last executing test programs: 4.798614061s ago: executing program 4 (id=1931): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) 4.691723773s ago: executing program 4 (id=1934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010802040000000000000b00000d28ff3a178ac40300b9d098a62db160ad7be5fbea6b7ba0f4", @ANYRES32=r5, @ANYBLOB="28005080110001004abe725c86ec8ce9c3a8f66b0000000005000200050000000800030001ac0f00"], 0x44}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r6], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0, 0x200000}, 0xa0) unshare(0xa040000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r8 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0x28c19c4be41a64e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x7, 0x2, 0x5, 0x153}, {0x0, 0x1, 0x1, 0x2, 0x3af4, 0xfffffffe}, 0xc76, 0xff, 0x13cb}}]}}]}, 0x6c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000010000000000000000feffffff0000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) sendmsg$NFT_BATCH(r2, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fff0000000014aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001409c400050200000000000000000002d58838000391000000"], 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.544861616s ago: executing program 0 (id=1955): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x80ff, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x2, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0) 2.360325656s ago: executing program 3 (id=1958): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112140000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711273000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r0}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000058c0)={0x29, @rand_addr=0x64010101, 0x4e23, 0x0, 'nq\x00', 0x6, 0x0, 0x80}, 0x2c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001140)={r9, 0xc020}, &(0x7f00000011c0)=0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, &(0x7f0000000580), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x5c, 0x80, 0xc, 0x10}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x7, 0x0, [0x5, 0x1, 0x9, 0x4, 0x0, 0x0, 0x4, 0x8, 0x3, 0x7, 0x772c, 0x2c, 0x6, 0x8001, 0xabf, 0x2], 0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x9, 0xd, 0xfb8, '\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffff00], 'macsec0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2e, 0xd, 0x1, 0x39}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x5}, {0x0, 0x2, 0x4}, {0x2, 0x2, 0x5}, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r14 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x48, r13, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.346425545s ago: executing program 1 (id=1959): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f00000008200000040000", @ANYRES32, @ANYBLOB="ae55"], 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0xa, 0x3, 0x84) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@loopback, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x804, 0x2}, {}, 0x0, 0x6e6bb9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x5, 0x1, 0x0, 0x200}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000007c0)}, {0x0}, {0x0}], 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$cgroup_int(r2, &(0x7f0000000140)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async, rerun: 64) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000006c0)={0x3, 0x3}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001c80)={'erspan0\x00', &(0x7f0000001b80)={'syztnl2\x00', 0x0, 0x8, 0x7811, 0x6, 0x5, {{0x29, 0x4, 0x2, 0x16, 0xa4, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1, {[@generic={0x7, 0x5, "bbc253"}, @rr={0x7, 0x7, 0xa3, [@loopback]}, @lsrr={0x83, 0x1b, 0xf5, [@multicast2, @local, @empty, @private=0xa010102, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0xce, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1a4}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5a0}, {@local, 0xca}, {@empty, 0x32d1af56}, {@empty, 0x1}, {@rand_addr=0x64010100, 0xffff}]}, @timestamp={0x44, 0xc, 0xfe, 0x0, 0x2, [0x0, 0x3]}, @rr={0x7, 0xb, 0xaf, [@broadcast, @remote]}, @generic={0x44, 0xa, "1a935a1015f62715"}, @end, @end]}}}}}) (rerun: 64) sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000740)="f6ca168c16df2e27f44d7fe3f7f299c65fd9c9c352d63bb97e72a50d6234a64c034b3b236073fa2ecb19fc535b803e4b9dc1de14f6cbebff8121fccac765be89a2b3cd4a50ad5232bebcb9e8e2b3a41cd6de8b59960a641b", 0x58}], 0x1, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x98cf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x80}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b80)="b4f7b666bfb6f0671e9362edc32eac4730d201ca2f4d9e2e99ab08474e7266e59b4b280d87ffc6786fadd198ab5288ea10ccf70802876ac1fc5f2be8adc966f545e907fc84acd83bff1c5bf8b6878a17c39d5228eacc3884c17fb7899f3d26dfa91e12ed48be4dce77c5ae762747106a56e2d89fb0606b537c150b282dd71aa70f2fe6180dadabd47825a759a054f889886d48b0e7ebe5c159f03cdd111e9a991b3e017e2e2913c3f6c0678de133fafe31910401657e2e38203e614b5aab11c66b3922e7a9f8c254966f2d70424648ac330333c6ae82e5cefa546e8d9ddbea1c7dcd4e885827d527514722ca8bf122fa2b741c36a91957c55112a2a1e7e9267c25e1963c5f99116668ffa0a4d112a383afe49a9b6937d225a382881eb44a57701d3a5573c0d9218ee5eb42f5cecaea8026e6014ffbebe70b2cbac76be533a4c16d68fefa1d0beb64333c5aead55e485d3e852c912b2fc27c1d52760ba432f8c6809caf59be1641d8cfdb698eae852b475f65392805a7e10c897e6a2e5ec55608a55b93204f049b9e015f6673f353b2c78233d7e1d1dd3de545f45ee4038e961ea3d4230c3e0e2f327a88d53f51b96b95fd05b23374331b2be5f872e05d26b803d48a87cf18f1940e674833aecb3da303603199fcb16d4b999050eea0164fa87d537f067e02d1e359c92820878af0366a5bc86b10666d1ea11350c943c756b888b8b417cf03f36a051784d05f5bcfccda2141b774c8b8301ccb83a6e8c5fbb7f998e7b3ac91ad20fca74293bb2b531268f0360ce19ae7772dbbd8f42d13b0573b8735ea70309a8be76ccbb2c7f8833cbd64368e8ea195afcd280cd4f0de1ae1fd54f4eceb481c97e1107f3f3939517929998266dfa75d44da84d722b800146ac6938873c127cc1f50b95a161681e7b067d49d6495a7b9c698fe2d47143d5a48f7b0892f5c8eaa183d02a0ec156b8ea559bbf6fc0dd87792f1b23211747d789915b310f3fbf1c10292f0936e9a286d900fe6ac2a382f8345102373706086e6e5b2334649a6aa5c41c3bf37a98ef40ed931ea9b2fee69e8933d49060631a6258a51a95d4699397a3114617addaa77c255e919bcb67d4d322b8b4478d02a0a6c9637134428616d8b0dc78cf9f3e92f0ea8eafdcbae622f767c1a5015d03196156f8f363ebe6508700ec974dea3801f35aa82b0a36b938a885fdcf90e6d99b01f00619efa73ee28b3fc17ccc8b1a502819e91e2ee8f55231b423a63989ef38491c19763eff626b8c8eb2ac6c7cdf183eb9591ad94d76fac0fd74c0b81c5fc4a26a81dd0d39781a1921dfad559171d7386b7867ddd1b5b8b5126368f79ab9147645526f66b50ba23194f62cc1cc0c0faa8bff97aed38f8a3d2cd8b115bc2cd5f7f76366b79cc793ccb2246708ae663b438ad67e60a281a83e74286b81d1cad1c8b2c7c050da86efd991a0ec61e4558eb11ba87575c90bacc55a6160dd35b3bd030c52973a08bcf6ee24092d377279b68ae70f668ac40d9ceb9249d177a990a38d88cfc6a0349b03412cf4543709d5a21cc80cb58a14f25d2261121193e216ad6d7be6237c8736e87f48d7661c96ec8697df921a3566f3ba758cfc79a73b177a0ba7a3678969a20024317e97df753c94797f9b1cd6fd0910d30f5a702baf5e0a1da271cc69705080937f64317be48be8086e30c535e623917505f4606a949f63854830b7b69c96477233237b5cfb2e5e2c18defa95c4af71768f3d33aefd4c1d5646f5281edae60c4c32387e5277243b40fe74ad3cf0e743303632173b89e23befc2f5ef11567b6c59c254527a432883cc2e4e873011a80e58f8acd40d793c2d085266d984a57817ccfe897a97c6e84a9613fabd59dd9bb53b4f3640544d8ad814d60a33db253ea36107ce4d5c1098d18120976979af2b398c750184b49a2437fac1e29289e3a899f033b729cf7e9982d2bc0d81eed45c1a0b27fd1ef31f4793500b40d65cbb7ddc7b41f5bc18e5ce08548a4770126f8ca977f5e67ff4d28e9deb6272ff08bd5d9011cf96a85a63b14164b5cd7c0322b8f906814f0528458f9dd80e88107c74d8aec14682c0fb84e4c77d6e565fa0bbfec7fb95d96cf54c23776a458f0de9f8203bf0392b99a07e057ac6af51ce7595c5b6f9c0f2f09ab24bc695c2db71e6b51b00650fd387a8bd612a97583ac3b0c70f308ecd2b4bed3367aec91e8da53c3bc3e9935f257e901988d6b907ea05bd042fb544a5af9f26b49ce041f98aa25a216158675fa64eeeca78ce52eb447ae65cdd7d279963401f16e2618458f0e844008ef4cb3d5163791a28d5539337585b85907de45194846f733b9c8f2543479aabdb4a3e145534916cc5d27a6f61dbaa5a58596ec5237d65a9895b811440f7b4ad72cdc67c4a2d79da74ab65f827fd13fb0a7ff133e13a8a71012ebd4ad93a033a0b2831edf75bac14dc176d7a18bd77603f4e3bcdc039fc02fef06f20c5efb952cc23097a2db8d221d09ce70562660af319034b5ab95748fe78131d386bcb4ed61659266e026ed516aa4424c69801680a46801669704e2c3810e672d81fe160471e7163a23888371b8193b798192379ebad4a68d082c46bec26df2dbe3008e0a3107be78d2402165affdddeb6a6b7a34164918ea966d1c8d106589148ca55c151c9274f7bebed93479abe8fd2e02109ec0ee7fd78115eecb5472137ca7ccc0dd3ad5d6c6ddc3c4b57bdc1b089e2ad15265106896454b9722c34eaa884934cf0d90dc9513d027f8dfe8b1a7c288dca96dfe70f32d8010eb7ae126f6d588aa1e0cc850ab3b86da0b91403d3eacaccc81e5f4416503f0cfa6af3a83c22be506578f53caa802189d91fba1b438ab6a0d85f35fc3418ffea228b50cfcc0f5a047b2358832ad2e1f303bb0a4fdcd8eab46efe07cf2cea75633ab454b48242ace7048630a917c6992a6bc3010f8e54d937b09d6f1f1a174d0f2dc46a82fbd946a5f31baa27ad83847a33326166ed7e8f8cb59ea65a1a3cda7dbec452118590aa388d6cbe41d9a162311f8f3a0badb0cc1c8b2cd08247e47ac7c920fae663cd1d882c5cddd5a23712e6b168658c002911d029c02d88f2031bfd02f0d837ffbb4b3c3cde868ec8662fa34383fafa87c5fcff8999ce463562c47d219670500f736d10c1cb15c4b24c844b7a28d0836602a4a0e637713a796c584cdd13e4b093093e026773e999722ab563ae5730c6129b9489facfc15eab7fa3aeff72a9059c67dbae5585c203c2a0631d63fd000c35b4275718762dd8846eb42c7d84cc28fd27b214b7990930011ae1c11f4f907c11fc6b6a6e74b58ed4e586c3167eb2017eaf1ab8e1135982188444f5e15fa4f779f14baca0f624ad62f84cebc331ba848425da4adb8bb50f80783f4952c56e96465c38bba097b34e683321a05d4790207e85c0bd8cc24b51f5ea1cf2fed4b28eae0bd630f2080a283e82b9d7429d9f34b9be691ab0cce099607f271e035de0b616b651f2df8e43280d61cd017c148a538bd09052b0eb52e585a14eb21069212eefe2638e2abdda0dc22a5de3282f6001bb207f60aeb9e4dea6e738949824d1a6711cfbdb278dd4e012e68f7ee5ca8c1b7e972ed18ad3dd9abfd872232cedfdc381c4e59645357cd1369aa161d5020f7f698e3ed937d50b389c4cdc54d59188a003b7f48a2306ed1f904017dc3c02e7cc9ed05cc0d353b1601f067f6fe2d08a058c354ff308270f9d9b087e6771422f6106d405b6c009795f8044eb4096cd71876d6eda4948d35ae1f9f5eb79fda779e0e8f3433d41e130db05015d8d736e572e7547bd814aebe1556932f93ac76967ae67e4a1d95c9c3fa7bbc2fcfd19b3f48cb3394b1eb96716fad63afcd5d2656f7656c0feef6f9dc01cd97fa2ec80b610380457ed2b7f917daac9f06917d30b5f94fbfd6a8feaf8838c34d5110f4b9dbb603acd009930dc32d6d1b2d43b85705cd161bc4938b9ae0cad464299c2f2d0c513e16b96b86b492a02fd745593b99d4e0d46eed5b7616b0a2f1dcad62b8aa58575720e3f1510b91f7494e489a978ba421ba931ca5c0e1ca06f4a45b3c6337cc90a58335a479094a25cdfb2a56ed29be6266d57d3a588da2ac23dfe25d264814e55253e2b1e2cfdd20dce346168c552e67ebf1f8391e242036bfcdbc6fab98e239bed445db1a1f76015c09bd473fc256fc5dd9000ae94a46df9e9be28da9a7c60d1afa38152cf814992aff8aeb03ec43878a29d84169a7e66a77305844fab40fbb5d28f8caf7722dc284ffb2ff03420d69ebdd50579fdbae36384e6f367ec859a0d90c22e5c87f520c20efebc53acdad2652e93e7b1661175935608d0e78976266397c3af28b6fcd61a0f134415d78d2440e481be5793ce3ebfa44c36660ceacc2defaa7cf0654b68cc597bae0e5afab730a5e17edddef587c65bdd7921ce5a60b328a51ce1d9d30cc355c9c49990bf9837a18704d52b6e3f622541e5d24cd06f67eb42fe28daf5ab616cef6ffae463f0a7d3540752f338266e4a9a99470a4df2fa36a3a9b6a8cf6193ac14b8030da15ac26c3a15210563577f2c3ffbb754862afbfb2d8308c5a43209025825aa1cb9dd67a5a55a416c48d0c9e79b39457da05b95e78cd6cce9f550509d6e7f81f72531e4a925bcce90b7fdd129ad88935e8b5f4bd66b665055df105ca68e11cac15423f1e232ab8af8c7acdc84fbebc607a15785ae69a291288d0c4bde42dea34cf8fc7d2496a31eb68709af89b1ffd4cbf7b538a8c1ad3de9116908b01d5409716c7fb81b5a2a67f8f8c79d916a7af99c165ae20da68aafba01dc697930090e922b3bd26f71ddc69fd6705305ef8cb76a55d389a3383f702e45612cd68ae59f7f9aeda656b0fa6f83e524b92c431afaa079e962b60279280c12accb52d43412014c69ac2c00ffa7c3493eabe95fdaeb7fc6aba2f5c681a5c5b7b02731d19ede533aac8843dec30be2f0667007282a8a2b6b0ef2a5d0c3874f4e469f0e58f40e98642f0ab56b2eb90efd515d3c546939001ab11f28f6d76eb600ddbe7d0e1174b8ce512cebd70a0af4c3d8fa0adf68bc372225d3a573957b0c325a4cc533bc2a9a402a0a1322704d0f8f248f51529289f448aedefca1361a3182bf599aa9a22405a296730dae4baaf8dc74fdefb385408f0b6a008a49b6b25d19bac69c5dce27c46e7b8975e567f0b12fa522624a279284c89ec3961eaa94b375f08f665a0564449e96b81b518fd33e6cf515690ce0f28a3bb8cd50c3b16fbaeca17e24ca4165e557ba8f5424e0482d93d90898dbf6027c620f824138f2d97ac01c8475adf96bab180e4d39faabad13f519e57927b3ebbeb2a297db41f7ae018e61d36f77131efe2c12d256bd23c6bf65bc9139a7900e5c9b5e65be5f11c7886080fd61e46766da6add2d594e27ecd21d8ff9ee78b5760ad3ba4c5a6eefdfaf36ccdb42207975661499db78ffc4f1c3ed0c31d80e7939dae5d60196f9ef5a326fefc1edd0d489af262d47f4b97fd6d23f63e8f7133d00bf54fe6cde740e917a09291b7c017e5694b30d5c4325c4af79f9e63fc28813d5c92be429e32886807dcd6b837540fd748b7135c36a392d511bcd157a31662ed16bf9c73f89c89f68f4a765a532cd16526ef9e3c4277b2baa58728a42e8afb3dd7c4039b825dec49a59fa0d5248a1ea982da8347f042f0f82bffb131264026563b17e91b185796ac9f28521f0606ec723769c68f948d5b18b9326478e167a61b398d78ec8e4dfd53fe96c210f756db9914ac6378a66bdf6e51", 0x1000}, {&(0x7f0000000840)="a5d4cdfd73d861dd2e3eaf3eda48244c1db8d5718b0a76c0e2b2d7ad2d015a6d4037cbaa4d075173fbc4c8704400a8c0a9adc1d01adf9f08b6cb5a2fe5783bd2c265709e4a46045564ecc2825d7afede0e71897f5cf0081da43e87ef35542f333eae4bdb588ca96a2cfe8a0d0d1d436ab738ea2ae25e336074c5365961fa24cbce607daf1bd2a503274a0536ee3cb16b023e39a2473f27cd4edc563883569955558b80d956dd90a6e1dde3d88b403491690b6d7884bf7c9bfad8dcf85ca0f2c7fac60346f50cc7", 0xc7}, {&(0x7f0000000940)="ec3c308a08a896c6966a9f25836ad13055ca926e79a9b0d5161415f2f69b9cd0a356c6834a47c5867d0571b4356d2fdc527f2d3b264c9eb6b7026035a4888c3599771a52d3b821846b88aef4bd347cd8f9807e2ce77cde98f6905cb533f475022cb8c6131e9164b269ba8c0f3477dece0133669fcabb5a22ada69acfc5faeea8e7d3b6ee8812f108dbde45f819daea466b8fa3357a9dc59ac8e92d9894cdc4933c81e3a222e4564645a23ca12a61fa284ea64bdde161ea9ecc87d940be4ccf13bbda7f5ff643a9dca917a17ea7244fbe477259e47b41dc360e44", 0xda}, {&(0x7f0000000580)="f5b48ec56dd816e851156d71e92586b254d93e27da7729a431b9eb49c90b43011acd8340e4d4", 0x26}], 0x4, &(0x7f0000001cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xdc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc00}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}}], 0x2, 0x4010) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfe"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, 0x0, 0x0}, 0x20) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x0, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802e"], 0x20}], 0x1, 0x0, 0x0, 0x10}, 0x300) (rerun: 64) 2.302334542s ago: executing program 0 (id=1960): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$netlink(0x10, 0x3, 0x13) (async) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1e, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1e, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) 2.067879661s ago: executing program 1 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094aa3", 0x17}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000340)="c3b3269390", 0x5}], 0x4) 2.063309833s ago: executing program 0 (id=1962): r0 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis128l,crct10dif-arm64-neon)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x31, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000003c0)=""/186, 0xba}], 0x2}, 0x8}], 0x2, 0x10000, 0x0) 1.820635363s ago: executing program 2 (id=1963): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000440)=@newtfilter={0xf4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc4, 0x2, [@TCA_CGROUP_EMATCHES={0xc0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc, 0x3, 0x9}, {0x0, 0x8, 0x9, 0x7}}}, @TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x6a, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e27c4b4ba74a63f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x81, 0x3, 0x200}, {0x7, 0xffffffff, 0xf, 0x800}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0xc5, 0x4, 0x419}}}, @TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x90c, 0x8}, {0x100, 0x7}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="7fa3ca", @TCF_META_TYPE_VAR="b9", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f400932abff1e4", @TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010101}, {0x20000010304, @local}, 0x14, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000ef02000000400004001400010002000000ac05140f00000000000000001400020002000000ffffffff00000000000000000d00010075648f27b0dcf44f7000000000ed2d3aef1554dd98b79e5ab3fdfad4e3f858871945722b1f6c3215e049a33c935fb2b225775eea8af52a66cad28d0a6279102aab7c40d1cd93e9d508f76a603cf3ce474a097daa854ff6"], 0x54}}, 0x4080) 1.746326969s ago: executing program 3 (id=1964): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x1c}], 0x1}, 0x400c080) 1.688088294s ago: executing program 0 (id=1965): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x1, 0x2, 0x40, 0xe, 0x962f}, &(0x7f0000000100)={0x7fff, 0x1, 0xfffffffffffffff5, 0x7, 0x8a, 0x87a, 0xfffffffffffffffa, 0x400}, &(0x7f0000000180)={0x3, 0x9, 0x16, 0xf65, 0x4, 0x3, 0x0, 0xc}, &(0x7f0000000200)={r3, r4/1000+10000}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x4}, 0x8) 1.384388199s ago: executing program 1 (id=1966): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000004b80)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x124, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}, {0x1000, 0x3, 0x1ff, 0x7}, {0xc9, 0x1, 0x7, 0x4}, {0x9, 0xc, 0x2, 0x400}, {0xcf, 0x9384, 0x800, 0x4}, {0x6, 0x7, 0x7, 0x7}, {0x9c9, 0x9, 0x3, 0x7}, {0x81, 0x3, 0x1, 0xdaf9}, {0xffffffff, 0x8, 0x5, 0x2}, {0x745, 0x3, 0xe9, 0x4a}, {0x9, 0x9, 0x5, 0x7}, {0x2f875030, 0x3, 0x7, 0x2}, {0x100, 0x2199, 0x0, 0x4}, {0x7, 0x1, 0xfcf, 0x4}]}}]}}]}, 0x15c}}, 0x24040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050200000000000000000f000000084cc837d0abfd5399c2d6d0bb740155573a6df4b551574b15e7b1fcbe7d328463648054dd3dd5a203ef435b208e6f9e48587a475dcc77417eb3888f3c4000000010000000c80b6c1ef07e5f6dccba370ebc3d24faeb289bffc042d404b791444161b4e9ff0b85644806fe3f7df6fbfd90b8f61d9aa3f40d51b7abc0f200"/149, @ANYRES32=0x0, @ANYBLOB="4a000e0080000000080211000001ffffffffffff0802110000010000000000000000000064007f5d0301b82a01022d1a0010190700000000000000c90007001900000008000b00000004000008000e8004000100"], 0x70}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001540)={0xa04, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4e, 0x3, "c4ec1e801b3dbf65a528e15fb2f1af5dd6c3086f32cdf1c3a406e7051f4f245b4ba1fbfaeb962b8c8d60cd8d82d235606686ac70f381a6166713db7e1f8298567fbc60a062ca74a15fe1"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "f6f9365ab27a52c01ae597804fa465acc8862403bad4f9fe089977a400efb7e4d60f31b42e9012d97c26eba92580df38d6530854d963c09fe224b1cd805287f7b0b52a5f5f8d89d297729735172832cc767a55262157b2ee9d84cb0f82522b5f61516f87a29b40504c6f759c9f17a4d8c3c6a1966191328bd1ecb2b3dd7931c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "8d78841a3a5acbef556208144eb33865b6fd2ef22ee04c343b0ee21f81fd2dd36a0e1ca60ea3009b4d52faa5e666c1a4ddc215d45303bcc4adb3877d6c4dc86bb2c1087559b86b617c4fbbad597684c91dd4b6"}]}, @NL80211_ATTR_BEACON_HEAD={0x1b1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x2, 0x4}}, 0x7, @default, 0x20, @void, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @val={0x5, 0x46, {0x0, 0x22, 0xfe, "02ffcd0477ac2bd386bae50b9971cebc3d4a6f3ed8e9d657a7cdee5a6b65c0e22233b53a0ec861954f303526d98c6b6bcade34e62ce80c9e5673a2ad1de230e924426d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb7, 0x9}}, @void, @void, @void, @void, [{0xdd, 0xa5, "026e57d8360a41527e968bfabc8d42193bcaa88ebde7945c43d976747b22bcce2565e13389dcf4bc1b78a8c6a4bc3e75ff8dc381b6321f5b8962a6a751509c68c2d041fcbbec2db94d670579f67c96d985ccd0018880a09badea1db9e426adf3fbfa948710c9dc198cf1b00355667302ccc1e9e2ad60d9af98280187c4945a6e066746ce5c0d4833b97269c5f6c49509b17f021ec26ade49a7eb830d3e79cd4efb70e38586"}, {0xdd, 0x8f, "267f094f0be1b01b075f0ed9117cc7ec6205dc64e312ea99111dfa15c4e0420fa2007714904bbe6dbc80f16078ba34428f4193fd6a77c96454820c8e93170c762c2dc816e8ea58fc976b0555834e6a40cdfc90edece63d378cbf32d83f51fecefcaeda09c8720c6b98c810ed39c83dcc246b483fd836be050a6a6d9b3410750ce05d13d13f6a771ed73ab4956cef92"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x304, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "7cd73fb0b3411d68c77bf729153bf447e11a1048d96cab6aefaf"}, @NL80211_FTM_RESP_ATTR_LCI={0xe9, 0x2, "42718e1e819126d4f5a72d29194e017b87abb14104b0f79e762fe5be7ec72067e7b5ee5be19e86eeec7d0aafc817e430b5d8aea34fbdbd2b04d98bf004ec2874cd66ad8c8d02bbf756f204c0d13844983cd79ce4c5656719ea8198f54c888126a07b780bcc0ae72f09441ca478757f0e2d4cdf07c73552b03a93ab43fc7e10a9b40924e51a25f06c0043926a4bfb919672550fc50b5bb386fedfce76b1919bb6e4103938df7afa9e1c09450f56c199a0d3b8f51ccbb15c28a8ab8479958d792bdcb494376064bc60d3893ddd48f0b85ef08c7f5a756c6cf0b4570eed01eac03707119fc9b4"}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "3f4b4c53653db303828c76b757b71d9ece2fd79c8fce6f9e821f46a01cb6b9d3d6b9b737f4d26b02cb0a7c8e4856d4a663e0c0d58fc0fecf3940e96f4d6edef71a97cebe80f5a36352e4f347b9c0244850bcff85ceb109694725cf4e61b8a75372ebddf26998f0e426501673484cad8fa8d2a755da9038d66dbacdbd91"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x87, 0x3, "8fa793dbb1361ec959bd35e7fc3f7dca3b3b3f35e3df334c9727e732fe152c8a947eace65427a97125910fc8e973fa7735795e6a2491604a83b4385e6f377e1892190ee67296e365f5eff97dc459e3a102fa6dc41ca645b619072003e0d38da630a3ff3403acdeb24c49aac5f021bb1660caf348cecdf6bf7659b3bd5744d900819b73"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "92fb4ab22f6c641cd4dfc5f15a9fabb1836ba98e00598338b3e36d8cf1969df4b6fe9a07c7bf38f6b7a2e3807850ec4226426b24852251638c587f66118f2780e83b5835531794015c0f34b74e5e8cb14767e8c15143b3d1393d1120cdbf1cadc234da260f65b877eb68ef79d6a9f7d322dd854179db1db16b34c148232c6953cfacbef56276850a7e9410e560ff36ae8a730e969f8e3a88663f18c0d3e320750cf44ee08ba22f458cd59eea14f9e2b5bdcee764ce3860de4f63e00319dde9cba954b4d77a0388ffc1225303170e59e4041d455dcc"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'p'}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x7, 0x1, @device_b, 0x3, 0x40, 0xfffffffe}}]}, @NL80211_ATTR_PROBE_RESP={0x3de, 0x91, "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"}]}, 0xa04}, 0x1, 0x0, 0x0, 0x4080}, 0x44800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c001780"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1.38309605s ago: executing program 3 (id=1967): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.381064354s ago: executing program 4 (id=1968): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$nl_crypto(0x10, 0x3, 0x15) unshare(0x26020480) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r7, 0x0, 0x0, 0x40000120, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x5, @private2, 0xc33, 0x2}, 0x80) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000000)) 1.380559531s ago: executing program 3 (id=1969): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000", 0x1b) 1.379778981s ago: executing program 4 (id=1970): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xd, 0x8001, 0x1, 0x8660, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xd}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x400, 0xffff, 0x6, 0x1200, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0xf}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x7, 0x5, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x7, &(0x7f0000000600)=[r3, r4, r5, r6, r7, r8, r9], &(0x7f0000000640)=[{0x3, 0x2, 0x3, 0xb}, {0x2, 0x5, 0xa, 0x6}, {0x3, 0x1, 0x10, 0x1}, {0x5, 0x4, 0x0, 0xa}, {0x0, 0x1, 0xe, 0x2}, {0x1, 0x3, 0xf, 0x7}, {0x3, 0x5, 0x6, 0xc}], 0x10, 0x4}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008034) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f00000012c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10001040}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)={0x8f8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x21b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x129, {0x14, 0x13, [{{}, @broadcast, 0x10, @void, 0x32}, {{}, @broadcast, 0x6, @void, 0x1f}, {{}, @broadcast, 0x2, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x400, @value, 0x15}, {{}, @device_a, 0x0, @void, 0x34}, {{}, @device_b, 0x8, @void, 0x3f}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x2b}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x28}, {{}, @broadcast, 0xffff, @void, 0x12}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x2d}, {{}, @device_b, 0x8, @void, 0x10}, {{}, @device_a, 0xfffffffb, @void, 0x7}, {{}, @device_b, 0x0, @void, 0x31}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x27}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x7}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1f}, {{0x0, 0x1}, @device_b, 0x5}, {{}, @device_a, 0x1000, @void, 0x39}, {{}, @device_a, 0xffffff01, @void, 0x17}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xc2, {0x8, 0xc, [{{}, @device_b, 0x4, @void, 0x15}, {{}, @device_a, 0x1, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x1}, {{}, @broadcast, 0xfff, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x3}, {{}, @device_a, 0x80000000, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0xa4, @value=@broadcast, 0x2e}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x20}, {{0x0, 0x1}, @broadcast, 0x7fff, @value, 0x19}, {{}, @device_a, 0x180, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x2f}, {{}, @device_a, 0x4, @void, 0x10}]}}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_IE={0x15a, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x75, 0xb1, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x8, @broadcast, 0x9, @value, 0x3, 0x5, @broadcast}}, @random_vendor={0xdd, 0xf1, "bac13e8c1ac36441ef82918aedb128a3835524c54cadd817f93018a5c2266738ec54f02005494b3e17ea191075a1773d08f2b7dd2da0bc37099271359f07dff515e273e42cfd80e7041fe48fdd6c6cc48864067702c0210b3f5bebe11c9975046d090a772880482a3aaf7838f7dad2030ac97fcfad7f504944280959746735dadbef67d31f7b416273ebfc995a127f9a2b3f00904af72de553b610c9e37746ce63a5ff4791772649394d70094e821bf199b86b76225db97b65d4c1e534315108ffd79696e1920a048d638f313ea0abab3b0b5d9783b894c40605900c7d73163a21cc36836f84ab519faffaf8b0ed1efe64"}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa1, 0x1, @device_a, 0x0, @value=@device_b, 0x1, 0xffffff81, 0x1, [{{0x1}, @broadcast, 0x9}]}}]}, @NL80211_ATTR_IE={0x2f1, 0x2a, [@cf={0x4, 0x6, {0xa, 0x9, 0x71b, 0x5}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @void, @val=0x1a, @void}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xfb, {0x6, 0xc2, 0x4, "0974525cf83a146932e88c9ecb844c61d6aa79f13fb378458c789fb4bab8fe1224fdc5c9864d37f9f8d40efdf2aa2463046fd8b842c91c4c8b0400a0cf49bd04849d9f3cc158ba72251f626acb671265767b7458c35e66a823457b3a653000b40fbfa5d7bf8f76a72e1829ca0410ef165dbb7d5d03f0349661d8c8df0d0853699db266c7b4ac4d3de5bf4bcfd94646ae2f85b0f3520b551af0383915926f5f89f11e3ecba155823eac290880377c1c99ccff6a87c999c4edd28b73588df650d9d51479f773b3c30dccfd53dd1907155980925584febe53f2bb30c3e20dbb42976ba76abc055c9872302158b0a26f090b69022999b51396df"}}, @measure_req={0x26, 0xc2, {0x9, 0x3, 0x53, "6d3e17284693db785d26780ac1e98332d1c6d5dec1c90b8455e0a78698c1ceda12a0b7525925a398f10986dd81f026ba62b3037308da4a3d3c5d4211aec4b14d3aee3f530b86a08e39f42ccedcd0df9bc73f8c4c4796c884732f59f4483a2e4a089df4623e55bb6ae0e31c27fa5fc3dd2fcf941c6c8973f59f293a74a41a0d29678f08010356bbb0cb8301c613e99be0750bd945c89aa0e06dc4c45828512f9faf01eadb684a91c23bf5497b9b8d255c8427e96633c4a03076cc4756468fc3"}}, @mic={0x8c, 0x18, {0x7fc, "dcd55f43ff34", @long="060fd9fde4e6d1b1217da334399d5de5"}}, @random_vendor={0xdd, 0xf8, "8782b12a455d39c1d643434e8ae1d26c779e985638493afdecb7dfbce2ec755a20c41d44d12122e6dfad7322f6435e0ee77ed3eb937e4ec2fe7cdebe39a6366f2f6d0926da28096e51668cceb4e8bd36f4a510e5644b50e67002c0cbb8ff06e77d823443e17b43f740ec293cf85c80d8fc8773089501c55c7d674c8bee22f110b9c327a89f81c1dae205c09c07863c1a85f02e1a161fcf6ec0cfdaf4f820dc622b38694686ffa81baef8b14c0c86a0f6f772233d74eb324c05acdd1e3fbc440ef8a3cb2b6d7c6dcc6904e0019feb28f06881cb6cf0aab3b6ef619417ffc4ee41fe336701deb81e57a3c2305a2a96bd81a43b5a291245034a"}]}, @NL80211_ATTR_IE={0x241, 0x2a, [@measure_req={0x26, 0xbb, {0x6, 0xf, 0x80, "4728d83368f18742420ebf5fe857e03cf440385c430ad4ad5579ad3096b701ef529478e0519e1f75c3f9b5887b77d6b392e53d27de4faf12a40c382156a54ea12c35caa1980a4a611ff3d596d91debe6cfa9b8a7c503da2a1b1536000007000860b9d1a451022c03657e0352838c37f83522007eca7f84f72d443c2a4cb82e7665996aad41604f9cec83bc12f52c2ad50b8e770b9c064589d073d24efdd26a199e897a7bf44bb1f6569d38045892262f2feb9ef21944cace"}}, @cf={0x4, 0x6, {0xde, 0x4, 0x9, 0x7}}, @link_id={0x65, 0x12, {@random="66506d90e6bf", @device_a, @device_b}}, @fast_bss_trans={0x37, 0x6a, {0x1, 0x1, "c648bf32ca325e81526e4c273c203dfc", "0fc6296630d675f7b5fa4a4f1d41548d4bb6e824b921ebf43d7253cef516e3c6", "92acf710b2c1888ea2d2ce89d55d3aa73bb194889d2f69d72451d232131be1bb", [{0x2, 0x16, "01f1d72bcf21d623dd5f0fffd1cc21a562426077ab8a"}]}}, @link_id={0x65, 0x12, {@random="f1ff00c6e1fb", @broadcast}}, @preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x40, 0xc185b3f, @device_a, 0x8, @value=@device_b, 0x0, 0x81, 0x5, [{{}, @broadcast}, {{0x1, 0x0, 0x1}, @device_a, 0x10}, {{0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x26}, {{0x1}, @broadcast, 0xb}]}}, @fast_bss_trans={0x37, 0x6f, {0x9, 0x1, "b10c7048e5909d2e05e5aa3fcf19c3e0", "e9ab586d4c56d34caa896cbfa962fd82ac06445a80f7ea81eef54419c36646c1", "06b7643df83239c3f7597b1c279cd620f6b877f12cdf66f18b8c63715960ceb5", [{0x4, 0x1b, "c70186130e2f65c22bb858e77ea3bdc443fac5ad55408f2b68d0ee"}]}}, @mic={0x8c, 0x18, {0x596, "0566601c726c", @long="31ede3ad2be68ead2e591a1f245493ad"}}]}]}, 0x8f8}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r13 = socket$pppl2tp(0x18, 0x1, 0x1) bind$ax25(0xffffffffffffffff, &(0x7f0000001300)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, &(0x7f0000001380)) tee(r13, r13, 0x80, 0x9) sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f0000001600)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x184, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0xfffffffd, 0x6, 0x148, 0x8, 0x10000, 0xb]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x15}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x158}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcce}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x49}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40a}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x80000000]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x901}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008110}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{r4}, &(0x7f0000001640), &(0x7f0000001680)='%pI4 \x00'}, 0x20) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f0000001780)={0x164, r16, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6cfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x925}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffee}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}]}, 0x164}}, 0x800) pselect6(0x40, &(0x7f0000001980)={0x1000, 0x827b, 0x5, 0x59f4, 0x4619, 0xffffffff80000000, 0xc77ee77}, &(0x7f00000019c0)={0x9, 0x60000000, 0xd, 0x81, 0x3, 0x1, 0x9, 0x9}, &(0x7f0000001a00)={0x1, 0x7, 0x0, 0x3, 0x8000000000000000, 0x7, 0x2, 0x5}, &(0x7f0000001a40)={0x77359400}, &(0x7f0000001ac0)={&(0x7f0000001a80)={[0x1]}, 0x8}) preadv(r3, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/32, 0x20}, {&(0x7f0000001b40)=""/25, 0x19}, {&(0x7f0000001b80)=""/87, 0x57}, {&(0x7f0000001c00)=""/57, 0x39}, {&(0x7f0000001c40)=""/45, 0x2d}], 0x5, 0x400, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r10, 0x0, 0xaf, 0xd7, &(0x7f0000001d00)="716f759857887e76a97a00d80e85d227f7efb4784679a1a07f16737cfba0e7527163485e8e65d27ef65d5d3cd6b192b1bda1f85bf6b1350e9487c333e16d1e65cda048f3bf6062a3fc2b34ff4b6297820a36897f40041bf68140256c0d3e72fe85273ed01dab50933cf8c8bab14de5383a5be7026dc5d404cdb15fa762c66eb9c865e18e8711943c6f839787072a9315fcf61aadf372685c75355cc0ed25c958b5400e35acf8a92853037e2a48afb0", &(0x7f0000001dc0)=""/215, 0x401, 0x0, 0xab, 0xdf, &(0x7f0000001ec0)="5adcc790b74be28a12eaa4abf4403abc90c60ca1b7ebe42f34aaa9fd65723ee55b5f326a017f9b1001ba626a7c16c5f373426670bdc730fc099f9b406fd74adc59777ec3c167a456d9df66a9a75e995bcc06c27772a321bc115010c81fbda188db82cc7334495ee0070a796e0f4e9c31395672c6b5a5e4d183d91764c3090c1b94946c9314806b1661465ec3f8f2fbd7934cbadf7538ceb4689694c184ccbc0ff3af8b8f1e4ed0be6cffd1", &(0x7f0000001f80)="bcfd4ac3f7745b8cc840c90160a6abd821bec79acaa8a86e8bd434263de74f3aa177f2ac2004b2f51c40c28d993ab812cbac477df3a7cae90250edefa7dc0b537aad88c6519c2cec836f95fe800dd8ce6fcb3e4e26228b771777e74a3c9168f72f0e828f1605c6af68d1fd6a169406d9390bfdf4b8dd49b07b74e2bca3e03e6b051b719a4e0b894635da63feb4e343a70595fd7fd69b8eaaedea52957423e407d9a0be0f37bc64d211e37886670d71a8cae9b4c8c65b73507aba48aca7634557c8f93f221d2993c0487792db62b02849fbf35fd24221a31dc978535c5a7c2c", 0x5}, 0x50) r17 = syz_genetlink_get_family_id$team(&(0x7f0000002140), r15) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x124, r17, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x240000c0}, 0x40001) 1.379240131s ago: executing program 1 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000840)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79", 0x68) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x10, 0x2, [@TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000028}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2004c851}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 1.347728924s ago: executing program 3 (id=1972): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) unshare(0x20000400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r6, &(0x7f0000000700)="f5", 0x1) splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="6af2", 0x2}], 0x1, 0x8) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x400c004}, 0x880) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000140)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x180, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) 1.325982363s ago: executing program 4 (id=1973): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000680)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xe9, 0xef, 0x1000, 0x5, 0x5], 0x9, &(0x7f0000000580)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050424bd7000fe5b60250100000008000100", @ANYRES32=r6], 0x64}, 0x1, 0x0, 0x0, 0x400c481}, 0x44084) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000500)=[{{0x2}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}}, 0x0, 0x3a, 0x0, 0x1, 0x7}, 0x28) r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@bcast, @default, @netrom, @null, @bcast, @null, @null, @null]}, &(0x7f00000001c0)=0x48) setsockopt$ax25_int(r8, 0x101, 0xc, &(0x7f00000002c0)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000540)={'veth1_vlan\x00', 0x1000}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r11, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.13193224s ago: executing program 2 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, 0x0, 0x0, 0x4}, 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) (async) r12 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r12, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) (async) r14 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) 928.515238ms ago: executing program 2 (id=1975): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "0b4cda6fc018a6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000140)={{0x0, 0x200, 0xfffffffffffffffe, 0x7, 0xe00000000000, 0x10, 0x3, 0xf, 0xfff, 0xe0c3, 0x7ff, 0x1, 0x9, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001140)={r5, r6, "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", "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"}) 808.577188ms ago: executing program 2 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001f40)={@map, 0xffffffffffffffff, 0x20}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711883000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x59, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0xca, &(0x7f0000000580)="64325226de3f762161bf7ac9459271aa191a5558ef48cf7b4692eeb68312e1c1ba48d9693ae37fdc8a6d9918a894418782b0f640b800482a195ce69260905306d5ca87e8a46cdd3c3c3347d4e593024073ed5be92a3fa87271b13ef1e59447c578edd5b87f82337e2441991904927f0717d35371d4c344eff8bf8ea470ed3c5da2fa0d08f528f2ba3a89e97df6f7d2e8c2e6a8646a71773ea0bf9ac5ecf248dda6235faf23f0a21f2ce5599fde4bbf188953701d7a0f97a8bef2b9945f6cc3c9b70dd83df6806a45ee97", 0x1000, 0x0, &(0x7f0000000680)="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"}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e32, 0x10000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) socketpair(0x73, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r11, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x2, 0x8, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x3c, r9, 0x917, 0x0, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x3c}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r12, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) 759.658015ms ago: executing program 0 (id=1977): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7, 0x8, 0x4, 0xb9, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x31}, @generic={0x94, 0x10, "5e6149fed5983b8e3f77b63c664c"}, @rr={0x7, 0x17, 0xc2, [@private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0xf, [{@private=0xa010100, 0xf}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x36, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x9c, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x264, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xde2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x80, 0x4, 0x55a}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x840}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'veth1_to_team\x00'}) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = accept(r7, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000c40)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000d80)=[{}, {}], 0x10, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001140)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x13c, r0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd00, 0x10, 0x6, 0x81}, {0x0, 0x9, 0x0, 0xe8d}, {0x3, 0x4, 0x0, 0xf04}, {0xfff8, 0x4, 0xfe, 0x4}, {0x7f, 0x7, 0x2, 0x80000000}, {0x57f, 0x2, 0x13, 0x6d9}]}}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xcd04727ac05d63da}, 0x40000) connect$netlink(0xffffffffffffffff, &(0x7f0000001180)=@unspec, 0xc) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x69}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001340), r12) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000013c0), r12) sendmsg$NLBL_MGMT_C_REMOVE(r12, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000014c0)=0x10000, 0x4) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000001540), r8) sendmsg$FOU_CMD_GET(r8, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, r14, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001740)={'syztnl2\x00', &(0x7f0000001700)={'gretap0\x00', r6, 0x80, 0x10, 0x90, 0x1, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0xb, 0xf4, [@remote, @empty]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r15, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xcc, r16, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_emit_ethernet(0x27e, &(0x7f0000001900)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @broadcast, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @udp={0xb, 0x6, "d5e303", 0x244, 0x11, 0x0, @mcast2, @private1, {[@routing={0x67, 0x12, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, @remote, @loopback]}, @fragment={0x74, 0x0, 0x6, 0x0, 0x0, 0x6, 0x68}, @hopopts={0x5c, 0x14, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x17, 0x4a, "83cdfb0d61462cfe2dc81b59745caa7a3567e09afd6ef1569c82b249097f442a3e29993327a6cc438d6a0e3bd5517846b2628c9c960b75ecee74f6d5e5b6b17f659af9716304a42373dd"}, @ra={0x5, 0x2, 0x95}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x2, 0xa, 0xf2, 0x8001, [0x8, 0x8, 0x7, 0x7fff, 0x8]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x11, 0x65}, @routing={0x0, 0xa, 0x1, 0xb5, 0x0, [@local, @private1, @private1, @private0, @loopback]}], {0x5445, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "5fcdabe92d40a78c81b1a366dcefe2a36b361f31fe35af95592ae65589fd1b0f", "7bb52ee634060d8e5c52939f093cdbf0d49df636b4f8b739c45f4ba0af0a788a3561f6a48bd2fe6fbf40b93b0a00450b", "b374e144f57ec02706cf783c5d568cef6ff600ebbabf4fb2d461ad2f", {"26457009e8d2e3ecb8413d68a9deb4c2", "bff6557647b1da80725d51ddb9a15fb9"}}}}}}}}, &(0x7f0000001b80)={0x0, 0x4, [0x3ba, 0x7d8, 0xc67, 0x8e1]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0xf07fa000) socket$inet6(0xa, 0x5, 0x1) 393.897754ms ago: executing program 2 (id=1978): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A(', 0x2}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r2, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @perr={0x84, 0x8e, {0xb, 0x8, [{{0x0, 0x1}, @device_b, 0x3, @value, 0x5}, {{0x0, 0x1}, @device_a, 0x65, @value=@device_b, 0xe}, {{}, @device_a, 0x10001, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x14}, {{0x0, 0x1}, @device_b, 0x669f, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x41}, {{}, @broadcast, 0x3, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x24}]}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8, @void, @void, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@random="0618704c8ca2"}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x13) 374.180032ms ago: executing program 1 (id=1979): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x1}) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000a80)="86", 0x1}], 0x1, 0x8) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000001c0)={0x0, 0x3, 0x7f5a, 0x80000000}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000101040000000008000100e000000108000200e0f100010c000280050001"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 348.790914ms ago: executing program 4 (id=1980): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 243.93502ms ago: executing program 3 (id=1981): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000001500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) (async) splice(r0, 0x0, r1, 0x0, 0x8000, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0xfffffffc, 0x4, 0x81, 0xffff2da8}, 0x3c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000400004e52658601626fad75f186c6201ca3d35d0b93c8e71a95ddbf65713516ddb922bc08445a01ac77f13874a828dc5d17784ba43efcb82e49d141ad99146ab7f2b85d3c36b7e6ad829ee9988c9ed7884f3a450ae8fe91407e32b5c451b5ab563d9ad1554b7d91ce6031bfd15ea8b0cc76531e5ded330f5fe0538fbb39ba1dd98e63f5016cf514c55f3e8f12c1c2edb6ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080001050700030080000600"], 0x1e7) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0400120f13b7b9120000008a151f750800390000000000008000000000", 0x27) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f14000000000000140012800b00010062617461645d0000040002800a000100bbbbbbbbbbbb0000"], 0xff34}}, 0x20000840) 84.1711ms ago: executing program 2 (id=1982): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000004b80)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x124, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}, {0x1000, 0x3, 0x1ff, 0x7}, {0xc9, 0x1, 0x7, 0x4}, {0x9, 0xc, 0x2, 0x400}, {0xcf, 0x9384, 0x800, 0x4}, {0x6, 0x7, 0x7, 0x7}, {0x9c9, 0x9, 0x3, 0x7}, {0x81, 0x3, 0x1, 0xdaf9}, {0xffffffff, 0x8, 0x5, 0x2}, {0x745, 0x3, 0xe9, 0x4a}, {0x9, 0x9, 0x5, 0x7}, {0x2f875030, 0x3, 0x7, 0x2}, {0x100, 0x2199, 0x0, 0x4}, {0x7, 0x1, 0xfcf, 0x4}]}}]}}]}, 0x15c}}, 0x24040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050200000000000000000f000000084cc837d0abfd5399c2d6d0bb740155573a6df4b551574b15e7b1fcbe7d328463648054dd3dd5a203ef435b208e6f9e48587a475dcc77417eb3888f3c4000000010000000c80b6c1ef07e5f6dccba370ebc3d24faeb289bffc042d404b791444161b4e9ff0b85644806fe3f7df6fbfd90b8f61d9aa3f40d51b7abc0f200"/149, @ANYRES32=0x0, @ANYBLOB="4a000e0080000000080211000001ffffffffffff0802110000010000000000000000000064007f5d0301b82a01022d1a0010190700000000000000c90007001900000008000b00000004000008000e8004000100"], 0x70}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001540)={0xa04, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4f, 0x3, "c4ec1e801b3dbf65a528e15fb2f1af5dd6c3086f32cdf1c3a406e7051f4f245b4ba1fbfaeb962b8c8d60cd8d82d235606686ac70f381a6166713db7e1f8298567fbc60a062ca74a15fe12e"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "f6f9365ab27a52c01ae597804fa465acc8862403bad4f9fe089977a400efb7e4d60f31b42e9012d97c26eba92580df38d6530854d963c09fe224b1cd805287f7b0b52a5f5f8d89d297729735172832cc767a55262157b2ee9d84cb0f82522b5f61516f87a29b40504c6f759c9f17a4d8c3c6a1966191328bd1ecb2b3dd7931c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "8d78841a3a5acbef556208144eb33865b6fd2ef22ee04c343b0ee21f81fd2dd36a0e1ca60ea3009b4d52faa5e666c1a4ddc215d45303bcc4adb3877d6c4dc86bb2c1087559b86b617c4fbbad597684c91dd4b6"}]}, @NL80211_ATTR_BEACON_HEAD={0x1b1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x2, 0x4}}, 0x7, @default, 0x20, @void, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @val={0x5, 0x46, {0x0, 0x22, 0xfe, "02ffcd0477ac2bd386bae50b9971cebc3d4a6f3ed8e9d657a7cdee5a6b65c0e22233b53a0ec861954f303526d98c6b6bcade34e62ce80c9e5673a2ad1de230e924426d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb7, 0x9}}, @void, @void, @void, @void, [{0xdd, 0xa5, "026e57d8360a41527e968bfabc8d42193bcaa88ebde7945c43d976747b22bcce2565e13389dcf4bc1b78a8c6a4bc3e75ff8dc381b6321f5b8962a6a751509c68c2d041fcbbec2db94d670579f67c96d985ccd0018880a09badea1db9e426adf3fbfa948710c9dc198cf1b00355667302ccc1e9e2ad60d9af98280187c4945a6e066746ce5c0d4833b97269c5f6c49509b17f021ec26ade49a7eb830d3e79cd4efb70e38586"}, {0xdd, 0x8f, "267f094f0be1b01b075f0ed9117cc7ec6205dc64e312ea99111dfa15c4e0420fa2007714904bbe6dbc80f16078ba34428f4193fd6a77c96454820c8e93170c762c2dc816e8ea58fc976b0555834e6a40cdfc90edece63d378cbf32d83f51fecefcaeda09c8720c6b98c810ed39c83dcc246b483fd836be050a6a6d9b3410750ce05d13d13f6a771ed73ab4956cef92"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x304, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "7cd73fb0b3411d68c77bf729153bf447e11a1048d96cab6aefaf"}, @NL80211_FTM_RESP_ATTR_LCI={0xe9, 0x2, "42718e1e819126d4f5a72d29194e017b87abb14104b0f79e762fe5be7ec72067e7b5ee5be19e86eeec7d0aafc817e430b5d8aea34fbdbd2b04d98bf004ec2874cd66ad8c8d02bbf756f204c0d13844983cd79ce4c5656719ea8198f54c888126a07b780bcc0ae72f09441ca478757f0e2d4cdf07c73552b03a93ab43fc7e10a9b40924e51a25f06c0043926a4bfb919672550fc50b5bb386fedfce76b1919bb6e4103938df7afa9e1c09450f56c199a0d3b8f51ccbb15c28a8ab8479958d792bdcb494376064bc60d3893ddd48f0b85ef08c7f5a756c6cf0b4570eed01eac03707119fc9b4"}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "3f4b4c53653db303828c76b757b71d9ece2fd79c8fce6f9e821f46a01cb6b9d3d6b9b737f4d26b02cb0a7c8e4856d4a663e0c0d58fc0fecf3940e96f4d6edef71a97cebe80f5a36352e4f347b9c0244850bcff85ceb109694725cf4e61b8a75372ebddf26998f0e426501673484cad8fa8d2a755da9038d66dbacdbd91"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x87, 0x3, "8fa793dbb1361ec959bd35e7fc3f7dca3b3b3f35e3df334c9727e732fe152c8a947eace65427a97125910fc8e973fa7735795e6a2491604a83b4385e6f377e1892190ee67296e365f5eff97dc459e3a102fa6dc41ca645b619072003e0d38da630a3ff3403acdeb24c49aac5f021bb1660caf348cecdf6bf7659b3bd5744d900819b73"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "92fb4ab22f6c641cd4dfc5f15a9fabb1836ba98e00598338b3e36d8cf1969df4b6fe9a07c7bf38f6b7a2e3807850ec4226426b24852251638c587f66118f2780e83b5835531794015c0f34b74e5e8cb14767e8c15143b3d1393d1120cdbf1cadc234da260f65b877eb68ef79d6a9f7d322dd854179db1db16b34c148232c6953cfacbef56276850a7e9410e560ff36ae8a730e969f8e3a88663f18c0d3e320750cf44ee08ba22f458cd59eea14f9e2b5bdcee764ce3860de4f63e00319dde9cba954b4d77a0388ffc1225303170e59e4041d455dcc"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'p'}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x7, 0x1, @device_b, 0x3, 0x40, 0xfffffffe}}]}, @NL80211_ATTR_PROBE_RESP={0x3de, 0x91, "52cdb2267665b33fcffa1ec1447c8b496aef2c25dc5f1f3ec561be3f98876caa6939865553a68a1a623d2ba5e66bf9f16e793bad792d530aed39bd2fe0561ffca65cdc7ae526ee5bb7e08d4b59142cd3867d35284115d78744708a54edeff7e5f6877653a1949fddf21ae247bf413d96dcb769cc63e3db557ab9c58cfeda12b863bafa27d4c5502248476acdc33eb959361dfebb7c3b7c78dec55d88ea1fe76b33bec013dea5e53207dbb9a28ed9822e93e6a0388f4d06bed188061d70b2c88da54c45aed4b05b49befe9330939dd38a21e068171aec1a84da975b5434e817e0a4ad3aebadf5ba3e534f82314282f86b71df1d6b53aba473cf2d63902852ec64778e023c938cadfc74a8b66d09052913e4b7c3a21ff42a0c2370fd182f0999318f21093346e040f2cc6c91613fcc8a19881c86d0ff1897abd5789ef6992e3ac7e72df09460368597e4edba58a29c9996ee33326f752fd81dc81cfd612b1f058772312fb893eaa4d7e0c7a93d375a7ce87b937b2c523c9c679c2b109ae9a3c2b5e6c9fa900fce086078cc1d51e57e4123488a3ae3622cfaa439dc49c7dcf7f607b7c2ce462365fdcebb919697c6fb3fb52a4f6b8247b9cbf598c053a40b7d5258d78bbac315158e8099ee39725131fbecba0e9f155b93a6bdc0430811c4a3833489578ff38a2883b913141fc2934ca8eac4c42246e0fbd645e183950f06e06d0d645394da393a1072ac2f0cb2f408550642605aac9048642800fda8788f5c0940223e9cc7c06551f62d3b65b04c3079fad452e7ccef700805e07e032d058294f9126260698bffec4dd9ec4385be6c457f466f881ed2252d15bb38e8da0f1f9deb64a15aa8d4296fa718e6de41deb66970779f570c18b32969389e0641c5a405e52102e9ced3dc57fea5c8d0f706e394302e217673be63d8f59a35fbfea8057be780250520095087b285c727a2db08cb7c85edeb0f5cfaed423f45e58486bde0353da0a30d17e796be0f7b0712e548132f1041581da7f06a093a5e7b384d64ea5ea6b43673dbabb6ee052b11cc507efcb95188130c2f06a0617f709d09e17bb7dca985d701ebc62edd219a2523e8880f01f4058b242840f8e2fbb24c7d64bd96fb53880f2f5deb922226932d3b1663e62a218a55b6b3daea2c8d888f999863111ea70e3e94c1a9af5c5563b045b0fded05d82fcdb4143073bb7b3c7d6cd7abd1bc0e49ab1baa8021a2bd72a5f1e0393282a22743799dff36921815fe0e4b78e7f89180d29eec58a6f5d6ca00460e50be8e02a8d2e9e66a882d7744be692540aa7c5d1fb5d7aa43fbbce3558d9d9a419b691ab2947b4fe26e4fce822952c1e1903daeb4a67ffa00d2cd09e8831ddf03a55cc8b9cdf54ab34f33e920"}]}, 0xa04}, 0x1, 0x0, 0x0, 0x4080}, 0x44800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c001780"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 62.7956ms ago: executing program 1 (id=1983): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7, 0x20, 0x80000001, 0xa, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @lsrr={0x83, 0xb, 0x5a, [@multicast2, @private=0xa010101]}, @noop]}}}}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @can, @can={0x1d, r1}, @rc={0x1f, @none, 0xc7}, 0x4, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000180)='ipvlan0\x00', 0x0, 0xfff, 0x1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0x80}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 0s ago: executing program 0 (id=1984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40002, 0x0, 0x0, 0xe440, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x2, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) kernel console output (not intermixed with test programs): 9446] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 183.104477][ T9446] ? __alloc_skb+0x112/0x2d0 [ 183.104500][ T9446] __alloc_skb+0x112/0x2d0 [ 183.104523][ T9446] tipc_msg_reverse+0x231/0x8f0 [ 183.104540][ T9446] ? net_generic+0x1e/0x240 [ 183.104571][ T9446] tipc_sk_filter_rcv+0x9df/0x30b0 [ 183.104645][ T9446] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 183.104671][ T9446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.104712][ T9446] tipc_sk_rcv+0x8a5/0x2ba0 [ 183.104737][ T9446] ? kasan_save_track+0x4f/0x80 [ 183.104756][ T9446] ? kasan_save_free_info+0x46/0x50 [ 183.104772][ T9446] ? tipc_sk_mcast_rcv+0xb79/0xeb0 [ 183.104790][ T9446] ? tipc_mcast_xmit+0x123a/0x1850 [ 183.104812][ T9446] ? __tipc_sendstream+0x1041/0x1290 [ 183.104834][ T9446] ? tipc_send_packet+0x7c/0xa0 [ 183.104877][ T9446] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 183.104912][ T9446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.104945][ T9446] tipc_sk_mcast_rcv+0xdd4/0xeb0 [ 183.104963][ T9446] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 183.104982][ T9446] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 183.105019][ T9446] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 183.105038][ T9446] ? __lock_acquire+0xab9/0xd20 [ 183.105076][ T9446] ? tipc_mcast_xmit+0x10a4/0x1850 [ 183.105101][ T9446] ? tipc_mcast_xmit+0x10a4/0x1850 [ 183.105123][ T9446] tipc_mcast_xmit+0x123a/0x1850 [ 183.105161][ T9446] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 183.105196][ T9446] ? _copy_from_iter+0x308/0x16f0 [ 183.105221][ T9446] ? rcu_is_watching+0x15/0xb0 [ 183.105242][ T9446] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 183.105265][ T9446] ? __pfx__copy_from_iter+0x10/0x10 [ 183.105287][ T9446] ? __build_skb_around+0x257/0x3e0 [ 183.105309][ T9446] ? tipc_msg_build+0x400/0xcf0 [ 183.105353][ T9446] ? tipc_sk_filtering+0x13c/0x510 [ 183.105376][ T9446] ? rcu_is_watching+0x15/0xb0 [ 183.105400][ T9446] __tipc_sendmsg+0x1f62/0x2960 [ 183.105422][ T9446] ? look_up_lock_class+0x74/0x170 [ 183.105450][ T9446] ? __lock_acquire+0xab9/0xd20 [ 183.105471][ T9446] ? __pfx___tipc_sendmsg+0x10/0x10 [ 183.105503][ T9446] ? ima_match_policy+0x10b/0x2150 [ 183.105535][ T9446] ? __pfx_woken_wake_function+0x10/0x10 [ 183.105565][ T9446] ? up_write+0x1c4/0x420 [ 183.105590][ T9446] ? process_measurement+0x1640/0x1a40 [ 183.105635][ T9446] ? aa_label_sk_perm+0x413/0x560 [ 183.105664][ T9446] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 183.105697][ T9446] __tipc_sendstream+0x1041/0x1290 [ 183.105724][ T9446] ? look_up_lock_class+0x74/0x170 [ 183.105773][ T9446] ? __pfx___tipc_sendstream+0x10/0x10 [ 183.105799][ T9446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.105817][ T9446] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 183.105846][ T9446] tipc_send_packet+0x7c/0xa0 [ 183.105861][ T9446] ? __pfx_tipc_send_packet+0x10/0x10 [ 183.105877][ T9446] __sock_sendmsg+0x219/0x270 [ 183.105905][ T9446] ____sys_sendmsg+0x505/0x830 [ 183.105932][ T9446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.105962][ T9446] ? import_iovec+0x74/0xa0 [ 183.105987][ T9446] ___sys_sendmsg+0x21f/0x2a0 [ 183.106010][ T9446] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.106070][ T9446] ? __fget_files+0x2a/0x420 [ 183.106093][ T9446] ? __fget_files+0x3a0/0x420 [ 183.106127][ T9446] __x64_sys_sendmsg+0x19b/0x260 [ 183.106150][ T9446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.106187][ T9446] ? __pfx_ksys_write+0x10/0x10 [ 183.106205][ T9446] ? rcu_is_watching+0x15/0xb0 [ 183.106229][ T9446] ? do_syscall_64+0xbe/0x3b0 [ 183.106250][ T9446] do_syscall_64+0xfa/0x3b0 [ 183.106266][ T9446] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.106282][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.106298][ T9446] ? clear_bhb_loop+0x60/0xb0 [ 183.106319][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.106335][ T9446] RIP: 0033:0x7ff34198e9a9 [ 183.106353][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.106366][ T9446] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.106386][ T9446] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 183.106399][ T9446] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000005 [ 183.106410][ T9446] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.106420][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.106430][ T9446] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 183.106460][ T9446] [ 183.147506][ T9447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.697422][ T9457] bond_slave_0: entered promiscuous mode [ 183.703185][ T9457] bond_slave_1: entered promiscuous mode [ 183.708865][ T9457] bridge0: entered promiscuous mode [ 183.715051][ T9457] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 183.760096][ T9457] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 183.774695][ T9462] bond0: (slave bridge0): Releasing backup interface [ 183.782350][ T9462] bridge0: left promiscuous mode [ 183.789514][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.797019][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.814521][ T9462] bridge_slave_0: left allmulticast mode [ 183.820230][ T9462] bridge_slave_0: left promiscuous mode [ 183.826076][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.839182][ T9462] bridge_slave_1: left allmulticast mode [ 183.845763][ T9462] bridge_slave_1: left promiscuous mode [ 183.851538][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.871453][ T9462] bond0: (slave bond_slave_0): Releasing backup interface [ 183.880762][ T9462] bond_slave_0: left promiscuous mode [ 183.888978][ T9462] bond0: (slave bond_slave_1): Releasing backup interface [ 183.899125][ T9462] bond_slave_1: left promiscuous mode [ 183.910772][ T9462] team0: Port device team_slave_0 removed [ 183.920491][ T9462] team0: Port device team_slave_1 removed [ 183.928611][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.936971][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.947849][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.955724][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.972413][ T9462] bond0: (slave wlan1): Releasing backup interface [ 183.981060][ T9462] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 184.000008][ T9462] bond3: (slave macvlan2): Removing an active aggregator [ 184.007952][ T9462] bond3: (slave macvlan2): Releasing backup interface [ 185.299708][ T9499] netlink: 'syz.1.916': attribute type 6 has an invalid length. [ 185.335042][ T9538] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 185.343012][ T9538] __nla_validate_parse: 5 callbacks suppressed [ 185.343029][ T9538] netlink: 224 bytes leftover after parsing attributes in process `syz.4.926'. [ 185.389342][ T9538] netlink: 48 bytes leftover after parsing attributes in process `syz.4.926'. [ 185.563399][ T9546] tipc: Enabled bearer , priority 0 [ 185.596155][ T9548] syzkaller0: entered promiscuous mode [ 185.627277][ T9549] netlink: 244 bytes leftover after parsing attributes in process `syz.3.929'. [ 185.631465][ T9548] syzkaller0: entered allmulticast mode [ 185.910248][ T9560] tipc: Resetting bearer [ 186.028873][ T9571] FAULT_INJECTION: forcing a failure. [ 186.028873][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.044023][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.4.932 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 186.044048][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.044058][ T9571] Call Trace: [ 186.044066][ T9571] [ 186.044074][ T9571] dump_stack_lvl+0x189/0x250 [ 186.044098][ T9571] ? __pfx____ratelimit+0x10/0x10 [ 186.044123][ T9571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.044140][ T9571] ? __pfx__printk+0x10/0x10 [ 186.044173][ T9571] should_fail_ex+0x414/0x560 [ 186.044203][ T9571] _copy_to_user+0x31/0xb0 [ 186.044228][ T9571] simple_read_from_buffer+0xe1/0x170 [ 186.044256][ T9571] proc_fail_nth_read+0x1df/0x250 [ 186.044284][ T9571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.044312][ T9571] ? rw_verify_area+0x258/0x650 [ 186.044331][ T9571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.044357][ T9571] vfs_read+0x200/0x980 [ 186.044383][ T9571] ? __pfx___mutex_lock+0x10/0x10 [ 186.044401][ T9571] ? __pfx_vfs_read+0x10/0x10 [ 186.044422][ T9571] ? __fget_files+0x2a/0x420 [ 186.044450][ T9571] ? __fget_files+0x3a0/0x420 [ 186.044471][ T9571] ? __fget_files+0x2a/0x420 [ 186.044503][ T9571] ksys_read+0x145/0x250 [ 186.044526][ T9571] ? __pfx_ksys_read+0x10/0x10 [ 186.044543][ T9571] ? rcu_is_watching+0x15/0xb0 [ 186.044568][ T9571] ? do_syscall_64+0xbe/0x3b0 [ 186.044590][ T9571] do_syscall_64+0xfa/0x3b0 [ 186.044606][ T9571] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.044622][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.044639][ T9571] ? clear_bhb_loop+0x60/0xb0 [ 186.044660][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.044676][ T9571] RIP: 0033:0x7fe2e278d3bc [ 186.044692][ T9571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.044706][ T9571] RSP: 002b:00007fe2e355c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.044725][ T9571] RAX: ffffffffffffffda RBX: 00007fe2e29b5fa0 RCX: 00007fe2e278d3bc [ 186.044738][ T9571] RDX: 000000000000000f RSI: 00007fe2e355c0a0 RDI: 0000000000000006 [ 186.044748][ T9571] RBP: 00007fe2e355c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.044759][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.044769][ T9571] R13: 0000000000000000 R14: 00007fe2e29b5fa0 R15: 00007ffd37ebe548 [ 186.044799][ T9571] [ 186.291421][ T9560] tipc: Disabling bearer [ 186.305526][ T9578] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 186.706066][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 186.791812][ T9608] sctp: [Deprecated]: syz.0.944 (pid 9608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.791812][ T9608] Use struct sctp_sack_info instead [ 186.797811][ T9606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.945'. [ 186.835860][ T9599] delete_channel: no stack [ 186.869581][ T9606] 8021q: VLANs not supported on team0 [ 187.010569][ T9601] pim6reg1: entered promiscuous mode [ 187.017210][ T9601] pim6reg1: entered allmulticast mode [ 187.286293][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 187.308675][ T9625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.958283][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.953'. [ 188.028400][ T9625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.119056][ T9647] dummy0: entered allmulticast mode [ 188.145778][ T9646] dummy0: left allmulticast mode [ 188.235610][ T9625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.299013][ T9650] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 188.316409][ T9650] netlink: 116 bytes leftover after parsing attributes in process `syz.1.955'. [ 188.461108][ T9668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.958'. [ 188.474699][ T9625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.709970][ T7024] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.782140][ T9346] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.806074][ T9346] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.858988][ T7036] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.234782][ T9695] openvswitch: netlink: Message has 24 unknown bytes. [ 189.264098][ T9695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.934261][ T9719] netlink: 80 bytes leftover after parsing attributes in process `syz.4.977'. [ 190.003260][ T9725] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 190.180567][ T9730] tipc: Enabled bearer , priority 0 [ 190.222125][ T9734] openvswitch: netlink: Message has 24 unknown bytes. [ 190.247425][ T9734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.270353][ T9728] syzkaller0: entered promiscuous mode [ 190.306822][ T9728] syzkaller0: entered allmulticast mode [ 190.354392][ T9729] tipc: Resetting bearer [ 190.402980][ T9727] tipc: Resetting bearer [ 190.489500][ T9727] tipc: Disabling bearer [ 190.901130][ T9768] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 190.944194][ T9768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.518214][ T9803] __nla_validate_parse: 2 callbacks suppressed [ 191.518232][ T9803] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1004'. [ 191.722470][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 191.783124][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 191.869729][ T9822] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1011'. [ 192.448587][ T9834] dummy0: entered allmulticast mode [ 193.110240][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 193.737381][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 194.007361][ T9902] bond4: (slave dummy0): Releasing active interface [ 194.218500][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 194.267436][ T9909] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 194.305169][ T9909] tipc: Enabled bearer , priority 10 [ 194.319322][ T9915] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 194.330291][ T9915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1038'. [ 194.380394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388264][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.688718][ T9936] veth1: entered promiscuous mode [ 194.982328][ T9947] netlink: zone id is out of range [ 194.987990][ T9947] netlink: zone id is out of range [ 194.996532][ T9947] netlink: zone id is out of range [ 195.002039][ T9947] netlink: zone id is out of range [ 195.007590][ T9947] netlink: zone id is out of range [ 195.022796][ T9947] netlink: zone id is out of range [ 195.032337][ T9947] netlink: zone id is out of range [ 195.040246][ T9953] netlink: 'syz.1.1046': attribute type 3 has an invalid length. [ 195.056020][ T9947] netlink: zone id is out of range [ 195.063600][ T9947] netlink: zone id is out of range [ 195.069175][ T9947] netlink: zone id is out of range [ 195.239937][ T9959] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.610181][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 195.683136][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 196.967744][T10016] vxcan1: entered allmulticast mode [ 197.778671][T10049] veth0: entered promiscuous mode [ 197.794753][T10049] veth0: entered allmulticast mode [ 197.947833][T10049] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 198.068891][T10053] veth2: entered promiscuous mode [ 198.101829][T10053] veth2: entered allmulticast mode [ 198.229876][T10062] netlink: 'syz.2.1073': attribute type 21 has an invalid length. [ 198.594510][T10081] netlink: 'syz.2.1077': attribute type 13 has an invalid length. [ 198.703170][T10081] netlink: 'syz.2.1077': attribute type 17 has an invalid length. [ 199.092344][T10100] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 199.103302][T10100] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 199.373176][T10113] netlink: 'syz.4.1084': attribute type 30 has an invalid length. [ 199.495706][T10113] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 199.956699][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 200.012530][T10138] 8021q: VLANs not supported on caif0 [ 200.029021][T10137] net_ratelimit: 163 callbacks suppressed [ 200.029038][T10137] openvswitch: netlink: Message has 24 unknown bytes. [ 200.060001][T10137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.274929][T10148] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1094'. [ 200.310461][T10144] tipc: Enabled bearer , priority 0 [ 200.319925][T10144] syzkaller0: entered promiscuous mode [ 200.333757][T10144] syzkaller0: entered allmulticast mode [ 200.416020][T10154] tipc: Resetting bearer [ 200.507132][T10158] tipc: Resetting bearer [ 200.598487][T10158] tipc: Disabling bearer [ 200.780628][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1103'. [ 200.823242][T10176] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1103'. [ 200.834738][T10177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1101'. [ 200.886397][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1103'. [ 201.107975][T10183] netlink: 'syz.0.1104': attribute type 11 has an invalid length. [ 201.128366][T10183] netlink: 'syz.0.1104': attribute type 12 has an invalid length. [ 201.136686][T10183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1104'. [ 201.290227][T10194] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 201.568764][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 201.575019][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 201.581057][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 201.683490][T10211] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 201.800239][T10221] tipc: Enabling of bearer rejected, failed to enable media [ 202.156911][T10245] sctp: [Deprecated]: syz.2.1119 (pid 10245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.156911][T10245] Use struct sctp_sack_info instead [ 202.490374][T10263] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1124'. [ 202.589323][T10271] tipc: Enabled bearer , priority 0 [ 202.845033][T10277] netlink: 'syz.3.1128': attribute type 21 has an invalid length. [ 202.860383][T10271] tipc: Disabling bearer [ 202.883322][T10277] netlink: 'syz.3.1128': attribute type 6 has an invalid length. [ 202.904816][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 202.939055][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 203.191743][T10288] bond0: (slave wlan1): Releasing backup interface [ 203.300613][T10293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.607391][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 203.664519][T10322] sctp: [Deprecated]: syz.2.1139 (pid 10322) Use of int in max_burst socket option deprecated. [ 203.664519][T10322] Use struct sctp_assoc_value instead [ 203.701201][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 203.738021][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 204.034423][T10337] validate_nla: 1 callbacks suppressed [ 204.034450][T10337] netlink: 'syz.1.1145': attribute type 6 has an invalid length. [ 204.086431][T10337] netlink: 'syz.1.1145': attribute type 5 has an invalid length. [ 204.407745][T10316] infiniband syz2: set down [ 204.430238][T10316] infiniband syz2: added vxcan1 [ 204.440144][T10316] syz2: rxe_create_cq: returned err = -12 [ 204.463491][T10316] infiniband syz2: Couldn't create ib_mad CQ [ 204.469783][T10316] infiniband syz2: Couldn't open port 1 [ 204.551125][T10316] RDS/IB: syz2: added [ 204.567371][T10316] smc: adding ib device syz2 with port count 1 [ 204.583579][T10316] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 204.922120][ T5911] vxcan1 speed is unknown, defaulting to 1000 [ 205.036982][T10362] vxcan4: entered promiscuous mode [ 205.072517][ T5981] vxcan1 speed is unknown, defaulting to 1000 [ 205.103139][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 205.163510][T10370] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 205.328266][T10373] team0: Port device team_slave_0 removed [ 205.371315][T10373] team0: Port device team_slave_1 removed [ 205.394006][T10373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.415121][T10373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.430139][T10373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.469185][T10373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.557934][T10373] bond2: (slave vlan2): Releasing active interface [ 205.636951][T10373] bond3: (slave ip6gretap1): Removing an active aggregator [ 205.657347][T10373] bond3: (slave ip6gretap1): Releasing backup interface [ 205.948725][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 206.102813][T10406] __nla_validate_parse: 11 callbacks suppressed [ 206.102833][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'. [ 206.644116][T10430] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 206.701681][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 207.132137][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 207.634140][T10433] vxcan1 speed is unknown, defaulting to 1000 [ 207.750640][T10477] netlink: 'syz.2.1183': attribute type 39 has an invalid length. [ 207.939693][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 207.970508][T10483] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 208.059659][T10483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.073191][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 208.082014][T10484] vlan2: entered allmulticast mode [ 208.082293][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 208.123233][T10484] bond4: (slave vlan2): Opening slave failed [ 208.510061][T10502] openvswitch: netlink: Message has 24 unknown bytes. [ 208.519883][T10502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.813351][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 209.194622][T10530] dvmrp8: entered allmulticast mode [ 209.274415][T10527] dvmrp8: left allmulticast mode [ 209.512787][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.576498][T10553] sctp: [Deprecated]: syz.3.1209 (pid 10553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.576498][T10553] Use struct sctp_sack_info instead [ 209.600268][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 209.674618][T10555] openvswitch: netlink: Message has 24 unknown bytes. [ 209.689235][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1212'. [ 209.703051][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.735790][T10559] dvmrp8: entered allmulticast mode [ 209.859569][T10559] dvmrp8: left allmulticast mode [ 209.870054][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1216'. [ 209.942688][T10573] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1216'. [ 210.067995][T10587] FAULT_INJECTION: forcing a failure. [ 210.067995][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 210.122438][T10587] CPU: 1 UID: 0 PID: 10587 Comm: syz.3.1222 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 210.122466][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.122485][T10587] Call Trace: [ 210.122492][T10587] [ 210.122500][T10587] dump_stack_lvl+0x189/0x250 [ 210.122523][T10587] ? __pfx____ratelimit+0x10/0x10 [ 210.122548][T10587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.122566][T10587] ? __pfx__printk+0x10/0x10 [ 210.122591][T10587] ? __pfx___might_resched+0x10/0x10 [ 210.122614][T10587] should_fail_ex+0x414/0x560 [ 210.122645][T10587] should_failslab+0xa8/0x100 [ 210.122667][T10587] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 210.122687][T10587] ? __alloc_skb+0x112/0x2d0 [ 210.122701][T10587] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 210.122728][T10587] __alloc_skb+0x112/0x2d0 [ 210.122751][T10587] pfkey_sendmsg+0x1dd/0x1090 [ 210.122777][T10587] ? __pfx___might_resched+0x10/0x10 [ 210.122793][T10587] ? __lock_acquire+0xab9/0xd20 [ 210.122815][T10587] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 210.122840][T10587] ? aa_sk_perm+0x81e/0x950 [ 210.122863][T10587] ? is_bpf_text_address+0x26/0x2b0 [ 210.122882][T10587] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.122902][T10587] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 210.122928][T10587] ? aa_sock_msg_perm+0x94/0x160 [ 210.122948][T10587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.122964][T10587] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 210.122982][T10587] __sock_sendmsg+0x219/0x270 [ 210.123006][T10587] ____sys_sendmsg+0x505/0x830 [ 210.123032][T10587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.123062][T10587] ? import_iovec+0x74/0xa0 [ 210.123087][T10587] ___sys_sendmsg+0x21f/0x2a0 [ 210.123109][T10587] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.123168][T10587] ? __fget_files+0x2a/0x420 [ 210.123190][T10587] ? __fget_files+0x3a0/0x420 [ 210.123223][T10587] __x64_sys_sendmsg+0x19b/0x260 [ 210.123246][T10587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.123277][T10587] ? __pfx_ksys_write+0x10/0x10 [ 210.123296][T10587] ? rcu_is_watching+0x15/0xb0 [ 210.123321][T10587] ? do_syscall_64+0xbe/0x3b0 [ 210.123343][T10587] do_syscall_64+0xfa/0x3b0 [ 210.123359][T10587] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.123375][T10587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.123393][T10587] ? clear_bhb_loop+0x60/0xb0 [ 210.123414][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.123430][T10587] RIP: 0033:0x7ff34198e9a9 [ 210.123446][T10587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.123460][T10587] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.123488][T10587] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 210.123502][T10587] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 210.123513][T10587] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 210.123524][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.123539][T10587] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 210.123569][T10587] [ 210.643592][T10610] openvswitch: netlink: Message has 24 unknown bytes. [ 210.650451][T10610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.662487][T10606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.747318][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 210.877353][T10628] netlink: 'syz.2.1232': attribute type 27 has an invalid length. [ 210.921177][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 211.207505][T10654] __nla_validate_parse: 1 callbacks suppressed [ 211.207524][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1236'. [ 211.532424][T10670] netlink: 'syz.4.1243': attribute type 3 has an invalid length. [ 211.688412][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 211.705380][T10689] FAULT_INJECTION: forcing a failure. [ 211.705380][T10689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.733846][T10689] CPU: 0 UID: 0 PID: 10689 Comm: syz.0.1249 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 211.733874][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.733886][T10689] Call Trace: [ 211.733894][T10689] [ 211.733902][T10689] dump_stack_lvl+0x189/0x250 [ 211.733927][T10689] ? __pfx____ratelimit+0x10/0x10 [ 211.733954][T10689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.733973][T10689] ? __pfx__printk+0x10/0x10 [ 211.733995][T10689] ? __might_fault+0xb0/0x130 [ 211.734028][T10689] should_fail_ex+0x414/0x560 [ 211.734060][T10689] _copy_from_iter+0x1db/0x16f0 [ 211.734086][T10689] ? rcu_is_watching+0x15/0xb0 [ 211.734107][T10689] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 211.734131][T10689] ? __pfx__copy_from_iter+0x10/0x10 [ 211.734151][T10689] ? __build_skb_around+0x257/0x3e0 [ 211.734175][T10689] ? skb_put+0x11b/0x210 [ 211.734196][T10689] pfkey_sendmsg+0x230/0x1090 [ 211.734222][T10689] ? __pfx___might_resched+0x10/0x10 [ 211.734239][T10689] ? __lock_acquire+0xab9/0xd20 [ 211.734262][T10689] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 211.734288][T10689] ? aa_sk_perm+0x81e/0x950 [ 211.734312][T10689] ? is_bpf_text_address+0x26/0x2b0 [ 211.734332][T10689] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.734354][T10689] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 211.734381][T10689] ? aa_sock_msg_perm+0x94/0x160 [ 211.734400][T10689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.734417][T10689] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 211.734437][T10689] __sock_sendmsg+0x219/0x270 [ 211.734464][T10689] ____sys_sendmsg+0x505/0x830 [ 211.734491][T10689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.734522][T10689] ? import_iovec+0x74/0xa0 [ 211.734553][T10689] ___sys_sendmsg+0x21f/0x2a0 [ 211.734577][T10689] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.734636][T10689] ? __fget_files+0x2a/0x420 [ 211.734658][T10689] ? __fget_files+0x3a0/0x420 [ 211.734693][T10689] __x64_sys_sendmsg+0x19b/0x260 [ 211.734716][T10689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.734747][T10689] ? __pfx_ksys_write+0x10/0x10 [ 211.734765][T10689] ? rcu_is_watching+0x15/0xb0 [ 211.734789][T10689] ? do_syscall_64+0xbe/0x3b0 [ 211.734811][T10689] do_syscall_64+0xfa/0x3b0 [ 211.734826][T10689] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.734842][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.734859][T10689] ? clear_bhb_loop+0x60/0xb0 [ 211.734880][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.734897][T10689] RIP: 0033:0x7f4ede98e9a9 [ 211.734913][T10689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.734927][T10689] RSP: 002b:00007f4edf7a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.734946][T10689] RAX: ffffffffffffffda RBX: 00007f4edebb5fa0 RCX: 00007f4ede98e9a9 [ 211.734959][T10689] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 211.734971][T10689] RBP: 00007f4edf7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.734982][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.734992][T10689] R13: 0000000000000000 R14: 00007f4edebb5fa0 R15: 00007fff98af9248 [ 211.735022][T10689] [ 212.077839][T10684] tipc: Enabled bearer , priority 0 [ 212.085572][T10684] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 212.133128][T10684] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 212.175152][T10699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.187542][T10684] tipc: Resetting bearer [ 212.198761][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 212.237187][T10699] bond0: left promiscuous mode [ 212.242379][T10699] bond_slave_0: left promiscuous mode [ 212.252851][T10699] bond_slave_1: left promiscuous mode [ 212.262071][T10699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.276538][T10707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 212.299318][T10704] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 212.308225][T10699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.379518][T10715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1257'. [ 212.566253][T10728] vxcan1 speed is unknown, defaulting to 1000 [ 212.581539][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 212.699973][T10734] FAULT_INJECTION: forcing a failure. [ 212.699973][T10734] name failslab, interval 1, probability 0, space 0, times 0 [ 212.725809][T10734] CPU: 0 UID: 0 PID: 10734 Comm: syz.2.1263 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 212.725835][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.725846][T10734] Call Trace: [ 212.725853][T10734] [ 212.725861][T10734] dump_stack_lvl+0x189/0x250 [ 212.725886][T10734] ? __pfx____ratelimit+0x10/0x10 [ 212.725912][T10734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.725931][T10734] ? __pfx__printk+0x10/0x10 [ 212.725958][T10734] ? __pfx___might_resched+0x10/0x10 [ 212.725977][T10734] ? fs_reclaim_acquire+0x7d/0x100 [ 212.726006][T10734] should_fail_ex+0x414/0x560 [ 212.726037][T10734] should_failslab+0xa8/0x100 [ 212.726062][T10734] kmem_cache_alloc_noprof+0x73/0x3c0 [ 212.726082][T10734] ? skb_clone+0x212/0x3a0 [ 212.726108][T10734] skb_clone+0x212/0x3a0 [ 212.726133][T10734] pfkey_sendmsg+0x44b/0x1090 [ 212.726159][T10734] ? __lock_acquire+0xab9/0xd20 [ 212.726181][T10734] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 212.726225][T10734] ? aa_sock_msg_perm+0x94/0x160 [ 212.726243][T10734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.726260][T10734] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 212.726278][T10734] __sock_sendmsg+0x219/0x270 [ 212.726306][T10734] ____sys_sendmsg+0x505/0x830 [ 212.726340][T10734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.726371][T10734] ? import_iovec+0x74/0xa0 [ 212.726397][T10734] ___sys_sendmsg+0x21f/0x2a0 [ 212.726420][T10734] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.726479][T10734] ? __fget_files+0x2a/0x420 [ 212.726501][T10734] ? __fget_files+0x3a0/0x420 [ 212.726535][T10734] __x64_sys_sendmsg+0x19b/0x260 [ 212.726558][T10734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.726588][T10734] ? __pfx_ksys_write+0x10/0x10 [ 212.726607][T10734] ? rcu_is_watching+0x15/0xb0 [ 212.726631][T10734] ? do_syscall_64+0xbe/0x3b0 [ 212.726652][T10734] do_syscall_64+0xfa/0x3b0 [ 212.726667][T10734] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.726683][T10734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.726699][T10734] ? clear_bhb_loop+0x60/0xb0 [ 212.726720][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.726737][T10734] RIP: 0033:0x7fbc1c38e9a9 [ 212.726754][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.726768][T10734] RSP: 002b:00007fbc1d26d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.726786][T10734] RAX: ffffffffffffffda RBX: 00007fbc1c5b5fa0 RCX: 00007fbc1c38e9a9 [ 212.726799][T10734] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 212.726811][T10734] RBP: 00007fbc1d26d090 R08: 0000000000000000 R09: 0000000000000000 [ 212.726821][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.726832][T10734] R13: 0000000000000000 R14: 00007fbc1c5b5fa0 R15: 00007ffec275af38 [ 212.726861][T10734] [ 213.317896][T10746] veth0_to_team: entered promiscuous mode [ 213.334517][T10746] veth0_to_team: entered allmulticast mode [ 213.878500][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1274'. [ 213.924010][T10775] bond0: entered promiscuous mode [ 213.930793][T10775] bond0: left promiscuous mode [ 213.941750][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 214.100569][T10791] FAULT_INJECTION: forcing a failure. [ 214.100569][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 214.137877][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.3.1278 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 214.137904][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.137916][T10791] Call Trace: [ 214.137923][T10791] [ 214.137931][T10791] dump_stack_lvl+0x189/0x250 [ 214.137957][T10791] ? __pfx____ratelimit+0x10/0x10 [ 214.137983][T10791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.138002][T10791] ? __pfx__printk+0x10/0x10 [ 214.138023][T10791] ? kasan_save_track+0x4f/0x80 [ 214.138041][T10791] ? kasan_save_free_info+0x46/0x50 [ 214.138055][T10791] ? __kasan_slab_free+0x62/0x70 [ 214.138072][T10791] ? kmem_cache_free+0x18f/0x400 [ 214.138093][T10791] ? pfkey_sendmsg+0x48a/0x1090 [ 214.138110][T10791] ? __sock_sendmsg+0x219/0x270 [ 214.138129][T10791] ? ____sys_sendmsg+0x505/0x830 [ 214.138144][T10791] ? ___sys_sendmsg+0x21f/0x2a0 [ 214.138160][T10791] ? __x64_sys_sendmsg+0x19b/0x260 [ 214.138181][T10791] should_fail_ex+0x414/0x560 [ 214.138212][T10791] should_failslab+0xa8/0x100 [ 214.138236][T10791] kmem_cache_alloc_noprof+0x73/0x3c0 [ 214.138255][T10791] ? xfrm_state_alloc+0x24/0x2f0 [ 214.138275][T10791] xfrm_state_alloc+0x24/0x2f0 [ 214.138294][T10791] pfkey_add+0x6e4/0x2e00 [ 214.138332][T10791] ? __pfx_pfkey_add+0x10/0x10 [ 214.138348][T10791] ? kmem_cache_free+0x18f/0x400 [ 214.138383][T10791] pfkey_sendmsg+0xbfe/0x1090 [ 214.138425][T10791] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 214.138469][T10791] ? aa_sock_msg_perm+0x94/0x160 [ 214.138489][T10791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.138506][T10791] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 214.138524][T10791] __sock_sendmsg+0x219/0x270 [ 214.138552][T10791] ____sys_sendmsg+0x505/0x830 [ 214.138580][T10791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.138610][T10791] ? import_iovec+0x74/0xa0 [ 214.138636][T10791] ___sys_sendmsg+0x21f/0x2a0 [ 214.138661][T10791] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.138720][T10791] ? __fget_files+0x2a/0x420 [ 214.138742][T10791] ? __fget_files+0x3a0/0x420 [ 214.138777][T10791] __x64_sys_sendmsg+0x19b/0x260 [ 214.138802][T10791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.138834][T10791] ? __pfx_ksys_write+0x10/0x10 [ 214.138852][T10791] ? rcu_is_watching+0x15/0xb0 [ 214.138878][T10791] ? do_syscall_64+0xbe/0x3b0 [ 214.138900][T10791] do_syscall_64+0xfa/0x3b0 [ 214.138915][T10791] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.138932][T10791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.138949][T10791] ? clear_bhb_loop+0x60/0xb0 [ 214.138972][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.138989][T10791] RIP: 0033:0x7ff34198e9a9 [ 214.139005][T10791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.139020][T10791] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.139039][T10791] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 214.139052][T10791] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 214.139062][T10791] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 214.139073][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.139084][T10791] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 214.139116][T10791] [ 214.549050][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 214.568274][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 214.751780][T10814] tipc: Enabling of bearer rejected, failed to enable media [ 214.875354][T10826] openvswitch: netlink: Message has 24 unknown bytes. [ 214.882338][T10826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.148990][T10846] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 215.196361][T10850] FAULT_INJECTION: forcing a failure. [ 215.196361][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 215.197979][T10846] tipc: Enabling of bearer rejected, failed to enable media [ 215.221321][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.3.1294 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 215.221346][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.221358][T10850] Call Trace: [ 215.221365][T10850] [ 215.221373][T10850] dump_stack_lvl+0x189/0x250 [ 215.221397][T10850] ? __pfx____ratelimit+0x10/0x10 [ 215.221429][T10850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.221448][T10850] ? __pfx__printk+0x10/0x10 [ 215.221474][T10850] ? __pfx___might_resched+0x10/0x10 [ 215.221491][T10850] ? fs_reclaim_acquire+0x7d/0x100 [ 215.221517][T10850] should_fail_ex+0x414/0x560 [ 215.221546][T10850] should_failslab+0xa8/0x100 [ 215.221569][T10850] __kmalloc_cache_noprof+0x70/0x3d0 [ 215.221589][T10850] ? __request_module+0x2b5/0x5e0 [ 215.221609][T10850] __request_module+0x2b5/0x5e0 [ 215.221623][T10850] ? __lock_acquire+0xab9/0xd20 [ 215.221642][T10850] ? __pfx___request_module+0x10/0x10 [ 215.221661][T10850] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 215.221689][T10850] ? __xfrm_init_state+0x7ef/0x13f0 [ 215.221716][T10850] __xfrm_init_state+0x852/0x13f0 [ 215.221737][T10850] ? __xfrm_init_state+0x7ef/0x13f0 [ 215.221765][T10850] xfrm_init_state+0x18/0xa0 [ 215.221785][T10850] pfkey_add+0x1d38/0x2e00 [ 215.221826][T10850] ? __pfx_pfkey_add+0x10/0x10 [ 215.221841][T10850] ? kmem_cache_free+0x18f/0x400 [ 215.221873][T10850] pfkey_sendmsg+0xbfe/0x1090 [ 215.221907][T10850] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 215.221946][T10850] ? aa_sock_msg_perm+0x94/0x160 [ 215.221966][T10850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.221983][T10850] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 215.222003][T10850] __sock_sendmsg+0x219/0x270 [ 215.222031][T10850] ____sys_sendmsg+0x505/0x830 [ 215.222056][T10850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.222084][T10850] ? import_iovec+0x74/0xa0 [ 215.222109][T10850] ___sys_sendmsg+0x21f/0x2a0 [ 215.222130][T10850] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.222190][T10850] ? __fget_files+0x2a/0x420 [ 215.222212][T10850] ? __fget_files+0x3a0/0x420 [ 215.222247][T10850] __x64_sys_sendmsg+0x19b/0x260 [ 215.222271][T10850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.222310][T10850] ? __pfx_ksys_write+0x10/0x10 [ 215.222329][T10850] ? rcu_is_watching+0x15/0xb0 [ 215.222354][T10850] ? do_syscall_64+0xbe/0x3b0 [ 215.222377][T10850] do_syscall_64+0xfa/0x3b0 [ 215.222393][T10850] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.222410][T10850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.222427][T10850] ? clear_bhb_loop+0x60/0xb0 [ 215.222449][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.222465][T10850] RIP: 0033:0x7ff34198e9a9 [ 215.222483][T10850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.222498][T10850] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.222518][T10850] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 215.222531][T10850] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 215.222543][T10850] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 215.222554][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.222565][T10850] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 215.222596][T10850] [ 215.754277][T10858] vxcan1 speed is unknown, defaulting to 1000 [ 215.957721][T10873] openvswitch: netlink: Message has 24 unknown bytes. [ 215.967420][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.379876][T10891] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 216.456285][T10908] FAULT_INJECTION: forcing a failure. [ 216.456285][T10908] name failslab, interval 1, probability 0, space 0, times 0 [ 216.511527][T10908] CPU: 0 UID: 0 PID: 10908 Comm: syz.4.1309 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 216.511555][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.511566][T10908] Call Trace: [ 216.511573][T10908] [ 216.511582][T10908] dump_stack_lvl+0x189/0x250 [ 216.511607][T10908] ? __pfx____ratelimit+0x10/0x10 [ 216.511633][T10908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.511652][T10908] ? __pfx__printk+0x10/0x10 [ 216.511675][T10908] ? __pfx___might_resched+0x10/0x10 [ 216.511694][T10908] ? fs_reclaim_acquire+0x7d/0x100 [ 216.511723][T10908] should_fail_ex+0x414/0x560 [ 216.511754][T10908] should_failslab+0xa8/0x100 [ 216.511778][T10908] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 216.511799][T10908] ? __request_module+0x2d1/0x5e0 [ 216.511821][T10908] kstrdup+0x42/0x100 [ 216.511838][T10908] __request_module+0x2d1/0x5e0 [ 216.511854][T10908] ? __lock_acquire+0xab9/0xd20 [ 216.511873][T10908] ? __pfx___request_module+0x10/0x10 [ 216.511893][T10908] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 216.511919][T10908] ? __xfrm_init_state+0x7ef/0x13f0 [ 216.511945][T10908] __xfrm_init_state+0x852/0x13f0 [ 216.511966][T10908] ? __xfrm_init_state+0x7ef/0x13f0 [ 216.511992][T10908] xfrm_init_state+0x18/0xa0 [ 216.512012][T10908] pfkey_add+0x1d38/0x2e00 [ 216.512054][T10908] ? __pfx_pfkey_add+0x10/0x10 [ 216.512070][T10908] ? kmem_cache_free+0x18f/0x400 [ 216.512113][T10908] pfkey_sendmsg+0xbfe/0x1090 [ 216.512150][T10908] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 216.512198][T10908] ? aa_sock_msg_perm+0x94/0x160 [ 216.512219][T10908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.512236][T10908] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 216.512255][T10908] __sock_sendmsg+0x219/0x270 [ 216.512283][T10908] ____sys_sendmsg+0x505/0x830 [ 216.512310][T10908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.512340][T10908] ? import_iovec+0x74/0xa0 [ 216.512367][T10908] ___sys_sendmsg+0x21f/0x2a0 [ 216.512391][T10908] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.512453][T10908] ? __fget_files+0x2a/0x420 [ 216.512475][T10908] ? __fget_files+0x3a0/0x420 [ 216.512510][T10908] __x64_sys_sendmsg+0x19b/0x260 [ 216.512534][T10908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.512564][T10908] ? __pfx_ksys_write+0x10/0x10 [ 216.512582][T10908] ? rcu_is_watching+0x15/0xb0 [ 216.512606][T10908] ? do_syscall_64+0xbe/0x3b0 [ 216.512628][T10908] do_syscall_64+0xfa/0x3b0 [ 216.512644][T10908] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.512660][T10908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.512677][T10908] ? clear_bhb_loop+0x60/0xb0 [ 216.512699][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.512716][T10908] RIP: 0033:0x7fe2e278e9a9 [ 216.512734][T10908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.512749][T10908] RSP: 002b:00007fe2e355c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.512769][T10908] RAX: ffffffffffffffda RBX: 00007fe2e29b5fa0 RCX: 00007fe2e278e9a9 [ 216.512783][T10908] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 216.512794][T10908] RBP: 00007fe2e355c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.512805][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.512816][T10908] R13: 0000000000000000 R14: 00007fe2e29b5fa0 R15: 00007ffd37ebe548 [ 216.512847][T10908] [ 217.408508][T10902] vxcan1 speed is unknown, defaulting to 1000 [ 217.461877][T10919] openvswitch: netlink: Message has 24 unknown bytes. [ 217.468837][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.535834][T10922] __nla_validate_parse: 8 callbacks suppressed [ 217.535853][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 217.825156][T10928] veth3: entered promiscuous mode [ 218.237398][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'. [ 218.639623][T10949] FAULT_INJECTION: forcing a failure. [ 218.639623][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 218.670886][T10949] CPU: 1 UID: 0 PID: 10949 Comm: syz.2.1323 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 218.670914][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.670925][T10949] Call Trace: [ 218.670933][T10949] [ 218.670941][T10949] dump_stack_lvl+0x189/0x250 [ 218.670966][T10949] ? __pfx____ratelimit+0x10/0x10 [ 218.670993][T10949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.671012][T10949] ? __pfx__printk+0x10/0x10 [ 218.671040][T10949] ? __pfx___might_resched+0x10/0x10 [ 218.671064][T10949] should_fail_ex+0x414/0x560 [ 218.671096][T10949] should_failslab+0xa8/0x100 [ 218.671121][T10949] __kmalloc_cache_noprof+0x70/0x3d0 [ 218.671143][T10949] ? call_usermodehelper_setup+0x8e/0x270 [ 218.671159][T10949] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 218.671196][T10949] call_usermodehelper_setup+0x8e/0x270 [ 218.671212][T10949] ? __pfx_free_modprobe_argv+0x10/0x10 [ 218.671234][T10949] __request_module+0x39f/0x5e0 [ 218.671251][T10949] ? __lock_acquire+0xab9/0xd20 [ 218.671273][T10949] ? __pfx___request_module+0x10/0x10 [ 218.671294][T10949] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 218.671323][T10949] ? __xfrm_init_state+0x7ef/0x13f0 [ 218.671351][T10949] __xfrm_init_state+0x852/0x13f0 [ 218.671373][T10949] ? __xfrm_init_state+0x7ef/0x13f0 [ 218.671400][T10949] xfrm_init_state+0x18/0xa0 [ 218.671420][T10949] pfkey_add+0x1d38/0x2e00 [ 218.671459][T10949] ? __pfx_pfkey_add+0x10/0x10 [ 218.671475][T10949] ? kmem_cache_free+0x18f/0x400 [ 218.671509][T10949] pfkey_sendmsg+0xbfe/0x1090 [ 218.671544][T10949] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 218.671593][T10949] ? aa_sock_msg_perm+0x94/0x160 [ 218.671613][T10949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.671630][T10949] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 218.671650][T10949] __sock_sendmsg+0x219/0x270 [ 218.671679][T10949] ____sys_sendmsg+0x505/0x830 [ 218.671706][T10949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.671738][T10949] ? import_iovec+0x74/0xa0 [ 218.671765][T10949] ___sys_sendmsg+0x21f/0x2a0 [ 218.671788][T10949] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.671855][T10949] ? __fget_files+0x2a/0x420 [ 218.671877][T10949] ? __fget_files+0x3a0/0x420 [ 218.671912][T10949] __x64_sys_sendmsg+0x19b/0x260 [ 218.671936][T10949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.671968][T10949] ? __pfx_ksys_write+0x10/0x10 [ 218.671986][T10949] ? rcu_is_watching+0x15/0xb0 [ 218.672011][T10949] ? do_syscall_64+0xbe/0x3b0 [ 218.672034][T10949] do_syscall_64+0xfa/0x3b0 [ 218.672050][T10949] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.672066][T10949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.672083][T10949] ? clear_bhb_loop+0x60/0xb0 [ 218.672105][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.672122][T10949] RIP: 0033:0x7fbc1c38e9a9 [ 218.672138][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.672154][T10949] RSP: 002b:00007fbc1d26d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.672173][T10949] RAX: ffffffffffffffda RBX: 00007fbc1c5b5fa0 RCX: 00007fbc1c38e9a9 [ 218.672192][T10949] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 218.672202][T10949] RBP: 00007fbc1d26d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.672212][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.672222][T10949] R13: 0000000000000000 R14: 00007fbc1c5b5fa0 R15: 00007ffec275af38 [ 218.672253][T10949] [ 219.184064][T10955] vxcan1: left allmulticast mode [ 219.314531][T10957] openvswitch: netlink: Message has 24 unknown bytes. [ 219.321372][T10957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.929253][T10980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1332'. [ 219.958758][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1332'. [ 220.005999][T10980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1332'. [ 220.070407][T10981] FAULT_INJECTION: forcing a failure. [ 220.070407][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 220.096502][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.0.1334 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 220.096531][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.096543][T10981] Call Trace: [ 220.096550][T10981] [ 220.096559][T10981] dump_stack_lvl+0x189/0x250 [ 220.096584][T10981] ? __pfx____ratelimit+0x10/0x10 [ 220.096612][T10981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.096632][T10981] ? __pfx__printk+0x10/0x10 [ 220.096660][T10981] ? __pfx___might_resched+0x10/0x10 [ 220.096683][T10981] should_fail_ex+0x414/0x560 [ 220.096713][T10981] should_failslab+0xa8/0x100 [ 220.096739][T10981] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 220.096762][T10981] ? __alloc_skb+0x112/0x2d0 [ 220.096785][T10981] __alloc_skb+0x112/0x2d0 [ 220.096808][T10981] pfkey_sendmsg+0xca5/0x1090 [ 220.096845][T10981] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 220.096882][T10981] ? aa_sock_msg_perm+0x94/0x160 [ 220.096902][T10981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.096919][T10981] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 220.096939][T10981] __sock_sendmsg+0x219/0x270 [ 220.096967][T10981] ____sys_sendmsg+0x505/0x830 [ 220.096994][T10981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.097025][T10981] ? import_iovec+0x74/0xa0 [ 220.097052][T10981] ___sys_sendmsg+0x21f/0x2a0 [ 220.097075][T10981] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.097142][T10981] ? __fget_files+0x2a/0x420 [ 220.097165][T10981] ? __fget_files+0x3a0/0x420 [ 220.097199][T10981] __x64_sys_sendmsg+0x19b/0x260 [ 220.097223][T10981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.097254][T10981] ? __pfx_ksys_write+0x10/0x10 [ 220.097273][T10981] ? rcu_is_watching+0x15/0xb0 [ 220.097299][T10981] ? do_syscall_64+0xbe/0x3b0 [ 220.097321][T10981] do_syscall_64+0xfa/0x3b0 [ 220.097337][T10981] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.097355][T10981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.097372][T10981] ? clear_bhb_loop+0x60/0xb0 [ 220.097394][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.097411][T10981] RIP: 0033:0x7f4ede98e9a9 [ 220.097427][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.097441][T10981] RSP: 002b:00007f4edf7a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.097460][T10981] RAX: ffffffffffffffda RBX: 00007f4edebb5fa0 RCX: 00007f4ede98e9a9 [ 220.097472][T10981] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 220.097483][T10981] RBP: 00007f4edf7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.097494][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.097504][T10981] R13: 0000000000000000 R14: 00007f4edebb5fa0 R15: 00007fff98af9248 [ 220.097539][T10981] [ 220.607675][T11005] openvswitch: netlink: Message has 24 unknown bytes. [ 220.642501][T11005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.129146][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 221.237184][T11050] pim6reg1: entered promiscuous mode [ 221.242712][T11050] pim6reg1: entered allmulticast mode [ 221.306709][T11054] openvswitch: netlink: Message has 24 unknown bytes. [ 221.319535][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.477962][T11066] FAULT_INJECTION: forcing a failure. [ 221.477962][T11066] name failslab, interval 1, probability 0, space 0, times 0 [ 221.669872][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.3.1360 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 221.669900][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.669911][T11066] Call Trace: [ 221.669918][T11066] [ 221.669925][T11066] dump_stack_lvl+0x189/0x250 [ 221.669950][T11066] ? __pfx____ratelimit+0x10/0x10 [ 221.669976][T11066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.669995][T11066] ? __pfx__printk+0x10/0x10 [ 221.670022][T11066] ? __pfx___might_resched+0x10/0x10 [ 221.670047][T11066] should_fail_ex+0x414/0x560 [ 221.670078][T11066] should_failslab+0xa8/0x100 [ 221.670103][T11066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 221.670123][T11066] ? skb_clone+0x212/0x3a0 [ 221.670148][T11066] skb_clone+0x212/0x3a0 [ 221.670165][T11066] ? pfkey_broadcast_one+0x7d/0x360 [ 221.670185][T11066] pfkey_broadcast_one+0x9b/0x360 [ 221.670201][T11066] ? pfkey_broadcast+0x39c/0x3e0 [ 221.670222][T11066] pfkey_broadcast+0x3a9/0x3e0 [ 221.670239][T11066] ? pfkey_broadcast+0x48/0x3e0 [ 221.670259][T11066] pfkey_sendmsg+0xdd8/0x1090 [ 221.670294][T11066] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 221.670336][T11066] ? aa_sock_msg_perm+0x94/0x160 [ 221.670355][T11066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.670372][T11066] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 221.670390][T11066] __sock_sendmsg+0x219/0x270 [ 221.670416][T11066] ____sys_sendmsg+0x505/0x830 [ 221.670443][T11066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.670471][T11066] ? import_iovec+0x74/0xa0 [ 221.670496][T11066] ___sys_sendmsg+0x21f/0x2a0 [ 221.670518][T11066] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.670575][T11066] ? __fget_files+0x2a/0x420 [ 221.670598][T11066] ? __fget_files+0x3a0/0x420 [ 221.670631][T11066] __x64_sys_sendmsg+0x19b/0x260 [ 221.670654][T11066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.670695][T11066] ? __pfx_ksys_write+0x10/0x10 [ 221.670722][T11066] ? do_syscall_64+0xbe/0x3b0 [ 221.670743][T11066] do_syscall_64+0xfa/0x3b0 [ 221.670759][T11066] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.670776][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.670794][T11066] ? clear_bhb_loop+0x60/0xb0 [ 221.670815][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.670832][T11066] RIP: 0033:0x7ff34198e9a9 [ 221.670847][T11066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.670862][T11066] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.670881][T11066] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 221.670894][T11066] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 221.670905][T11066] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.670915][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.670926][T11066] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 221.670954][T11066] [ 222.174810][T11101] netlink: 'syz.3.1368': attribute type 83 has an invalid length. [ 222.198054][T11099] netlink: 'syz.3.1368': attribute type 83 has an invalid length. [ 222.245177][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 222.257763][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 222.270773][T11105] netlink: 'syz.1.1366': attribute type 15 has an invalid length. [ 222.293729][T11107] openvswitch: netlink: Message has 24 unknown bytes. [ 222.300681][T11107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.315779][ T9346] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.324730][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 222.324754][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 222.324781][T11105] netlink: 'syz.1.1366': attribute type 15 has an invalid length. [ 222.386581][ T9346] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.409392][ T9346] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.422526][ T9346] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.456623][T11113] FAULT_INJECTION: forcing a failure. [ 222.456623][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 222.473539][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.4.1372 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 222.473566][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.473576][T11113] Call Trace: [ 222.473583][T11113] [ 222.473591][T11113] dump_stack_lvl+0x189/0x250 [ 222.473616][T11113] ? __pfx____ratelimit+0x10/0x10 [ 222.473642][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.473660][T11113] ? __pfx__printk+0x10/0x10 [ 222.473684][T11113] ? __pfx___might_resched+0x10/0x10 [ 222.473704][T11113] ? fs_reclaim_acquire+0x7d/0x100 [ 222.473734][T11113] should_fail_ex+0x414/0x560 [ 222.473766][T11113] should_failslab+0xa8/0x100 [ 222.473791][T11113] kmem_cache_alloc_noprof+0x73/0x3c0 [ 222.473813][T11113] ? radix_tree_node_alloc+0x7e/0x3a0 [ 222.473843][T11113] radix_tree_node_alloc+0x7e/0x3a0 [ 222.473875][T11113] idr_get_free+0x2b3/0xa70 [ 222.473914][T11113] idr_alloc_u32+0x159/0x2d0 [ 222.473943][T11113] ? __kasan_kmalloc+0x93/0xb0 [ 222.473970][T11113] ? __pfx_idr_alloc_u32+0x10/0x10 [ 222.473996][T11113] ? tcf_exts_init_ex+0x449/0x750 [ 222.474024][T11113] basic_change+0x3c6/0xd80 [ 222.474048][T11113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.474079][T11113] ? __pfx_basic_change+0x10/0x10 [ 222.474127][T11113] tc_new_tfilter+0xdc7/0x15b0 [ 222.474179][T11113] ? __pfx_tc_new_tfilter+0x10/0x10 [ 222.474241][T11113] ? __pfx_tc_new_tfilter+0x10/0x10 [ 222.474259][T11113] rtnetlink_rcv_msg+0x7cc/0xb70 [ 222.474277][T11113] ? __lock_acquire+0xab9/0xd20 [ 222.474296][T11113] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 222.474314][T11113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.474352][T11113] netlink_rcv_skb+0x205/0x470 [ 222.474367][T11113] ? __lock_acquire+0xab9/0xd20 [ 222.474384][T11113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.474404][T11113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.474433][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.474459][T11113] netlink_unicast+0x82f/0x9e0 [ 222.474493][T11113] ? __pfx_netlink_unicast+0x10/0x10 [ 222.474519][T11113] ? netlink_sendmsg+0x642/0xb30 [ 222.474533][T11113] ? skb_put+0x11b/0x210 [ 222.474555][T11113] netlink_sendmsg+0x805/0xb30 [ 222.474599][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.474621][T11113] ? aa_sock_msg_perm+0x94/0x160 [ 222.474640][T11113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.474657][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.474674][T11113] __sock_sendmsg+0x219/0x270 [ 222.474703][T11113] ____sys_sendmsg+0x505/0x830 [ 222.474728][T11113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.474757][T11113] ? import_iovec+0x74/0xa0 [ 222.474782][T11113] ___sys_sendmsg+0x21f/0x2a0 [ 222.474803][T11113] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.474857][T11113] ? __fget_files+0x2a/0x420 [ 222.474881][T11113] ? __fget_files+0x3a0/0x420 [ 222.474914][T11113] __x64_sys_sendmsg+0x19b/0x260 [ 222.474945][T11113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.474975][T11113] ? rcu_is_watching+0x15/0xb0 [ 222.475000][T11113] ? do_syscall_64+0xbe/0x3b0 [ 222.475020][T11113] do_syscall_64+0xfa/0x3b0 [ 222.475038][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.475053][T11113] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.475069][T11113] ? clear_bhb_loop+0x60/0xb0 [ 222.475091][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.475107][T11113] RIP: 0033:0x7fe2e278e9a9 [ 222.475124][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.475139][T11113] RSP: 002b:00007fe2e355c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.475158][T11113] RAX: ffffffffffffffda RBX: 00007fe2e29b5fa0 RCX: 00007fe2e278e9a9 [ 222.475171][T11113] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000006 [ 222.475182][T11113] RBP: 00007fe2e355c090 R08: 0000000000000000 R09: 0000000000000000 [ 222.475193][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.475204][T11113] R13: 0000000000000000 R14: 00007fe2e29b5fa0 R15: 00007ffd37ebe548 [ 222.475236][T11113] [ 222.903454][T11108] block nbd1: server does not support multiple connections per device. [ 222.907965][T11117] vxcan1 speed is unknown, defaulting to 1000 [ 222.914936][T11108] block nbd1: shutting down sockets [ 223.216629][T11128] __nla_validate_parse: 1 callbacks suppressed [ 223.216649][T11128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'. [ 223.248790][T11132] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1378'. [ 223.530069][T11147] IPVS: stopping master sync thread 6563 ... [ 223.552004][T11147] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 223.562629][T11147] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 223.580011][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 223.694418][T11137] vxcan1 speed is unknown, defaulting to 1000 [ 223.763621][T11157] FAULT_INJECTION: forcing a failure. [ 223.763621][T11157] name failslab, interval 1, probability 0, space 0, times 0 [ 223.807558][T11157] CPU: 0 UID: 0 PID: 11157 Comm: syz.1.1385 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 223.807588][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.807599][T11157] Call Trace: [ 223.807606][T11157] [ 223.807615][T11157] dump_stack_lvl+0x189/0x250 [ 223.807640][T11157] ? __pfx____ratelimit+0x10/0x10 [ 223.807666][T11157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.807686][T11157] ? __pfx__printk+0x10/0x10 [ 223.807703][T11157] ? netlink_unicast+0x82f/0x9e0 [ 223.807728][T11157] ? ___sys_sendmsg+0x21f/0x2a0 [ 223.807748][T11157] ? do_syscall_64+0xfa/0x3b0 [ 223.807777][T11157] should_fail_ex+0x414/0x560 [ 223.807808][T11157] should_failslab+0xa8/0x100 [ 223.807834][T11157] kmem_cache_alloc_noprof+0x73/0x3c0 [ 223.807855][T11157] ? skb_clone+0x212/0x3a0 [ 223.807881][T11157] skb_clone+0x212/0x3a0 [ 223.807906][T11157] __netlink_deliver_tap+0x404/0x850 [ 223.807938][T11157] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.807958][T11157] netlink_deliver_tap+0x19c/0x1b0 [ 223.807978][T11157] netlink_sendskb+0x68/0x140 [ 223.808004][T11157] netlink_unicast+0x397/0x9e0 [ 223.808026][T11157] ? __asan_memcpy+0x40/0x70 [ 223.808054][T11157] ? __pfx_netlink_unicast+0x10/0x10 [ 223.808089][T11157] netlink_rcv_skb+0x28c/0x470 [ 223.808108][T11157] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.808129][T11157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.808160][T11157] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.808187][T11157] netlink_unicast+0x82f/0x9e0 [ 223.808221][T11157] ? __pfx_netlink_unicast+0x10/0x10 [ 223.808248][T11157] ? netlink_sendmsg+0x642/0xb30 [ 223.808263][T11157] ? skb_put+0x11b/0x210 [ 223.808286][T11157] netlink_sendmsg+0x805/0xb30 [ 223.808315][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.808337][T11157] ? aa_sock_msg_perm+0x94/0x160 [ 223.808357][T11157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.808374][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.808393][T11157] __sock_sendmsg+0x219/0x270 [ 223.808422][T11157] ____sys_sendmsg+0x505/0x830 [ 223.808449][T11157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.808480][T11157] ? import_iovec+0x74/0xa0 [ 223.808503][T11157] ___sys_sendmsg+0x21f/0x2a0 [ 223.808524][T11157] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.808589][T11157] ? __fget_files+0x2a/0x420 [ 223.808609][T11157] ? __fget_files+0x3a0/0x420 [ 223.808640][T11157] __x64_sys_sendmsg+0x19b/0x260 [ 223.808663][T11157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.808690][T11157] ? __pfx_ksys_write+0x10/0x10 [ 223.808707][T11157] ? rcu_is_watching+0x15/0xb0 [ 223.808732][T11157] ? do_syscall_64+0xbe/0x3b0 [ 223.808753][T11157] do_syscall_64+0xfa/0x3b0 [ 223.808769][T11157] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.808785][T11157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.808801][T11157] ? clear_bhb_loop+0x60/0xb0 [ 223.808822][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.808838][T11157] RIP: 0033:0x7f8fb038e9a9 [ 223.808854][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.808869][T11157] RSP: 002b:00007f8fb116d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.808888][T11157] RAX: ffffffffffffffda RBX: 00007f8fb05b5fa0 RCX: 00007f8fb038e9a9 [ 223.808902][T11157] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000006 [ 223.808913][T11157] RBP: 00007f8fb116d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.808925][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.808935][T11157] R13: 0000000000000000 R14: 00007f8fb05b5fa0 R15: 00007ffcc183fa48 [ 223.808974][T11157] [ 224.127114][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'. [ 224.445025][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 224.913587][T11194] FAULT_INJECTION: forcing a failure. [ 224.913587][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 224.935208][T11194] CPU: 1 UID: 0 PID: 11194 Comm: syz.4.1397 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 224.935235][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.935246][T11194] Call Trace: [ 224.935253][T11194] [ 224.935260][T11194] dump_stack_lvl+0x189/0x250 [ 224.935285][T11194] ? __pfx____ratelimit+0x10/0x10 [ 224.935310][T11194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.935327][T11194] ? __pfx__printk+0x10/0x10 [ 224.935352][T11194] ? __pfx___might_resched+0x10/0x10 [ 224.935370][T11194] ? fs_reclaim_acquire+0x7d/0x100 [ 224.935399][T11194] should_fail_ex+0x414/0x560 [ 224.935431][T11194] should_failslab+0xa8/0x100 [ 224.935455][T11194] kmem_cache_alloc_noprof+0x73/0x3c0 [ 224.935475][T11194] ? radix_tree_node_alloc+0x7e/0x3a0 [ 224.935502][T11194] radix_tree_node_alloc+0x7e/0x3a0 [ 224.935532][T11194] idr_get_free+0x2b3/0xa70 [ 224.935576][T11194] idr_alloc_u32+0x159/0x2d0 [ 224.935597][T11194] ? __kasan_kmalloc+0x93/0xb0 [ 224.935622][T11194] ? __pfx_idr_alloc_u32+0x10/0x10 [ 224.935646][T11194] ? tcf_exts_init_ex+0x449/0x750 [ 224.935673][T11194] basic_change+0x3c6/0xd80 [ 224.935695][T11194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.935723][T11194] ? __pfx_basic_change+0x10/0x10 [ 224.935767][T11194] tc_new_tfilter+0xdc7/0x15b0 [ 224.935812][T11194] ? __pfx_tc_new_tfilter+0x10/0x10 [ 224.935864][T11194] ? __pfx_tc_new_tfilter+0x10/0x10 [ 224.935881][T11194] rtnetlink_rcv_msg+0x7cc/0xb70 [ 224.935897][T11194] ? __lock_acquire+0xab9/0xd20 [ 224.935916][T11194] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 224.935931][T11194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.935967][T11194] netlink_rcv_skb+0x205/0x470 [ 224.935983][T11194] ? __lock_acquire+0xab9/0xd20 [ 224.935999][T11194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.936017][T11194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.936045][T11194] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.936072][T11194] netlink_unicast+0x82f/0x9e0 [ 224.936104][T11194] ? __pfx_netlink_unicast+0x10/0x10 [ 224.936127][T11194] ? netlink_sendmsg+0x642/0xb30 [ 224.936142][T11194] ? skb_put+0x11b/0x210 [ 224.936164][T11194] netlink_sendmsg+0x805/0xb30 [ 224.936196][T11194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.936218][T11194] ? aa_sock_msg_perm+0x94/0x160 [ 224.936238][T11194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.936253][T11194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.936271][T11194] __sock_sendmsg+0x219/0x270 [ 224.936300][T11194] ____sys_sendmsg+0x505/0x830 [ 224.936324][T11194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.936354][T11194] ? import_iovec+0x74/0xa0 [ 224.936380][T11194] ___sys_sendmsg+0x21f/0x2a0 [ 224.936402][T11194] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.936458][T11194] ? __fget_files+0x2a/0x420 [ 224.936481][T11194] ? __fget_files+0x3a0/0x420 [ 224.936514][T11194] __x64_sys_sendmsg+0x19b/0x260 [ 224.936536][T11194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.936574][T11194] ? __pfx_ksys_write+0x10/0x10 [ 224.936593][T11194] ? rcu_is_watching+0x15/0xb0 [ 224.936616][T11194] ? do_syscall_64+0xbe/0x3b0 [ 224.936639][T11194] do_syscall_64+0xfa/0x3b0 [ 224.936655][T11194] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.936671][T11194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.936688][T11194] ? clear_bhb_loop+0x60/0xb0 [ 224.936710][T11194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.936726][T11194] RIP: 0033:0x7fe2e278e9a9 [ 224.936742][T11194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.936757][T11194] RSP: 002b:00007fe2e355c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.936777][T11194] RAX: ffffffffffffffda RBX: 00007fe2e29b5fa0 RCX: 00007fe2e278e9a9 [ 224.936790][T11194] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000006 [ 224.936800][T11194] RBP: 00007fe2e355c090 R08: 0000000000000000 R09: 0000000000000000 [ 224.936811][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.936821][T11194] R13: 0000000000000000 R14: 00007fe2e29b5fa0 R15: 00007ffd37ebe548 [ 224.936850][T11194] [ 225.390922][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 225.401687][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 225.451338][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 225.465907][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 225.688507][T11212] netlink: 'syz.4.1401': attribute type 12 has an invalid length. [ 225.831846][T11230] netlink: 'syz.2.1407': attribute type 12 has an invalid length. [ 225.997027][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 226.063870][T11226] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 226.257617][T11252] FAULT_INJECTION: forcing a failure. [ 226.257617][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 226.292366][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.3.1411 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 226.292395][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.292406][T11252] Call Trace: [ 226.292414][T11252] [ 226.292422][T11252] dump_stack_lvl+0x189/0x250 [ 226.292455][T11252] ? __pfx____ratelimit+0x10/0x10 [ 226.292481][T11252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.292501][T11252] ? __pfx__printk+0x10/0x10 [ 226.292526][T11252] ? __pfx___might_resched+0x10/0x10 [ 226.292545][T11252] ? fs_reclaim_acquire+0x7d/0x100 [ 226.292575][T11252] should_fail_ex+0x414/0x560 [ 226.292607][T11252] should_failslab+0xa8/0x100 [ 226.292633][T11252] kmem_cache_alloc_noprof+0x73/0x3c0 [ 226.292653][T11252] ? radix_tree_node_alloc+0x7e/0x3a0 [ 226.292682][T11252] radix_tree_node_alloc+0x7e/0x3a0 [ 226.292713][T11252] idr_get_free+0x2b3/0xa70 [ 226.292753][T11252] idr_alloc_u32+0x159/0x2d0 [ 226.292777][T11252] ? __kasan_kmalloc+0x93/0xb0 [ 226.292804][T11252] ? __pfx_idr_alloc_u32+0x10/0x10 [ 226.292831][T11252] ? tcf_exts_init_ex+0x449/0x750 [ 226.292859][T11252] basic_change+0x3c6/0xd80 [ 226.292885][T11252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 226.292916][T11252] ? __pfx_basic_change+0x10/0x10 [ 226.292959][T11252] tc_new_tfilter+0xdc7/0x15b0 [ 226.293007][T11252] ? __pfx_tc_new_tfilter+0x10/0x10 [ 226.293064][T11252] ? __pfx_tc_new_tfilter+0x10/0x10 [ 226.293083][T11252] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.293100][T11252] ? __lock_acquire+0xab9/0xd20 [ 226.293119][T11252] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 226.293136][T11252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.293173][T11252] netlink_rcv_skb+0x205/0x470 [ 226.293190][T11252] ? __lock_acquire+0xab9/0xd20 [ 226.293206][T11252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.293226][T11252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.293258][T11252] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.293284][T11252] netlink_unicast+0x82f/0x9e0 [ 226.293319][T11252] ? __pfx_netlink_unicast+0x10/0x10 [ 226.293345][T11252] ? netlink_sendmsg+0x642/0xb30 [ 226.293361][T11252] ? skb_put+0x11b/0x210 [ 226.293385][T11252] netlink_sendmsg+0x805/0xb30 [ 226.293411][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.293433][T11252] ? aa_sock_msg_perm+0x94/0x160 [ 226.293461][T11252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.293478][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.293497][T11252] __sock_sendmsg+0x219/0x270 [ 226.293526][T11252] ____sys_sendmsg+0x505/0x830 [ 226.293553][T11252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.293581][T11252] ? import_iovec+0x74/0xa0 [ 226.293607][T11252] ___sys_sendmsg+0x21f/0x2a0 [ 226.293630][T11252] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.293692][T11252] ? __fget_files+0x2a/0x420 [ 226.293714][T11252] ? __fget_files+0x3a0/0x420 [ 226.293748][T11252] __x64_sys_sendmsg+0x19b/0x260 [ 226.293772][T11252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.293804][T11252] ? __pfx_ksys_write+0x10/0x10 [ 226.293822][T11252] ? rcu_is_watching+0x15/0xb0 [ 226.293847][T11252] ? do_syscall_64+0xbe/0x3b0 [ 226.293869][T11252] do_syscall_64+0xfa/0x3b0 [ 226.293885][T11252] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.293901][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.293918][T11252] ? clear_bhb_loop+0x60/0xb0 [ 226.293940][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.293957][T11252] RIP: 0033:0x7ff34198e9a9 [ 226.293974][T11252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.293989][T11252] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.294009][T11252] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 226.294022][T11252] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000006 [ 226.294034][T11252] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 226.294045][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.294056][T11252] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 226.294087][T11252] [ 226.725996][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 226.822352][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 226.984783][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.020530][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.351072][T11280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.367979][T11280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.412041][T11287] FAULT_INJECTION: forcing a failure. [ 227.412041][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 227.427131][T11287] CPU: 1 UID: 0 PID: 11287 Comm: syz.2.1423 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 227.427160][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.427171][T11287] Call Trace: [ 227.427179][T11287] [ 227.427187][T11287] dump_stack_lvl+0x189/0x250 [ 227.427212][T11287] ? __pfx____ratelimit+0x10/0x10 [ 227.427238][T11287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.427258][T11287] ? __pfx__printk+0x10/0x10 [ 227.427282][T11287] ? __pfx___might_resched+0x10/0x10 [ 227.427302][T11287] ? fs_reclaim_acquire+0x7d/0x100 [ 227.427331][T11287] should_fail_ex+0x414/0x560 [ 227.427363][T11287] should_failslab+0xa8/0x100 [ 227.427398][T11287] kmem_cache_alloc_noprof+0x73/0x3c0 [ 227.427419][T11287] ? radix_tree_node_alloc+0x7e/0x3a0 [ 227.427447][T11287] radix_tree_node_alloc+0x7e/0x3a0 [ 227.427477][T11287] idr_get_free+0x2b3/0xa70 [ 227.427512][T11287] idr_alloc_u32+0x159/0x2d0 [ 227.427535][T11287] ? __kasan_kmalloc+0x93/0xb0 [ 227.427559][T11287] ? __pfx_idr_alloc_u32+0x10/0x10 [ 227.427586][T11287] ? tcf_exts_init_ex+0x449/0x750 [ 227.427614][T11287] basic_change+0x3c6/0xd80 [ 227.427637][T11287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.427667][T11287] ? __pfx_basic_change+0x10/0x10 [ 227.427712][T11287] tc_new_tfilter+0xdc7/0x15b0 [ 227.427763][T11287] ? __pfx_tc_new_tfilter+0x10/0x10 [ 227.427818][T11287] ? __pfx_tc_new_tfilter+0x10/0x10 [ 227.427837][T11287] rtnetlink_rcv_msg+0x7cc/0xb70 [ 227.427860][T11287] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 227.427877][T11287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.427892][T11287] ? ref_tracker_free+0x63a/0x7d0 [ 227.427911][T11287] ? __asan_memcpy+0x40/0x70 [ 227.427930][T11287] ? __pfx_ref_tracker_free+0x10/0x10 [ 227.427946][T11287] ? __skb_clone+0x63/0x7a0 [ 227.427976][T11287] netlink_rcv_skb+0x205/0x470 [ 227.427994][T11287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.428012][T11287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.428040][T11287] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.428068][T11287] netlink_unicast+0x82f/0x9e0 [ 227.428101][T11287] ? __pfx_netlink_unicast+0x10/0x10 [ 227.428128][T11287] ? netlink_sendmsg+0x642/0xb30 [ 227.428143][T11287] ? skb_put+0x11b/0x210 [ 227.428167][T11287] netlink_sendmsg+0x805/0xb30 [ 227.428196][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.428217][T11287] ? aa_sock_msg_perm+0x94/0x160 [ 227.428238][T11287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.428255][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.428274][T11287] __sock_sendmsg+0x219/0x270 [ 227.428303][T11287] ____sys_sendmsg+0x505/0x830 [ 227.428330][T11287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.428361][T11287] ? import_iovec+0x74/0xa0 [ 227.428395][T11287] ___sys_sendmsg+0x21f/0x2a0 [ 227.428418][T11287] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.428479][T11287] ? __fget_files+0x2a/0x420 [ 227.428501][T11287] ? __fget_files+0x3a0/0x420 [ 227.428534][T11287] __x64_sys_sendmsg+0x19b/0x260 [ 227.428556][T11287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.428586][T11287] ? __pfx_ksys_write+0x10/0x10 [ 227.428603][T11287] ? rcu_is_watching+0x15/0xb0 [ 227.428626][T11287] ? do_syscall_64+0xbe/0x3b0 [ 227.428647][T11287] do_syscall_64+0xfa/0x3b0 [ 227.428663][T11287] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.428678][T11287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.428695][T11287] ? clear_bhb_loop+0x60/0xb0 [ 227.428717][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.428732][T11287] RIP: 0033:0x7fbc1c38e9a9 [ 227.428748][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.428763][T11287] RSP: 002b:00007fbc1d26d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.428782][T11287] RAX: ffffffffffffffda RBX: 00007fbc1c5b5fa0 RCX: 00007fbc1c38e9a9 [ 227.428795][T11287] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000006 [ 227.428807][T11287] RBP: 00007fbc1d26d090 R08: 0000000000000000 R09: 0000000000000000 [ 227.428819][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.428829][T11287] R13: 0000000000000000 R14: 00007fbc1c5b5fa0 R15: 00007ffec275af38 [ 227.428860][T11287] [ 227.939009][T11280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.962650][T11280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.183987][T11280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.194675][T11280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.205997][T11315] FAULT_INJECTION: forcing a failure. [ 228.205997][T11315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.233357][T11314] netlink: 'syz.0.1431': attribute type 13 has an invalid length. [ 228.266035][T11315] CPU: 0 UID: 0 PID: 11315 Comm: syz.3.1433 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 228.266062][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.266073][T11315] Call Trace: [ 228.266080][T11315] [ 228.266088][T11315] dump_stack_lvl+0x189/0x250 [ 228.266111][T11315] ? __pfx____ratelimit+0x10/0x10 [ 228.266135][T11315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.266154][T11315] ? __pfx__printk+0x10/0x10 [ 228.266176][T11315] ? __might_fault+0xb0/0x130 [ 228.266205][T11315] should_fail_ex+0x414/0x560 [ 228.266232][T11315] _copy_from_user+0x2d/0xb0 [ 228.266253][T11315] ___sys_sendmsg+0x158/0x2a0 [ 228.266275][T11315] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.266330][T11315] ? __fget_files+0x2a/0x420 [ 228.266362][T11315] ? __fget_files+0x3a0/0x420 [ 228.266394][T11315] __sys_sendmmsg+0x227/0x430 [ 228.266419][T11315] ? __pfx___sys_sendmmsg+0x10/0x10 [ 228.266437][T11315] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 228.266484][T11315] ? ksys_write+0x22a/0x250 [ 228.266507][T11315] ? __pfx_ksys_write+0x10/0x10 [ 228.266524][T11315] ? rcu_is_watching+0x15/0xb0 [ 228.266550][T11315] __x64_sys_sendmmsg+0xa0/0xc0 [ 228.266572][T11315] do_syscall_64+0xfa/0x3b0 [ 228.266589][T11315] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.266605][T11315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.266625][T11315] ? clear_bhb_loop+0x60/0xb0 [ 228.266647][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.266663][T11315] RIP: 0033:0x7ff34198e9a9 [ 228.266680][T11315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.266695][T11315] RSP: 002b:00007ff34277d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.266715][T11315] RAX: ffffffffffffffda RBX: 00007ff341bb5fa0 RCX: 00007ff34198e9a9 [ 228.266728][T11315] RDX: 0000000000000003 RSI: 0000200000002c80 RDI: 0000000000000003 [ 228.266739][T11315] RBP: 00007ff34277d090 R08: 0000000000000000 R09: 0000000000000000 [ 228.266751][T11315] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 228.266761][T11315] R13: 0000000000000000 R14: 00007ff341bb5fa0 R15: 00007ffca679fb68 [ 228.266791][T11315] [ 228.495642][T11318] netlink: 'syz.4.1434': attribute type 11 has an invalid length. [ 228.588791][T11314] bridge0: port 3(gretap0) entered disabled state [ 228.799257][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.806746][T11314] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.135018][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.172814][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.635216][T11280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.645955][T11280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.682550][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 229.715018][ T1903] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.733671][ T1903] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.752822][ T1903] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.820306][ T1903] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.836635][ T1903] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.846719][ T1903] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.895838][ T1903] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.914217][ T1903] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.925133][ T1903] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.939899][ T1903] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.967889][ T1903] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.986459][ T1903] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.063062][ T9346] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.087223][ T9346] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.186550][ T3553] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.223942][ T3553] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.278934][ T3553] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.288939][ T3553] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.376691][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.386034][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.397838][T11368] tipc: Enabling of bearer rejected, failed to enable media [ 230.567058][T11376] netlink: 'syz.4.1449': attribute type 11 has an invalid length. [ 230.578778][T11373] __nla_validate_parse: 1 callbacks suppressed [ 230.578798][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 230.835534][T11385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1451'. [ 230.869964][T11385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1451'. [ 231.015013][T11400] openvswitch: netlink: Message has 24 unknown bytes. [ 231.022561][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.535899][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 231.828567][T11446] openvswitch: netlink: Message has 24 unknown bytes. [ 231.847184][T11446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.997124][T11459] netlink: 'syz.1.1474': attribute type 7 has an invalid length. [ 232.016666][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'. [ 232.039400][T11459] netlink: 'syz.1.1474': attribute type 7 has an invalid length. [ 232.065256][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'. [ 232.200682][T11473] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 232.211454][T11473] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1478'. [ 232.224556][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 232.280598][T11475] syzkaller1: entered promiscuous mode [ 232.305799][T11475] syzkaller1: entered allmulticast mode [ 232.317491][T11475] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 232.328513][T11475] netlink: 'syz.1.1479': attribute type 5 has an invalid length. [ 232.357246][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 232.365724][T11475] bridge0: port 1(erspan0) entered blocking state [ 232.377442][T11475] bridge0: port 1(erspan0) entered disabled state [ 232.386677][T11475] erspan0: entered allmulticast mode [ 232.400028][T11475] erspan0: entered promiscuous mode [ 232.581253][T11487] openvswitch: netlink: Message has 24 unknown bytes. [ 232.598232][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.636740][T11490] netlink: 'syz.0.1485': attribute type 13 has an invalid length. [ 232.675582][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1485'. [ 232.749840][T11490] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 232.862662][T11506] lo speed is unknown, defaulting to 1000 [ 232.870270][T11506] lo speed is unknown, defaulting to 1000 [ 232.877082][T11506] lo speed is unknown, defaulting to 1000 [ 232.973459][T11515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.981106][T11515] IPv6: NLM_F_CREATE should be set when creating new route [ 233.039678][T11518] syzkaller1: entered promiscuous mode [ 233.046588][T11518] syzkaller1: entered allmulticast mode [ 233.145038][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.231039][T11513] vxcan1 speed is unknown, defaulting to 1000 [ 233.553226][T11531] openvswitch: netlink: Message has 24 unknown bytes. [ 233.568778][T11531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.634370][T11506] infiniband syz0: set active [ 233.639566][ T5982] lo speed is unknown, defaulting to 1000 [ 233.645615][T11506] infiniband syz0: added lo [ 233.695990][T11519] vxcan1 speed is unknown, defaulting to 1000 [ 233.706748][T11505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.720343][T11506] RDS/IB: syz0: added [ 233.724681][T11506] smc: adding ib device syz0 with port count 1 [ 233.731010][T11506] smc: ib device syz0 port 1 has pnetid [ 233.747375][ T5982] lo speed is unknown, defaulting to 1000 [ 233.780094][T11506] lo speed is unknown, defaulting to 1000 [ 233.880133][T11535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.896001][T11534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.993596][T11544] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 234.430172][T11506] lo speed is unknown, defaulting to 1000 [ 234.837860][T11529] vxcan1 speed is unknown, defaulting to 1000 [ 234.845378][T11506] lo speed is unknown, defaulting to 1000 [ 235.020015][T11555] syzkaller1: entered promiscuous mode [ 235.028099][T11555] syzkaller1: entered allmulticast mode [ 235.359165][T11571] macsec1: entered promiscuous mode [ 235.365016][T11571] macsec1: entered allmulticast mode [ 235.475208][T11519] lo speed is unknown, defaulting to 1000 [ 235.667146][T11586] __nla_validate_parse: 8 callbacks suppressed [ 235.667159][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 235.686162][T11583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.710684][T11587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.725648][T11587] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 235.897038][T11586] netlink: 'syz.4.1513': attribute type 2 has an invalid length. [ 237.556143][T11506] lo speed is unknown, defaulting to 1000 [ 237.594724][T11586] : entered promiscuous mode [ 237.811112][T11599] netlink: 624 bytes leftover after parsing attributes in process `syz.4.1515'. [ 237.935138][T11506] lo speed is unknown, defaulting to 1000 [ 238.056191][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 238.254221][T11506] lo speed is unknown, defaulting to 1000 [ 238.554439][T11620] net_ratelimit: 2 callbacks suppressed [ 238.554456][T11620] openvswitch: netlink: Message has 24 unknown bytes. [ 238.567082][T11620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.645956][T11506] lo speed is unknown, defaulting to 1000 [ 239.037521][T11628] netlink: 'syz.4.1526': attribute type 29 has an invalid length. [ 239.059180][T11628] netlink: 'syz.4.1526': attribute type 29 has an invalid length. [ 239.125441][T11630] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 239.143680][T11630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1527'. [ 239.153857][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 239.313660][T11631] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 239.343283][T11631] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 239.502230][T11631] netlink: 'syz.2.1527': attribute type 3 has an invalid length. [ 239.513303][T11631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.542589][ T5934] lo speed is unknown, defaulting to 1000 [ 239.730435][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 240.174374][T11636] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.339807][T11636] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.598722][T11636] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.610829][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 240.642805][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 240.713778][T11642] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 240.790026][T11642] batman_adv: batadv0: Adding interface: team0 [ 240.797600][T11642] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 240.853132][T11642] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 240.882280][T11636] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.043449][ T7018] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.072206][ T3553] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.137286][ T3553] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.182451][ T9346] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.488593][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 241.500302][T11667] vxcan1: entered allmulticast mode [ 241.832011][T11683] tipc: Started in network mode [ 241.838063][T11683] tipc: Node identity 0aea4e3e3e0e, cluster identity 4711 [ 241.865678][T11683] tipc: Enabled bearer , priority 0 [ 241.888266][T11683] syzkaller0: entered promiscuous mode [ 241.910464][T11683] syzkaller0: entered allmulticast mode [ 241.937145][T11683] tipc: Resetting bearer [ 241.969751][T11692] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 242.007114][ T7018] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 242.015725][T11690] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 242.023444][T11690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 242.102270][T11697] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 242.128034][T11697] rdma_rxe: rxe_newlink: failed to add lo [ 242.226714][T11697] bridge0: port 3(gretap0) entered blocking state [ 242.233418][T11697] bridge0: port 3(gretap0) entered forwarding state [ 242.251201][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 242.277971][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.290118][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 242.318664][T11697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.356318][T11706] vxcan1 speed is unknown, defaulting to 1000 [ 242.540252][T11706] lo speed is unknown, defaulting to 1000 [ 242.601210][T11682] tipc: Resetting bearer [ 242.622760][T11682] tipc: Disabling bearer [ 243.063049][T11736] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 243.278201][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 243.290358][T11746] openvswitch: netlink: Message has 24 unknown bytes. [ 243.299866][T11746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.667389][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 243.828179][T11762] netlink: 'syz.1.1563': attribute type 2 has an invalid length. [ 243.860235][T11764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1566'. [ 243.920983][T11762] : entered promiscuous mode [ 244.532045][T11783] tipc: Enabled bearer , priority 0 [ 244.564158][T11783] syzkaller0: entered promiscuous mode [ 244.580724][T11783] syzkaller0: entered allmulticast mode [ 244.630327][T11783] tipc: Resetting bearer [ 244.707620][T11794] openvswitch: netlink: Message has 24 unknown bytes. [ 244.714847][T11794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.266881][T11781] tipc: Resetting bearer [ 245.299825][T11781] tipc: Disabling bearer [ 245.568841][T11809] openvswitch: netlink: IP tunnel dst address not specified [ 245.620065][T11806] vxcan1 speed is unknown, defaulting to 1000 [ 245.752060][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 245.910532][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 246.056901][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1582'. [ 246.093501][T11827] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1582'. [ 246.168126][T11806] lo speed is unknown, defaulting to 1000 [ 246.273815][T11835] bond0: (slave wlan1): Releasing backup interface [ 246.433928][T11841] openvswitch: netlink: Message has 24 unknown bytes. [ 246.441180][T11841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.580937][T11844] tap0: tun_chr_ioctl cmd 1074812118 [ 246.600838][T11844] __nla_validate_parse: 2 callbacks suppressed [ 246.600857][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 246.620555][T11844] openvswitch: netlink: Flow key attr not present in new flow. [ 246.700919][T11846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1590'. [ 246.933106][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1592'. [ 247.533843][T11875] batman_adv: batadv0: Removing interface: team0 [ 247.897835][T11882] IPVS: persistence engine module ip_vs_pe_ not found [ 247.920568][ T5982] IPVS: starting estimator thread 0... [ 247.939738][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1602'. [ 248.024337][T11887] IPVS: using max 28 ests per chain, 67200 per kthread [ 248.056587][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 248.104425][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 248.143377][T11894] netlink: 'syz.3.1606': attribute type 18 has an invalid length. [ 248.152170][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 248.188993][T11894] netlink: 'syz.3.1606': attribute type 18 has an invalid length. [ 248.291556][T11907] netlink: 'syz.2.1611': attribute type 3 has an invalid length. [ 248.373005][T11912] IPv6: Can't replace route, no match found [ 248.498515][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 248.729011][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 248.740443][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 248.900443][T11940] vxcan1 speed is unknown, defaulting to 1000 [ 249.342267][T11950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.352478][T11950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.362294][T11950] bond0 (unregistering): Released all slaves [ 249.380163][T11940] lo speed is unknown, defaulting to 1000 [ 249.752923][T11977] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 249.780765][T11977] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 249.787657][ T30] audit: type=1800 audit(1753772655.435:3): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1636" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1552 res=0 errno=0 [ 249.796090][T11977] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 249.870676][T11977] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.307261][T11999] tipc: Enabling of bearer rejected, already enabled [ 250.851500][T12017] geneve2: entered promiscuous mode [ 250.906475][ T9346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.939461][ T9346] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.973519][T12031] netlink: 'syz.4.1650': attribute type 6 has an invalid length. [ 251.002420][ T9346] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.012854][ T7018] wlan0: Trigger new scan to find an IBSS to join [ 251.046187][ T9346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.538287][T12052] tipc: Enabling of bearer rejected, already enabled [ 251.657548][T12063] __nla_validate_parse: 8 callbacks suppressed [ 251.657569][T12063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1661'. [ 251.712269][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 251.766841][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 251.924502][T12081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.078645][T12091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1669'. [ 252.097040][T12091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1669'. [ 252.110885][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 252.136100][ T51] Bluetooth: hci4: link tx timeout [ 252.151017][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 252.192519][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 252.234132][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 252.736743][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1684'. [ 253.120821][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 253.365178][T12169] openvswitch: netlink: Message has 24 unknown bytes. [ 253.372189][T12169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.589750][T12180] bpq0: entered promiscuous mode [ 253.600417][T12180] bpq0: entered allmulticast mode [ 253.615372][T12180] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 253.653898][T12180] bond5: entered promiscuous mode [ 253.659578][T12180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.759425][T12193] tipc: Enabled bearer , priority 0 [ 253.836021][ T5847] Bluetooth: hci4: link tx timeout [ 253.841348][ T5847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 253.917281][T12193] tipc: Disabling bearer [ 253.975615][ T7024] wlan0: Trigger new scan to find an IBSS to join [ 253.984024][T12213] erspan0: left allmulticast mode [ 253.990343][T12213] erspan0: left promiscuous mode [ 254.003672][T12213] bridge0: port 1(erspan0) entered disabled state [ 254.042079][T12219] FAULT_INJECTION: forcing a failure. [ 254.042079][T12219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.086477][T12219] CPU: 0 UID: 0 PID: 12219 Comm: syz.4.1709 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 254.086505][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.086527][T12219] Call Trace: [ 254.086535][T12219] [ 254.086542][T12219] dump_stack_lvl+0x189/0x250 [ 254.086565][T12219] ? __pfx____ratelimit+0x10/0x10 [ 254.086591][T12219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.086608][T12219] ? __pfx__printk+0x10/0x10 [ 254.086653][T12219] should_fail_ex+0x414/0x560 [ 254.086682][T12219] _copy_to_user+0x31/0xb0 [ 254.086707][T12219] simple_read_from_buffer+0xe1/0x170 [ 254.086735][T12219] proc_fail_nth_read+0x1df/0x250 [ 254.086765][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.086794][T12219] ? rw_verify_area+0x258/0x650 [ 254.086814][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.086840][T12219] vfs_read+0x200/0x980 [ 254.086866][T12219] ? __pfx___mutex_lock+0x10/0x10 [ 254.086885][T12219] ? __pfx_vfs_read+0x10/0x10 [ 254.086907][T12219] ? __fget_files+0x2a/0x420 [ 254.086935][T12219] ? __fget_files+0x3a0/0x420 [ 254.086957][T12219] ? __fget_files+0x2a/0x420 [ 254.086989][T12219] ksys_read+0x145/0x250 [ 254.087012][T12219] ? __pfx_ksys_read+0x10/0x10 [ 254.087030][T12219] ? rcu_is_watching+0x15/0xb0 [ 254.087054][T12219] ? do_syscall_64+0xbe/0x3b0 [ 254.087077][T12219] do_syscall_64+0xfa/0x3b0 [ 254.087093][T12219] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.087109][T12219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.087126][T12219] ? clear_bhb_loop+0x60/0xb0 [ 254.087147][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.087163][T12219] RIP: 0033:0x7fe2e278d3bc [ 254.087180][T12219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.087195][T12219] RSP: 002b:00007fe2e355c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.087214][T12219] RAX: ffffffffffffffda RBX: 00007fe2e29b5fa0 RCX: 00007fe2e278d3bc [ 254.087227][T12219] RDX: 000000000000000f RSI: 00007fe2e355c0a0 RDI: 0000000000000003 [ 254.087239][T12219] RBP: 00007fe2e355c090 R08: 0000000000000000 R09: 0000000000000000 [ 254.087250][T12219] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001 [ 254.087261][T12219] R13: 0000000000000001 R14: 00007fe2e29b5fa0 R15: 00007ffd37ebe548 [ 254.087291][T12219] [ 254.364511][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 254.497684][T12238] tipc: Enabled bearer , priority 0 [ 254.506055][T12238] syzkaller0: entered promiscuous mode [ 254.511548][T12238] syzkaller0: entered allmulticast mode [ 254.552783][T12238] syzkaller0: mtu less than device minimum [ 254.616335][T12236] tipc: Resetting bearer [ 254.674254][T12236] tipc: Disabling bearer [ 255.317684][T12265] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 255.336120][T12265] bond0 (unregistering): Released all slaves [ 255.530110][T12283] gretap0: left allmulticast mode [ 255.555812][T12283] gretap0: left promiscuous mode [ 255.581295][T12283] bridge0: port 3(gretap0) entered disabled state [ 255.646070][T12283] bridge_slave_0: left allmulticast mode [ 255.652368][T12283] bridge_slave_0: left promiscuous mode [ 255.662800][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.716752][T12283] bridge_slave_1: left allmulticast mode [ 255.722443][T12283] bridge_slave_1: left promiscuous mode [ 255.732629][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.759713][T12283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.774455][T12283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.789263][T12283] bond1: (slave gretap1): Releasing active interface [ 255.802111][T12283] bond2: (slave bond3): Releasing backup interface [ 255.808754][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821513][T12283] bond5: (slave geneve2): Releasing active interface [ 256.171231][T12306] tipc: Enabled bearer , priority 0 [ 256.351390][T12301] tipc: Disabling bearer [ 256.700619][T12331] openvswitch: netlink: Message has 24 unknown bytes. [ 256.709361][T12332] netlink: 'syz.2.1734': attribute type 2 has an invalid length. [ 256.726905][T12331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.824962][T12337] __nla_validate_parse: 8 callbacks suppressed [ 256.824983][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 256.847142][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 256.924341][ T7024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.971354][T12337] tipc: Enabled bearer , priority 0 [ 256.991488][T12337] syzkaller0: MTU too low for tipc bearer [ 257.019081][T12337] tipc: Disabling bearer [ 257.107232][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 257.121905][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 257.273888][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 257.538511][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 257.706679][T12374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1747'. [ 257.736710][T12374] netlink: 245 bytes leftover after parsing attributes in process `syz.2.1747'. [ 258.179864][T12391] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1752'. [ 258.212275][T12391] 8021q: VLANs not supported on ip6tnl0 [ 258.367319][T12398] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 258.403913][T12393] v: renamed from dummy0 [ 258.613736][T12400] delete_channel: no stack [ 258.667585][T12409] openvswitch: netlink: Message has 24 unknown bytes. [ 258.674778][T12409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.728854][T12413] tipc: Enabled bearer , priority 0 [ 258.748430][T12413] syzkaller0: entered promiscuous mode [ 258.767226][T12413] syzkaller0: entered allmulticast mode [ 258.836042][T12413] tipc: Resetting bearer [ 258.863697][T12412] tipc: Resetting bearer [ 258.910567][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 258.959975][T12412] tipc: Disabling bearer [ 259.087677][T12426] vxcan1 speed is unknown, defaulting to 1000 [ 259.177415][T12434] netlink: 'syz.2.1763': attribute type 4 has an invalid length. [ 260.078810][T12450] vxcan1 speed is unknown, defaulting to 1000 [ 260.088983][T12426] lo speed is unknown, defaulting to 1000 [ 260.158649][T12470] openvswitch: netlink: Message has 24 unknown bytes. [ 260.176495][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.797806][T12449] vxcan1 speed is unknown, defaulting to 1000 [ 260.867918][T12450] lo speed is unknown, defaulting to 1000 [ 261.272499][T12485] macsec2: entered promiscuous mode [ 261.541938][T12501] bpq0: left promiscuous mode [ 261.561237][T12501] bpq0: left allmulticast mode [ 261.615436][T12503] openvswitch: netlink: Message has 24 unknown bytes. [ 261.622512][T12503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.646696][T12507] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 261.658537][T12507] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 261.668770][T12507] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 261.685878][T12507] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 261.799372][T12449] lo speed is unknown, defaulting to 1000 [ 263.349130][T12568] Bluetooth: MGMT ver 1.23 [ 263.524130][T12561] tipc: Enabled bearer , priority 0 [ 263.538934][T12565] tipc: Disabling bearer [ 263.745182][T12571] vxcan1 speed is unknown, defaulting to 1000 [ 263.793583][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.731320][T12596] __nla_validate_parse: 3 callbacks suppressed [ 264.731340][T12596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1807'. [ 264.765203][T12595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1807'. [ 264.778488][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 264.787904][T12571] lo speed is unknown, defaulting to 1000 [ 264.801239][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1807'. [ 265.043333][T12607] vxcan1 speed is unknown, defaulting to 1000 [ 265.126482][T12613] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 265.369773][T12627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1817'. [ 265.409934][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 265.416215][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 265.439964][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 265.560127][T12611] vxcan1 speed is unknown, defaulting to 1000 [ 265.573341][T12607] lo speed is unknown, defaulting to 1000 [ 265.721613][T12637] tipc: New replicast peer: 255.255.255.255 [ 265.745730][T12637] tipc: Enabled bearer , priority 10 [ 265.937891][T12644] tipc: Enabled bearer , priority 0 [ 265.948611][T12646] syzkaller0: entered promiscuous mode [ 265.954572][T12645] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 265.969017][T12646] syzkaller0: entered allmulticast mode [ 266.003328][T12645] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 266.056118][T12646] tipc: Resetting bearer [ 266.109395][T12646] tipc: Disabling bearer [ 266.363515][T12652] ip6tnl1: entered promiscuous mode [ 266.368873][T12652] ip6tnl1: entered allmulticast mode [ 266.379116][T12652] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 266.640426][T12611] lo speed is unknown, defaulting to 1000 [ 266.656010][T12660] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1828'. [ 266.873093][ T978] tipc: Node number set to 1145202279 [ 267.034416][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 267.084442][T12667] ip6gretap0: entered promiscuous mode [ 267.093613][T12667] macvtap1: entered promiscuous mode [ 267.099648][T12667] macvtap1: entered allmulticast mode [ 267.105529][T12667] ip6gretap0: entered allmulticast mode [ 267.133784][T12669] ip6gretap0: left allmulticast mode [ 267.139324][T12669] ip6gretap0: left promiscuous mode [ 267.193791][T12673] tipc: Enabling of bearer rejected, failed to enable media [ 267.783167][T12692] bond0: option arp_validate: invalid value (18446744073491447809) [ 268.207994][T12705] syzkaller1: entered promiscuous mode [ 268.223065][T12705] syzkaller1: entered allmulticast mode [ 268.597054][T12718] netlink: 'syz.2.1846': attribute type 21 has an invalid length. [ 268.661929][T12718] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1846'. [ 269.085249][T12718] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 269.133902][T12718] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1846'. [ 269.243834][T12735] openvswitch: netlink: Message has 24 unknown bytes. [ 269.252759][T12735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.783131][T12773] openvswitch: netlink: Message has 24 unknown bytes. [ 269.791129][T12773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.810209][T12774] __nla_validate_parse: 2 callbacks suppressed [ 269.810228][T12774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1864'. [ 270.178206][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 270.698817][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 270.724413][T12818] openvswitch: netlink: Message has 24 unknown bytes. [ 270.731399][T12818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.865742][T12826] tipc: Enabling of bearer rejected, failed to enable media [ 270.901762][T12829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.084446][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1884'. [ 271.266268][T12826] syzkaller0: entered promiscuous mode [ 271.273737][T12826] syzkaller0: entered allmulticast mode [ 271.399843][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 271.610516][T12859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'. [ 271.643431][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 271.650487][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 271.670679][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 271.725877][T12865] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1889'. [ 271.735529][T12868] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1892'. [ 271.749880][T12867] vxcan1 speed is unknown, defaulting to 1000 [ 271.883453][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1894'. [ 272.660691][T12867] lo speed is unknown, defaulting to 1000 [ 272.676504][T12895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.690553][T12822] vxcan1 speed is unknown, defaulting to 1000 [ 273.637069][T12822] lo speed is unknown, defaulting to 1000 [ 274.035127][T12928] vxcan1 speed is unknown, defaulting to 1000 [ 274.521921][T12928] lo speed is unknown, defaulting to 1000 [ 275.619845][T12953] __nla_validate_parse: 2 callbacks suppressed [ 275.619863][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 276.019355][T12957] tipc: Enabled bearer , priority 0 [ 276.028789][T12957] syzkaller0: entered promiscuous mode [ 276.046283][T12957] syzkaller0: entered allmulticast mode [ 276.083915][T12957] tipc: Resetting bearer [ 276.090929][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1915'. [ 276.111175][T12956] tipc: Resetting bearer [ 276.174146][T12956] tipc: Disabling bearer [ 276.284234][T12960] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1916'. [ 276.484886][T12964] wg1: entered promiscuous mode [ 276.489799][T12964] wg1: entered allmulticast mode [ 276.593255][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'. [ 277.052647][T12979] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1922'. [ 277.092189][T12979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1922'. [ 277.116731][T12987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1924'. [ 277.486937][T13007] pim6reg1: entered promiscuous mode [ 277.494193][T13007] pim6reg1: entered allmulticast mode [ 277.675910][T13021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1934'. [ 277.750499][T13018] vxcan1 speed is unknown, defaulting to 1000 [ 277.781082][T13025] openvswitch: netlink: Message has 24 unknown bytes. [ 277.783146][T13021] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 277.796304][T13025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.878423][T13027] openvswitch: netlink: Message has 24 unknown bytes. [ 277.925522][T13027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.015131][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 278.250768][T13041] 8021q: VLANs not supported on wg0 [ 278.292525][T13018] lo speed is unknown, defaulting to 1000 [ 278.423751][T13046] 8021q: VLANs not supported on wg0 [ 278.898582][T13057] tipc: Enabled bearer , priority 0 [ 278.910726][T13060] syzkaller0: entered promiscuous mode [ 278.926878][T13060] syzkaller0: entered allmulticast mode [ 278.979811][T13062] tipc: Resetting bearer [ 279.029983][T13062] tipc: Disabling bearer [ 279.472147][T13075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1952'. [ 279.947051][T13096] netlink: 'syz.3.1958': attribute type 5 has an invalid length. [ 279.987944][T13096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.028054][T13094] gretap0: entered promiscuous mode [ 280.063530][T13096] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 280.091906][T13094] gretap0: left promiscuous mode [ 280.503739][T13125] netlink: 'syz.2.1963': attribute type 12 has an invalid length. [ 280.627285][T13137] __nla_validate_parse: 6 callbacks suppressed [ 280.627306][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 280.664983][T13134] openvswitch: netlink: Message has 24 unknown bytes. [ 280.676637][T13134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.971997][T13145] vxcan1 speed is unknown, defaulting to 1000 [ 281.011290][T13154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1972'. [ 281.176502][T13163] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1973'. [ 281.195612][T13163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1973'. [ 281.205514][T13163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1973'. [ 281.239185][T13163] gretap0: entered promiscuous mode [ 281.254744][T13163] gretap0: left promiscuous mode [ 281.441071][T13145] lo speed is unknown, defaulting to 1000 [ 281.739956][T13147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.946833][T13182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1979'. [ 281.999127][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1979'. [ 282.025473][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 282.061884][T13190] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1981'. [ 282.169761][ C0] ================================================================== [ 282.177887][ C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 282.185989][ C0] Write of size 8 at addr ffff888040300470 by task kworker/0:4/5933 [ 282.193969][ C0] [ 282.196289][ C0] CPU: 0 UID: 0 PID: 5933 Comm: kworker/0:4 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 282.196310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.196322][ C0] Workqueue: events xfrm_state_gc_task [ 282.196350][ C0] Call Trace: [ 282.196357][ C0] [ 282.196364][ C0] dump_stack_lvl+0x189/0x250 [ 282.196382][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 282.196400][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.196416][ C0] ? __kasan_check_byte+0x12/0x40 [ 282.196436][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.196451][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.196466][ C0] ? lock_release+0x4b/0x3e0 [ 282.196482][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 282.196499][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 282.196516][ C0] print_report+0xca/0x230 [ 282.196537][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 282.196552][ C0] kasan_report+0x118/0x150 [ 282.196571][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 282.196590][ C0] __xfrm_state_delete+0x696/0xca0 [ 282.196610][ C0] xfrm_timer_handler+0x18f/0xa00 [ 282.196629][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 282.196643][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 282.196665][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.196679][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.196700][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.196722][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 282.196738][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 282.196752][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 282.196776][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 282.196790][ C0] ? read_tsc+0x9/0x20 [ 282.196811][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 282.196830][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 282.196848][ C0] handle_softirqs+0x286/0x870 [ 282.196863][ C0] ? do_softirq+0xec/0x180 [ 282.196880][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 282.196897][ C0] ? xfrm_state_gc_task+0xd1/0x6a0 [ 282.196918][ C0] do_softirq+0xec/0x180 [ 282.196936][ C0] [ 282.196942][ C0] [ 282.196947][ C0] ? __pfx_do_softirq+0x10/0x10 [ 282.196965][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 282.196987][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 282.197003][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 282.197020][ C0] ? xfrm_state_gc_task+0xd1/0x6a0 [ 282.197041][ C0] xfrm_state_gc_task+0xd1/0x6a0 [ 282.197062][ C0] ? __pfx_xfrm_state_gc_task+0x10/0x10 [ 282.197083][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.197103][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 282.197118][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 282.197134][ C0] process_scheduled_works+0xae1/0x17b0 [ 282.197160][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.197183][ C0] worker_thread+0x8a0/0xda0 [ 282.197200][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.197223][ C0] ? __kthread_parkme+0x7b/0x200 [ 282.197243][ C0] kthread+0x70e/0x8a0 [ 282.197263][ C0] ? __pfx_worker_thread+0x10/0x10 [ 282.197277][ C0] ? __pfx_kthread+0x10/0x10 [ 282.197296][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.197316][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.197328][ C0] ? __pfx_kthread+0x10/0x10 [ 282.197346][ C0] ret_from_fork+0x3fc/0x770 [ 282.197361][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 282.197376][ C0] ? __switch_to_asm+0x39/0x70 [ 282.197394][ C0] ? __switch_to_asm+0x33/0x70 [ 282.197410][ C0] ? __pfx_kthread+0x10/0x10 [ 282.197428][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.197452][ C0] [ 282.197457][ C0] [ 282.543127][ C0] Allocated by task 13089: [ 282.547522][ C0] kasan_save_track+0x3e/0x80 [ 282.552190][ C0] __kasan_slab_alloc+0x6c/0x80 [ 282.557079][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 282.562550][ C0] xfrm_state_alloc+0x24/0x2f0 [ 282.567316][ C0] pfkey_add+0x6e4/0x2e00 [ 282.571632][ C0] pfkey_sendmsg+0xbfe/0x1090 [ 282.576297][ C0] __sock_sendmsg+0x219/0x270 [ 282.580968][ C0] ____sys_sendmsg+0x505/0x830 [ 282.585717][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 282.590378][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 282.595300][ C0] do_syscall_64+0xfa/0x3b0 [ 282.600406][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.606371][ C0] [ 282.608682][ C0] Freed by task 5934: [ 282.612667][ C0] kasan_save_track+0x3e/0x80 [ 282.617329][ C0] kasan_save_free_info+0x46/0x50 [ 282.622424][ C0] __kasan_slab_free+0x62/0x70 [ 282.627195][ C0] kmem_cache_free+0x18f/0x400 [ 282.631968][ C0] xfrm_state_gc_task+0x518/0x6a0 [ 282.636992][ C0] process_scheduled_works+0xae1/0x17b0 [ 282.642527][ C0] worker_thread+0x8a0/0xda0 [ 282.647102][ C0] kthread+0x70e/0x8a0 [ 282.651161][ C0] ret_from_fork+0x3fc/0x770 [ 282.655730][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.660504][ C0] [ 282.662808][ C0] The buggy address belongs to the object at ffff888040300440 [ 282.662808][ C0] which belongs to the cache xfrm_state of size 928 [ 282.676758][ C0] The buggy address is located 48 bytes inside of [ 282.676758][ C0] freed 928-byte region [ffff888040300440, ffff8880403007e0) [ 282.690457][ C0] [ 282.692780][ C0] The buggy address belongs to the physical page: [ 282.699191][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888040302a80 pfn:0x40300 [ 282.709243][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 282.717724][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 282.725278][ C0] page_type: f5(slab) [ 282.729251][ C0] raw: 00fff00000000040 ffff88801cae7dc0 dead000000000122 0000000000000000 [ 282.737818][ C0] raw: ffff888040302a80 00000000800f000b 00000000f5000000 0000000000000000 [ 282.746401][ C0] head: 00fff00000000040 ffff88801cae7dc0 dead000000000122 0000000000000000 [ 282.755071][ C0] head: ffff888040302a80 00000000800f000b 00000000f5000000 0000000000000000 [ 282.763726][ C0] head: 00fff00000000002 ffffea000100c001 00000000ffffffff 00000000ffffffff [ 282.772380][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 282.781036][ C0] page dumped because: kasan: bad access detected [ 282.787444][ C0] page_owner tracks the page as allocated [ 282.793201][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7981, tgid 7977 (syz.1.516), ts 145890504879, free_ts 145801949982 [ 282.812384][ C0] post_alloc_hook+0x240/0x2a0 [ 282.817167][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 282.822736][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 282.828555][ C0] alloc_pages_mpol+0x232/0x4a0 [ 282.833428][ C0] allocate_slab+0x8a/0x3b0 [ 282.838023][ C0] ___slab_alloc+0xbfc/0x1480 [ 282.842688][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 282.848135][ C0] xfrm_state_alloc+0x24/0x2f0 [ 282.852884][ C0] xfrm_add_sa+0x17d1/0x4070 [ 282.857471][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 282.862395][ C0] netlink_rcv_skb+0x205/0x470 [ 282.867151][ C0] xfrm_netlink_rcv+0x79/0x90 [ 282.871811][ C0] netlink_unicast+0x82f/0x9e0 [ 282.876571][ C0] netlink_sendmsg+0x805/0xb30 [ 282.881341][ C0] __sock_sendmsg+0x219/0x270 [ 282.886015][ C0] ____sys_sendmsg+0x505/0x830 [ 282.890766][ C0] page last free pid 7991 tgid 7989 stack trace: [ 282.897082][ C0] __free_frozen_pages+0xc71/0xe70 [ 282.902183][ C0] __put_partials+0x161/0x1c0 [ 282.906849][ C0] put_cpu_partial+0x17c/0x250 [ 282.911595][ C0] __slab_free+0x2f7/0x400 [ 282.916012][ C0] qlist_free_all+0x97/0x140 [ 282.920598][ C0] kasan_quarantine_reduce+0x148/0x160 [ 282.926050][ C0] __kasan_slab_alloc+0x22/0x80 [ 282.930997][ C0] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 282.936822][ C0] shmem_alloc_inode+0x28/0x40 [ 282.941613][ C0] alloc_inode+0x67/0x1b0 [ 282.945943][ C0] new_inode+0x22/0x170 [ 282.950093][ C0] shmem_get_inode+0x346/0xe90 [ 282.954849][ C0] shmem_mknod+0x18c/0x3e0 [ 282.959255][ C0] path_openat+0x14f4/0x3830 [ 282.963829][ C0] do_filp_open+0x1fa/0x410 [ 282.968328][ C0] do_sys_openat2+0x121/0x1c0 [ 282.973004][ C0] [ 282.975318][ C0] Memory state around the buggy address: [ 282.980927][ C0] ffff888040300300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.988970][ C0] ffff888040300380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 282.997029][ C0] >ffff888040300400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 283.005069][ C0] ^ [ 283.012784][ C0] ffff888040300480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 283.020827][ C0] ffff888040300500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 283.028881][ C0] ================================================================== [ 283.037092][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.044344][ C0] CPU: 0 UID: 0 PID: 5933 Comm: kworker/0:4 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 283.056418][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.066494][ C0] Workqueue: events xfrm_state_gc_task [ 283.071983][ C0] Call Trace: [ 283.075276][ C0] [ 283.078111][ C0] dump_stack_lvl+0x99/0x250 [ 283.082698][ C0] ? __asan_memcpy+0x40/0x70 [ 283.087275][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.092462][ C0] ? __pfx__printk+0x10/0x10 [ 283.097055][ C0] panic+0x2db/0x790 [ 283.100945][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.106160][ C0] ? __pfx_panic+0x10/0x10 [ 283.110689][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 283.116580][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.122484][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.128806][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 283.134078][ C0] check_panic_on_warn+0x89/0xb0 [ 283.139014][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 283.144285][ C0] end_report+0x78/0x160 [ 283.148518][ C0] kasan_report+0x129/0x150 [ 283.153011][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 283.158288][ C0] __xfrm_state_delete+0x696/0xca0 [ 283.163388][ C0] xfrm_timer_handler+0x18f/0xa00 [ 283.168401][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 283.173929][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 283.179840][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.185040][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.190943][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.197294][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 283.202843][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 283.208395][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 283.214373][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 283.220077][ C0] ? read_tsc+0x9/0x20 [ 283.224132][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 283.229934][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 283.235034][ C0] handle_softirqs+0x286/0x870 [ 283.239790][ C0] ? do_softirq+0xec/0x180 [ 283.244194][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 283.249466][ C0] ? xfrm_state_gc_task+0xd1/0x6a0 [ 283.254576][ C0] do_softirq+0xec/0x180 [ 283.258802][ C0] [ 283.261714][ C0] [ 283.264625][ C0] ? __pfx_do_softirq+0x10/0x10 [ 283.269461][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 283.274736][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 283.279918][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 283.285620][ C0] ? xfrm_state_gc_task+0xd1/0x6a0 [ 283.290725][ C0] xfrm_state_gc_task+0xd1/0x6a0 [ 283.295663][ C0] ? __pfx_xfrm_state_gc_task+0x10/0x10 [ 283.301204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.306397][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 283.312102][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 283.317820][ C0] process_scheduled_works+0xae1/0x17b0 [ 283.323358][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.329327][ C0] worker_thread+0x8a0/0xda0 [ 283.333901][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.340223][ C0] ? __kthread_parkme+0x7b/0x200 [ 283.345149][ C0] kthread+0x70e/0x8a0 [ 283.349210][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.354306][ C0] ? __pfx_kthread+0x10/0x10 [ 283.358894][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.364100][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.369296][ C0] ? __pfx_kthread+0x10/0x10 [ 283.373889][ C0] ret_from_fork+0x3fc/0x770 [ 283.378468][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 283.383567][ C0] ? __switch_to_asm+0x39/0x70 [ 283.388316][ C0] ? __switch_to_asm+0x33/0x70 [ 283.393069][ C0] ? __pfx_kthread+0x10/0x10 [ 283.397665][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.402437][ C0] [ 283.405689][ C0] Kernel Offset: disabled [ 283.410016][ C0] Rebooting in 86400 seconds..