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.166487][ T8528] ? __pfx__printk+0x10/0x10 [ 218.166514][ T8528] ? __might_fault+0xb0/0x130 [ 218.166558][ T8528] should_fail_ex+0x414/0x560 [ 218.166598][ T8528] _copy_from_user+0x2d/0xb0 [ 218.166629][ T8528] ___sys_recvmsg+0x12e/0x510 [ 218.166660][ T8528] ? __pfx____sys_recvmsg+0x10/0x10 [ 218.166718][ T8528] ? __might_fault+0xb0/0x130 [ 218.166754][ T8528] do_recvmmsg+0x307/0x770 [ 218.166788][ T8528] ? __pfx_do_recvmmsg+0x10/0x10 [ 218.166826][ T8528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.166879][ T8528] __x64_sys_recvmmsg+0x190/0x240 [ 218.166906][ T8528] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 218.166929][ T8528] ? rcu_is_watching+0x15/0xb0 [ 218.166976][ T8528] ? do_syscall_64+0xbe/0x3b0 [ 218.167012][ T8528] do_syscall_64+0xfa/0x3b0 [ 218.167043][ T8528] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.167072][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.167094][ T8528] ? clear_bhb_loop+0x60/0xb0 [ 218.167120][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.167140][ T8528] RIP: 0033:0x7f7148b8ebe9 [ 218.167159][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.167179][ T8528] RSP: 002b:00007f714999d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 218.167203][ T8528] RAX: ffffffffffffffda RBX: 00007f7148db5fa0 RCX: 00007f7148b8ebe9 [ 218.167219][ T8528] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 218.167233][ T8528] RBP: 00007f714999d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.167246][ T8528] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 218.167259][ T8528] R13: 00007f7148db6038 R14: 00007f7148db5fa0 R15: 00007ffe9f4b4da8 [ 218.167293][ T8528] [ 218.668210][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.661'. [ 218.729423][ T8540] netlink: 124 bytes leftover after parsing attributes in process `syz.0.663'. [ 218.763497][ T8545] netlink: 'syz.8.665': attribute type 1 has an invalid length. [ 218.891135][ T8545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.974257][ T8545] veth3: entered promiscuous mode [ 219.006719][ T8545] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 219.074187][ T8550] bond1: (slave veth3): Releasing backup interface [ 219.636174][ T8574] netlink: 'syz.7.672': attribute type 1 has an invalid length. [ 219.658450][ T8575] netlink: 388 bytes leftover after parsing attributes in process `syz.9.671'. [ 219.659742][ T8576] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 219.674354][ T8574] netlink: 'syz.7.672': attribute type 4 has an invalid length. [ 219.682036][ T8574] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.672'. [ 219.711631][ T8574] vlan2: entered promiscuous mode [ 219.718201][ T8574] vlan2: entered allmulticast mode [ 219.725072][ T8574] hsr_slave_1: entered allmulticast mode [ 219.811235][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.672'. [ 220.100837][ T8580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'. [ 220.569387][ T8596] netlink: 344 bytes leftover after parsing attributes in process `syz.8.679'. [ 221.027368][ T8617] netlink: 'syz.9.686': attribute type 1 has an invalid length. [ 221.656190][ T8644] netlink: 'syz.8.693': attribute type 1 has an invalid length. [ 221.690824][ T8622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.737066][ T8622] bond0: (slave bond4): Enslaving as an active interface with an up link [ 221.918689][ T8648] veth5: entered promiscuous mode [ 222.064378][ T8656] FAULT_INJECTION: forcing a failure. [ 222.064378][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 222.078546][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.0.696 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 222.078577][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.078590][ T8656] Call Trace: [ 222.078599][ T8656] [ 222.078607][ T8656] dump_stack_lvl+0x189/0x250 [ 222.078635][ T8656] ? __pfx____ratelimit+0x10/0x10 [ 222.078666][ T8656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.078688][ T8656] ? __pfx__printk+0x10/0x10 [ 222.078711][ T8656] ? genl_rcv+0x28/0x40 [ 222.078734][ T8656] ? ____sys_sendmsg+0x505/0x830 [ 222.078755][ T8656] ? __x64_sys_sendmsg+0x19b/0x260 [ 222.078788][ T8656] should_fail_ex+0x414/0x560 [ 222.078827][ T8656] should_failslab+0xa8/0x100 [ 222.078850][ T8656] kmem_cache_alloc_noprof+0x73/0x3c0 [ 222.078880][ T8656] ? skb_clone+0x212/0x3a0 [ 222.078909][ T8656] skb_clone+0x212/0x3a0 [ 222.078936][ T8656] __netlink_deliver_tap+0x404/0x850 [ 222.078982][ T8656] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.079016][ T8656] netlink_deliver_tap+0x19c/0x1b0 [ 222.079048][ T8656] netlink_sendskb+0x68/0x140 [ 222.079079][ T8656] netlink_unicast+0x397/0x9e0 [ 222.079105][ T8656] ? __asan_memcpy+0x40/0x70 [ 222.079141][ T8656] ? __pfx_netlink_unicast+0x10/0x10 [ 222.079181][ T8656] netlink_rcv_skb+0x28c/0x470 [ 222.079209][ T8656] ? __lock_acquire+0xab9/0xd20 [ 222.079238][ T8656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.079264][ T8656] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.079317][ T8656] ? down_read+0x1ad/0x2e0 [ 222.079340][ T8656] genl_rcv+0x28/0x40 [ 222.079362][ T8656] netlink_unicast+0x82c/0x9e0 [ 222.079400][ T8656] ? __pfx_netlink_unicast+0x10/0x10 [ 222.079439][ T8656] ? netlink_sendmsg+0x642/0xb30 [ 222.079469][ T8656] ? skb_put+0x11b/0x210 [ 222.079492][ T8656] netlink_sendmsg+0x805/0xb30 [ 222.079536][ T8656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.079572][ T8656] ? aa_sock_msg_perm+0x94/0x160 [ 222.079602][ T8656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.079626][ T8656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.079659][ T8656] __sock_sendmsg+0x219/0x270 [ 222.079690][ T8656] ____sys_sendmsg+0x505/0x830 [ 222.079718][ T8656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.079751][ T8656] ? import_iovec+0x74/0xa0 [ 222.079785][ T8656] ___sys_sendmsg+0x21f/0x2a0 [ 222.079810][ T8656] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.079873][ T8656] ? __fget_files+0x2a/0x420 [ 222.079892][ T8656] ? __fget_files+0x3a0/0x420 [ 222.079926][ T8656] __x64_sys_sendmsg+0x19b/0x260 [ 222.079951][ T8656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.079985][ T8656] ? __pfx_ksys_write+0x10/0x10 [ 222.080013][ T8656] ? rcu_is_watching+0x15/0xb0 [ 222.080051][ T8656] ? do_syscall_64+0xbe/0x3b0 [ 222.080087][ T8656] do_syscall_64+0xfa/0x3b0 [ 222.080116][ T8656] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.080144][ T8656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.080165][ T8656] ? clear_bhb_loop+0x60/0xb0 [ 222.080191][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.080212][ T8656] RIP: 0033:0x7f922938ebe9 [ 222.080231][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.080250][ T8656] RSP: 002b:00007f922a181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.080273][ T8656] RAX: ffffffffffffffda RBX: 00007f92295b5fa0 RCX: 00007f922938ebe9 [ 222.080289][ T8656] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 222.080302][ T8656] RBP: 00007f922a181090 R08: 0000000000000000 R09: 0000000000000000 [ 222.080315][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.080327][ T8656] R13: 00007f92295b6038 R14: 00007f92295b5fa0 R15: 00007ffebe26ee08 [ 222.080361][ T8656] [ 222.463680][ T8647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.679530][ T8665] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 223.076677][ T8665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.099016][ T8681] FAULT_INJECTION: forcing a failure. [ 223.099016][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 223.151640][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.7.700 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 223.151673][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.151686][ T8681] Call Trace: [ 223.151694][ T8681] [ 223.151703][ T8681] dump_stack_lvl+0x189/0x250 [ 223.151731][ T8681] ? __pfx____ratelimit+0x10/0x10 [ 223.151762][ T8681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.151783][ T8681] ? __pfx__printk+0x10/0x10 [ 223.151816][ T8681] ? __pfx___might_resched+0x10/0x10 [ 223.151853][ T8681] should_fail_ex+0x414/0x560 [ 223.151891][ T8681] should_failslab+0xa8/0x100 [ 223.151914][ T8681] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 223.151947][ T8681] ? __alloc_skb+0x112/0x2d0 [ 223.151984][ T8681] __alloc_skb+0x112/0x2d0 [ 223.152020][ T8681] netlink_sendmsg+0x5c6/0xb30 [ 223.152062][ T8681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.152097][ T8681] ? aa_sock_msg_perm+0x94/0x160 [ 223.152127][ T8681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.152150][ T8681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.152202][ T8681] __sock_sendmsg+0x219/0x270 [ 223.152234][ T8681] ____sys_sendmsg+0x505/0x830 [ 223.152268][ T8681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.152299][ T8681] ? import_iovec+0x74/0xa0 [ 223.152341][ T8681] ___sys_sendmsg+0x21f/0x2a0 [ 223.152367][ T8681] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.152430][ T8681] ? __fget_files+0x2a/0x420 [ 223.152451][ T8681] ? __fget_files+0x3a0/0x420 [ 223.152483][ T8681] __x64_sys_sendmsg+0x19b/0x260 [ 223.152510][ T8681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.152544][ T8681] ? __pfx_ksys_write+0x10/0x10 [ 223.152573][ T8681] ? rcu_is_watching+0x15/0xb0 [ 223.152612][ T8681] ? do_syscall_64+0xbe/0x3b0 [ 223.152649][ T8681] do_syscall_64+0xfa/0x3b0 [ 223.152680][ T8681] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.152710][ T8681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.152731][ T8681] ? clear_bhb_loop+0x60/0xb0 [ 223.152758][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.152779][ T8681] RIP: 0033:0x7f52e7f8ebe9 [ 223.152797][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.152816][ T8681] RSP: 002b:00007f52e8e7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.152842][ T8681] RAX: ffffffffffffffda RBX: 00007f52e81b6090 RCX: 00007f52e7f8ebe9 [ 223.152869][ T8681] RDX: 0000000004008094 RSI: 0000200000001200 RDI: 0000000000000008 [ 223.152883][ T8681] RBP: 00007f52e8e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.152896][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.152908][ T8681] R13: 00007f52e81b6128 R14: 00007f52e81b6090 R15: 00007ffd9bca97e8 [ 223.152941][ T8681] [ 223.458428][ T8676] syzkaller0: entered promiscuous mode [ 223.464484][ T8676] syzkaller0: entered allmulticast mode [ 223.911050][ T8694] ieee802154 phy0 wpan0: encryption failed: -90 [ 223.929039][ T8694] __nla_validate_parse: 2 callbacks suppressed [ 223.929060][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.9.704'. [ 223.944652][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.9.704'. [ 223.953586][ T8694] netlink: 'syz.9.704': attribute type 12 has an invalid length. [ 223.961359][ T8694] netlink: 'syz.9.704': attribute type 14 has an invalid length. [ 224.035840][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.9.704'. [ 224.044951][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.9.704'. [ 224.862365][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'. [ 224.884508][ T8690] tipc: Enabled bearer , priority 0 [ 224.901309][ T8672] tipc: Resetting bearer [ 224.979540][ T51] Bluetooth: hci4: link tx timeout [ 224.985853][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.996508][ T5845] Bluetooth: hci4: link tx timeout [ 225.001735][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.010764][ T5845] Bluetooth: hci4: link tx timeout [ 225.016252][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.024989][ T5845] Bluetooth: hci4: link tx timeout [ 225.030171][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.040464][ T5845] Bluetooth: hci4: link tx timeout [ 225.045852][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.053722][ T5845] Bluetooth: hci4: link tx timeout [ 225.058897][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.075448][ T5845] Bluetooth: hci4: link tx timeout [ 225.080729][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.088752][ T5845] Bluetooth: hci4: link tx timeout [ 225.094078][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.101777][ T5845] Bluetooth: hci4: link tx timeout [ 225.107065][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.595951][ T8672] tipc: Disabling bearer [ 225.725817][ T8695] bridge0: port 1(vlan3) entered blocking state [ 225.738861][ T8695] bridge0: port 1(vlan3) entered disabled state [ 225.746254][ T8695] vlan3: entered allmulticast mode [ 225.751737][ T8695] bridge0: entered allmulticast mode [ 225.776615][ T8695] vlan3: left allmulticast mode [ 225.806676][ T8695] bridge0: left allmulticast mode [ 225.872077][ T8703] tipc: Enabling of bearer rejected, failed to enable media [ 226.087354][ T8721] FAULT_INJECTION: forcing a failure. [ 226.087354][ T8721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.101091][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.7.711 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 226.101122][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.101134][ T8721] Call Trace: [ 226.101142][ T8721] [ 226.101151][ T8721] dump_stack_lvl+0x189/0x250 [ 226.101179][ T8721] ? __pfx____ratelimit+0x10/0x10 [ 226.101209][ T8721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.101231][ T8721] ? __pfx__printk+0x10/0x10 [ 226.101258][ T8721] ? __might_fault+0xb0/0x130 [ 226.101302][ T8721] should_fail_ex+0x414/0x560 [ 226.101340][ T8721] _copy_from_user+0x2d/0xb0 [ 226.101371][ T8721] ___sys_sendmsg+0x158/0x2a0 [ 226.101396][ T8721] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.101459][ T8721] ? __fget_files+0x2a/0x420 [ 226.101479][ T8721] ? __fget_files+0x3a0/0x420 [ 226.101511][ T8721] __x64_sys_sendmsg+0x19b/0x260 [ 226.101537][ T8721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.101570][ T8721] ? __pfx_ksys_write+0x10/0x10 [ 226.101598][ T8721] ? rcu_is_watching+0x15/0xb0 [ 226.101637][ T8721] ? do_syscall_64+0xbe/0x3b0 [ 226.101673][ T8721] do_syscall_64+0xfa/0x3b0 [ 226.101702][ T8721] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.101732][ T8721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.101751][ T8721] ? clear_bhb_loop+0x60/0xb0 [ 226.101775][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.101795][ T8721] RIP: 0033:0x7f52e7f8ebe9 [ 226.101813][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.101832][ T8721] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.101855][ T8721] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 226.101870][ T8721] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 226.101883][ T8721] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 226.101895][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.101907][ T8721] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 226.101940][ T8721] [ 226.467424][ T8727] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 226.727993][ T8738] FAULT_INJECTION: forcing a failure. [ 226.727993][ T8738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.747697][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.7.715 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 226.747728][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.747740][ T8738] Call Trace: [ 226.747748][ T8738] [ 226.747757][ T8738] dump_stack_lvl+0x189/0x250 [ 226.747783][ T8738] ? __pfx____ratelimit+0x10/0x10 [ 226.747813][ T8738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.747834][ T8738] ? __pfx__printk+0x10/0x10 [ 226.747862][ T8738] ? fs_reclaim_acquire+0x7d/0x100 [ 226.747893][ T8738] should_fail_ex+0x414/0x560 [ 226.747930][ T8738] prepare_alloc_pages+0x213/0x610 [ 226.747960][ T8738] __alloc_frozen_pages_noprof+0x123/0x370 [ 226.747988][ T8738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.748030][ T8738] alloc_pages_bulk_noprof+0x560/0x710 [ 226.748059][ T8738] ? alloc_pages_noprof+0xbe/0x190 [ 226.748096][ T8738] kasan_populate_vmalloc+0xba/0x1a0 [ 226.748131][ T8738] alloc_vmap_area+0xd51/0x1490 [ 226.748179][ T8738] ? __pfx_alloc_vmap_area+0x10/0x10 [ 226.748211][ T8738] ? __kasan_kmalloc+0x93/0xb0 [ 226.748243][ T8738] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 226.748275][ T8738] ? __sys_bpf+0x60f/0x870 [ 226.748313][ T8738] ? __get_vm_area_node+0x13f/0x300 [ 226.748345][ T8738] ? dev_map_alloc+0x146/0x540 [ 226.748366][ T8738] __get_vm_area_node+0x1f8/0x300 [ 226.748405][ T8738] __vmalloc_node_range_noprof+0x301/0x12f0 [ 226.748427][ T8738] ? dev_map_alloc+0x146/0x540 [ 226.748477][ T8738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.748498][ T8738] ? rcu_is_watching+0x15/0xb0 [ 226.748533][ T8738] ? trace_kmalloc+0x1f/0xd0 [ 226.748561][ T8738] ? __kmalloc_node_noprof+0x293/0x4e0 [ 226.748591][ T8738] ? bpf_map_area_alloc+0x64/0x180 [ 226.748627][ T8738] bpf_map_area_alloc+0x12d/0x180 [ 226.748660][ T8738] ? dev_map_alloc+0x146/0x540 [ 226.748684][ T8738] dev_map_alloc+0x146/0x540 [ 226.748711][ T8738] map_create+0xaa3/0x1310 [ 226.748746][ T8738] ? security_bpf+0x7e/0x300 [ 226.748775][ T8738] __sys_bpf+0x60f/0x870 [ 226.748807][ T8738] ? __pfx___sys_bpf+0x10/0x10 [ 226.748852][ T8738] ? ksys_write+0x22a/0x250 [ 226.748885][ T8738] ? __pfx_ksys_write+0x10/0x10 [ 226.748925][ T8738] __x64_sys_bpf+0x7c/0x90 [ 226.748952][ T8738] do_syscall_64+0xfa/0x3b0 [ 226.748984][ T8738] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.749012][ T8738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.749033][ T8738] ? clear_bhb_loop+0x60/0xb0 [ 226.749059][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.749079][ T8738] RIP: 0033:0x7f52e7f8ebe9 [ 226.749097][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.749116][ T8738] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.749140][ T8738] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 226.749155][ T8738] RDX: 000000000000001d RSI: 0000200000000580 RDI: 0000000000000000 [ 226.749169][ T8738] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 226.749182][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.749195][ T8738] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 226.749229][ T8738] [ 227.096215][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 227.310312][ T8748] netlink: 388 bytes leftover after parsing attributes in process `syz.4.718'. [ 227.444752][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 227.463751][ T8747] netlink: 'syz.0.716': attribute type 13 has an invalid length. [ 227.471541][ T8747] netlink: 'syz.0.716': attribute type 17 has an invalid length. [ 227.497084][ T8756] netlink: 388 bytes leftover after parsing attributes in process `syz.8.720'. [ 227.559348][ T8747] 8021q: adding VLAN 0 to HW filter on device à [ 227.566911][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.719'. [ 227.581685][ T8747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.636689][ T8759] bridge1: entered promiscuous mode [ 227.642400][ T8759] bridge1: entered allmulticast mode [ 228.228342][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.724'. [ 228.346136][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 90 seconds [ 228.349928][ T8776] FAULT_INJECTION: forcing a failure. [ 228.349928][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 228.357166][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 228.369805][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.7.726 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 228.369834][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.369847][ T8776] Call Trace: [ 228.369855][ T8776] [ 228.369864][ T8776] dump_stack_lvl+0x189/0x250 [ 228.369891][ T8776] ? __pfx____ratelimit+0x10/0x10 [ 228.369925][ T8776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.369949][ T8776] ? __pfx__printk+0x10/0x10 [ 228.369987][ T8776] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 228.370037][ T8776] should_fail_ex+0x414/0x560 [ 228.370093][ T8776] should_failslab+0xa8/0x100 [ 228.370118][ T8776] ? __pfx_ip6_dst_gc+0x10/0x10 [ 228.370140][ T8776] kmem_cache_alloc_noprof+0x73/0x3c0 [ 228.370184][ T8776] ? dst_alloc+0x105/0x170 [ 228.370214][ T8776] ? __pfx_ip6_dst_gc+0x10/0x10 [ 228.370239][ T8776] dst_alloc+0x105/0x170 [ 228.370274][ T8776] ip6_pol_route+0xa21/0x1180 [ 228.370300][ T8776] ? ip6_pol_route+0x162/0x1180 [ 228.370332][ T8776] ? __pfx_ip6_pol_route+0x10/0x10 [ 228.370369][ T8776] ? ip6_compressed_string+0xa9e/0xb70 [ 228.370417][ T8776] ? __pfx_ip6_compressed_string+0x10/0x10 [ 228.370459][ T8776] ? process_measurement+0x1640/0x1a40 [ 228.370513][ T8776] fib6_rule_lookup+0x1fc/0x6f0 [ 228.370545][ T8776] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 228.370572][ T8776] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 228.370616][ T8776] ? dev_get_by_index_rcu+0xf4/0x110 [ 228.370654][ T8776] ip6_route_output_flags+0x364/0x5d0 [ 228.370682][ T8776] ? ip6_route_output_flags+0x2e/0x5d0 [ 228.370714][ T8776] ip6_dst_lookup_tail+0x1ae/0x1510 [ 228.370761][ T8776] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 228.370802][ T8776] ? sk_dst_check+0x25/0x480 [ 228.370839][ T8776] ? sk_dst_check+0x25/0x480 [ 228.370868][ T8776] ? sk_dst_check+0x30e/0x480 [ 228.370905][ T8776] ip6_sk_dst_lookup_flow+0x730/0x980 [ 228.370939][ T8776] ? udpv6_sendmsg+0x1656/0x24b0 [ 228.370974][ T8776] udpv6_sendmsg+0x183b/0x24b0 [ 228.371022][ T8776] ? __pfx_udplite_getfrag+0x10/0x10 [ 228.371058][ T8776] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 228.371095][ T8776] ? __lock_acquire+0xab9/0xd20 [ 228.371151][ T8776] ? __local_bh_enable_ip+0x12d/0x1c0 [ 228.371192][ T8776] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 228.371237][ T8776] ? inet_send_prepare+0x1b9/0x270 [ 228.371270][ T8776] ? inet_send_prepare+0x1b9/0x270 [ 228.371304][ T8776] ? inet6_sendmsg+0xe4/0x120 [ 228.371331][ T8776] __sock_sendmsg+0xe5/0x270 [ 228.371368][ T8776] __sys_sendto+0x3bd/0x520 [ 228.371409][ T8776] ? __pfx___sys_sendto+0x10/0x10 [ 228.371445][ T8776] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 228.371498][ T8776] ? __fget_files+0x3a0/0x420 [ 228.371536][ T8776] ? ksys_write+0x22a/0x250 [ 228.371573][ T8776] ? __pfx_ksys_write+0x10/0x10 [ 228.371602][ T8776] ? rcu_is_watching+0x15/0xb0 [ 228.371646][ T8776] __x64_sys_sendto+0xde/0x100 [ 228.371689][ T8776] do_syscall_64+0xfa/0x3b0 [ 228.371723][ T8776] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.371756][ T8776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.371781][ T8776] ? clear_bhb_loop+0x60/0xb0 [ 228.371810][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.371834][ T8776] RIP: 0033:0x7f52e7f8ebe9 [ 228.371855][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.371877][ T8776] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.371903][ T8776] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 228.371921][ T8776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.371934][ T8776] RBP: 00007f52e8e9d090 R08: 0000200000000180 R09: 000000000000001c [ 228.371951][ T8776] R10: 00000000040000c0 R11: 0000000000000246 R12: 0000000000000001 [ 228.371964][ T8776] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 228.372002][ T8776] [ 228.775951][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 90 seconds [ 228.786968][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 90 seconds [ 228.939329][ T8775] syz_tun: entered allmulticast mode [ 228.956284][ T8784] netlink: 10 bytes leftover after parsing attributes in process `syz.9.728'. [ 228.996851][ T8770] syz_tun: left allmulticast mode [ 229.217013][ T8788] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 229.419590][ T8804] netlink: 'syz.9.730': attribute type 10 has an invalid length. [ 229.427634][ T8802] netlink: 'syz.4.733': attribute type 11 has an invalid length. [ 229.582939][ T8804] team0: Device dummy0 is up. Set it down before adding it as a team port [ 229.962919][ T8815] netlink: 388 bytes leftover after parsing attributes in process `syz.0.736'. [ 230.346885][ T8825] syz_tun: entered allmulticast mode [ 230.387613][ T8823] syz_tun: left allmulticast mode [ 230.715548][ T8837] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 230.939714][ T8840] ÿÿÿÿÿÿ²DœL‰ [ 231.447490][ T8854] dump_stack_lvl+0x189/0x250 [ 231.447517][ T8854] ? __pfx____ratelimit+0x10/0x10 [ 231.447548][ T8854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.447570][ T8854] ? __pfx__printk+0x10/0x10 [ 231.447596][ T8854] ? __might_fault+0xb0/0x130 [ 231.447640][ T8854] should_fail_ex+0x414/0x560 [ 231.447678][ T8854] _copy_from_user+0x2d/0xb0 [ 231.447709][ T8854] __sys_sendto+0x25c/0x520 [ 231.447745][ T8854] ? __pfx___sys_sendto+0x10/0x10 [ 231.447774][ T8854] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 231.447820][ T8854] ? __fget_files+0x3a0/0x420 [ 231.447860][ T8854] ? ksys_write+0x22a/0x250 [ 231.447893][ T8854] ? __pfx_ksys_write+0x10/0x10 [ 231.447919][ T8854] ? rcu_is_watching+0x15/0xb0 [ 231.447958][ T8854] __x64_sys_sendto+0xde/0x100 [ 231.447995][ T8854] do_syscall_64+0xfa/0x3b0 [ 231.448024][ T8854] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.448054][ T8854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.448074][ T8854] ? clear_bhb_loop+0x60/0xb0 [ 231.448099][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.448118][ T8854] RIP: 0033:0x7f52e7f8ebe9 [ 231.448137][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.448155][ T8854] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.448178][ T8854] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 231.448194][ T8854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.448206][ T8854] RBP: 00007f52e8e9d090 R08: 0000200000000180 R09: 000000000000001c [ 231.448220][ T8854] R10: 00000000040000c0 R11: 0000000000000246 R12: 0000000000000001 [ 231.448233][ T8854] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 231.448267][ T8854] [ 231.661681][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 231.704876][ T8861] netlink: 244 bytes leftover after parsing attributes in process `syz.9.752'. [ 232.322410][ T8876] batadv_slave_1: entered promiscuous mode [ 232.410890][ T8883] netlink: 72 bytes leftover after parsing attributes in process `syz.7.754'. [ 232.712377][ T8886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.822419][ T8869] batadv_slave_1: left promiscuous mode [ 236.209786][ T8894] netlink: 388 bytes leftover after parsing attributes in process `syz.4.755'. [ 236.650346][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.8.762'. [ 237.054916][ T8925] Bluetooth: MGMT ver 1.23 [ 237.494733][ T8940] tipc: Started in network mode [ 237.514933][ T8940] tipc: Node identity f67dee9de629, cluster identity 4711 [ 237.540621][ T8940] tipc: Enabled bearer , priority 0 [ 237.576477][ T8941] syzkaller0: entered promiscuous mode [ 237.582701][ T8941] syzkaller0: entered allmulticast mode [ 237.614624][ T8943] hsr0: left promiscuous mode [ 237.840519][ T8940] tipc: Resetting bearer [ 237.887198][ T8951] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.772'. [ 237.999797][ T8937] tipc: Resetting bearer [ 238.064761][ T8937] tipc: Disabling bearer [ 238.362525][ T8969] netlink: 'syz.8.778': attribute type 1 has an invalid length. [ 238.490215][ T8969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.556657][ T8975] netlink: 'syz.9.779': attribute type 10 has an invalid length. [ 238.791881][ T8969] veth5: entered promiscuous mode [ 238.809102][ T8969] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 238.818658][ T8975] team0: Device dummy0 is up. Set it down before adding it as a team port [ 238.877605][ T8979] bond4: (slave veth5): Releasing backup interface [ 239.361738][ T8999] batadv0: entered promiscuous mode [ 239.367668][ T8999] vlan2: entered promiscuous mode [ 239.429576][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 239.516259][ T9007] bridge0: entered promiscuous mode [ 239.549156][ T9007] macsec1: entered promiscuous mode [ 239.817189][ T9022] netlink: 104 bytes leftover after parsing attributes in process `syz.7.794'. [ 240.045933][ T9028] netlink: 'syz.7.795': attribute type 1 has an invalid length. [ 240.231547][ T9035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.287314][ T9039] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 240.381804][ T9028] veth5: entered promiscuous mode [ 240.395129][ T9028] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 240.523835][ T9035] bond2: (slave veth5): Releasing backup interface [ 240.549112][ T9049] netlink: 172 bytes leftover after parsing attributes in process `syz.9.800'. [ 240.567023][ T9043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.829300][ T9039] veth9: entered promiscuous mode [ 240.854754][ T9039] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 241.019999][ T9048] bond0: (slave bond4): Releasing backup interface [ 241.047053][ T9048] bond5: (slave veth9): Releasing backup interface [ 242.533096][ T9102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.946167][ T9109] trusted_key: syz.8.817 sent an empty control message without MSG_MORE. [ 244.320152][ T9130] bond0: entered promiscuous mode [ 244.367125][ T9130] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 244.385569][ T9130] hsr1: entered allmulticast mode [ 244.404249][ T9130] bond0: entered allmulticast mode [ 244.431049][ T9130] batadv0: entered allmulticast mode [ 244.462248][ T9130] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 244.522964][ T9130] bond0: left promiscuous mode [ 244.973652][ T9119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.034457][ T9154] FAULT_INJECTION: forcing a failure. [ 245.034457][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 245.051707][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.7.830 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 245.051736][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.051761][ T9154] Call Trace: [ 245.051769][ T9154] [ 245.051777][ T9154] dump_stack_lvl+0x189/0x250 [ 245.051809][ T9154] ? __pfx____ratelimit+0x10/0x10 [ 245.051838][ T9154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.051860][ T9154] ? __pfx__printk+0x10/0x10 [ 245.051887][ T9154] ? __lock_acquire+0xab9/0xd20 [ 245.051925][ T9154] should_fail_ex+0x414/0x560 [ 245.051962][ T9154] should_failslab+0xa8/0x100 [ 245.051983][ T9154] kmem_cache_alloc_noprof+0x73/0x3c0 [ 245.052012][ T9154] ? skb_clone+0x212/0x3a0 [ 245.052040][ T9154] skb_clone+0x212/0x3a0 [ 245.052065][ T9154] __netlink_deliver_tap+0x404/0x850 [ 245.052109][ T9154] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.052140][ T9154] netlink_deliver_tap+0x19c/0x1b0 [ 245.052170][ T9154] netlink_unicast+0x7fa/0x9e0 [ 245.052207][ T9154] ? __pfx_netlink_unicast+0x10/0x10 [ 245.052240][ T9154] ? netlink_sendmsg+0x642/0xb30 [ 245.052266][ T9154] ? skb_put+0x11b/0x210 [ 245.052288][ T9154] netlink_sendmsg+0x805/0xb30 [ 245.052327][ T9154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.052360][ T9154] ? aa_sock_msg_perm+0x94/0x160 [ 245.052388][ T9154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.052410][ T9154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.052441][ T9154] __sock_sendmsg+0x219/0x270 [ 245.052471][ T9154] ____sys_sendmsg+0x505/0x830 [ 245.052497][ T9154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.052529][ T9154] ? import_iovec+0x74/0xa0 [ 245.052561][ T9154] ___sys_sendmsg+0x21f/0x2a0 [ 245.052584][ T9154] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.052662][ T9154] ? __fget_files+0x2a/0x420 [ 245.052682][ T9154] ? __fget_files+0x3a0/0x420 [ 245.052736][ T9154] __x64_sys_sendmsg+0x19b/0x260 [ 245.052761][ T9154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.052801][ T9154] ? __pfx_ksys_write+0x10/0x10 [ 245.052839][ T9154] ? do_syscall_64+0xbe/0x3b0 [ 245.052874][ T9154] do_syscall_64+0xfa/0x3b0 [ 245.052904][ T9154] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.052933][ T9154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.052955][ T9154] ? clear_bhb_loop+0x60/0xb0 [ 245.052981][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.053001][ T9154] RIP: 0033:0x7f52e7f8ebe9 [ 245.053020][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.053039][ T9154] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.053062][ T9154] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 245.053077][ T9154] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 245.053090][ T9154] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 245.053103][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.053115][ T9154] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 245.053150][ T9154] [ 245.397699][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.830'. [ 245.422498][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.831'. [ 245.441848][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.831'. [ 245.501583][ T9157] syzkaller0: entered promiscuous mode [ 245.510920][ T9157] syzkaller0: entered allmulticast mode [ 245.570203][ T9154] vlan2: entered promiscuous mode [ 245.581507][ T9154] gretap0: entered promiscuous mode [ 246.040592][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.839'. [ 246.115609][ T9185] netlink: 104 bytes leftover after parsing attributes in process `syz.8.839'. [ 246.180897][ T9189] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 246.230358][ T9189] netlink: 'syz.7.837': attribute type 12 has an invalid length. [ 246.258739][ T9189] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.837'. [ 247.478968][ T9166] tipc: Enabled bearer , priority 0 [ 247.520557][ T9156] tipc: Resetting bearer [ 247.692132][ T9194] netlink: 'syz.8.841': attribute type 12 has an invalid length. [ 247.727446][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 247.896644][ T9156] tipc: Disabling bearer [ 247.953444][ T9197] vlan2: entered promiscuous mode [ 247.968766][ T9197] gretap0: entered promiscuous mode [ 248.590233][ T9221] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 248.667469][ T9221] team0: Device dummy0 is up. Set it down before adding it as a team port [ 248.887947][ T9230] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 248.922691][ T9230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.848'. [ 249.017318][ T9233] netlink: 'syz.8.849': attribute type 12 has an invalid length. [ 249.082955][ T9233] netlink: 211856 bytes leftover after parsing attributes in process `syz.8.849'. [ 249.142096][ T9214] syz.0.847 (9214) used greatest stack depth: 17624 bytes left [ 249.760294][ T9252] bond0: entered promiscuous mode [ 249.798939][ T9252] gretap1: entered promiscuous mode [ 249.808133][ T9252] batadv0: entered promiscuous mode [ 249.833566][ T9252] hsr1: entered allmulticast mode [ 249.856125][ T9252] bond0: entered allmulticast mode [ 249.882400][ T9252] gretap1: entered allmulticast mode [ 249.890517][ T9252] batadv0: entered allmulticast mode [ 249.909873][ T9252] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 249.928378][ T9252] bond0: left promiscuous mode [ 249.942602][ T9252] gretap1: left promiscuous mode [ 249.954724][ T9252] batadv0: left promiscuous mode [ 250.387578][ T9271] netlink: 'syz.7.860': attribute type 31 has an invalid length. [ 251.147668][ T9289] netlink: 'syz.4.862': attribute type 303 has an invalid length. [ 251.214573][ T9291] bridge_slave_1: entered promiscuous mode [ 251.269733][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 251.281066][ T9291] bridge_slave_1: left promiscuous mode [ 251.917424][ T9307] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 251.974848][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.9.872'. [ 252.577305][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 252.600858][ T9327] batadv0: entered promiscuous mode [ 252.614194][ T9327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.631947][ T9327] batadv0: left promiscuous mode [ 252.723058][ T9329] vlan2: entered promiscuous mode [ 252.738518][ T9329] vlan2: entered allmulticast mode [ 252.749377][ T9329] hsr_slave_1: entered allmulticast mode [ 252.886596][ T9336] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 252.910079][ T9336] netlink: 'syz.7.878': attribute type 12 has an invalid length. [ 252.920144][ T9336] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.878'. [ 252.950650][ T9338] syz.0.879 (9338) used obsolete PPPIOCDETACH ioctl [ 253.716180][ T9362] netlink: 388 bytes leftover after parsing attributes in process `syz.8.887'. [ 254.022928][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 254.685260][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz.8.893'. [ 254.697327][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz.8.893'. [ 254.706527][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz.8.893'. [ 254.712898][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.8.893'. [ 255.365155][ T9411] netlink: 'syz.9.898': attribute type 10 has an invalid length. [ 255.598168][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.8.902'. [ 255.867024][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875028][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.976071][ T9411] team0: Device dummy0 is up. Set it down before adding it as a team port [ 256.030164][ T9417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.554149][ T9439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.452523][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 120 seconds [ 258.792366][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 258.803529][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 120 seconds [ 258.832719][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 120 seconds [ 259.851873][ T9452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.321820][ T9469] netlink: 'syz.7.920': attribute type 11 has an invalid length. [ 260.349864][ T9470] netlink: 'syz.8.919': attribute type 30 has an invalid length. [ 260.626764][ T9483] __nla_validate_parse: 2 callbacks suppressed [ 260.626786][ T9483] netlink: 388 bytes leftover after parsing attributes in process `syz.0.923'. [ 261.155513][ T9487] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 261.164425][ T9487] netlink: 'syz.7.926': attribute type 12 has an invalid length. [ 261.179475][ T9487] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.926'. [ 261.221736][ T9501] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 261.266064][ T9498] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 261.313435][ T9498] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.928'. [ 261.677532][ T9503] netlink: 'syz.8.929': attribute type 12 has an invalid length. [ 261.710485][ T9503] netlink: 211856 bytes leftover after parsing attributes in process `syz.8.929'. [ 261.862662][ T34] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 261.977083][ T9510] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.930'. [ 261.986605][ T9510] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 262.017024][ T9510] openvswitch: netlink: Message has 8454 unknown bytes. [ 262.432449][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.9.931'. [ 262.503908][ T9525] bond0: entered promiscuous mode [ 262.511054][ T9525] batadv0: entered promiscuous mode [ 262.518030][ T9525] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 262.538992][ T9525] hsr1: entered allmulticast mode [ 262.549042][ T9525] bond0: entered allmulticast mode [ 262.576158][ T9525] batadv0: entered allmulticast mode [ 262.582091][ T9525] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 262.592925][ T9525] bond0: left promiscuous mode [ 262.620150][ T9525] batadv0: left promiscuous mode [ 263.084843][ T9542] netlink: 'syz.4.935': attribute type 11 has an invalid length. [ 263.350199][ T9552] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 263.533666][ T9552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.598415][ T9566] sctp: [Deprecated]: syz.4.939 (pid 9566) Use of int in maxseg socket option. [ 263.598415][ T9566] Use struct sctp_assoc_value instead [ 263.645043][ T9556] bond2: (slave ip6gretap1): making interface the new active one [ 263.714847][ T9556] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 263.789093][ T9559] veth3: entered promiscuous mode [ 263.828149][ T9559] bond2: (slave veth3): Enslaving as an active interface with a down link [ 264.053263][ T9556] erspan0: entered allmulticast mode [ 264.069565][ T9556] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 264.164672][ T9572] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 264.295828][ T9581] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 264.331454][ T9581] netlink: 'syz.7.942': attribute type 12 has an invalid length. [ 264.372424][ T9581] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.942'. [ 264.405010][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 264.440251][ T9592] FAULT_INJECTION: forcing a failure. [ 264.440251][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 264.467296][ T9588] syz.4.944: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 264.529490][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.0.945 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 264.529523][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.529540][ T9592] Call Trace: [ 264.529549][ T9592] [ 264.529558][ T9592] dump_stack_lvl+0x189/0x250 [ 264.529586][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 264.529626][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.529649][ T9592] ? __pfx__printk+0x10/0x10 [ 264.529678][ T9592] ? __pfx___might_resched+0x10/0x10 [ 264.529710][ T9592] ? fs_reclaim_acquire+0x7d/0x100 [ 264.529738][ T9592] should_fail_ex+0x414/0x560 [ 264.529777][ T9592] should_failslab+0xa8/0x100 [ 264.529806][ T9592] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.529853][ T9592] ? __alloc_skb+0x112/0x2d0 [ 264.529895][ T9592] __alloc_skb+0x112/0x2d0 [ 264.529931][ T9592] alloc_skb_with_frags+0xca/0x890 [ 264.529951][ T9592] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 264.529995][ T9592] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 264.530032][ T9592] sock_alloc_send_pskb+0x857/0x990 [ 264.530082][ T9592] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 264.530110][ T9592] ? ipv6_addr_label+0x2f/0x240 [ 264.530145][ T9592] ? ipv6_addr_label+0x1b5/0x240 [ 264.530182][ T9592] __ip6_append_data+0x2b43/0x3f30 [ 264.530236][ T9592] ? __pfx_udplite_getfrag+0x10/0x10 [ 264.530283][ T9592] ? __pfx___ip6_append_data+0x10/0x10 [ 264.530312][ T9592] ? ip6_setup_cork+0xa1c/0x10e0 [ 264.530352][ T9592] ip6_make_skb+0x2ce/0x410 [ 264.530383][ T9592] ? __pfx_udplite_getfrag+0x10/0x10 [ 264.530414][ T9592] ? __pfx_ip6_make_skb+0x10/0x10 [ 264.530440][ T9592] ? sk_dst_check+0x25/0x480 [ 264.530485][ T9592] ? udpv6_sendmsg+0x1656/0x24b0 [ 264.530514][ T9592] udpv6_sendmsg+0x1b78/0x24b0 [ 264.530554][ T9592] ? __pfx_udplite_getfrag+0x10/0x10 [ 264.530587][ T9592] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 264.530620][ T9592] ? __lock_acquire+0xab9/0xd20 [ 264.530678][ T9592] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.530715][ T9592] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 264.530752][ T9592] ? inet_send_prepare+0x1b9/0x270 [ 264.530778][ T9592] ? inet_send_prepare+0x1b9/0x270 [ 264.530807][ T9592] ? inet6_sendmsg+0xe4/0x120 [ 264.530828][ T9592] __sock_sendmsg+0xe5/0x270 [ 264.530858][ T9592] __sys_sendto+0x3bd/0x520 [ 264.530922][ T9592] ? __pfx___sys_sendto+0x10/0x10 [ 264.530952][ T9592] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 264.531006][ T9592] ? __fget_files+0x3a0/0x420 [ 264.531044][ T9592] ? ksys_write+0x22a/0x250 [ 264.531076][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 264.531103][ T9592] ? rcu_is_watching+0x15/0xb0 [ 264.531141][ T9592] __x64_sys_sendto+0xde/0x100 [ 264.531179][ T9592] do_syscall_64+0xfa/0x3b0 [ 264.531208][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.531237][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.531258][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 264.531283][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.531303][ T9592] RIP: 0033:0x7f922938ebe9 [ 264.531331][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.531351][ T9592] RSP: 002b:00007f922a181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.531374][ T9592] RAX: ffffffffffffffda RBX: 00007f92295b5fa0 RCX: 00007f922938ebe9 [ 264.531389][ T9592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.531401][ T9592] RBP: 00007f922a181090 R08: 0000200000000180 R09: 000000000000001c [ 264.531414][ T9592] R10: 00000000040000c0 R11: 0000000000000246 R12: 0000000000000001 [ 264.531427][ T9592] R13: 00007f92295b6038 R14: 00007f92295b5fa0 R15: 00007ffebe26ee08 [ 264.531461][ T9592] [ 264.651418][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.4.944 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 264.651454][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.651469][ T9588] Call Trace: [ 264.651479][ T9588] [ 264.651489][ T9588] dump_stack_lvl+0x189/0x250 [ 264.651524][ T9588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.651551][ T9588] ? __pfx__printk+0x10/0x10 [ 264.651581][ T9588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.651609][ T9588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.651640][ T9588] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 264.651670][ T9588] warn_alloc+0x214/0x310 [ 264.651695][ T9588] ? stack_depot_save_flags+0x40/0x900 [ 264.651726][ T9588] ? __pfx_warn_alloc+0x10/0x10 [ 264.651753][ T9588] ? kasan_save_track+0x4f/0x80 [ 264.651787][ T9588] ? xskq_create+0x56/0x170 [ 264.651817][ T9588] ? xsk_init_queue+0xb0/0x110 [ 264.651845][ T9588] ? xsk_setsockopt+0x4dc/0x8d0 [ 264.651871][ T9588] ? do_sock_setsockopt+0x17c/0x1b0 [ 264.651891][ T9588] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 264.651910][ T9588] ? do_syscall_64+0xfa/0x3b0 [ 264.651946][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.652000][ T9588] __vmalloc_node_range_noprof+0x125/0x12f0 [ 264.652074][ T9588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 264.652107][ T9588] ? __kasan_kmalloc+0x93/0xb0 [ 264.652148][ T9588] vmalloc_user_noprof+0xad/0xf0 [ 264.652172][ T9588] ? xskq_create+0xbf/0x170 [ 264.652207][ T9588] xskq_create+0xbf/0x170 [ 264.652250][ T9588] xsk_init_queue+0xb0/0x110 [ 264.652286][ T9588] xsk_setsockopt+0x4dc/0x8d0 [ 264.652321][ T9588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.652353][ T9588] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.652391][ T9588] ? aa_sock_opt_perm+0x74/0x110 [ 264.652427][ T9588] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 264.652454][ T9588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.652488][ T9588] do_sock_setsockopt+0x17c/0x1b0 [ 264.652518][ T9588] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.652551][ T9588] do_syscall_64+0xfa/0x3b0 [ 264.652586][ T9588] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.652620][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.652643][ T9588] ? clear_bhb_loop+0x60/0xb0 [ 264.652675][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.652698][ T9588] RIP: 0033:0x7f7148b8ebe9 [ 264.652721][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.652742][ T9588] RSP: 002b:00007f714999d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.652770][ T9588] RAX: ffffffffffffffda RBX: 00007f7148db5fa0 RCX: 00007f7148b8ebe9 [ 264.652789][ T9588] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 264.652803][ T9588] RBP: 00007f7148c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 264.652819][ T9588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.652835][ T9588] R13: 00007f7148db6038 R14: 00007f7148db5fa0 R15: 00007ffe9f4b4da8 [ 264.652874][ T9588] [ 264.652971][ T9588] Mem-Info: [ 265.192652][ T9588] active_anon:4822 inactive_anon:0 isolated_anon:0 [ 265.192652][ T9588] active_file:1967 inactive_file:39910 isolated_file:0 [ 265.192652][ T9588] unevictable:768 dirty:469 writeback:0 [ 265.192652][ T9588] slab_reclaimable:11003 slab_unreclaimable:118813 [ 265.192652][ T9588] mapped:31953 shmem:1393 pagetables:1100 [ 265.192652][ T9588] sec_pagetables:0 bounce:0 [ 265.192652][ T9588] kernel_misc_reclaimable:0 [ 265.192652][ T9588] free:1304248 free_pcp:18742 free_cma:0 [ 265.242560][ T9588] Node 0 active_anon:19288kB inactive_anon:0kB active_file:7868kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127812kB dirty:1876kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.305342][ T9588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.340693][ T9588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.371592][ T9588] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 265.378984][ T9588] Node 0 DMA32 free:1303432kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19144kB inactive_anon:0kB active_file:7868kB inactive_file:157588kB unevictable:1536kB writepending:1876kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:55464kB local_pcp:25964kB free_cma:0kB [ 265.412765][ T9588] lowmem_reserve[]: 0 0 1 1 1 [ 265.417643][ T9588] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 265.511557][ T9588] lowmem_reserve[]: 0 0 0 0 0 [ 265.530598][ T9588] Node 1 Normal free:3898952kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21184kB local_pcp:10912kB free_cma:0kB [ 265.660867][ T9588] lowmem_reserve[]: 0 0 0 0 0 [ 265.660964][ T9604] netlink: 'syz.7.949': attribute type 4 has an invalid length. [ 265.712427][ T9588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.751461][ T9588] Node 0 DMA32: 1091*4kB (UM) 475*8kB (UME) 228*16kB (UME) 238*32kB (UME) 61*64kB (UME) 18*128kB (UME) 16*256kB (UME) 12*512kB (UM) 12*1024kB (UM) 6*2048kB (UM) 304*4096kB (M) = 1305636kB [ 265.804603][ T9588] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 265.836684][ T9588] Node 1 Normal: 226*4kB (UE) 58*8kB (UME) 45*16kB (UME) 73*32kB (UME) 22*64kB (UME) 9*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898952kB [ 265.897891][ T9588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.923829][ T9588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.947969][ T9588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.977308][ T9588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.999322][ T9588] 44367 total pagecache pages [ 266.010048][ T9588] 0 pages in swap cache [ 266.024733][ T9588] Free swap = 124996kB [ 266.034716][ T9588] Total swap = 124996kB [ 266.049384][ T9588] 2097051 pages RAM [ 266.063661][ T9588] 0 pages HighMem/MovableOnly [ 266.075458][ T9588] 424872 pages reserved [ 266.103837][ T9588] 0 pages cma reserved [ 266.767258][ T9635] FAULT_INJECTION: forcing a failure. [ 266.767258][ T9635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.785613][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.7.958 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 266.785645][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.785658][ T9635] Call Trace: [ 266.785667][ T9635] [ 266.785676][ T9635] dump_stack_lvl+0x189/0x250 [ 266.785704][ T9635] ? __pfx____ratelimit+0x10/0x10 [ 266.785735][ T9635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.785757][ T9635] ? __pfx__printk+0x10/0x10 [ 266.785786][ T9635] ? fs_reclaim_acquire+0x7d/0x100 [ 266.785819][ T9635] should_fail_ex+0x414/0x560 [ 266.785859][ T9635] prepare_alloc_pages+0x213/0x610 [ 266.785891][ T9635] __alloc_frozen_pages_noprof+0x123/0x370 [ 266.785922][ T9635] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.785967][ T9635] alloc_pages_bulk_noprof+0x560/0x710 [ 266.786000][ T9635] ? alloc_pages_noprof+0xbe/0x190 [ 266.786039][ T9635] kasan_populate_vmalloc+0xba/0x1a0 [ 266.786075][ T9635] alloc_vmap_area+0xd51/0x1490 [ 266.786133][ T9635] ? __pfx_alloc_vmap_area+0x10/0x10 [ 266.786166][ T9635] ? __kasan_kmalloc+0x93/0xb0 [ 266.786199][ T9635] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 266.786233][ T9635] ? __get_vm_area_node+0x13f/0x300 [ 266.786275][ T9635] ? array_map_alloc+0x28b/0x700 [ 266.786297][ T9635] __get_vm_area_node+0x1f8/0x300 [ 266.786338][ T9635] __vmalloc_node_range_noprof+0x301/0x12f0 [ 266.786360][ T9635] ? array_map_alloc+0x28b/0x700 [ 266.786392][ T9635] ? aa_get_newest_label+0xf7/0x5d0 [ 266.786445][ T9635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.786471][ T9635] ? apparmor_capable+0x137/0x1b0 [ 266.786502][ T9635] ? bpf_lsm_capable+0x9/0x20 [ 266.786532][ T9635] ? security_capable+0x7e/0x2e0 [ 266.786564][ T9635] bpf_map_area_alloc+0x12d/0x180 [ 266.786603][ T9635] ? array_map_alloc+0x28b/0x700 [ 266.786628][ T9635] array_map_alloc+0x28b/0x700 [ 266.786649][ T9635] ? bpf_map_meta_alloc+0x421/0x780 [ 266.786686][ T9635] array_of_map_alloc+0x55/0xc0 [ 266.786719][ T9635] map_create+0xaa3/0x1310 [ 266.786755][ T9635] ? security_bpf+0x7e/0x300 [ 266.786783][ T9635] __sys_bpf+0x60f/0x870 [ 266.786816][ T9635] ? __pfx___sys_bpf+0x10/0x10 [ 266.786861][ T9635] ? ksys_write+0x22a/0x250 [ 266.786894][ T9635] ? __pfx_ksys_write+0x10/0x10 [ 266.786923][ T9635] ? rcu_is_watching+0x15/0xb0 [ 266.786965][ T9635] __x64_sys_bpf+0x7c/0x90 [ 266.786993][ T9635] do_syscall_64+0xfa/0x3b0 [ 266.787024][ T9635] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.787054][ T9635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.787076][ T9635] ? clear_bhb_loop+0x60/0xb0 [ 266.787108][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.787129][ T9635] RIP: 0033:0x7f52e7f8ebe9 [ 266.787149][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.787168][ T9635] RSP: 002b:00007f52e8e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.787192][ T9635] RAX: ffffffffffffffda RBX: 00007f52e81b5fa0 RCX: 00007f52e7f8ebe9 [ 266.787208][ T9635] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 266.787222][ T9635] RBP: 00007f52e8e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 266.787235][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.787248][ T9635] R13: 00007f52e81b6038 R14: 00007f52e81b5fa0 R15: 00007ffd9bca97e8 [ 266.787281][ T9635] [ 267.142913][ T9638] lo: entered promiscuous mode [ 267.147746][ T9638] lo: entered allmulticast mode [ 267.174488][ T9638] tunl0: entered promiscuous mode [ 267.211219][ T9638] tunl0: entered allmulticast mode [ 267.218370][ T9638] gre0: entered promiscuous mode [ 267.224004][ T9638] gre0: entered allmulticast mode [ 267.230587][ T9638] gretap0: entered promiscuous mode [ 267.240337][ T9638] gretap0: entered allmulticast mode [ 267.247419][ T9638] erspan0: entered promiscuous mode [ 267.253178][ T9638] erspan0: entered allmulticast mode [ 267.260502][ T9638] ip_vti0: entered promiscuous mode [ 267.266702][ T9638] ip_vti0: entered allmulticast mode [ 267.274254][ T9638] ip6_vti0: entered promiscuous mode [ 267.279705][ T9638] ip6_vti0: entered allmulticast mode [ 267.287335][ T9638] sit0: entered promiscuous mode [ 267.292785][ T9638] sit0: entered allmulticast mode [ 267.299174][ T9638] ip6tnl0: entered promiscuous mode [ 267.311490][ T9638] ip6tnl0: entered allmulticast mode [ 267.318470][ T9638] ip6gre0: entered promiscuous mode [ 267.324209][ T9638] ip6gre0: entered allmulticast mode [ 267.330823][ T9638] syz_tun: entered promiscuous mode [ 267.336774][ T9638] syz_tun: entered allmulticast mode [ 267.383398][ T9638] ip6gretap0: entered promiscuous mode [ 267.388983][ T9638] ip6gretap0: entered allmulticast mode [ 267.401710][ T9638] bridge0: entered promiscuous mode [ 267.407725][ T9638] bridge0: entered allmulticast mode [ 267.429115][ T9646] netlink: 'syz.7.964': attribute type 1 has an invalid length. [ 267.824104][ T9649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.995668][ T9648] veth7: entered promiscuous mode [ 268.035029][ T9648] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 268.231614][ T9652] bond3: (slave veth7): Releasing backup interface [ 268.241468][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.8.969'. [ 268.411272][ T9666] tipc: Enabled bearer , priority 0 [ 268.443789][ T9672] syzkaller0: entered promiscuous mode [ 268.469936][ T9672] syzkaller0: entered allmulticast mode [ 268.559101][ T9666] tipc: Resetting bearer [ 268.597498][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.7.973'. [ 268.607943][ T9682] netlink: 324 bytes leftover after parsing attributes in process `syz.0.974'. [ 268.662615][ T9683] netlink: 212 bytes leftover after parsing attributes in process `syz.8.975'. [ 268.766826][ T9687] netlink: 'syz.9.971': attribute type 10 has an invalid length. [ 268.817554][ T9687] team0: Device dummy0 is up. Set it down before adding it as a team port [ 268.911839][ T9689] netlink: 5636 bytes leftover after parsing attributes in process `syz.8.977'. [ 269.112864][ T9665] tipc: Resetting bearer [ 269.233063][ T9665] tipc: Disabling bearer [ 269.421549][ T9702] FAULT_INJECTION: forcing a failure. [ 269.421549][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 269.485659][ T9702] CPU: 1 UID: 0 PID: 9702 Comm: syz.9.984 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 269.485699][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.485712][ T9702] Call Trace: [ 269.485720][ T9702] [ 269.485729][ T9702] dump_stack_lvl+0x189/0x250 [ 269.485756][ T9702] ? __pfx____ratelimit+0x10/0x10 [ 269.485786][ T9702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.485808][ T9702] ? __pfx__printk+0x10/0x10 [ 269.485870][ T9702] should_fail_ex+0x414/0x560 [ 269.485911][ T9702] should_failslab+0xa8/0x100 [ 269.485935][ T9702] __kmalloc_cache_noprof+0x70/0x3d0 [ 269.485967][ T9702] ? sctp_add_bind_addr+0x8c/0x370 [ 269.486003][ T9702] sctp_add_bind_addr+0x8c/0x370 [ 269.486038][ T9702] sctp_copy_local_addr_list+0x30b/0x4e0 [ 269.486072][ T9702] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 269.486102][ T9702] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 269.486137][ T9702] ? sctp_v4_is_any+0x35/0x60 [ 269.486166][ T9702] ? sctp_copy_one_addr+0x93/0x360 [ 269.486200][ T9702] sctp_bind_addr_copy+0xb3/0x3c0 [ 269.486231][ T9702] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 269.486262][ T9702] sctp_connect_new_asoc+0x2e0/0x690 [ 269.486288][ T9702] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 269.486308][ T9702] ? __local_bh_enable_ip+0x12d/0x1c0 [ 269.486349][ T9702] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 269.486376][ T9702] ? security_sctp_bind_connect+0x7e/0x2e0 [ 269.486404][ T9702] sctp_sendmsg+0x155c/0x2810 [ 269.486453][ T9702] ? __pfx_sctp_sendmsg+0x10/0x10 [ 269.486492][ T9702] ? aa_sk_perm+0x81e/0x950 [ 269.486524][ T9702] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.486554][ T9702] ? sock_rps_record_flow+0x19/0x410 [ 269.486586][ T9702] ? inet_sendmsg+0x2f4/0x370 [ 269.486618][ T9702] __sock_sendmsg+0x19c/0x270 [ 269.486650][ T9702] ____sys_sendmsg+0x505/0x830 [ 269.486680][ T9702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.486721][ T9702] ? import_iovec+0x74/0xa0 [ 269.486756][ T9702] ___sys_sendmsg+0x21f/0x2a0 [ 269.486783][ T9702] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.486849][ T9702] ? __fget_files+0x2a/0x420 [ 269.486870][ T9702] ? __fget_files+0x3a0/0x420 [ 269.486903][ T9702] __x64_sys_sendmsg+0x19b/0x260 [ 269.486930][ T9702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.486965][ T9702] ? __pfx_ksys_write+0x10/0x10 [ 269.486994][ T9702] ? rcu_is_watching+0x15/0xb0 [ 269.487048][ T9702] ? do_syscall_64+0xbe/0x3b0 [ 269.487085][ T9702] do_syscall_64+0xfa/0x3b0 [ 269.487113][ T9702] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.487142][ T9702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.487163][ T9702] ? clear_bhb_loop+0x60/0xb0 [ 269.487188][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.487208][ T9702] RIP: 0033:0x7f83f938ebe9 [ 269.487227][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.487245][ T9702] RSP: 002b:00007f83fa245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.487268][ T9702] RAX: ffffffffffffffda RBX: 00007f83f95b5fa0 RCX: 00007f83f938ebe9 [ 269.487284][ T9702] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 269.487297][ T9702] RBP: 00007f83fa245090 R08: 0000000000000000 R09: 0000000000000000 [ 269.487309][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.487322][ T9702] R13: 00007f83f95b6038 R14: 00007f83f95b5fa0 R15: 00007ffe7e0cedc8 [ 269.487355][ T9702] [ 269.940766][ T9714] netlink: 'syz.9.986': attribute type 10 has an invalid length. [ 269.960537][ T9714] team0: Device dummy0 is up. Set it down before adding it as a team port [ 270.114655][ T9718] netlink: 'syz.7.987': attribute type 21 has an invalid length. [ 270.218714][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.988'. [ 270.428439][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.7.987'. [ 270.539069][ T9730] syzkaller1: entered allmulticast mode [ 271.045129][ T9740] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 271.071952][ T9740] netlink: 'syz.9.991': attribute type 12 has an invalid length. [ 271.092381][ T9740] netlink: 211856 bytes leftover after parsing attributes in process `syz.9.991'. [ 271.430216][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.993'. [ 271.527654][ T9753] batadv_slave_0: entered promiscuous mode [ 271.552616][ T9754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.993'. [ 271.601898][ T9754] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 272.395837][ T9775] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 272.420747][ T9775] team0: Device macvtap0 is already an upper device of the team interface [ 272.769908][ T9791] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 272.782331][ T9791] openvswitch: netlink: Message has 1 unknown bytes. [ 273.170786][ T9803] bond2: (slave erspan0): Releasing active interface [ 273.179161][ T9803] ip6gretap1: entered promiscuous mode [ 273.207046][ T9803] bond0: (slave gretap1): Releasing active interface [ 273.214079][ T9803] gretap1: left allmulticast mode [ 273.230803][ T9803] bond2: (slave ip6gretap1): Releasing active interface [ 273.238019][ T9803] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 72:b1:c6:4c:81:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.255925][ T9807] __nla_validate_parse: 6 callbacks suppressed [ 273.255945][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1014'. [ 273.272149][ T9803] ip6gretap1: left promiscuous mode [ 273.283531][ T9803] bond2: (slave veth3): Releasing active interface [ 273.492472][ T9809] nbd7: detected capacity change from 0 to 63 [ 273.502586][ T9813] block nbd7: NBD_DISCONNECT [ 273.509375][ T9813] block nbd7: Disconnected due to user request. [ 273.516755][ T9813] block nbd7: shutting down sockets [ 273.524827][ C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.533251][ C1] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.534219][ C0] Buffer I/O error on dev nbd7, logical block 0, async page read [ 273.542978][ C1] Buffer I/O error on dev nbd7, logical block 1, async page read [ 273.558538][ C1] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.567660][ C1] Buffer I/O error on dev nbd7, logical block 2, async page read [ 273.568784][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1015'. [ 273.575633][ C1] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.575666][ C1] Buffer I/O error on dev nbd7, logical block 3, async page read [ 273.588090][ T6198] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.599862][ T9809] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 273.627742][ T6198] Buffer I/O error on dev nbd7, logical block 0, async page read [ 273.636767][ T6198] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.640512][ T9809] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1015'. [ 273.655070][ T6198] Buffer I/O error on dev nbd7, logical block 1, async page read [ 273.655257][ T6198] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.655286][ T6198] Buffer I/O error on dev nbd7, logical block 2, async page read [ 273.655491][ T6198] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.679710][ T9819] bond0: entered promiscuous mode [ 273.695873][ T6198] Buffer I/O error on dev nbd7, logical block 3, async page read [ 273.706754][ T9819] batadv0: entered promiscuous mode [ 273.714949][ T6198] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.725552][ T9819] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 273.735570][ T6198] Buffer I/O error on dev nbd7, logical block 0, async page read [ 273.744445][ T9819] hsr1: entered allmulticast mode [ 273.749823][ T6198] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.759813][ T9819] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 273.766822][ T6198] Buffer I/O error on dev nbd7, logical block 1, async page read [ 273.778109][ T9819] bond0: left promiscuous mode [ 273.784649][ T9819] batadv0: left promiscuous mode [ 273.816179][ T6198] ldm_validate_partition_table(): Disk read failed. [ 273.836138][ T6198] Dev nbd7: unable to read RDB block 0 [ 273.855384][ T6198] nbd7: unable to read partition table [ 273.869126][ T9809] vlan2: entered promiscuous mode [ 273.874330][ T9809] bridge0: entered promiscuous mode [ 273.879910][ T9809] vlan2: entered allmulticast mode [ 273.885307][ T9809] bridge0: entered allmulticast mode [ 273.919575][ T6198] ldm_validate_partition_table(): Disk read failed. [ 273.944106][ T6198] Dev nbd7: unable to read RDB block 0 [ 273.964561][ T6198] nbd7: unable to read partition table [ 274.996327][ T9862] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 275.220086][ T9838] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 275.235345][ T9838] geneve2: left promiscuous mode [ 275.245336][ T9838] geneve2: left allmulticast mode [ 275.266629][ T9838] veth3: left promiscuous mode [ 275.271960][ T9838] bridge1: left promiscuous mode [ 275.277387][ T9838] bridge1: left allmulticast mode [ 275.291303][ T9838] veth5: left promiscuous mode [ 275.298175][ T9838] veth7: left promiscuous mode [ 275.303667][ T9838] vlan2: left promiscuous mode [ 275.308542][ T9838] bridge0: left promiscuous mode [ 275.313800][ T9838] vlan2: left allmulticast mode [ 275.318817][ T9838] bridge0: left allmulticast mode [ 275.324660][ T9849] syz_tun: entered allmulticast mode [ 275.374413][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.413269][ T9841] syz_tun: left allmulticast mode [ 275.439043][ T49] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.480738][ T49] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.518472][ T49] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.676902][ T9879] FAULT_INJECTION: forcing a failure. [ 275.676902][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 275.717321][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.9.1035 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 275.717354][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.717377][ T9879] Call Trace: [ 275.717385][ T9879] [ 275.717394][ T9879] dump_stack_lvl+0x189/0x250 [ 275.717424][ T9879] ? __pfx____ratelimit+0x10/0x10 [ 275.717456][ T9879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.717478][ T9879] ? __pfx__printk+0x10/0x10 [ 275.717507][ T9879] ? __pfx___might_resched+0x10/0x10 [ 275.717540][ T9879] ? fs_reclaim_acquire+0x7d/0x100 [ 275.717569][ T9879] should_fail_ex+0x414/0x560 [ 275.717609][ T9879] should_failslab+0xa8/0x100 [ 275.717630][ T9879] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.717662][ T9879] ? _copy_from_iter+0x24c/0x16f0 [ 275.717686][ T9879] ? __alloc_skb+0x112/0x2d0 [ 275.717724][ T9879] __alloc_skb+0x112/0x2d0 [ 275.717761][ T9879] _sctp_make_chunk+0x5e/0x430 [ 275.717798][ T9879] sctp_make_datafrag_empty+0x122/0x230 [ 275.717833][ T9879] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 275.717867][ T9879] ? sctp_user_addto_chunk+0xa8/0x240 [ 275.717904][ T9879] sctp_datamsg_from_user+0x726/0xef0 [ 275.717955][ T9879] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 275.717974][ T9879] ? __asan_memcpy+0x40/0x70 [ 275.718010][ T9879] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 275.718050][ T9879] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 275.718085][ T9879] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 275.718109][ T9879] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 275.718130][ T9879] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 275.718149][ T9879] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 275.718171][ T9879] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 275.718199][ T9879] ? security_sctp_bind_connect+0x7e/0x2e0 [ 275.718227][ T9879] sctp_sendmsg+0x1941/0x2810 [ 275.718276][ T9879] ? __pfx_sctp_sendmsg+0x10/0x10 [ 275.718313][ T9879] ? aa_sk_perm+0x81e/0x950 [ 275.718345][ T9879] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.718382][ T9879] ? sock_rps_record_flow+0x19/0x410 [ 275.718413][ T9879] ? inet_sendmsg+0x2f4/0x370 [ 275.718437][ T9879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.718465][ T9879] __sock_sendmsg+0x19c/0x270 [ 275.718510][ T9879] __sys_sendto+0x3bd/0x520 [ 275.718546][ T9879] ? __pfx___sys_sendto+0x10/0x10 [ 275.718575][ T9879] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 275.718622][ T9879] ? __fget_files+0x3a0/0x420 [ 275.718654][ T9879] ? ksys_write+0x22a/0x250 [ 275.718685][ T9879] ? __pfx_ksys_write+0x10/0x10 [ 275.718712][ T9879] ? rcu_is_watching+0x15/0xb0 [ 275.718750][ T9879] __x64_sys_sendto+0xde/0x100 [ 275.718785][ T9879] do_syscall_64+0xfa/0x3b0 [ 275.718814][ T9879] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.718842][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.718863][ T9879] ? clear_bhb_loop+0x60/0xb0 [ 275.718889][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.718909][ T9879] RIP: 0033:0x7f83f938ebe9 [ 275.718928][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.718946][ T9879] RSP: 002b:00007f83fa245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.718970][ T9879] RAX: ffffffffffffffda RBX: 00007f83f95b5fa0 RCX: 00007f83f938ebe9 [ 275.718986][ T9879] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 275.719000][ T9879] RBP: 00007f83fa245090 R08: 000020000005ffe4 R09: 000000000000001c [ 275.719014][ T9879] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 275.719026][ T9879] R13: 00007f83f95b6038 R14: 00007f83f95b5fa0 R15: 00007ffe7e0cedc8 [ 275.719060][ T9879] [ 276.075702][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 276.296016][ T9886] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 276.318640][ T9886] team0: Device dummy0 is up. Set it down before adding it as a team port [ 276.480651][ T9902] bond0: entered promiscuous mode [ 276.488489][ T9902] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 276.499286][ T9902] hsr1: entered allmulticast mode [ 276.505599][ T9902] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 276.516207][ T9902] bond0: left promiscuous mode [ 276.624436][ T9911] netlink: 'syz.9.1038': attribute type 10 has an invalid length. [ 276.729892][ T9911] team0: Device dummy0 is up. Set it down before adding it as a team port [ 276.760030][ T9906] bond0: entered promiscuous mode [ 276.770139][ T9906] batadv0: entered promiscuous mode [ 276.781807][ T9906] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 276.792175][ T9906] hsr1: entered allmulticast mode [ 276.799828][ T9906] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 276.808799][ T9906] bond0: left promiscuous mode [ 276.815075][ T9906] batadv0: left promiscuous mode [ 277.131566][ T9890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.172401][ T9914] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1043'. [ 277.642199][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 277.675896][ T9939] vlan2: entered promiscuous mode [ 277.685435][ T9939] team0: entered promiscuous mode [ 277.795808][ T9945] netlink: 344 bytes leftover after parsing attributes in process `syz.9.1052'. [ 278.059355][ T9958] netlink: 'syz.8.1053': attribute type 12 has an invalid length. [ 278.067941][ T9958] netlink: 211856 bytes leftover after parsing attributes in process `syz.8.1053'. [ 278.541487][ T9969] vlan4: entered promiscuous mode [ 278.547333][ T9969] macvtap0: entered promiscuous mode [ 278.876882][ T9961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.161657][ T9986] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1061'. [ 283.547173][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 283.553380][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 288.522369][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 150 seconds [ 288.822380][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 288.833697][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 150 seconds [ 288.862377][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 150 seconds [ 317.313739][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.320123][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.602376][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 180 seconds [ 318.852794][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 180 seconds [ 318.863953][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 180 seconds [ 318.892356][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 180 seconds [ 348.715957][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 210 seconds [ 348.879438][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 210 seconds [ 348.902510][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 210 seconds [ 348.956363][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 210 seconds [ 350.102390][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 378.752690][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.759047][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.769039][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 240 seconds [ 378.932345][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 240 seconds [ 378.943701][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 240 seconds [ 378.972769][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 240 seconds [ 408.842561][ T125] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 270 seconds [ 408.955915][ T125] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 270 seconds [ 408.972324][ T125] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 270 seconds [ 409.053022][ T125] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 270 seconds [ 428.672570][ T31] INFO: task syz.4.1047:9932 blocked for more than 143 seconds. [ 428.680283][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 428.792227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.800964][ T31] task:syz.4.1047 state:D stack:25096 pid:9932 tgid:9932 ppid:5841 task_flags:0x400040 flags:0x00004000 [ 429.012374][ T31] Call Trace: [ 429.015720][ T31] [ 429.018705][ T31] __schedule+0x1737/0x4d30 [ 429.112241][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.117173][ T31] ? schedule+0x165/0x360 [ 429.121548][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.282362][ T31] ? __pfx___schedule+0x10/0x10 [ 429.287314][ T31] ? schedule+0x91/0x360 [ 429.291611][ T31] schedule+0x165/0x360 [ 429.402253][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.407789][ T31] __mutex_lock+0x7e3/0x1340 [ 429.512276][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 429.517825][ T31] ? __mutex_lock+0x5b6/0x1340 [ 429.612263][ T31] ? pipe_release+0x48/0x330 [ 429.616931][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.622030][ T31] pipe_release+0x48/0x330 [ 429.772242][ T31] ? __pfx_pipe_release+0x10/0x10 [ 429.777350][ T31] __fput+0x449/0xa70 [ 429.781380][ T31] task_work_run+0x1d4/0x260 [ 429.922231][ T31] ? __pfx_task_work_run+0x10/0x10 [ 429.927435][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 430.032315][ T31] exit_to_user_mode_loop+0xec/0x110 [ 430.037705][ T31] do_syscall_64+0x2bd/0x3b0 [ 430.142256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.147672][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.262436][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.267201][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.382273][ T31] RIP: 0033:0x7f7148b8ebe9 [ 430.386749][ T31] RSP: 002b:00007ffe9f4b4f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 430.502380][ T31] RAX: 0000000000000000 RBX: 00007f7148db7da0 RCX: 00007f7148b8ebe9 [ 430.510414][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 430.666295][ T31] RBP: 00007f7148db7da0 R08: 0000000000000400 R09: 0000000c9f4b51ff [ 430.742673][ T31] R10: 00007f7148db7cb0 R11: 0000000000000246 R12: 0000000000043f21 [ 430.750763][ T31] R13: 00007f7148db6090 R14: ffffffffffffffff R15: 00007ffe9f4b5020 [ 430.912265][ T31] [ 430.915388][ T31] [ 430.915388][ T31] Showing all locks held in the system: [ 431.022269][ T31] 1 lock held by khungtaskd/31: [ 431.027176][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.195898][ T31] 2 locks held by udevd/5206: [ 431.200651][ T31] 2 locks held by getty/5597: [ 431.282339][ T31] #0: ffff8880340490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.392413][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 431.502237][ T31] 1 lock held by sshd-session/5823: [ 431.507502][ T31] 1 lock held by syz-executor/5824: [ 431.602289][ T31] 1 lock held by syz-executor/5841: [ 431.607548][ T31] 1 lock held by udevd/5883: [ 431.612156][ T31] #0: ffff88802562a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 431.711643][ T31] 2 locks held by udevd/5884: [ 431.842394][ T31] 1 lock held by udevd/6198: [ 431.847045][ T31] 1 lock held by syz-executor/7065: [ 431.952306][ T31] 1 lock held by syz.4.1047/9932: [ 431.957402][ T31] #0: ffff888078ad5868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 432.089001][ T31] 1 lock held by syz.4.1047/9934: [ 432.122254][ T31] #0: ffff888078ad5868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 432.132017][ T31] 1 lock held by syz.7.1064/9994: [ 432.262303][ T31] 1 lock held by syz-executor/9996: [ 432.267865][ T31] [ 432.270297][ T31] ============================================= [ 432.270297][ T31] [ 432.392306][ T31] NMI backtrace for cpu 1 [ 432.392334][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 432.392361][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.392376][ T31] Call Trace: [ 432.392384][ T31] [ 432.392394][ T31] dump_stack_lvl+0x189/0x250 [ 432.392426][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.392450][ T31] ? __pfx__printk+0x10/0x10 [ 432.392492][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 432.392523][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.392554][ T31] ? __pfx__printk+0x10/0x10 [ 432.392586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.392622][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 432.392653][ T31] watchdog+0xf93/0xfe0 [ 432.392690][ T31] ? watchdog+0x1de/0xfe0 [ 432.392727][ T31] kthread+0x70e/0x8a0 [ 432.392756][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.392785][ T31] ? __pfx_kthread+0x10/0x10 [ 432.392812][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.392840][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.392869][ T31] ? __pfx_kthread+0x10/0x10 [ 432.392895][ T31] ret_from_fork+0x3fc/0x770 [ 432.392939][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.392980][ T31] ? __switch_to_asm+0x39/0x70 [ 432.393003][ T31] ? __switch_to_asm+0x33/0x70 [ 432.393027][ T31] ? __pfx_kthread+0x10/0x10 [ 432.393053][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.393096][ T31] [ 432.393104][ T31] Sending NMI from CPU 1 to CPUs 0: [ 432.541881][ C0] NMI backtrace for cpu 0 [ 432.541900][ C0] CPU: 0 UID: 0 PID: 6198 Comm: udevd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 432.541921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.541933][ C0] RIP: 0010:kasan_check_range+0x79/0x2c0 [ 432.541955][ C0] Code: 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df <4d> 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 [ 432.541972][ C0] RSP: 0018:ffffc90000007fa8 EFLAGS: 00000803 [ 432.541989][ C0] RAX: ffffffff81665901 RBX: dffffc0000000001 RCX: ffffffff816659c7 [ 432.542004][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa07af0 [ 432.542015][ C0] RBP: 0000000000000000 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 432.542028][ C0] R10: dffffc0000000000 R11: fffffbfff1f40f5e R12: 0000000000000000 [ 432.542041][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1f40f5e [ 432.542052][ C0] FS: 00007f433367e880(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 432.542068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.542080][ C0] CR2: 00007ffd9bca96c0 CR3: 00000000611c8000 CR4: 00000000003526f0 [ 432.542095][ C0] Call Trace: [ 432.542102][ C0] [ 432.542112][ C0] __sysvec_irq_work+0xe7/0x3d0 [ 432.542139][ C0] sysvec_irq_work+0x9e/0xc0 [ 432.542165][ C0] [ 432.542172][ C0] [ 432.542179][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 432.542200][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 432.542222][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 92 a2 8b 03 66 [ 432.542237][ C0] RSP: 0018:ffffc9000dee7b08 EFLAGS: 00000246 [ 432.542252][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 432.542264][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 432.542275][ C0] RBP: ffffc9000dee7be0 R08: ffffc9000dee7b67 R09: 1ffff92001bdcf6c [ 432.542288][ C0] R10: dffffc0000000000 R11: fffff52001bdcf6d R12: ffff8880b8631401 [ 432.542302][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b86314b0 [ 432.542323][ C0] arch_irq_work_raise+0x6d/0x80 [ 432.542348][ C0] __irq_work_queue_local+0x1d7/0x550 [ 432.542377][ C0] ? __pfx___irq_work_queue_local+0x10/0x10 [ 432.542405][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 432.542433][ C0] irq_work_queue+0x99/0x140 [ 432.542459][ C0] bpf_send_signal_common+0x3b4/0x540 [ 432.542486][ C0] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 432.542517][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 432.542546][ C0] ? __lock_acquire+0xab9/0xd20 [ 432.542572][ C0] bpf_send_signal+0x1d/0x30 [ 432.542589][ C0] bpf_prog_7ba5217f62dcd359+0x41/0x49 [ 432.542606][ C0] bpf_trace_run2+0x281/0x4b0 [ 432.542627][ C0] ? __might_fault+0xb0/0x130 [ 432.542659][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 432.542681][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 432.542706][ C0] ? __might_fault+0xb0/0x130 [ 432.542732][ C0] ? trace_sys_enter+0x74/0x100 [ 432.542757][ C0] __bpf_trace_sys_enter+0x38/0x60 [ 432.542783][ C0] trace_sys_enter+0xb0/0x100 [ 432.542808][ C0] syscall_trace_enter+0xf9/0x160 [ 432.542834][ C0] do_syscall_64+0xd3/0x3b0 [ 432.542862][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.542879][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.542898][ C0] ? clear_bhb_loop+0x60/0xb0 [ 432.542919][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.542936][ C0] RIP: 0033:0x7f4332ea7407 [ 432.542950][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 432.542965][ C0] RSP: 002b:00007ffd4ad034f0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8 [ 432.542982][ C0] RAX: ffffffffffffffda RBX: 00007f433367e880 RCX: 00007f4332ea7407 [ 432.542995][ C0] RDX: 0000000000000004 RSI: 00007ffd4ad03580 RDI: 0000000000000004 [ 432.543006][ C0] RBP: 000056070c418910 R08: 0000000000000000 R09: 0000000000000000 [ 432.543017][ C0] R10: ffffffffffffffff R11: 0000000000000202 R12: 00007ffd4ad0358c [ 432.543030][ C0] R13: 00007ffd4ad03580 R14: 0000000000000000 R15: 0000000000000001 [ 432.543050][ C0] [ 434.292249][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 434.299261][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 434.310755][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.320866][ T31] Call Trace: [ 434.324168][ T31] [ 434.327120][ T31] dump_stack_lvl+0x99/0x250 [ 434.331745][ T31] ? __asan_memcpy+0x40/0x70 [ 434.336368][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.341593][ T31] ? __pfx__printk+0x10/0x10 [ 434.346236][ T31] panic+0x2db/0x790 [ 434.350174][ T31] ? __pfx_panic+0x10/0x10 [ 434.354622][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 434.359422][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 434.365610][ T31] watchdog+0xfd2/0xfe0 [ 434.369792][ T31] ? watchdog+0x1de/0xfe0 [ 434.374140][ T31] kthread+0x70e/0x8a0 [ 434.378235][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.382938][ T31] ? __pfx_kthread+0x10/0x10 [ 434.387537][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.392751][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.397966][ T31] ? __pfx_kthread+0x10/0x10 [ 434.402576][ T31] ret_from_fork+0x3fc/0x770 [ 434.407215][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.412351][ T31] ? __switch_to_asm+0x39/0x70 [ 434.417123][ T31] ? __switch_to_asm+0x33/0x70 [ 434.421914][ T31] ? __pfx_kthread+0x10/0x10 [ 434.426515][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.431304][ T31] [ 434.434707][ T31] Kernel Offset: disabled [ 434.439033][ T31] Rebooting in 86400 seconds..