last executing test programs: 3.141740806s ago: executing program 1 (id=2274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) pipe(&(0x7f0000000080)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0600015a8b5a5721c0d5378fd17f823454c6eaa3b6cd", @ANYRES16=r1, @ANYBLOB="0105280000140009020000000080040000800700210061e101cb6cb3138d287dca6c64f08d90dacfdc2db523633ce561bda4a884e02cdf24c61bc12d7491a5c83e5b1bbd03283e0a7312bb9ab5fbc6c16825e190447a45fe2876011c1e00c913fc50032cf765a2d3302484b5fbf934fd07e6b728db03ddc013eef8449b809dd1902cf402d30196105f3cb45e1d2ba65f915f1f9c98edba8ab5e509d6bf955bf830b8da2b5dbf230585"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) 2.96605539s ago: executing program 0 (id=2275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x4080091) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7e4d5870ff339873cde7e5e193fa5e20"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x8003}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bb715da9f996be4f732e54dbe8e6dfe686e89bf791591a4f06825e2eaeace415"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "154cf526cbb4223c6c253d19a035abdb"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x40) 2.449731237s ago: executing program 1 (id=2279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="bd2dbf912e", 0x5}, {&(0x7f0000001680)="1d41e75c72e0e497b2a657d7b297282c126d43855fd0aea95e16ac4c711f998a168634f950138389b6c94570b6cffc752865727344f6e1987c763a42aca0bec25ed914160bb140b432d1adcec0c70075d3c92115116fc4955d3d5f4df18a07a712e90aa12b85b09e27ba71828ae3010d2dfcbcb02cff987beb5d75c86f1a0a29e946da4510c255449d48c42c5f451c7babbd83e0cd110915b433a5627f7e8ba430dd1fd5ccd222cf9d6f32b8eebc879c97a61065b150726e7d93f7f2bf235967d5e6f96e5eb5f3c942c34d0ff0be0ab422372d8e252d373a8ed87e", 0xdb}, {&(0x7f0000000080)="ed8dbcc2fc4d0546", 0x8}, {&(0x7f0000001780)="465472012cef9224e8f18641095410c54aac6c92826780358e2687fb796641d6fdc12c543bf0962e4ed693b1b4dc95bd70d2221614cddd3969127fcef47549189c8c58793cb8c45283f09a0b403d0d282f90da54d12286a0d6fc4bc552f78234447a8fa41ca3f25dafe1312a5eeb66dfb69973dd59ecf557287a67dfc384455c31cd0a19069203b2b6115178c5cecadb8dce78d8d4fee2cbfed975982ee0898e008d7e3fb591655f56f5da1ad046936d2f45347f1a1746371f511ed2cbf90da5948ff2ab09977b9a3ec1161e1a17852c99", 0xd1}, {&(0x7f0000000140)="3374d4ef5c5880bcbbbd05da0e0f04011373f8ffa9b790c887e31fc360013c1882be692df6338abea58ae82eb8be378d0a73bf8354805b2dc81bd5daacd1a0627004a4bd", 0x44}, {&(0x7f0000001880)="31a0adfd2531ced033b2b1deefaa5c53c65ddd5869a5df6ecb69fcbe070d00708cccc6cb3679db219b312aa81671c2a5f387670442b5d0690dc58d258e7217b6c03a34b428c55d539833eee7191aa3fc140757b5b0f4d6a84004f8c033450c53120ef69d0d368d4c0b0586fe629aadd9388e6ce35c097e3e2ab290a98ae7af6265fb4f849420fe8548d44a27483d711d6b7ac65d00c8433a1efe78f03e736d018b5b8578651bfe05fb8090ea0f5834638d9660574a05e1817db2b1a964a5dfec9cceb83e409e1c5f854640a2d1ab0d85805437a8634fd67e1e0c3d5d3fd9ef", 0xdf}], 0x6) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001600)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000001640)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @remote}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x14, 0x0, 0x1, [@nested={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0xe3e9}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) write$tun(r0, &(0x7f0000001980)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x1, 0x5, 0x124, 0x65, 0x0, 0xf, 0x1, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x9d, 0x0, 0x4, [0x2]}, @lsrr={0x83, 0x1f, 0xbd, [@remote, @multicast2, @broadcast, @private=0xa010102, @multicast1, @loopback, @empty]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x0, "58a360d9e2c068751a7ccdaed8847fe861f87be277e32c7a82bba2a30877b424fb53576a5aebfd4589376f63fdfba17a57e756c1f0d59f1fa4976076c1642efe8edb5ee875e71389c0142712dcbd88170ffb870fb6635f76f758b26b9894cc0e17f43484290ca0aa21a6b361dec5a9f1ce1634b0719cb435b4099899b23ab0adbb0c7b997b348878cea8cb95d560d3abc6c6474d944ae25eba486745d5c4521aaeaaf2d1befdf9a24e8e4deca9e9399f2025a1678518307c79e143edd9ea801cf3cd52eb3f4b1528bf5bcc29ac350d62ec05549d47433beb6deb8f072bfbe51c"}}}}}}, 0x136) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x38, r8, 0x1, 0x20, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000015c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000000300)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004091}, 0x4000095) r9 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1240, 0x2b, 0x800, 0x0, 0x0, {0x4}, [@typed={0x11, 0xe0, 0x0, 0x0, @str='/dev/net/tun\x00'}, @typed={0x8, 0xc9, 0x0, 0x0, @u32=0xffffffc0}, @typed={0x8, 0x11, 0x0, 0x0, @pid=r9}, @generic="2a780979dfd1739f1e53295a81448773231fe91cf902cb77b4eb44a8de1621186b9ba38a5c6933de2e399fbc8bbf0bace68acee2862438dffbc8846810bc19b45a1ead81d55dc5760f6684ba20fa455ee5275ca95ff3a56f4fc68df3317efacfa073655f0b7fd41f15b7cef8f492bda40a79f5c87496ea11e614d4105967aefebe22672edb62b52915afd4ee96ee7d9c862329f7ea66abdb9bb766a3bf9df4f28bc7207282078d11d2b4c32b7f9d9ee294d1366e068c47aedde9b0b016832e68a942dfd444fb11c040faf1e4dcf83cdf7a9ca477fd57d9c3b29d090a9b763ee0df10a29ed6f5", @typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xc7, 0x0, 0x0, @pid=r9}, @typed={0xa, 0x121, 0x0, 0x0, @str='}+u{$\x00'}, @nested={0x1103, 0x94, 0x0, 0x1, [@nested={0x100c, 0xc0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x25, 0x0, 0x0, @pid=r9}]}, @nested={0x6e, 0x12a, 0x0, 0x1, [@typed={0xc, 0x126, 0x0, 0x0, @u64}, @typed={0x8, 0xb3, 0x0, 0x0, @u32=0x5}, @generic="13e9ab5d0a0bd1b4d9955783b2389ac4fb09c50a293d0e72430dc8fcf2de6370962dbff1e51cb962c70fd9e9e2863afe9147a66e89f99088b366ded125400d116b9f606abcaf73933d1f7ce9dc4104b97472a6e7c315"]}, @typed={0x8, 0x9e, 0x0, 0x0, @uid=0xee00}, @generic="0d0e54509f97d3d0975a282d2cfa1d3dee0991ff5f78d4fb5c30805db0f32ae5b9909b6bd2f597be5fdfc2d5723fda8a4cf06fd8b52a48f7edab5fa3a9146b8424c71f2e776f74ce2d3f6264f128cfe2ac9e14c1cd71dfb299f91b11eea1bb6a4e781b16db3837599273b9738ef89d33ddb54b506cc92093c5252e"]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2.357852516s ago: executing program 0 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3983}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 2.08004008s ago: executing program 0 (id=2283): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, 0x0, 0x24044044) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfe}, 0x18) epoll_create(0x802) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x400000000000211, 0x200408d5) 2.06433638s ago: executing program 4 (id=2284): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1.809475741s ago: executing program 1 (id=2285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'wg0\x00', {0x1}, 0x1}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r3, 0x0) write(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x4004) unshare(0x20000400) recvmsg$kcm(r1, &(0x7f0000001440)={&(0x7f0000000f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/197, 0xc5}, {&(0x7f0000001100)=""/248, 0xf8}, {&(0x7f0000001200)=""/23, 0x17}, {&(0x7f0000001240)=""/85, 0x55}, {&(0x7f00000012c0)=""/48, 0x30}, {&(0x7f0000001300)=""/61, 0x3d}, {&(0x7f0000001340)=""/111, 0x6f}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000004d40)=@newtfilter={0x204c, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {0x0, 0xb}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @filter_kind_options=@f_basic={{0xa}, {0x2014, 0x2, [@TCA_BASIC_POLICE={0x420, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x65c}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x401, 0x8, 0x8, 0x7, 0x8, 0x6, 0xa, 0x4f2e, 0x134000, 0xf8d, 0x2, 0x8, 0x4, 0x1, 0x80000001, 0x4, 0x7, 0xffff, 0x2, 0x800, 0x7, 0x8001, 0x3, 0x9, 0x3, 0xfffffffd, 0x3ff, 0x10, 0x0, 0x8, 0x8, 0xfffffff9, 0x5, 0x8, 0x32, 0xfffffff7, 0x8, 0x5, 0xffffffff, 0x5, 0x80000000, 0xa, 0xa, 0x890, 0x1, 0x4, 0x3, 0xc, 0x1, 0x7fff, 0x80000000, 0x80000000, 0x1, 0x6, 0x1, 0x2, 0x4, 0x81, 0x9, 0x7, 0x5, 0x9, 0xffffffff, 0x6, 0x101, 0x8000, 0xe34, 0x1, 0x7a23, 0x6, 0x3, 0x2, 0x9, 0x4, 0x7, 0x800, 0x4, 0x0, 0x7, 0x8a, 0x9, 0xab95, 0x7, 0x8, 0x5, 0xffff, 0x1, 0x9, 0x2, 0x7, 0x200, 0x21d, 0x8, 0xffffffff, 0x6, 0x5, 0xa, 0x249, 0x2, 0x1, 0x100, 0x2, 0x4, 0xff, 0x4, 0x8000, 0x2, 0x3, 0x9e5a, 0x3, 0x3, 0x1, 0xe, 0x5, 0xe31, 0xffff2fdc, 0x5, 0x7, 0x4, 0xffff93e2, 0x81, 0x5, 0x1000, 0x2, 0x1b5, 0x1, 0x4, 0x2, 0x38, 0x1, 0x82, 0x3, 0x9, 0xb3f, 0x7cf3, 0x16784acd, 0x61, 0x40, 0x40, 0x30, 0xb, 0x6, 0x0, 0x80000000, 0x4, 0xe, 0x70, 0x9, 0x4, 0x20, 0x2, 0xf, 0x6639, 0xfe, 0x1, 0x4, 0x8, 0xb, 0x0, 0x8, 0xcf, 0x10001, 0x0, 0x9, 0x48, 0xfffffeff, 0x9, 0x7, 0x7, 0x3, 0x7, 0x3041, 0x4, 0xf, 0x0, 0x6, 0xfffffffd, 0x2, 0x9c, 0xffff17ba, 0x91, 0x81, 0x5, 0xa, 0x4, 0x1, 0x4, 0x6, 0xffff7fff, 0x6, 0x400, 0xb71, 0x2, 0x3, 0x101, 0x98a, 0x68b4, 0xc61, 0x8, 0x2, 0xc00, 0xfffff801, 0x1, 0x10001, 0x2, 0xc, 0x6, 0x2, 0x9, 0x7, 0x6000000, 0x4, 0x3, 0x46, 0x3, 0x8, 0x47, 0x10000, 0x1, 0xddd, 0x100, 0x20, 0x6, 0x16, 0x7f289561, 0x64bd, 0x40000, 0x0, 0x3, 0x3, 0x2, 0x373, 0x5, 0x80000000, 0x6, 0x7, 0x3, 0x0, 0x8, 0x5, 0x6, 0xf, 0x2332, 0x0, 0x2b, 0x379, 0x3, 0x2, 0x1, 0x4d1, 0x8, 0xff, 0x1, 0x8, 0x6194]}]}, @TCA_BASIC_ACT={0x138c, 0x3, [@m_ctinfo={0x1090, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x280, 0x2, 0xdb, 0xffffff80}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x7, 0xfffffffffffffff5, 0x0, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x383f2008}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xb35}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x1004, 0x6, "f9f016ac01863571846c51a7a4a5680b77265a30dedc84707a7b66a2b3741f8bfcac8b1a2a997f7cc1dcb2f6a892a6176540dfc22aa72b1edc82495ab86d231eeb48d19050ecb5f9116c10a46948d1a37cd702acce27a9f2d5d392305b93e1587496ac69361ae4d037583a1cc42723119cd02de44ecb340da5eb370f2f6d355c434636e46ea271e8e69471be12156862f66ee72a65f583950944f380f8ce43e180a9303c1305e307ee7347e7c9e0c57aff581b6cf877fcd1d1db56e871ea3ed0fab09ddadfac871faae21c8171a3065a4cffbaddafbb72bf6cc30dcc49e237d0fbc0a1cb677519c5a90971442106d9048bda75ac384b19dd15444cfec4b042b5efb0f1f67c37651297bfa4cd790f3a85dc097b83892833ca1f12cee1e5ce94cdfeec6c9a926b8bfd0b29b8c4afffc0e103a31ecb73007a4b86869bd4b67f5478b653c10c4299f1d3d29610fe77435320e4e71d8eab1019256e554edd604d50bcfabb328f7c91eaa87f48f7677ccdbc6991b1cae6a47f628c26c16b982151bc39eeddc6511928b8b451b17f03ae803b00a65a1c25e49a875e4bacfd0d691304480e5b815970f19508c80f0ef1f2e8fd8bbff23089c28070f50ae576baa643addf88279af8d5b8e074c88ca7c43305fd5a8060fbc41d16c3f98438b03189ca5bea383edf835fd51a450e5652e52ac62fc90456d03bae35e32bd9e205b33519e50b7ba3b55a08af3b185ba124a41e54ee9cfa518564f365c020d6c5008d31cf2b8bd7796b18c99e7a97f711f5cb14eaeadefee60ea6e2698209421af96d4a781dbf9a0136611c18c4c202603156c2f27b33a2152d0657ac2b93875edd630f0b6f4c10fa931f14e1829d91bffdf382c959c7e255eb116b00026524e6eaabdc9b59b8161dccf57f23fb2369d9b7142ac8692179ce9ff1f8454695369a0c3870d29e274977eb6d119a9399ca5c5167563ab7801f10084f801ae46bdb5b3f6a84d44072226c5b66a4a650a84d44023be2ca544ab0b50ce9c409c58560009bd632686140a1b6456a678ffea98ef5f6c347f22d52581f684479e36a238a01d64ab46da7af723593e440913cd29e20cacf94fb94e463970fadd204810df3b289968e5d25e84c982b64107b846a02f34772303729778b92561ad43c5ee75b05dd3eae4cbbe59fa0b2751cfc2e2c13b45f1b74237da89a10ae6eac35f5da064e5ef60704a76ae4930baa3ebcbfc3532b2c56734a914c568c7e1d4748aba1af60a1e2c1179757b34ff07e7cf7fe0d8edcab99ab9d7c5c5c34e83ff6fa6f82aa04ad6d937f401f753adae28aea19182b4799837cc3f2820e6705967e2abf01ee1939b2b4a6f6b23c52a084e16ac363b3d3c3bc38403ed223ed52ffe606327669b9dc248c9f034227760626117cbe1737e00449576d69079bbddb2904efed49568c0360d64c3a3badda79d9360feb333298f2c932b1f967a1a2be5664b18747b715db701241db1c0cfd8fe566b2794a9a9a76bd9b8cb8a549485c497ad37408a2b325d13c8c2161b66a15b6efee816c3daeea0705dd15c03c6fdb61aaff27070e18679535592ef84c4f6bb71ee84d517b2bf27c4bf5a0a2bb69f8ff0ffedd958953b85d259ed568c5c1a447bbc2dfa3b3a52cb6cdabf5963ec2f6d3e7ff014128884af512c85c175e92960558babd72e2dc5b6f5f0eb2e234a241328eb67ea07708aaa98fec10027da1861a7800c851c1eb0cbc7c0d6dd90728630c85e3cfe7499d7e9f5791f854eff0e3d223e22a9c4f20cd07ecf5c07c11c768ff6b5812f5b14418741cf694b27f862bedc49888b8a6a7f3599a8ecc594cb629f9f31a7ac78e7203779d73241cd3fd0962fcb459d58bba50bd3a668c8bd219e653ef2b38d94a3571a826fdcc5a5b8fb2c3d8797d02fe99766cc36adf7a811faf8f995a120c6e14f99e75ac8d88f6d0531bf3e7d1c528d8e7fc91c93e91905cfc3dbba0f5410305c181da70deed3ae7ce097a9468e088d1c6e9954f1660fb1cdc79831aaa3ba891e4db0289909536f13712cf162b14f588a3be188f71f6280c01423a4d94c3c040d3627307799776404d7fef4d79d1cca45f1ef32038678ffbbfce6224a277b263cecdd313652129f8a6e00384f15dc3f4372a3dd4ee5589d730d9cd9364d4a1fd8e61862d1536b7eba9f2ea85713e3c4bc895380e79a31a851da918839a76d2df5aa700914009acec3a0b64b67e2d9a512f3bb7dc45480926fdef692f2bc28f68dedd5c3da9b301d940f8d0ad4370ba4e7fc9159005671837b8b7b2c6c3d38e01f94db8fda58c54faf8e59e858d45a561de2c506f132f2bb426b8cc7a2e89da0349f93d6ce54b8f204162f035ea8fdc79c35d0d93152836973048dcee9d0a93ada20376b7b0cdcb10d2cc680586e8e99399e9b8184acd051152e212f61e392d5d1ed8184688bd4693c3202a889f10efb3bc1e5814aa34006e3f5c7ecce30225850185bcc989fe2933437a9142c7551ddf1a9c78c9a9a4e31fcb8edf04c51ae50dea49f29aec4ce820dc88938b0546b0fc6cee70391049d9f91d38a96826e846e7f557814911f744a19f96a9e0d55c62de9cd6b56d6b48310ff8c0ef349dc8cb19f186cdb0303438ecf920d293cc7ae35c6fcbd31dbaba7b6ad9ab50e3a3f5b4d3c39bbfaa4384ee43247c503b7f697b815b94db8557f2437ef4ec00184c1cb8a8d87c9f748ce72c3417236c2650ba442bc18360c9f7b8657574308e290f35c54d22e95adaed70b7e85b08c25af19ba3091a656d553132ec7a9f6b267a11f5fce2310f9546a0409d582d46cae3bc46121459afa157d7181943d07fc020c9a216b135978e3701e41bce77b9f0e6ac6bd3eb6e96d5d32a841a06adc7943c7d70e701ba1c25095ee0951a329aa40a19baa389cc02d964911458e96217d5284ec686845fe0f6e9d0868a26790c86233af28da605e878bab1a0f2046f02ba4c5887bf30ac70ea1b8f9440d8f0fc44e19261bc03432f5bbb05ba0c68c6c7b436686d7871bef6f8e85472a6245cc331c121df407c68fcaa384d5d090bec3c00eab15149d5295b251b8f03de7d8a58a27e46e66ee7e48f58e4bd960e2924815397e8df2222081ec1097df991a56e44ddd199c98445163779604205a870a00dcf852d809d9d56d36313e2862de5603df1b4bfb656db0e827ea975cbf5c411fac1f86d964a5b0e961b87a266385ba5c1b4abb0a51cd90e432aa45f377b4c1754a88ef1401976efe54e86a0f595ecd215cc1b24670380ea73346fd763f1e8fd4490c3444617c162e4496122d7a71c0a8da075393e7943a2b8f4a01ed1f5c983f7d969265f778e2cc2b202b8dbd4367e014482a27567d9cc253994bf72b40b66cf0109fb776ea74d36ca4808eddae9f05a52b97c196ae45f2e3009322d6bc35d062c57aa68c735d4e946bb2f92fea9a1951cd5461330e5acdfc99064c113d73e798d404612ff606eb13f8919f583074af6141f12cb3c92eedb3b7bc4f8636b51be2881c74e9c48e1d6e2bce53048ccecf0484fefa802f8313258ba05250521d160563dd0775f2f57aef70b90a1000ce77d2011b3b1c10bdf6f60133f07dcad8b34eac4e176f33ec2691d17151720d654daaf9a29954933db5c3a7fb88d703558f990de11214a358f7fb9d5b074bc1f2ec7284c0a565b7070033c217a3b1a789bcbae6a174fefafdb31eff6843a9f6d8373dd86d5f94be6250195dd87d2e181fd133dc2f2897621f6f22e9874558de6a60bd91ac39f013aa9269a5b5c60d73d01c682a17f039dc9c55518008fbc53e4d0e329664a370fcc1e4da3f85b22966eab5be2745d0544dc5697fa5824a49903d3825a1fa10315438fc96d4543265e49cffe2d7d8c8b3dfa89e7c38fee6a1dc02e827f496107cb04458b0f2f19ef3b3409eddbfaa1387e2c53564de7bee4a38f7a74df9c243e5f44beaf93b4a19fcb258e3b1509f0d6d4ca29a078de0cd1ac4af26906848e65bb0a763cc9601dbd87c1e4245fdc1ac632a0063e701d06e573d07349ae509567fc58b70e292ea1a539ce1af0c095e354b269078c8bde87b396c03950775f0f3429fdf205d54e2e0086b7c22b02cfc6ee703acc738836d21cbfb497ca2f612af60960942b6206fc663d8b2b37cf1d61da60631ff288bc33047de1caa13bbcdff9463f81baf536d18585d6dcaa4d4fc6c2c53b8ed14f5cd32f59156ff0de84eac4df11018f2bbacbd9b000d3d48b56960faa6279591175321e0f4ea321b8a996f6709d28b9f0f5bd592e7ac65ad929b1283da0ee8b463ec21798ddca25c2210ed11e2b0b1de7b2a8d2bbe10807b426ae249ecdf5fe38acaa24a7151ca25b28d42c69c2a5651c3dd76f3cfd091aeacdd22aae9de059f9ae90658a74b12d744e851cbf63d25ff975430b074531c9877ec8f5975307af19bacfa2b1214b3b017346a56091d9679fcbe6646022f5241558d50373ec67101deb664ed7db9171c52b6410224c9707f340c4425218ad27a94083742b98e04d00127bb9856c525383d974bc4ad1675b1302f84e7c18ad790b530ccfa8217170b17a7071f2094aba30234911a8eb3d24aed72fb4b15729adb2d00d60e5d50330289f0f58bf560cacef4ef5984a548913b56ed60a5b101526c238ad33c035f340b980b2113eff5ef0c12361c0f55ced9284a26159854339ac9a1f2753ad74c206750c5742d58f6363265529c4672e9763437cd2086e76144920e7b31227f2a969f50aa7f4306b8088634bd59e2ff328ef89139dcc9a93618c281587044813ba2047b75ae69b82b91066acbd273955039a63ba599ac7405c6144f24a1b6f8a325146ac9d93af528bfca9a3be910dea2830703aa8ed10bbfff14ee0f297b0298a0724fa263713c5625b783fa87fcde3a70a7ba2b7b487a05d13e8672d2626515ef33a9bb58f0eb66924d81b8735cc9b2746bfdf7bf628b5354c89f712b94b745fc55b81f3ee684922580fdcc717c17a00653625054de3ea8ddbca502956fb6a4611d0e87253ec26b150e2a231f47242f0e9778b0638e71ba9ac3f87e627fc832d3dee57d2bb6ef534173185e40664af04edc040e50742a863efb9bd65d426e188a9d8769ae2571198cdf3b6de23af4fab9a5eb264d56ff7c659b21473133e1e7f6f2e4b2b36a964b923ae36e6a62f5430a1d2f08a15c8a3896e3715d15cf42f543b460ddf00b0e4e3b78a191fb3dd14ef4e8e1d1bda91b96c76ca7bcd6c2eee4321df01a03261c1e97440d3fcb1fa8388847d67052e7d458feada40343fd3d492c0c44b4469d5d3db5e862f0d8eb8ffb9fdbe210015b104db7e7dad1efb2134ab4531252e52d2ba26fa78ee073405e37b53061fc445061670cb999250f3b0a2c70178b1de8bba363e11b43f0c742763c55a13c836ef6c999fbda4ee71da15e3b3a163e8fcf84132d5dacf89988e1239a8db141d0c841297a2e6e73ee5c9dc68df2d8dd099a55e4e55533dae55b028b0f43d17af81f6f36c375b05a0e99f59a290651a11c3a3d4cde7877d13d5686f2cb0031290a4b07ae2115443d58a941af15aa6ad29325fa42c07b0c361d9398b8b9298b819164d77c52d039f3d2b46a5877de55836114c451141cfc19f1afd6057decc357dcd3ac5c34e1189c7d744c4b4a3d03cd74ea0b03655f69698676d95d66ef67b1ee60ba932351f50d04a7c18ea51ffa95cb4b0673d0084213b3f2ce549641c80da133e0ed2ab74da6a85b85d90eaa04d2c57d70b6872e80a41111dd657ac43a32f66662b17492679e26633c5855600f5c85745"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0x38, 0x1d, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0x8, 0x6, "511a6fc1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x1b4, 0x7, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x0, 0x0, 0x8}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x8, 0x7, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x452d, 0x6, 0x3, 0xd, 0x7fffffff}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000000, 0x0, 0x7, 0x5}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x5, 0x6, 0xb3, 0x8001}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x10000000, 0x7, 0x1}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x40, 0x1, 0x3, 0x400}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x336, 0x7, 0x6, 0x8, 0xe}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffff, 0x4, 0xfffffffa, 0x5}, 0x2, r6}}]}, {0x68, 0x6, "cf84ff3bcdc0ba29c11002caaf93f29d52a114dba1e378a61ef838e2a7a615bceb279eca1993941cee6c309b76dfe3a7fbb7391a2c489c9b0d809d642ffaf4de3add4d55b68ecfbec3674af56a42d1d4c6997edb307ad2d94a60e598c0e69f9004aa3238"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x10c, 0x10, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x4, 0x7, 0x5, 0x81}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x9, 0x7b, 0x5f, 0xffff}, {0x7, 0xe3, 0x7, 0x8}, {0xf655, 0x1, 0x9, 0x80}, {0xfffe, 0xa6, 0x5, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x8, 0xffff, 0x45}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x9, 0xffffffffffffffff, 0x4, 0x8}}]}, {0x5c, 0x6, "835ae6e29b54e8df8bf07a9b3e31db53ef9f0a06309958b4c95e0923e4d4c01236ae08076ab801199396c95067e648c54618e8306d314377fb1bf252f25da018940bfaa6235a7bcbcf527354bb3c06b4117234dbb251c659"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x7fff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0xf}, {0x1, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x3, 0x1}, {0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffff}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x22c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0xfffa}, {0x5, 0x400, 0x3ff, 0x0, 0x5, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x1}, {0x3, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x81, 0x1, 0x9}, {0x7, 0xbb, 0x9, 0x4, 0x3, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1dc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xd979, 0x9, 0x101}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf, 0x8, 0x3}, {0x3, 0x5, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe4fd, 0x1, 0x3}, {0x401, 0x3, 0x8fa, 0x0, 0x7, 0x3100ef9adfaf9b99, 0x2}}}, @TCF_EM_CONTAINER={0xb0, 0x2, 0x0, 0x0, {{0xd, 0x0, 0x401}, "e81c4adc5607871db3f1d8f45a84990d5f3cf05861dd48dc83e1b8332ca33efb5fb64b1bd6a62ff7eaccfc2a74bb717cabf9852c95ed8ed04d1ca1759577733d0d1e0e207d2385364cf4dc632825d27393cbf3be62d6f9bb8752a0e1669e186b317e92b8726ad1724350a139d34f1bdae82fb08574ea1eee1a4f99c74284674e43fede5194d7cec541f67ecae1af12b531fdaed406e881290cb6cf70e106fefe1955b9eb"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x6}, {0x5, 0xfffffff8, 0xca, 0x5, 0x0, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xe, 0x3, 0x7}, {0x40, 0x3ff, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x800}, "2fdd2b228333470afdc4372bfad9adf62b7df987a722f1c9e340618c9f7fb2f81160f54400292d4ad6e754ba4e19fe6e8fcde11f4f68947b27f12d8e81234d4706ef5b04fe811b9d4648f963fd286be16bcc2648bdd18f966530"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x4386, 0xe0fb, 0x0, 0x0, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff, 0x3, 0x2}, {0xd, 0xd63a, 0x8, 0x6}}}]}]}, @TCA_BASIC_EMATCHES={0x5cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x294, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x496}, {0x1, 0xffff, 0x5, 0x5, 0x8, 0x2, 0x1}}}, @TCF_EM_IPT={0x210, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x37, 0x5, "c56029020d281ea20ad4619cd608f3dcc74519c25acb4e588691c72a8cbcb7d6d1b1a9d771710abd4b8496a217eb5619d24db5"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xf0, 0x5, "52ba4fb34960a1a35724efc318b1c65b998247eb1d9b42adba4d11595be6daa990245ad640a18ab6f1b4745921b356e17ac66520134c9daef4373333ea2dddac2a5befe9001730ffb9814d3643e9a5b8a5f3f6536406f37015bfa351b7b24ca468d4a54aeed06ba175c3e382eb4e774f336d6ace59214e545c4ad0fc373d629e1be7ef328f1b34d8b2724c35d4371006716f2035ecbd6eefbb3a1cb5b7854ad6241b5b3c12695366116392b8440a3c7a5da74890d52c9a4dec8412a01f4f8c9bb41e7c12aac831a5a90aafdb3b7cd3dae752f2e64e8aaa428a8659ad37fd37dcf1726398411f09a69f8f36ba"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_DATA={0xac, 0x5, "07465b185468525beda46d345b46261ac2e81f1ebde150b5e3e9638ffddd8ba9cc8fdb0535c39d11ceb90e1bbdf76f01eda830343e02b713ffb4575b181321009144ee55c421c49a515da6b85133299ab2d08199e387eb64b03364b2de077b413d3a24c83f18165c301c97d4312fef4243070991a23b5fc18c61528275936a5ba865b5dce6028c03347e86bbf2ec7ab0949185f04007fd52d9c876bcc2e2e46b982d9747fd2e8737"}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x200, 0x2, 0x21}, {0x6, 0x7, 0x3, "997e69fa07e564"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x2}, {0x1c00, 0x7, 0x0, 0x400}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3ff, 0x1, 0xbdb}, {0x7, 0xf5b1, 0x5, 0x1, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x3, 0xfffff966, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x31c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0xfffb}, {0x3, 0x1, 0x0, 0x101}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xd, 0x1, 0x8}, {0x9, 0x9, 0x4, 0x0, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x800}, "923e1dd59ce63f253bd095d33ba63d037dc87ebe4a47ea91d3844893828f5f8969ccdf2e19a2ddc991e9b4280314d6c7b7fb70acd0633252b2c46aa45c35b31410bcebc6231bebd491317ab5a4e91e1e29e0d49962779723cf08cb81e998d2ed058e8649914476f25952ef9c6e101154ba72305758ea7ed0fd540c5167e674fcf58b7eaf1bc0d1365f0c22373794a131cfbba737b8515662790625555051b107d598f6d13118f811b088bb"}}, @TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x7ff, 0x0, 0xfa00}, "232c6f54fb09586c72fd34d39a2e91ebb990d66e3c52d686b2f3ea533168a2b455c2c95db7a70abc96601a6277a7d66f9feb4bc81db1"}}, @TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0xf8b, 0x0, 0x5}, "4efece438ba195e3a272c39930f73fc0dd0e2cb52a1eeabc91e5d860619abefc9b6422b35ba7b764f250c0d2765119e44ed3f23f964b89daa9f6cacc82e182127a3ba41cbca41260d16e4cf5133f7af026c29f52f8f82da5726eccbdfd3a6c3b300510962fce549665eb8264412ae7395fe517d789fb8c76877fd80732e4f3335f55726c59f3088b9275024c4459f93751ac59854924d027ba395a7c4115c2493fb84b419c6f237a800d00d6e44d41f6980ab074f421de7484bb3da0a83feeb76466152ad95dc33a967b8b258910806bccdf3a7b14"}}, @TCF_EM_CONTAINER={0x104, 0x3, 0x0, 0x0, {{0x5, 0x0, 0xff7f}, "2b7b4f321f10b91dbd9ec0e317804f36d26d7f6c15043f26107f741951835edb926a13cadeed9db508dff5e484981b806e64d912c89211d85318445e73e9a5c7b05dd2120e96a4f28e3cc69395fcd0f224160c9535544feceb298aa7af45dc0af2beb117e5b5e1e11f3a6d911f1cb53787e6c4c383a852fedc62c50cd38b10a9868f242064341ae65ee6cac443354fb4b7f3ee52debc1acaec99b8773dab9ac4dbc4166de8033f908a82d4dd24f4ec9a6f1362c4b83a442b734fb356714c7ed16e9a68b2e5adc95d9556e254d2d8f87fa7e2a24d4700f02470eaac5d23a07c0fd6074b11ef9cfab75ca8196a724ecce1880216a5c1"}}]}]}]}}]}, 0x204c}}, 0x8040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000100)=@phonet={0x23, 0xe2, 0x2, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="7d0ad62cd51b85fca11baad8d0fb4a27dff556c4f901b575513097d9", 0x1c}, {&(0x7f0000000540)="4928e48bb9714b16be1f34c57ee78843402ea58ca350ff3f21eeabf336c174ec4eca00b7675eb78b8416d551932407b1c36b081ae16d2a870fa0b7285e9b6f51017b2f7f6e23cc0700df32797c94e98892fd19db7641d15b74bf2d55921385236340260dbc98aa4bbe147c2a6b68eeb2495f4f4581e805", 0x77}, {&(0x7f00000004c0)="ab8915292249d588922fadbdbee1fbddf4de07241d144ac444e4eb70374822f9f03b9399136c47b9abffa7fc23057d61a2c5cbcff9711f57d99e22ad50f61fe13292e6d9b966da003381", 0x4a}, {&(0x7f0000004ac0)="bbab388fe1e532e5a79535f2574d43e176c6deb40eb3acfc888b0754e87540ff1e7e81aba578814f4656157fd55a799e05e0ec2272688e60059ef3ea79bf7b54fc24b8b0cd5acc0bc67ce6081331375cc8237ed44c7fe1d210707738879afcada38476ffe43b8968bff1dfcfa9679eae07ceedbd9bdc985c0318188752fdefdfa8ea7fceb19430779f4d9e5f8b10172cf3d22fc1af23dc1029e51a860c3d0b528a34ab56048f7058f89424914682ad000000000086522f86c09aa8381603275dfab20b8622b61015715e89e92aa4b557dcd193256d3cdf87680bb659", 0xdc}, {&(0x7f00000006c0)="d594c1c805c3cd0d564296171f0e3bb08f7e8ee2e8e1471b68661768fd5948e0779048a6d2eb9e67e34be098f2d518040b14d283dde22dbecdfb89ba177599cc635e58c146f7ea3a68e6629f18983f42fce50cde72be81bda5a17a7b2f48db98939a2a5d8d5137439275e70c591d6203a3199e94672874f66076838e1988aa66492a1ad806017276d387933a8727150d41e9169103822ee947faca0bef36fd5d738b89b5a14157ddc82ec701fdadd2dbab0e5ace8fc38fe2f1adcf8f90000000004ea2000000000000", 0xc9}], 0x5, &(0x7f0000001580)}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000008c0)="28dfa1b80b44c9832201c25f52492edfa1657316a58c1cdb93ce3091956733371945d0ea61f6415b5032b1e802eb06ee17ecf0fccaccb873d65588e135e839900a794e9f33875dd3dc49bbc2b00f98c315c6d83a419d71c627e82efcdac09431eeece3cb7c0a6278460409aa8ac51415322d15c752ce57b204452b0ba1912490b887ba99875ab80d47926aa655c2928cc159339ee0b0bf88c8af0000c4b11888e6ba009fcbf6414727a3a2bd07820c85af9ea92d4db8aafb18b2f5280289bfd6a1fa25", 0xc3}], 0x1, &(0x7f0000004bc0)=ANY=[@ANYBLOB="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"], 0x158}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000b40)="a2d9a71f08a5693eb9b7553f0e81c9d3b0723dc4f05a12f66bef690b63cece47addaf1b87f53cd19eef7f0c5944191242e0967a548f3f13431a0aba4ccdfb73cfa69059436ef39499a604180b83a8be2624d953c389c93a918e98204e99a629b8a529c6677f5de054c81d4a592d66a80eb5f4b5b19af5827a6bbc231810009d47264d741b558b3aa52f2d4e6954239d49575393f561fdb2c3f8194966b6cdcbe5249a65fb5379e602b5409d3f892db155885729126b3bf", 0xb7}, {&(0x7f0000000c00)="c3cd3a7d9de2a1a8494e4bb05f4ccd88bc97fb8fab54d8c5ce380f3635c1fec49bd798021645f53d1af35ffcc6c1852bfcb06322147a6188063708bc925abc8f2ec8835694203364c2544f70650b0bb0865992005d7d4161b0481a2eb32c065d95538814b1014a2339a2e2209e02988378a0f89f92198fb042c64725173899266dccdc7a97c07c96f079bb50ed73da8dd9a891a3cac3b691c8a41bdfd918f7e477538711b214bb02261dee986f92a80783c1cd39", 0xb4}, {&(0x7f0000000cc0)="8944bf9e03427813f11694ea3e15d810aee9ea9e75863aea0ee631424b487cddb7f4ee075e19ab6a9d813bd44b9296a6aacd341bf4f3fa2a216a6b99b4ad007b165b292714f7035a3d18afabe31607299a5952ffec633982cd0312ee0d03fccccb72b1042b3699acddc876ef9a3ce7fd0da39f7307ee5a82b9e64cf1a644c728402c78577e8aa804313c5f8e9fba04bb04c3d62ba79fe4a543c6a2bcdb3228544f825dec486f", 0xa6}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x120}}], 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0005110004"], 0xfdef) socket$packet(0x11, 0x3, 0x300) 1.725433504s ago: executing program 2 (id=2286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.601874179s ago: executing program 2 (id=2288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x4, @none}, 0xe) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb3, 0x0, 0xff3b) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_wait(r8, &(0x7f0000000040)=[{}], 0x1, 0x400) epoll_pwait(r8, &(0x7f00000002c0)=[{}], 0x1, 0xff46, &(0x7f0000000340)={[0x3]}, 0x8) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 1.505320148s ago: executing program 3 (id=2289): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x5b2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1.453831231s ago: executing program 4 (id=2290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x4080091) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7e4d5870ff339873cde7e5e193fa5e20"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x8003}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bb715da9f996be4f732e54dbe8e6dfe686e89bf791591a4f06825e2eaeace415"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "154cf526cbb4223c6c253d19a035abdb"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x40) 1.261895832s ago: executing program 4 (id=2291): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="295fec7b995c08910b00000000000000010001000900000001000000da91d06a73dc4ac3262a6b79c8cd1e4c7ff4f5678cf00ce9ad027d168f1770af98aa39e02c4e88d0330b9327e4a21ba35666efeb60baff6edbbe052b8748bdae45f36ac7eb9a755e5e22a526aa5092bdbc6384305cce3dbb340abc3edbf8484a963c969ac51a68e88384b0914a46ca3a00798d18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r7, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r8 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@rand_addr=0x64010100, @loopback, r9}, 0xc) (async) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xfffffffffffffd8c) (async, rerun: 64) r10 = accept4(r5, 0x0, 0x0, 0x80000) (rerun: 64) recvmmsg(r10, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) (async, rerun: 32) r14 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r16}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.013493995s ago: executing program 3 (id=2292): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x8, 0x2002, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$inet6(0xa, 0x800, 0x5) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x10, @mcast2, 0x6da}, 0x1c) 1.011265852s ago: executing program 0 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="cce47c215aa53a2ccd15e31c18c34b6d1ed268053dd570d0394642d2f2b56b6373409f26a9360035bd48617e231f0ff75b4ffe9a2971a319567266b4a944ee4cfcbef79470f8658530fac55e80f65204704c7875586a5823cc11a775909ece5064def6907019b8e6e62404cd70f2edde008bd5850ebc99a4cafce362e1bcae8bfd3ffb88fe6c4409ceb48d07b5387018efb84fa58249f3e80ad8743e053d0258a1bead445d031fbe9826521d4f988ddcd18da444dc7f07ab7eb032a30bd5ae2bc56f9cce6baca84db8a5f04b27b4377c966d8878bd94859fd058c0916c0ddb30fe643eb9ca2e1022"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x5454) 909.585349ms ago: executing program 4 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000480)="ff57a21153298e2a79b69f8af79af3060e173bf2567cb893908439ffca12031125282ea4375a2a338e4d10f57acf35e9d0440f3e6227b4bd5854fdc5f4b2ab63626b14c12d9cdfc5e60bc286b96f2643c47ee2b87ea2a047c77e63ffa8742c3301c8ad1d71bff5002f6e10f634d3a3e0ce20f1388485080014a100000000b26138", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x401c5820, &(0x7f0000000080)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r11], 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) 757.678218ms ago: executing program 0 (id=2295): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094aa3", 0x17}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000340)="c3b3269390", 0x5}], 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 739.149693ms ago: executing program 4 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100627974656f726465720000002400028008000240000000000800034000000007080001400000000008000440000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) 645.951266ms ago: executing program 2 (id=2297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x9a, &(0x7f0000000080)="3b43644843c3d0bbb3e3c03c8060e908925f9a91082a250bb1d01b277875977fb9b4518695cbfc6ce0e9d3d2ae4718a0ea3bfe2bf4e1b564b8562551b1755b24d515986a4cd8471b980b7ab304e6f1e6fa8f229fbfaf26c16cc001a00dbd9bbadd85f4d137cc6ebf2eb2500bc5ef7bb1693febe5e35b9779a030c1834a4ebd0daf1663996bc69cbe2f35e096ed84cb69ffa4f1fef523759b22be", 0x3d, 0x0, &(0x7f0000000000)="21d803498a4897fff728cb72905d86ac1449edc801cced50059df6c58ec39062c09b12431f2e3673e083186bede4bb8f1734c1b971da81607caf24d8a2"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r0, 0x400454d8, 0x0) 619.566307ms ago: executing program 1 (id=2298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8ea45329", 0x4}], 0x1, 0x8001, 0x80) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0xa}, &(0x7f00000001c0)=0x8) sendfile(r1, r0, 0x0, 0xf03a0005) 543.123462ms ago: executing program 3 (id=2299): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1016) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x40006}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x401, 0x8000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_WEIGHT={0x8, 0xf, 0x81de}]}, 0x28}}, 0x0) 465.793067ms ago: executing program 4 (id=2300): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x1, 0x8, 0x4000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x200080c4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x42, 0x7) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r3, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4040005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000002000010000000000000000000a202000000000000c0001001400020000000000000000000000ffff7f000001050016002f0000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="339ee25ed5e5c637b16cc45e60491f809728189cd5f88dd5c35bc679ae09f44815f16f4bfe5008dd963b9e406ba1029f119567d105722b773d9a59cf4875806dc4adc45fa1ab91e663fac90291c3d9bd4590e18738656a913e"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0xfd0a}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket(0x10, 0x2, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r2, 0x1ad72f7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f00000002c0)={0x7, 'veth1_virt_wifi\x00', {0xa}, 0xfff7}) accept4(r2, 0x0, 0x0, 0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_delroute={0x3c, 0x19, 0x4, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x7, 0xfd, 0x3, 0xfd, 0x8, 0xa80}, [@RTA_MARK={0x8, 0x10, 0x7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 459.369217ms ago: executing program 1 (id=2301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x4080091) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0xc4, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7e4d5870ff339873cde7e5e193fa5e20"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "789f0f422089b4e1ce57451dc9ed62d448523c4217a8e7e95087ed2115ece3a2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bb715da9f996be4f732e54dbe8e6dfe686e89bf791591a4f06825e2eaeace415"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "154cf526cbb4223c6c253d19a035abdb"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x40) 415.917668ms ago: executing program 3 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wlan1\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x25, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x6e}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lld}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef33}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) 306.001196ms ago: executing program 2 (id=2303): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601000000b61b"], 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x8840) 244.960808ms ago: executing program 1 (id=2304): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, 0x0, 0x24044044) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfe}, 0x18) epoll_create(0x802) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x400000000000211, 0x200408d5) 197.867332ms ago: executing program 3 (id=2305): syz_emit_ethernet(0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaa120d00000000000086dd600000fa00703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff0000000000000000000000050aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502000100"/166], 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x18, 0x0, &(0x7f0000000040)) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) write(r5, 0x0, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) 125.803723ms ago: executing program 0 (id=2306): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) close(r2) 125.158632ms ago: executing program 2 (id=2307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)='d', 0x1}], 0x2}}], 0x1, 0x404c001) (fail_nth: 4) 34.077105ms ago: executing program 2 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=2309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x165341, 0x0) tee(r1, r0, 0x4, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r7, 0x1ad72f7) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @broadcast}]}) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2, 0x0, 0x4}}, 0x26) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r11, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r11, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r14, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @device_b, @initial, {0xa, 0x96}}, 0x82, 0x352, {0x0, 0x6, @default_ap_ssid}, @void, @void}, 0x24) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) kernel console output (not intermixed with test programs): 4.041825][ T1155] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.145521][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 49394 - 0 [ 244.167079][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.188206][ T1155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 49394 - 0 [ 244.209191][ T1155] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.277974][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 244.313063][ T9563] IPVS: Error joining to the multicast group [ 244.428095][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 244.512690][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 244.556720][ T9569] dummy0: entered promiscuous mode [ 244.593071][ T9569] macvtap2: entered promiscuous mode [ 244.607147][ T9569] macvtap2: entered allmulticast mode [ 244.643162][ T9569] dummy0: entered allmulticast mode [ 244.743016][ T9579] dummy0: left allmulticast mode [ 244.770343][ T9579] dummy0: left promiscuous mode [ 245.143131][ T9598] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 245.314775][ T9608] dummy0: left promiscuous mode [ 245.343382][ T9608] dummy0: left allmulticast mode [ 245.556609][ T9608] batadv0: left allmulticast mode [ 245.565147][ T9608] batadv0: left promiscuous mode [ 245.575374][ T9608] macvtap1: left promiscuous mode [ 245.582508][ T9608] macvtap1: left allmulticast mode [ 245.603899][ T9608] ip6gre1: left allmulticast mode [ 245.612356][ T9608] bridge3: left promiscuous mode [ 245.618229][ T9608] bridge3: left allmulticast mode [ 245.848641][ T9618] netlink: 92 bytes leftover after parsing attributes in process `syz.4.910'. [ 245.940338][ T9621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.912'. [ 246.054734][ T9625] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 246.194867][ T9625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.240145][ T9628] erspan0: entered allmulticast mode [ 246.264479][ T9628] bond2: (slave erspan0): making interface the new active one [ 246.280930][ T9628] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 246.354928][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 246.390877][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 246.408881][ T9639] netlink: 'syz.3.919': attribute type 12 has an invalid length. [ 247.436956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 247.445045][ C0] lec:lec_tx_timeout: lec0 [ 247.450014][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 247.522809][ T9681] syzkaller0: entered promiscuous mode [ 247.528784][ T9681] syzkaller0: entered allmulticast mode [ 247.590197][ T9688] netlink: 'syz.2.933': attribute type 4 has an invalid length. [ 247.745190][ T9691] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 247.763975][ T9691] netlink: 'syz.2.933': attribute type 4 has an invalid length. [ 247.855648][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 247.918283][ T9695] : entered promiscuous mode [ 248.118742][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 248.132517][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 248.157616][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 248.393788][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 248.428229][ T6881] bond2: (slave erspan0): link status definitely down, disabling slave [ 248.448299][ T6881] bond2: now running without any active interface! [ 248.686001][ T9726] netlink: 'syz.2.942': attribute type 11 has an invalid length. [ 248.705279][ T9724] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 248.723085][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 248.756103][ T9726] net_ratelimit: 11 callbacks suppressed [ 248.756121][ T9726] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 248.792165][ T9726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.881377][ T9730] bond4: (slave bridge1): making interface the new active one [ 248.931071][ T9730] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 249.130843][ T9736] lo speed is unknown, defaulting to 1000 [ 249.682323][ T9751] xt_ipcomp: unknown flags F7 [ 249.689222][ T9743] lo speed is unknown, defaulting to 1000 [ 249.703174][ T9752] netlink: 'syz.4.951': attribute type 11 has an invalid length. [ 249.974718][ T922] IPVS: starting estimator thread 0... [ 250.067242][ T9762] IPVS: using max 25 ests per chain, 60000 per kthread [ 250.159912][ T9768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.953'. [ 250.382392][ T9770] bridge3: entered allmulticast mode [ 250.487642][ T9758] lo speed is unknown, defaulting to 1000 [ 250.854732][ T9787] tipc: Enabled bearer , priority 0 [ 250.876297][ T9782] syzkaller0: entered promiscuous mode [ 250.887191][ T9782] syzkaller0: entered allmulticast mode [ 250.953136][ T9782] tipc: Resetting bearer [ 250.978052][ T9781] tipc: Resetting bearer [ 251.014049][ T9781] tipc: Disabling bearer [ 251.497169][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 251.601198][ T9795] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 251.615117][ T9795] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 251.652723][ T9795] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 251.707740][ T9801] x_tables: duplicate underflow at hook 1 [ 252.064416][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.968'. [ 252.160950][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.966'. [ 252.180052][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 252.301532][ T9831] syzkaller1: entered promiscuous mode [ 252.307305][ T9831] syzkaller1: entered allmulticast mode [ 252.466872][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 252.474997][ C0] lec:lec_tx_timeout: lec0 [ 252.479950][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 252.859198][ T9848] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 252.889248][ T9843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.972'. [ 253.005062][ T9848] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.974'. [ 253.216713][ T9863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.978'. [ 253.260331][ T9852] lo speed is unknown, defaulting to 1000 [ 253.359006][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.416678][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.535917][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 254.113158][ T9865] lo speed is unknown, defaulting to 1000 [ 254.222667][ T9886] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 254.244615][ T9887] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 254.425633][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 254.778648][ T9882] lo speed is unknown, defaulting to 1000 [ 255.064927][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 255.111939][ T9909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 255.548825][ T9927] tipc: Enabling of bearer rejected, failed to enable media [ 255.978486][ T9935] lo speed is unknown, defaulting to 1000 [ 256.099668][ T9947] bridge4: entered promiscuous mode [ 256.135938][ T9947] bridge4: entered allmulticast mode [ 256.170428][ T9947] team0: Port device bridge4 added [ 256.349781][ T9955] FAULT_INJECTION: forcing a failure. [ 256.349781][ T9955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.366184][ T9955] CPU: 1 UID: 0 PID: 9955 Comm: syz.3.1007 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 256.366214][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.366244][ T9955] Call Trace: [ 256.366253][ T9955] [ 256.366263][ T9955] dump_stack_lvl+0x189/0x250 [ 256.366294][ T9955] ? __pfx____ratelimit+0x10/0x10 [ 256.366323][ T9955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.366347][ T9955] ? __pfx__printk+0x10/0x10 [ 256.366376][ T9955] ? __might_fault+0xb0/0x130 [ 256.366414][ T9955] should_fail_ex+0x414/0x560 [ 256.366449][ T9955] _copy_from_iter+0x1db/0x16f0 [ 256.366487][ T9955] ? policy_nodemask+0x27c/0x720 [ 256.366512][ T9955] ? __pfx__copy_from_iter+0x10/0x10 [ 256.366540][ T9955] ? set_page_refcounted+0xa0/0x1e0 [ 256.366566][ T9955] ? page_copy_sane+0x4e/0x280 [ 256.366589][ T9955] copy_page_from_iter+0xdd/0x170 [ 256.366616][ T9955] tun_get_user+0x1d7b/0x3e20 [ 256.366649][ T9955] ? tun_get_user+0x6f6/0x3e20 [ 256.366685][ T9955] ? __pfx_tun_get_user+0x10/0x10 [ 256.366711][ T9955] ? aa_file_perm+0x11f/0xed0 [ 256.366730][ T9955] ? aa_file_perm+0x3e7/0xed0 [ 256.366762][ T9955] ? ref_tracker_alloc+0x318/0x460 [ 256.366791][ T9955] ? __lock_acquire+0xab9/0xd20 [ 256.366815][ T9955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 256.366856][ T9955] ? tun_get+0x1c/0x2f0 [ 256.366884][ T9955] ? tun_get+0x1c/0x2f0 [ 256.366906][ T9955] ? tun_get+0x1c/0x2f0 [ 256.366934][ T9955] tun_chr_write_iter+0x113/0x200 [ 256.366960][ T9955] vfs_write+0x54b/0xa90 [ 256.366987][ T9955] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 256.367011][ T9955] ? __pfx_vfs_write+0x10/0x10 [ 256.367046][ T9955] ? __fget_files+0x2a/0x420 [ 256.367082][ T9955] ksys_write+0x145/0x250 [ 256.367106][ T9955] ? __pfx_ksys_write+0x10/0x10 [ 256.367125][ T9955] ? rcu_is_watching+0x15/0xb0 [ 256.367155][ T9955] ? do_syscall_64+0xbe/0x3b0 [ 256.367184][ T9955] do_syscall_64+0xfa/0x3b0 [ 256.367209][ T9955] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.367236][ T9955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.367256][ T9955] ? clear_bhb_loop+0x60/0xb0 [ 256.367281][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.367301][ T9955] RIP: 0033:0x7f5b5ff8d3df [ 256.367320][ T9955] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 256.367338][ T9955] RSP: 002b:00007f5b60e15000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 256.367360][ T9955] RAX: ffffffffffffffda RBX: 00007f5b601b5fa0 RCX: 00007f5b5ff8d3df [ 256.367375][ T9955] RDX: 000000000000003e RSI: 0000200000000380 RDI: 00000000000000c8 [ 256.367388][ T9955] RBP: 00007f5b60e15090 R08: 0000000000000000 R09: 0000000000000000 [ 256.367401][ T9955] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 256.367413][ T9955] R13: 0000000000000000 R14: 00007f5b601b5fa0 R15: 00007fff38e3adb8 [ 256.367446][ T9955] [ 256.555282][ T9958] __nla_validate_parse: 8 callbacks suppressed [ 256.555304][ T9958] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1008'. [ 256.849034][ T9962] Cannot find add_set index 3 as target [ 256.880319][ T9962] tipc: Enabling of bearer rejected, failed to enable media [ 257.084153][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 257.204166][ T9975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.347914][ T4559] wlan0: Trigger new scan to find an IBSS to join [ 257.486959][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 257.495107][ C0] lec:lec_tx_timeout: lec0 [ 257.500190][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 257.984524][ T9995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1017'. [ 258.111305][T10000] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1018'. [ 258.569222][T10005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1020'. [ 258.859232][T10029] netlink: 'syz.0.1025': attribute type 12 has an invalid length. [ 258.890343][T10029] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1025'. [ 259.059958][T10021] lo speed is unknown, defaulting to 1000 [ 259.181749][T10003] lec:lec_atm_close: lec0: Shut down! [ 259.253842][T10041] Cannot find add_set index 4 as target [ 259.268508][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.284155][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.448111][T10017] lo speed is unknown, defaulting to 1000 [ 260.173034][T10033] lo speed is unknown, defaulting to 1000 [ 260.724397][T10046] lo speed is unknown, defaulting to 1000 [ 260.857588][T10073] FAULT_INJECTION: forcing a failure. [ 260.857588][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 260.870363][T10073] CPU: 1 UID: 0 PID: 10073 Comm: syz.4.1033 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 260.870391][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.870405][T10073] Call Trace: [ 260.870414][T10073] [ 260.870423][T10073] dump_stack_lvl+0x189/0x250 [ 260.870453][T10073] ? __pfx____ratelimit+0x10/0x10 [ 260.870480][T10073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.870504][T10073] ? __pfx__printk+0x10/0x10 [ 260.870538][T10073] ? __lock_acquire+0xab9/0xd20 [ 260.870566][T10073] should_fail_ex+0x414/0x560 [ 260.870601][T10073] should_failslab+0xa8/0x100 [ 260.870630][T10073] kmem_cache_alloc_noprof+0x73/0x3c0 [ 260.870654][T10073] ? skb_clone+0x212/0x3a0 [ 260.870672][T10073] ? run_filter+0x23/0x270 [ 260.870717][T10073] skb_clone+0x212/0x3a0 [ 260.870735][T10073] ? packet_rcv+0x567/0x1590 [ 260.870768][T10073] packet_rcv+0x6d6/0x1590 [ 260.870806][T10073] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 260.870837][T10073] __netif_receive_skb_core+0x3104/0x4010 [ 260.870875][T10073] ? __kernel_text_address+0xd/0x40 [ 260.870893][T10073] ? unwind_get_return_address+0x4d/0x90 [ 260.870916][T10073] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 260.870957][T10073] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 260.870985][T10073] ? stack_trace_save+0x9c/0xe0 [ 260.871022][T10073] ? __lock_acquire+0xab9/0xd20 [ 260.871050][T10073] ? netif_receive_skb+0x115/0x790 [ 260.871076][T10073] ? netif_receive_skb+0x115/0x790 [ 260.871103][T10073] __netif_receive_skb+0x72/0x380 [ 260.871135][T10073] ? netif_receive_skb+0x115/0x790 [ 260.871158][T10073] netif_receive_skb+0x1cb/0x790 [ 260.871182][T10073] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 260.871207][T10073] ? __pfx_netif_receive_skb+0x10/0x10 [ 260.871238][T10073] ? tun_rx_batched+0x160/0x730 [ 260.871266][T10073] tun_rx_batched+0x1b9/0x730 [ 260.871289][T10073] ? __lock_acquire+0xab9/0xd20 [ 260.871315][T10073] ? __pfx_tun_rx_batched+0x10/0x10 [ 260.871343][T10073] ? tun_get_user+0x266c/0x3e20 [ 260.871383][T10073] tun_get_user+0x2aa2/0x3e20 [ 260.871416][T10073] ? tun_get_user+0x6f6/0x3e20 [ 260.871441][T10073] ? tun_get_user+0x266c/0x3e20 [ 260.871472][T10073] ? __pfx_tun_get_user+0x10/0x10 [ 260.871498][T10073] ? aa_file_perm+0x11f/0xed0 [ 260.871516][T10073] ? aa_file_perm+0x3e7/0xed0 [ 260.871549][T10073] ? ref_tracker_alloc+0x318/0x460 [ 260.871577][T10073] ? __lock_acquire+0xab9/0xd20 [ 260.871600][T10073] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 260.871638][T10073] ? tun_get+0x1c/0x2f0 [ 260.871668][T10073] ? tun_get+0x1c/0x2f0 [ 260.871690][T10073] ? tun_get+0x1c/0x2f0 [ 260.871718][T10073] tun_chr_write_iter+0x113/0x200 [ 260.871745][T10073] vfs_write+0x54b/0xa90 [ 260.871774][T10073] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 260.871799][T10073] ? __pfx_vfs_write+0x10/0x10 [ 260.871841][T10073] ? __fget_files+0x2a/0x420 [ 260.871879][T10073] ksys_write+0x145/0x250 [ 260.871906][T10073] ? __pfx_ksys_write+0x10/0x10 [ 260.871926][T10073] ? rcu_is_watching+0x15/0xb0 [ 260.871956][T10073] ? do_syscall_64+0xbe/0x3b0 [ 260.871988][T10073] do_syscall_64+0xfa/0x3b0 [ 260.872014][T10073] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.872041][T10073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.872061][T10073] ? clear_bhb_loop+0x60/0xb0 [ 260.872086][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.872106][T10073] RIP: 0033:0x7fec54b8d3df [ 260.872125][T10073] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 260.872142][T10073] RSP: 002b:00007fec55a8c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.872164][T10073] RAX: ffffffffffffffda RBX: 00007fec54db5fa0 RCX: 00007fec54b8d3df [ 260.872179][T10073] RDX: 000000000000003e RSI: 0000200000000380 RDI: 00000000000000c8 [ 260.872191][T10073] RBP: 00007fec55a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 260.872204][T10073] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 260.872216][T10073] R13: 0000000000000000 R14: 00007fec54db5fa0 R15: 00007ffef1197d68 [ 260.872250][T10073] [ 261.282492][T10075] syz_tun: entered promiscuous mode [ 261.285582][ T1300] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 261.289192][T10075] batadv_slave_0: entered promiscuous mode [ 261.304080][T10075] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 261.314178][T10075] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.325513][T10075] hsr1: entered allmulticast mode [ 261.330734][T10075] syz_tun: entered allmulticast mode [ 261.336070][T10075] batadv_slave_0: entered allmulticast mode [ 262.004816][T10081] team_slave_0: entered promiscuous mode [ 262.010962][T10081] team_slave_1: entered promiscuous mode [ 262.016802][T10081] geneve0: entered promiscuous mode [ 262.040831][T10081] macsec0: entered promiscuous mode [ 262.046104][T10081] team0: entered promiscuous mode [ 262.055340][T10081] macsec0: entered allmulticast mode [ 262.068980][T10081] team0: entered allmulticast mode [ 262.074234][T10081] team_slave_0: entered allmulticast mode [ 262.084417][T10081] team_slave_1: entered allmulticast mode [ 262.093404][T10081] geneve0: entered allmulticast mode [ 262.104532][T10081] team0: Device macsec0 is already an upper device of the team interface [ 262.122188][T10081] team0: left allmulticast mode [ 262.130398][T10081] team_slave_0: left allmulticast mode [ 262.135995][T10081] team_slave_1: left allmulticast mode [ 262.145438][T10081] geneve0: left allmulticast mode [ 262.153758][T10081] team0: left promiscuous mode [ 262.163077][T10081] team_slave_0: left promiscuous mode [ 262.168602][T10081] team_slave_1: left promiscuous mode [ 262.174181][T10081] geneve0: left promiscuous mode [ 262.317833][ T1131] wlan0: Trigger new scan to find an IBSS to join [ 263.033651][T10100] tipc: Enabled bearer , priority 0 [ 263.046261][T10100] syzkaller0: entered promiscuous mode [ 263.062626][T10100] syzkaller0: entered allmulticast mode [ 263.161618][T10100] tipc: Resetting bearer [ 263.201365][T10099] tipc: Resetting bearer [ 263.227827][T10099] tipc: Disabling bearer [ 263.287322][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.354175][T10113] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 263.526120][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.633828][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.662162][T10115] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.709275][T10115] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 263.967525][T10119] veth5: entered promiscuous mode [ 264.012731][T10119] bond0: (slave veth5): Enslaving as an active interface with a down link [ 264.126005][T10135] lo speed is unknown, defaulting to 1000 [ 264.257492][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 264.313051][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 264.317010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 264.330322][ C0] lec:lec_tx_timeout: lec0 [ 264.335470][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.907958][T10158] ip6_vti0: left promiscuous mode [ 265.041766][T10158] batman_adv: batadv0: Interface deactivated: dummy0 [ 265.112029][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 265.320511][T10158] 1·: left allmulticast mode [ 265.325193][T10158] hsr_slave_0: left allmulticast mode [ 265.331945][T10158] hsr_slave_1: left allmulticast mode [ 265.544061][T10158] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 265.573945][T10158] macvtap1: left allmulticast mode [ 265.619776][T10158] xfrm1: left promiscuous mode [ 265.624607][T10158] xfrm1: left allmulticast mode [ 265.638940][T10158] veth3: left allmulticast mode [ 265.644518][T10158] macvtap2: left promiscuous mode [ 265.653223][T10158] macvtap2: left allmulticast mode [ 265.664148][T10158] bridge3: left allmulticast mode [ 265.672774][T10158] veth5: left promiscuous mode [ 265.706020][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 265.715088][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 265.802207][T10173] vlan2: entered allmulticast mode [ 265.808493][T10173] veth1: entered allmulticast mode [ 265.811960][T10185] Bluetooth: MGMT ver 1.23 [ 265.822071][ T1155] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.834524][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 265.934515][ T1155] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.973111][T10185] vxcan1: entered allmulticast mode [ 266.003120][ T1155] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.064627][T10182] lo speed is unknown, defaulting to 1000 [ 266.073805][ T1155] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.378898][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 266.390436][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 266.584281][T10202] Cannot find map_set index 0 as target [ 266.604044][T10202] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 266.616511][T10202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 266.638984][T10194] lo speed is unknown, defaulting to 1000 [ 266.681439][T10202] team0: Port device geneve0 added [ 266.693980][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.769369][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.783529][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.798420][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.374767][T10222] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 267.396950][T10222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1067'. [ 267.444591][T10222] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 268.585133][T10251] xt_HMARK: proto mask must be zero with L3 mode [ 268.603974][T10251] : renamed from bridge_slave_0 (while UP) [ 269.184562][T10277] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 269.347217][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 269.354231][T10282] __nla_validate_parse: 3 callbacks suppressed [ 269.354255][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 269.355278][ C0] lec:lec_tx_timeout: lec0 [ 269.356375][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.416721][T10277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.480522][T10280] bond3: (slave gretap1): making interface the new active one [ 269.491805][T10280] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 269.564101][ T7192] IPVS: starting estimator thread 0... [ 269.659482][T10286] IPVS: using max 26 ests per chain, 62400 per kthread [ 269.826126][T10292] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 269.863605][T10292] batman_adv: batadv0: Removing interface: dummy0 [ 269.883399][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 269.948912][T10311] netlink: 'syz.3.1088': attribute type 10 has an invalid length. [ 269.965924][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1088'. [ 270.050344][T10311] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 270.174678][T10318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 270.343756][T10319] lo speed is unknown, defaulting to 1000 [ 270.378081][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 270.408587][T10327] tipc: Enabling of bearer rejected, failed to enable media [ 271.305315][T10347] lo speed is unknown, defaulting to 1000 [ 272.880239][T10372] lo speed is unknown, defaulting to 1000 [ 273.217864][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 273.227302][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 273.977115][T10396] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 274.006103][T10396] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1105'. [ 274.387370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 274.395438][ C0] lec:lec_tx_timeout: lec0 [ 274.400100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.851008][T10411] lo speed is unknown, defaulting to 1000 [ 275.541366][T10429] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 275.822339][T10437] bond2: (slave erspan0): Releasing active interface [ 275.845824][T10437] dummy0: left allmulticast mode [ 275.855132][T10437] dummy0: left promiscuous mode [ 275.900849][T10437] bridge0: port 3(dummy0) entered disabled state [ 275.926698][T10437] : left allmulticast mode [ 275.932190][T10437] bridge0: port 1() entered disabled state [ 276.001663][T10437] bridge_slave_1: left allmulticast mode [ 276.010164][T10437] bridge_slave_1: left promiscuous mode [ 276.016057][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.034133][T10437] bond0: (slave bond_slave_0): Releasing backup interface [ 276.046971][T10437] bond0: (slave bond_slave_1): Releasing backup interface [ 276.081816][T10437] team0: Port device team_slave_0 removed [ 276.106387][T10437] team0: Port device team_slave_1 removed [ 276.130186][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.144442][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.155389][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.163132][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.245390][T10437] team0: Port device geneve0 removed [ 276.285777][T10437] bond1: (slave veth3): Releasing backup interface [ 276.315535][T10437] bond3: (slave gretap1): Releasing active interface [ 276.515856][T10451] batman_adv: batadv0: Adding interface: ip6gretap1 [ 276.525382][T10451] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.551602][T10451] batman_adv: batadv0: Interface activated: ip6gretap1 [ 276.560138][T10454] team0: Mode changed to "broadcast" [ 276.567242][T10441] vlan0: entered promiscuous mode [ 276.620699][T10441] team0: Port device vlan0 added [ 276.707537][T10458] netlink: 'syz.2.1120': attribute type 12 has an invalid length. [ 276.840330][T10460] x_tables: duplicate underflow at hook 2 [ 276.989724][T10468] erspan0: left allmulticast mode [ 277.003678][T10468] veth0_to_bond: left allmulticast mode [ 277.010131][T10468] hsr0: left allmulticast mode [ 277.025394][T10468] hsr_slave_0: left allmulticast mode [ 277.032724][T10468] hsr_slave_1: left allmulticast mode [ 277.101390][T10465] tipc: Enabled bearer , priority 0 [ 277.109454][T10466] syzkaller0: entered promiscuous mode [ 277.114985][T10466] syzkaller0: entered allmulticast mode [ 277.132708][ T6877] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.158511][ T6877] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.179333][ T6877] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.223753][ T6877] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.249317][T10466] tipc: Resetting bearer [ 277.263820][T10464] tipc: Resetting bearer [ 277.286170][T10464] tipc: Disabling bearer [ 277.304935][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 277.461759][T10486] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 277.470875][T10486] macsec1: entered allmulticast mode [ 277.491985][T10486] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 277.542709][T10486] batman_adv: batadv0: Adding interface: macsec1 [ 277.552348][T10486] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.607789][T10486] batman_adv: batadv0: Interface activated: macsec1 [ 277.914670][T10506] pim6reg1: entered promiscuous mode [ 277.940642][T10506] pim6reg1: entered allmulticast mode [ 278.085543][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 278.317116][ T4559] wlan0: Trigger new scan to find an IBSS to join [ 278.398010][T10514] lo speed is unknown, defaulting to 1000 [ 278.587056][T10529] tipc: Enabling of bearer rejected, failed to enable media [ 278.634741][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 278.984786][T10547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 279.406884][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.414998][ C0] lec:lec_tx_timeout: lec0 [ 279.418522][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1135'. [ 279.419967][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.477644][T10558] netlink: 'syz.2.1147': attribute type 22 has an invalid length. [ 279.721749][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 279.745097][T10569] ipvlan2: entered promiscuous mode [ 279.763951][T10569] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 280.055547][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 280.143442][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 280.233199][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 280.259441][T10587] netlink: 'syz.1.1155': attribute type 6 has an invalid length. [ 280.290572][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 280.416146][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 280.582911][T10601] xt_hashlimit: size too large, truncated to 1048576 [ 280.676461][T10602] : renamed from bridge_slave_0 [ 280.737547][ T5851] Bluetooth: hci4: link tx timeout [ 280.743494][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 280.752949][ T5851] Bluetooth: hci4: link tx timeout [ 280.758278][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.115110][T10620] tipc: Cannot configure node identity twice [ 281.568133][T10632] netlink: 'syz.1.1169': attribute type 4 has an invalid length. [ 281.591078][T10632] netlink: 'syz.1.1169': attribute type 17 has an invalid length. [ 281.942300][T10653] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49394 - 0 [ 281.984378][T10653] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.150936][T10653] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49394 - 0 [ 282.175560][T10653] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.255058][T10653] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49394 - 0 [ 282.297474][T10653] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.332293][T10671] __nla_validate_parse: 6 callbacks suppressed [ 282.332312][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 282.399381][T10653] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49394 - 0 [ 282.439428][T10653] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.657789][ T6879] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 49394 - 0 [ 282.671415][ T6879] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.750486][ T4559] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 49394 - 0 [ 282.776972][ T4559] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.787736][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 282.788634][ T4559] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 49394 - 0 [ 282.820274][ T4559] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 282.857050][ T4559] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 49394 - 0 [ 282.886729][ T4559] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.268519][ T4559] wlan0: Trigger new scan to find an IBSS to join [ 283.330092][T10706] lo speed is unknown, defaulting to 1000 [ 283.485741][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1191'. [ 283.588877][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 283.664338][T10726] FAULT_INJECTION: forcing a failure. [ 283.664338][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 283.697200][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.2.1194 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 283.697235][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.697248][T10726] Call Trace: [ 283.697257][T10726] [ 283.697266][T10726] dump_stack_lvl+0x189/0x250 [ 283.697296][T10726] ? __pfx____ratelimit+0x10/0x10 [ 283.697330][T10726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.697354][T10726] ? __pfx__printk+0x10/0x10 [ 283.697387][T10726] ? __pfx___might_resched+0x10/0x10 [ 283.697410][T10726] ? fs_reclaim_acquire+0x7d/0x100 [ 283.697443][T10726] should_fail_ex+0x414/0x560 [ 283.697478][T10726] should_failslab+0xa8/0x100 [ 283.697505][T10726] __kmalloc_noprof+0xcb/0x4f0 [ 283.697527][T10726] ? kfree+0x4d/0x440 [ 283.697546][T10726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.697571][T10726] tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.697594][T10726] ? tomoyo_domain+0xd9/0x130 [ 283.697619][T10726] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 283.697647][T10726] tomoyo_path_number_perm+0x1e8/0x5a0 [ 283.697677][T10726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.697723][T10726] ? __lock_acquire+0xab9/0xd20 [ 283.697767][T10726] ? __fget_files+0x2a/0x420 [ 283.697798][T10726] ? __fget_files+0x2a/0x420 [ 283.697822][T10726] ? __fget_files+0x3a0/0x420 [ 283.697847][T10726] ? __fget_files+0x2a/0x420 [ 283.697876][T10726] security_file_ioctl+0xcb/0x2d0 [ 283.697902][T10726] __se_sys_ioctl+0x47/0x170 [ 283.697924][T10726] do_syscall_64+0xfa/0x3b0 [ 283.697948][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.697974][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.697994][T10726] ? clear_bhb_loop+0x60/0xb0 [ 283.698019][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.698039][T10726] RIP: 0033:0x7f2ca578e929 [ 283.698058][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.698076][T10726] RSP: 002b:00007f2ca66c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.698098][T10726] RAX: ffffffffffffffda RBX: 00007f2ca59b5fa0 RCX: 00007f2ca578e929 [ 283.698113][T10726] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 0000000000000003 [ 283.698126][T10726] RBP: 00007f2ca66c6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.698138][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.698150][T10726] R13: 0000000000000000 R14: 00007f2ca59b5fa0 R15: 00007fff7ba2cfa8 [ 283.698195][T10726] [ 283.698204][T10726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.293763][T10741] macsec1: entered promiscuous mode [ 284.298181][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.312536][T10741] macsec1: entered allmulticast mode [ 284.408170][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 284.441834][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.449995][ C0] lec:lec_tx_timeout: lec0 [ 284.455216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.483480][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.530713][T10743] lo speed is unknown, defaulting to 1000 [ 284.771350][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 284.788869][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1202'. [ 284.869740][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 284.902919][T10762] netlink: 'syz.2.1202': attribute type 58 has an invalid length. [ 285.160432][T10746] lo speed is unknown, defaulting to 1000 [ 285.169048][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 285.401301][T10772] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1205'. [ 285.477098][T10768] smc: net device bond0 applied user defined pnetid SYZ2 [ 285.497127][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 285.777917][T10784] FAULT_INJECTION: forcing a failure. [ 285.777917][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 285.805188][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.3.1210 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 285.805219][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.805231][T10784] Call Trace: [ 285.805245][T10784] [ 285.805254][T10784] dump_stack_lvl+0x189/0x250 [ 285.805286][T10784] ? __pfx____ratelimit+0x10/0x10 [ 285.805313][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.805339][T10784] ? __pfx__printk+0x10/0x10 [ 285.805370][T10784] ? __pfx___might_resched+0x10/0x10 [ 285.805395][T10784] ? fs_reclaim_acquire+0x7d/0x100 [ 285.805442][T10784] should_fail_ex+0x414/0x560 [ 285.805477][T10784] should_failslab+0xa8/0x100 [ 285.805523][T10784] __kmalloc_noprof+0xcb/0x4f0 [ 285.805547][T10784] ? tomoyo_encode+0x28b/0x550 [ 285.805572][T10784] tomoyo_encode+0x28b/0x550 [ 285.805599][T10784] tomoyo_realpath_from_path+0x58d/0x5d0 [ 285.805623][T10784] ? tomoyo_domain+0xd9/0x130 [ 285.805650][T10784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 285.805678][T10784] tomoyo_path_number_perm+0x1e8/0x5a0 [ 285.805718][T10784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.805765][T10784] ? __lock_acquire+0xab9/0xd20 [ 285.805808][T10784] ? __fget_files+0x2a/0x420 [ 285.805838][T10784] ? __fget_files+0x2a/0x420 [ 285.805864][T10784] ? __fget_files+0x3a0/0x420 [ 285.805889][T10784] ? __fget_files+0x2a/0x420 [ 285.805921][T10784] security_file_ioctl+0xcb/0x2d0 [ 285.805949][T10784] __se_sys_ioctl+0x47/0x170 [ 285.805975][T10784] do_syscall_64+0xfa/0x3b0 [ 285.806002][T10784] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.806028][T10784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.806048][T10784] ? clear_bhb_loop+0x60/0xb0 [ 285.806074][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.806094][T10784] RIP: 0033:0x7f5b5ff8e929 [ 285.806112][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.806130][T10784] RSP: 002b:00007f5b60df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.806152][T10784] RAX: ffffffffffffffda RBX: 00007f5b601b6080 RCX: 00007f5b5ff8e929 [ 285.806167][T10784] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 0000000000000003 [ 285.806180][T10784] RBP: 00007f5b60df4090 R08: 0000000000000000 R09: 0000000000000000 [ 285.806193][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.806205][T10784] R13: 0000000000000000 R14: 00007f5b601b6080 R15: 00007fff38e3adb8 [ 285.806238][T10784] [ 285.806324][T10784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.102697][T10772] smc: removing net device bond0 with user defined pnetid SYZ2 [ 286.115412][T10772] bond0 (unregistering): Released all slaves [ 286.837427][T10806] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 286.845551][T10806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.393299][T10825] xt_CT: No such helper "snmp" [ 287.883931][T10835] lo speed is unknown, defaulting to 1000 [ 288.184882][T10848] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1227'. [ 288.199731][T10849] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 288.308559][ T49] wlan0: Trigger new scan to find an IBSS to join [ 288.409483][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 288.417477][T10848] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1227'. [ 288.461138][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1230'. [ 288.550175][T10848] bond0 (unregistering): Released all slaves [ 288.623357][T10851] lo speed is unknown, defaulting to 1000 [ 289.002586][T10873] netlink: 'syz.0.1235': attribute type 12 has an invalid length. [ 289.325888][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 289.466863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.475007][ C0] lec:lec_tx_timeout: lec0 [ 289.479987][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.954859][T10898] netlink: 'syz.4.1243': attribute type 21 has an invalid length. [ 290.013830][T10900] syzkaller1: entered promiscuous mode [ 290.028406][T10900] syzkaller1: entered allmulticast mode [ 290.902241][T10933] syzkaller1: entered promiscuous mode [ 290.927063][T10933] syzkaller1: entered allmulticast mode [ 291.141683][T10942] x_tables: duplicate underflow at hook 3 [ 291.347774][ T36] wlan0: Trigger new scan to find an IBSS to join [ 291.462163][T10948] lo speed is unknown, defaulting to 1000 [ 291.550279][T10952] tunl0: entered promiscuous mode [ 291.555574][T10952] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 291.606983][T10952] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1258'. [ 291.638389][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'. [ 291.696982][T10931] IPVS: Unknown mcast interface: batadv0 [ 291.790105][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 291.922949][T10963] unsupported nlmsg_type 40 [ 292.404532][T10975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1265'. [ 292.442183][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.611600][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 292.776760][T10990] lo speed is unknown, defaulting to 1000 [ 293.567434][T10992] lo speed is unknown, defaulting to 1000 [ 294.486869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.494972][ C0] lec:lec_tx_timeout: lec0 [ 294.621487][T11056] C: renamed from team_slave_0 [ 294.662996][T11056] netlink: 'syz.4.1290': attribute type 3 has an invalid length. [ 294.677421][T11056] __nla_validate_parse: 1 callbacks suppressed [ 294.677439][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1290'. [ 295.811905][T11085] Bluetooth: MGMT ver 1.23 [ 296.098846][T11091] lo speed is unknown, defaulting to 1000 [ 296.343267][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 296.378521][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 296.574799][T11109] netlink: 'syz.3.1305': attribute type 13 has an invalid length. [ 296.936078][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.963498][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.198998][T11109] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 297.213578][T11109] batman_adv: batadv0: Interface deactivated: macsec1 [ 297.221167][T11109] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 297.271507][ T6881] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.287463][ T6881] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 297.306555][ T6881] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.315720][ T6881] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 297.370851][ T6881] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.381948][ T6881] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 297.406723][T11107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.422995][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.432732][ T36] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 297.445662][T11127] lo speed is unknown, defaulting to 1000 [ 297.445860][T11107] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 297.452156][T11130] syzkaller0: entered promiscuous mode [ 297.490886][T11130] syzkaller0: entered allmulticast mode [ 297.497553][T11133] xt_policy: too many policy elements [ 298.855982][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 298.909435][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 299.084360][T11178] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 299.106809][T11178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1331'. [ 299.501142][T11183] lo speed is unknown, defaulting to 1000 [ 299.612760][T11196] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 299.633975][T11196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1335'. [ 299.648270][T11201] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 299.669422][T11196] bridge0: port 1(dummy0) entered blocking state [ 299.684425][T11196] bridge0: port 1(dummy0) entered disabled state [ 299.717793][T11196] dummy0: entered allmulticast mode [ 299.725582][T11196] dummy0: left allmulticast mode [ 299.783321][T11196] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 300.075987][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 300.123822][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 300.274306][T11196] lo speed is unknown, defaulting to 1000 [ 300.425516][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1344'. [ 300.453715][T11231] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1345'. [ 300.883785][T11240] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1348'. [ 300.988336][T11224] lo speed is unknown, defaulting to 1000 [ 301.261459][T11255] veth3: entered promiscuous mode [ 301.328412][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 301.626572][T11256] lo speed is unknown, defaulting to 1000 [ 301.667160][ T5862] Bluetooth: hci0: command tx timeout [ 302.189429][T11277] xt_hashlimit: size too large, truncated to 1048576 [ 302.396373][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 302.455739][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 302.513060][T11280] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1360'. [ 303.003334][T11288] netlink: 'syz.2.1362': attribute type 11 has an invalid length. [ 303.039997][T11288] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1362'. [ 303.099375][T11291] netlink: 'syz.3.1363': attribute type 25 has an invalid length. [ 303.221057][T11294] netlink: 'syz.3.1363': attribute type 12 has an invalid length. [ 303.372558][T11297] batadv_slave_0: entered promiscuous mode [ 303.423082][T11297] batadv_slave_0 (unregistering): left promiscuous mode [ 303.646100][T11296] lo speed is unknown, defaulting to 1000 [ 304.314455][T11311] netlink: 'syz.4.1368': attribute type 12 has an invalid length. [ 305.045977][T11337] netlink: 'syz.1.1374': attribute type 21 has an invalid length. [ 305.187482][T11337] __nla_validate_parse: 8 callbacks suppressed [ 305.187503][T11337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1374'. [ 305.364796][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 305.644050][T11335] syzkaller1: entered promiscuous mode [ 305.676239][T11335] syzkaller1: entered allmulticast mode [ 305.835422][T11348] sctp: [Deprecated]: syz.2.1378 (pid 11348) Use of int in max_burst socket option. [ 305.835422][T11348] Use struct sctp_assoc_value instead [ 305.959735][T11351] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 306.059873][T11351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.131947][T11361] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 306.182647][T11354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.193519][T11354] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 306.214082][T11354] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 306.248013][T11366] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1383'. [ 306.275690][T11351] erspan0: entered allmulticast mode [ 306.327779][T11351] bond5: (slave erspan0): making interface the new active one [ 306.343623][T11351] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 306.350875][T11369] netlink: 'syz.4.1384': attribute type 5 has an invalid length. [ 306.384932][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 306.394111][T11350] lo speed is unknown, defaulting to 1000 [ 306.951010][T11390] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.060211][T11355] lo speed is unknown, defaulting to 1000 [ 308.727810][T11445] nbd1: detected capacity change from 0 to 63 [ 308.754348][T11449] block nbd1: NBD_DISCONNECT [ 308.784310][T11449] block nbd1: Disconnected due to user request. [ 308.807159][T11449] block nbd1: shutting down sockets [ 308.855421][T11454] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1402'. [ 308.867033][ C1] blk_print_req_error: 138 callbacks suppressed [ 308.867058][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.882508][ C1] buffer_io_error: 138 callbacks suppressed [ 308.882528][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 308.910338][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.919529][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 308.922109][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.936455][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 308.944359][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.953525][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 308.963677][ T8133] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.986230][ T8133] Buffer I/O error on dev nbd1, logical block 0, async page read [ 309.003890][ T8133] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.013860][ T8133] Buffer I/O error on dev nbd1, logical block 1, async page read [ 309.063300][ T8133] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.104081][ T8133] Buffer I/O error on dev nbd1, logical block 2, async page read [ 309.124270][ T8133] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.143478][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 309.152878][ T8133] Buffer I/O error on dev nbd1, logical block 3, async page read [ 309.162446][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1404'. [ 309.177516][ T8133] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.186613][ T8133] Buffer I/O error on dev nbd1, logical block 0, async page read [ 309.227412][ T8133] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.279962][ T8133] Buffer I/O error on dev nbd1, logical block 1, async page read [ 309.303173][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 309.311669][ T8133] ldm_validate_partition_table(): Disk read failed. [ 309.348719][T11462] netlink: 'syz.1.1405': attribute type 12 has an invalid length. [ 309.371669][ T8133] Dev nbd1: unable to read RDB block 0 [ 309.395145][T11462] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1405'. [ 309.433653][ T8133] nbd1: unable to read partition table [ 309.492795][T11463] lo speed is unknown, defaulting to 1000 [ 309.505583][ T8133] ldm_validate_partition_table(): Disk read failed. [ 309.532488][ T8133] Dev nbd1: unable to read RDB block 0 [ 309.595403][T11475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1409'. [ 309.611030][ T8133] nbd1: unable to read partition table [ 309.896173][T11489] tipc: Enabled bearer , priority 0 [ 309.914470][T11488] tipc: Enabling of bearer rejected, already enabled [ 309.924234][T11489] syzkaller0: entered promiscuous mode [ 309.936464][T11489] syzkaller0: entered allmulticast mode [ 309.987252][T11489] tipc: Resetting bearer [ 310.030992][T11486] tipc: Resetting bearer [ 310.078573][T11486] tipc: Disabling bearer [ 310.363981][T11506] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.512265][T11512] netlink: 'syz.2.1419': attribute type 12 has an invalid length. [ 310.529699][T11514] syz_tun: entered allmulticast mode [ 310.535767][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 310.562715][T11514] dvmrp8: entered allmulticast mode [ 310.611124][T11513] syz_tun: left allmulticast mode [ 310.966549][T11522] Can't find ip_set type bitmap:ip,mac [ 311.103926][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1426'. [ 311.246650][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 311.257377][T11542] netlink: 'syz.0.1428': attribute type 2 has an invalid length. [ 311.318005][T11542] macvlan2: entered allmulticast mode [ 311.323464][T11542] veth1_vlan: entered allmulticast mode [ 311.847019][T11569] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 311.932179][T11569] bond4 (unregistering): Released all slaves [ 312.045266][T11580] netem: change failed [ 312.073010][T11586] netlink: 'syz.3.1442': attribute type 26 has an invalid length. [ 312.442610][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 312.520058][T11601] lo speed is unknown, defaulting to 1000 [ 312.528347][T11600] ipvlan0: mtu less than device minimum [ 312.639948][T11605] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 312.874518][T11609] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 313.386351][T11626] bridge4: left promiscuous mode [ 313.401192][T11626] bridge4: left allmulticast mode [ 313.424395][T11626] hsr1: left allmulticast mode [ 313.441326][T11626] syz_tun: left allmulticast mode [ 313.446687][T11626] batadv_slave_0: left allmulticast mode [ 313.457991][T11626] vlan2: left allmulticast mode [ 313.462919][T11626] veth1: left allmulticast mode [ 313.472354][T11626] macsec1: left promiscuous mode [ 313.480898][T11626] macsec1: left allmulticast mode [ 313.502774][T11626] veth1_vlan: left allmulticast mode [ 313.510335][T11626] macvlan2: left allmulticast mode [ 313.605752][ T6879] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.672460][ T6879] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.721274][ T6879] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.748432][T11637] lo speed is unknown, defaulting to 1000 [ 313.748450][ T6879] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.065679][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 314.124703][T11676] netlink: 'syz.1.1464': attribute type 29 has an invalid length. [ 314.513759][T11688] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 314.651659][T11680] lo: entered promiscuous mode [ 314.656512][T11680] lo: entered allmulticast mode [ 314.722765][T11691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.046930][T11662] lo speed is unknown, defaulting to 1000 [ 315.669806][T11712] x_tables: duplicate underflow at hook 3 [ 315.695195][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 315.710447][T11714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.798317][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 315.808028][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 315.853745][T11718] tipc: Enabled bearer , priority 0 [ 315.878467][T11718] tipc: Resetting bearer [ 316.307522][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.502224][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 316.620918][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 316.639854][T11743] vlan3: entered allmulticast mode [ 316.645258][T11743] bridge_slave_0: entered allmulticast mode [ 316.868554][ T7192] tipc: Node number set to 1044385561 [ 317.188623][T11750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1483'. [ 317.262836][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 317.340633][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 317.389827][T11765] lo speed is unknown, defaulting to 1000 [ 317.743324][T11763] smc: adding net device bond0 with user defined pnetid SYZ2 [ 317.864038][T11763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.883096][T11760] bond0: (slave batadv0): Opening slave failed [ 317.965166][T11763] tipc: Resetting bearer [ 318.008174][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 318.042240][T11771] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 318.050581][T11771] netlink: 'syz.3.1486': attribute type 2 has an invalid length. [ 318.237418][T11777] : entered promiscuous mode [ 318.244288][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 318.314838][T11780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.338809][T11777] bond2: (slave batadv1): Opening slave failed [ 319.277053][T11808] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.414247][ T30] audit: type=1800 audit(1752568374.726:4): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1493" name="cgroup.controllers" dev="tmpfs" ino=1545 res=0 errno=0 [ 319.551363][ T30] audit: type=1800 audit(1752568374.866:5): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1497" name="memory.events" dev="tmpfs" ino=1560 res=0 errno=0 [ 320.014850][T11815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.272816][T11827] netlink: 'syz.4.1502': attribute type 39 has an invalid length. [ 320.453439][T11837] netlink: 'syz.3.1506': attribute type 32 has an invalid length. [ 321.149586][T11856] __nla_validate_parse: 5 callbacks suppressed [ 321.149609][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 321.166993][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'. [ 321.371531][T11839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.384697][T11860] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1511'. [ 321.427058][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 321.524054][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 321.644983][T11868] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1514'. [ 321.864199][T11874] lo speed is unknown, defaulting to 1000 [ 322.124382][T11882] xt_l2tp: invalid flags combination: 4 [ 322.257446][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 322.602530][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 322.613536][T11888] can: request_module (can-proto-0) failed. [ 322.714663][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 322.724007][T11902] openvswitch: netlink: IP tunnel dst address not specified [ 322.813526][T11904] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 322.822783][T11904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1526'. [ 322.839025][T11904] netlink: 'syz.4.1526': attribute type 21 has an invalid length. [ 322.863937][T11904] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 322.881675][T11904] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1526'. [ 323.239751][T11912] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 323.331358][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 323.494354][T11929] tipc: Enabled bearer , priority 0 [ 323.542510][T11929] tipc: Resetting bearer [ 323.571787][T11938] tipc: Enabling of bearer rejected, failed to enable media [ 323.637588][T11923] tipc: Disabling bearer [ 323.709009][T11947] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 323.949625][T11947] dummy0: entered promiscuous mode [ 323.955006][T11947] dummy0: entered allmulticast mode [ 323.961303][T11947] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 324.169343][T11956] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 324.627230][ T1131] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.968726][T12027] ip6tnl1: entered promiscuous mode [ 325.976891][T12027] ip6tnl1: entered allmulticast mode [ 326.003913][T12027] team0: Device ip6tnl1 is of different type [ 326.430737][T12047] netlink: 'syz.2.1572': attribute type 10 has an invalid length. [ 326.661373][T12056] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 326.732547][T12062] __nla_validate_parse: 10 callbacks suppressed [ 326.732569][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 326.791519][T12063] batman_adv: batadv0: Adding interface: ip6gretap2 [ 326.812944][T12063] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.860556][T12063] batman_adv: batadv0: Interface activated: ip6gretap2 [ 326.922382][T12067] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1581'. [ 326.979584][T12066] netlink: 'syz.4.1580': attribute type 8 has an invalid length. [ 327.196792][T12075] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.301056][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 327.868805][T12105] syzkaller1: entered promiscuous mode [ 327.882461][T12105] syzkaller1: entered allmulticast mode [ 328.173966][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 328.185863][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1593'. [ 328.238243][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1593'. [ 328.251303][T12116] digital: digital_start_poll: Unknown protocol [ 328.307057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 328.315135][ C0] lec:lec_tx_timeout: lec0 [ 328.361683][T12112] batadv_slave_0 (unregistering): left promiscuous mode [ 328.401642][T12121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1597'. [ 328.465180][T12123] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2184310694/2184310696 [ 328.524625][T12123] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2184310694/2184310696 [ 328.554281][T12123] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2184310694/2184310696 [ 328.558019][T12120] lo speed is unknown, defaulting to 1000 [ 328.692419][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 328.718814][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 328.719997][T12128] netlink: 'syz.1.1599': attribute type 16 has an invalid length. [ 328.785291][T12128] netlink: 'syz.1.1599': attribute type 3 has an invalid length. [ 328.819168][T12128] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1599'. [ 328.844616][T12134] dvmrp0: entered allmulticast mode [ 329.095835][T12129] dvmrp0: left allmulticast mode [ 329.172096][T12146] tipc: Resetting bearer [ 329.247299][T12146] tipc: Resetting bearer [ 329.494437][ T61] tipc: Resetting bearer [ 329.590983][T12165] netlink: 'syz.3.1611': attribute type 3 has an invalid length. [ 330.122501][T12184] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 330.325785][T12192] FAULT_INJECTION: forcing a failure. [ 330.325785][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 330.356768][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.2.1620 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 330.356804][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.356816][T12192] Call Trace: [ 330.356825][T12192] [ 330.356834][T12192] dump_stack_lvl+0x189/0x250 [ 330.356864][T12192] ? __pfx____ratelimit+0x10/0x10 [ 330.356890][T12192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.356926][T12192] ? __pfx__printk+0x10/0x10 [ 330.356960][T12192] ? __pfx___might_resched+0x10/0x10 [ 330.356982][T12192] ? fs_reclaim_acquire+0x7d/0x100 [ 330.357014][T12192] should_fail_ex+0x414/0x560 [ 330.357048][T12192] should_failslab+0xa8/0x100 [ 330.357076][T12192] __kmalloc_noprof+0xcb/0x4f0 [ 330.357097][T12192] ? kfree+0x4d/0x440 [ 330.357115][T12192] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 330.357141][T12192] tomoyo_realpath_from_path+0xe3/0x5d0 [ 330.357164][T12192] ? tomoyo_domain+0xd9/0x130 [ 330.357189][T12192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 330.357218][T12192] tomoyo_path_number_perm+0x1e8/0x5a0 [ 330.357249][T12192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.357295][T12192] ? __lock_acquire+0xab9/0xd20 [ 330.357340][T12192] ? __fget_files+0x2a/0x420 [ 330.357370][T12192] ? __fget_files+0x2a/0x420 [ 330.357392][T12192] ? __fget_files+0x3a0/0x420 [ 330.357417][T12192] ? __fget_files+0x2a/0x420 [ 330.357448][T12192] security_file_ioctl+0xcb/0x2d0 [ 330.357477][T12192] __se_sys_ioctl+0x47/0x170 [ 330.357502][T12192] do_syscall_64+0xfa/0x3b0 [ 330.357528][T12192] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.357554][T12192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.357574][T12192] ? clear_bhb_loop+0x60/0xb0 [ 330.357599][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.357619][T12192] RIP: 0033:0x7f2ca578e929 [ 330.357636][T12192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.357653][T12192] RSP: 002b:00007f2ca66c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.357674][T12192] RAX: ffffffffffffffda RBX: 00007f2ca59b5fa0 RCX: 00007f2ca578e929 [ 330.357689][T12192] RDX: 0000200000000000 RSI: 0000000000008990 RDI: 0000000000000003 [ 330.357702][T12192] RBP: 00007f2ca66c6090 R08: 0000000000000000 R09: 0000000000000000 [ 330.357715][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.357727][T12192] R13: 0000000000000000 R14: 00007f2ca59b5fa0 R15: 00007fff7ba2cfa8 [ 330.357760][T12192] [ 330.628451][T12192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.753589][T12199] dvmrp1: entered allmulticast mode [ 330.804943][T12199] dvmrp1: left allmulticast mode [ 330.837971][T12209] netlink: 'syz.3.1622': attribute type 13 has an invalid length. [ 330.845893][T12209] netlink: 'syz.3.1622': attribute type 17 has an invalid length. [ 330.854199][T12199] dvmrp8: left allmulticast mode [ 330.942184][T12212] dvmrp1: entered allmulticast mode [ 330.977575][T12209] gretap0: refused to change device tx_queue_len [ 330.984243][T12209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.001375][ T7209] lo speed is unknown, defaulting to 1000 [ 331.027223][ T7209] syz1: Port: 1 Link ACTIVE [ 331.032932][T12208] lo speed is unknown, defaulting to 1000 [ 331.090413][ T5936] lo speed is unknown, defaulting to 1000 [ 331.439183][T12235] FAULT_INJECTION: forcing a failure. [ 331.439183][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 331.479982][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.1.1634 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 331.480013][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.480026][T12235] Call Trace: [ 331.480034][T12235] [ 331.480043][T12235] dump_stack_lvl+0x189/0x250 [ 331.480085][T12235] ? __pfx____ratelimit+0x10/0x10 [ 331.480111][T12235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.480134][T12235] ? __pfx__printk+0x10/0x10 [ 331.480164][T12235] ? __pfx___might_resched+0x10/0x10 [ 331.480189][T12235] ? fs_reclaim_acquire+0x7d/0x100 [ 331.480223][T12235] should_fail_ex+0x414/0x560 [ 331.480258][T12235] should_failslab+0xa8/0x100 [ 331.480287][T12235] __kmalloc_noprof+0xcb/0x4f0 [ 331.480309][T12235] ? tomoyo_encode+0x28b/0x550 [ 331.480334][T12235] tomoyo_encode+0x28b/0x550 [ 331.480360][T12235] tomoyo_realpath_from_path+0x58d/0x5d0 [ 331.480382][T12235] ? tomoyo_domain+0xd9/0x130 [ 331.480409][T12235] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 331.480437][T12235] tomoyo_path_number_perm+0x1e8/0x5a0 [ 331.480468][T12235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.480516][T12235] ? __lock_acquire+0xab9/0xd20 [ 331.480562][T12235] ? __fget_files+0x2a/0x420 [ 331.480592][T12235] ? __fget_files+0x2a/0x420 [ 331.480618][T12235] ? __fget_files+0x3a0/0x420 [ 331.480642][T12235] ? __fget_files+0x2a/0x420 [ 331.480674][T12235] security_file_ioctl+0xcb/0x2d0 [ 331.480702][T12235] __se_sys_ioctl+0x47/0x170 [ 331.480726][T12235] do_syscall_64+0xfa/0x3b0 [ 331.480753][T12235] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.480778][T12235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.480798][T12235] ? clear_bhb_loop+0x60/0xb0 [ 331.480824][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.480843][T12235] RIP: 0033:0x7feced38e929 [ 331.480862][T12235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.480880][T12235] RSP: 002b:00007fecee1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.480901][T12235] RAX: ffffffffffffffda RBX: 00007feced5b5fa0 RCX: 00007feced38e929 [ 331.480916][T12235] RDX: 0000200000000000 RSI: 0000000000008990 RDI: 0000000000000003 [ 331.480929][T12235] RBP: 00007fecee1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 331.480942][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.480953][T12235] R13: 0000000000000000 R14: 00007feced5b5fa0 R15: 00007ffdf17f8c58 [ 331.480991][T12235] [ 331.481110][T12235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.055028][T12248] xt_hashlimit: max too large, truncated to 1048576 [ 332.074743][T12248] Cannot find add_set index 3 as target [ 332.082830][T12251] __nla_validate_parse: 39 callbacks suppressed [ 332.082852][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 332.831049][T12269] lo speed is unknown, defaulting to 1000 [ 333.557602][T12294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.596342][T12289] tipc: Enabled bearer , priority 0 [ 333.678710][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.752566][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.778369][T12289] syzkaller0: entered promiscuous mode [ 333.784072][T12289] syzkaller0: entered allmulticast mode [ 333.869395][T12296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1648'. [ 333.966270][T12289] tipc: Resetting bearer [ 334.042508][T12288] tipc: Resetting bearer [ 334.133470][T12288] tipc: Disabling bearer [ 334.183285][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1642'. [ 334.195510][T12303] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 334.303876][T12279] lo speed is unknown, defaulting to 1000 [ 334.485263][T12308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1650'. [ 334.583971][T12305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1650'. [ 334.670631][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.681780][T12309] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.693255][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 334.702984][T12309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.746016][T12285] lo speed is unknown, defaulting to 1000 [ 335.121709][T12307] lo speed is unknown, defaulting to 1000 [ 335.170302][T12307] lo speed is unknown, defaulting to 1000 [ 335.179001][T12307] lo speed is unknown, defaulting to 1000 [ 336.230370][T12325] lo speed is unknown, defaulting to 1000 [ 336.422104][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 336.837183][T12307] infiniband syz0: set active [ 336.842110][T12307] infiniband syz0: added lo [ 336.855638][T12307] syz0: rxe_create_cq: returned err = -12 [ 336.872995][T12307] infiniband syz0: Couldn't create ib_mad CQ [ 336.889183][ T5936] lo speed is unknown, defaulting to 1000 [ 336.889455][T12345] netlink: 'syz.1.1660': attribute type 8 has an invalid length. [ 336.902661][T12307] infiniband syz0: Couldn't open port 1 [ 336.915133][T12349] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 336.985557][T12307] RDS/IB: syz0: added [ 336.995758][T12307] smc: adding ib device syz0 with port count 1 [ 337.005019][T12307] smc: ib device syz0 port 1 has pnetid [ 337.092329][T12355] veth5: entered promiscuous mode [ 337.098973][ T5936] lo speed is unknown, defaulting to 1000 [ 337.105498][T12307] lo speed is unknown, defaulting to 1000 [ 337.374798][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1667'. [ 337.375133][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 337.395300][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1667'. [ 337.490562][T12377] lo: left promiscuous mode [ 337.498198][T12377] lo: left allmulticast mode [ 337.533558][T12377] erspan0: left allmulticast mode [ 337.750263][T12375] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1669'. [ 337.781966][T12382] netlink: 'syz.1.1671': attribute type 6 has an invalid length. [ 337.841189][T12377] : left promiscuous mode [ 337.965079][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1668'. [ 337.985439][T12377] vlan0: left promiscuous mode [ 338.006432][T12377] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 338.029066][T12377] macvtap1: left promiscuous mode [ 338.034339][T12377] macvtap1: left allmulticast mode [ 338.045625][T12377] veth3: left promiscuous mode [ 338.052967][T12377] batadv0: left allmulticast mode [ 338.060632][T12377] macvtap2: left promiscuous mode [ 338.065727][T12377] macvtap2: left allmulticast mode [ 338.076505][T12377] macvtap3: left promiscuous mode [ 338.082292][T12377] macvtap3: left allmulticast mode [ 338.088063][T12377] macvtap4: left promiscuous mode [ 338.093131][T12377] macvtap4: left allmulticast mode [ 338.100992][T12377] geneve2: left promiscuous mode [ 338.105988][T12377] geneve2: left allmulticast mode [ 338.123947][T12377] veth5: left promiscuous mode [ 338.129691][T12307] lo speed is unknown, defaulting to 1000 [ 338.136464][ T1131] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 49394 - 0 [ 338.155305][ T1131] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.183556][T12387] netlink: 'syz.3.1668': attribute type 12 has an invalid length. [ 338.193134][T12388] netlink: 'syz.3.1668': attribute type 23 has an invalid length. [ 338.217241][ T1131] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 49394 - 0 [ 338.240270][ T1131] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.270030][ T1131] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 49394 - 0 [ 338.298385][ T1131] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.315677][ T1131] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 49394 - 0 [ 338.325028][ T1131] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.477881][T12307] lo speed is unknown, defaulting to 1000 [ 338.668750][T12307] lo speed is unknown, defaulting to 1000 [ 338.874759][T12394] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 338.885786][T12394] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1674'. [ 338.891650][T12307] lo speed is unknown, defaulting to 1000 [ 338.999821][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 339.145878][T12307] lo speed is unknown, defaulting to 1000 [ 339.426946][T12307] lo speed is unknown, defaulting to 1000 [ 339.633463][T12409] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 339.705586][T12307] lo speed is unknown, defaulting to 1000 [ 340.023810][T12371] lo speed is unknown, defaulting to 1000 [ 340.292934][T12376] smc: removing ib device syz1 [ 341.683541][T12445] lo speed is unknown, defaulting to 1000 [ 341.798171][T12439] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1686'. [ 342.118849][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 342.147220][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'. [ 342.254181][T12451] netlink: 'syz.1.1688': attribute type 12 has an invalid length. [ 343.077223][T12435] lo speed is unknown, defaulting to 1000 [ 343.409860][T12452] lo speed is unknown, defaulting to 1000 [ 343.642372][T12446] lo speed is unknown, defaulting to 1000 [ 343.968486][T12463] tipc: Enabled bearer , priority 0 [ 343.984076][T12463] tipc: Resetting bearer [ 343.993025][T12462] tipc: Disabling bearer [ 345.322046][T12469] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 345.549064][T12471] lo speed is unknown, defaulting to 1000 [ 346.214473][T12492] lo: entered promiscuous mode [ 346.258207][T12492] tunl0: entered promiscuous mode [ 346.274269][T12492] gre0: entered promiscuous mode [ 346.293714][T12492] gretap0: entered promiscuous mode [ 346.345369][T12492] erspan0: entered promiscuous mode [ 346.358727][T12484] netlink: 'syz.3.1698': attribute type 4 has an invalid length. [ 346.376132][T12492] erspan0: left allmulticast mode [ 346.414501][T12492] ip_vti0: entered promiscuous mode [ 346.446242][T12492] ip6_vti0: entered promiscuous mode [ 346.461746][T12502] IPVS: set_ctl: invalid protocol: 137 172.20.20.48:20004 [ 346.473514][T12492] sit0: entered promiscuous mode [ 346.507451][T12492] ip6tnl0: entered promiscuous mode [ 346.523837][T12492] ip6gre0: entered promiscuous mode [ 346.541265][T12492] syz_tun: entered promiscuous mode [ 346.559864][T12492] ip6gretap0: entered promiscuous mode [ 346.575886][T12492] vcan0: entered promiscuous mode [ 346.586258][T12492] bond0: entered promiscuous mode [ 346.599451][T12492] bond_slave_0: entered promiscuous mode [ 346.605651][T12492] bond_slave_1: entered promiscuous mode [ 346.615545][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.624858][T12492] team0: entered promiscuous mode [ 346.630600][T12492] team_slave_0: entered promiscuous mode [ 346.639398][T12492] team_slave_1: entered promiscuous mode [ 346.648168][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.656534][T12492] dummy0: entered promiscuous mode [ 346.665966][T12492] nlmon0: entered promiscuous mode [ 346.675687][T12492] caif0: entered promiscuous mode [ 346.681622][T12492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.943836][T12502] lo speed is unknown, defaulting to 1000 [ 347.526290][T12530] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1710'. [ 347.612671][T12522] lo speed is unknown, defaulting to 1000 [ 347.707647][T12533] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1711'. [ 347.787000][T12533] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 349.185168][T12554] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 349.409668][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1720'. [ 349.683971][T12572] netlink: 'syz.4.1722': attribute type 9 has an invalid length. [ 349.722912][T12572] netlink: 'syz.4.1722': attribute type 7 has an invalid length. [ 349.754762][T12572] netlink: 'syz.4.1722': attribute type 8 has an invalid length. [ 350.039419][T12581] lo speed is unknown, defaulting to 1000 [ 350.349466][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 350.412082][T12585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 350.621361][T12589] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 350.648676][T12589] netlink: 'syz.1.1729': attribute type 2 has an invalid length. [ 350.702961][T12592] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 350.734963][T12593] bridge2: entered promiscuous mode [ 350.944425][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 351.010498][T12599] veth0_to_bond: entered allmulticast mode [ 351.196006][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 351.581841][T12609] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 351.826569][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.908428][T12642] netlink: 'syz.0.1742': attribute type 1 has an invalid length. [ 351.919884][T12640] bridge3: port 1(ip6gretap2) entered blocking state [ 351.928059][T12640] bridge3: port 1(ip6gretap2) entered disabled state [ 351.945682][T12645] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1743'. [ 351.956060][T12640] ip6gretap2: entered allmulticast mode [ 351.986748][T12640] ip6gretap2: entered promiscuous mode [ 352.053777][T11933] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.144526][T12640] veth3: entered promiscuous mode [ 352.163507][T12640] bridge3: port 2(veth3) entered blocking state [ 352.185514][T12640] bridge3: port 2(veth3) entered disabled state [ 352.198697][T12640] veth3: entered allmulticast mode [ 352.237045][T11933] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.264199][T12651] netlink: 'syz.0.1745': attribute type 39 has an invalid length. [ 352.286913][T11933] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.323886][T11933] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.680830][T12654] lo speed is unknown, defaulting to 1000 [ 353.118932][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x204 [ 353.164560][T12690] tun0: tun_chr_ioctl cmd 2147767507 [ 354.071634][T12712] x_tables: duplicate underflow at hook 4 [ 354.301530][T12718] netlink: 'syz.4.1764': attribute type 10 has an invalid length. [ 354.349717][T12718] team0: Port device dummy0 added [ 354.475879][T12727] netlink: 'syz.0.1767': attribute type 13 has an invalid length. [ 354.508951][T12727] netlink: 'syz.0.1767': attribute type 17 has an invalid length. [ 354.769676][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 354.790731][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 354.800384][T12745] netlink: 'syz.4.1769': attribute type 5 has an invalid length. [ 354.808992][T12727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.840846][ T7192] lo speed is unknown, defaulting to 1000 [ 354.886055][T12731] lo speed is unknown, defaulting to 1000 [ 354.922914][ T6885] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.941756][ T6885] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.953790][ T30] audit: type=1107 audit(1752568410.256:6): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÎpŠLŒHа†°FÚW‘yšåY›Ž¬9l&›ÃB0› êÿüM³¨9' [ 354.988859][ T61] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.012813][ T61] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.212919][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 355.234458][T12750] xt_CT: No such helper "syz0" [ 355.630535][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1773'. [ 356.033112][T12778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1780'. [ 356.308292][T12778] lo speed is unknown, defaulting to 1000 [ 356.448959][T12780] syzkaller1: entered allmulticast mode [ 356.628866][ T61] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.869746][T12791] netlink: del zone limit has 4 unknown bytes [ 356.886655][T12792] netlink: del zone limit has 4 unknown bytes [ 357.179934][T12806] netlink: 'syz.4.1786': attribute type 10 has an invalid length. [ 357.608395][T12810] lo speed is unknown, defaulting to 1000 [ 357.891349][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1792'. [ 358.614527][T12866] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 358.727919][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1802'. [ 358.741275][T12866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.906168][T12877] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 358.944696][T12811] lo speed is unknown, defaulting to 1000 [ 359.255513][T12888] bond_slave_1: mtu greater than device maximum [ 359.664648][T12910] xt_l2tp: invalid flags combination: 4 [ 359.733169][T12912] team0: Port device dummy0 removed [ 359.747503][T12912] team0: Port device vlan0 removed [ 359.833655][T12912] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.897139][T12912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.001294][T12915] IPVS: Scheduler module ip_vs_ not found [ 360.043502][T12921] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 360.335900][T12935] netlink: 'syz.1.1822': attribute type 39 has an invalid length. [ 360.565663][T12935] tipc: Enabling of bearer rejected, already enabled [ 360.661599][T12935] lo speed is unknown, defaulting to 1000 [ 360.675208][T12943] tipc: Resetting bearer [ 360.717686][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 360.835780][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 360.845030][T12949] nbd: illegal input index -381222912 [ 361.585755][T12976] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 361.905589][T12998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 361.937773][T13000] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 361.953743][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 362.071144][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 362.304316][T13016] netlink: 'syz.3.1843': attribute type 16 has an invalid length. [ 362.333422][T13016] netlink: 'syz.3.1843': attribute type 17 has an invalid length. [ 362.374457][T13016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.423067][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 362.512633][T13020] geneve3: entered promiscuous mode [ 362.539295][T13020] geneve3: entered allmulticast mode [ 362.573869][ T1131] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 55664 - 0 [ 362.620049][ T1131] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 55664 - 0 [ 362.651570][ T1131] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 55664 - 0 [ 362.666108][ T1131] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 55664 - 0 [ 362.881889][T13036] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1848'. [ 363.006235][T13041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1849'. [ 363.176431][T13049] netlink: 'syz.2.1852': attribute type 25 has an invalid length. [ 363.320059][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 363.846177][T13097] netlink: 'syz.2.1864': attribute type 7 has an invalid length. [ 363.869709][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'. [ 363.913601][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 364.094828][T13110] lo speed is unknown, defaulting to 1000 [ 364.464958][T13119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.524086][T13122] xt_CT: No such helper "pptp" [ 364.807695][T13140] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 364.845332][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 364.889027][T13136] netlink: 'syz.0.1876': attribute type 29 has an invalid length. [ 364.908685][T13141] netlink: 'syz.0.1876': attribute type 29 has an invalid length. [ 364.942341][T13141] netlink: 'syz.0.1876': attribute type 29 has an invalid length. [ 364.977278][T13141] netlink: 'syz.0.1876': attribute type 29 has an invalid length. [ 365.016068][T13137] lo speed is unknown, defaulting to 1000 [ 365.705895][T13178] validate_nla: 1 callbacks suppressed [ 365.705916][T13178] netlink: 'syz.0.1889': attribute type 20 has an invalid length. [ 365.765744][T13178] __nla_validate_parse: 1 callbacks suppressed [ 365.765762][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 365.789698][ T6885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.803170][ T6885] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.815899][T13178] netlink: 'syz.0.1889': attribute type 20 has an invalid length. [ 365.818885][T13182] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1891'. [ 365.835272][T13182] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 365.852830][ T6885] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.868675][ T6885] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.892743][T13184] tipc: Enabled bearer , priority 0 [ 365.900459][T13185] syzkaller0: entered promiscuous mode [ 365.907170][T13185] syzkaller0: entered allmulticast mode [ 365.952774][T13185] tipc: Resetting bearer [ 365.994853][T13185] tipc: Disabling bearer [ 366.046689][T13192] IPVS: Unknown mcast interface: bridge_slave_0 [ 366.169942][T13196] !: renamed from dummy0 (while UP) [ 366.786937][T13210] lo speed is unknown, defaulting to 1000 [ 368.154591][T13277] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 368.307469][T13285] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 368.329224][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 369.337510][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 369.370943][T13325] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 369.390250][T13327] netlink: 'syz.4.1932': attribute type 4 has an invalid length. [ 369.398223][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 369.815347][T13338] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1935'. [ 369.875854][T13340] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 369.923275][T13344] block nbd4: not configured, cannot reconfigure [ 370.115425][T13354] lo: entered promiscuous mode [ 370.131595][T13354] lo: entered allmulticast mode [ 370.282298][T13359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.934590][ T6883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.970630][T13387] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 370.977599][ T6883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.491959][T13410] x_tables: duplicate underflow at hook 2 [ 371.593827][T13415] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1958'. [ 371.607076][T13416] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004 [ 371.749349][T13424] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 371.858901][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 371.873098][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 371.936498][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1966'. [ 371.949867][T13435] lo speed is unknown, defaulting to 1000 [ 371.957159][T13434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.964808][T13434] IPv6: NLM_F_CREATE should be set when creating new route [ 372.260013][T13440] lo speed is unknown, defaulting to 1000 [ 372.504588][T13453] FAULT_INJECTION: forcing a failure. [ 372.504588][T13453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.550116][T13453] CPU: 1 UID: 0 PID: 13453 Comm: syz.1.1974 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 372.550147][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.550163][T13453] Call Trace: [ 372.550172][T13453] [ 372.550181][T13453] dump_stack_lvl+0x189/0x250 [ 372.550211][T13453] ? __pfx____ratelimit+0x10/0x10 [ 372.550239][T13453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.550267][T13453] ? __pfx__printk+0x10/0x10 [ 372.550304][T13453] ? __might_fault+0xb0/0x130 [ 372.550342][T13453] should_fail_ex+0x414/0x560 [ 372.550376][T13453] _copy_from_user+0x2d/0xb0 [ 372.550400][T13453] __sys_bpf+0x1ed/0x860 [ 372.550430][T13453] ? __pfx___sys_bpf+0x10/0x10 [ 372.550474][T13453] ? ksys_write+0x22a/0x250 [ 372.550499][T13453] ? __pfx_ksys_write+0x10/0x10 [ 372.550519][T13453] ? rcu_is_watching+0x15/0xb0 [ 372.550552][T13453] __x64_sys_bpf+0x7c/0x90 [ 372.550581][T13453] do_syscall_64+0xfa/0x3b0 [ 372.550608][T13453] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.550634][T13453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.550655][T13453] ? clear_bhb_loop+0x60/0xb0 [ 372.550680][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.550705][T13453] RIP: 0033:0x7feced38e929 [ 372.550725][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.550743][T13453] RSP: 002b:00007fecee1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.550766][T13453] RAX: ffffffffffffffda RBX: 00007feced5b5fa0 RCX: 00007feced38e929 [ 372.550782][T13453] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 372.550796][T13453] RBP: 00007fecee1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 372.550808][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.550820][T13453] R13: 0000000000000001 R14: 00007feced5b5fa0 R15: 00007ffdf17f8c58 [ 372.550855][T13453] [ 372.981147][T13462] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 373.189823][T13463] vxcan3: entered allmulticast mode [ 373.249322][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 373.263520][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1981'. [ 373.273840][T13475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1981'. [ 373.285789][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 373.323983][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 373.935270][T13495] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 374.194069][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 374.263608][T13515] netlink: 'syz.0.1996': attribute type 10 has an invalid length. [ 374.303548][T13515] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 374.981609][T13532] FAULT_INJECTION: forcing a failure. [ 374.981609][T13532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.027427][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.1.2000 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 375.027459][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.027472][T13532] Call Trace: [ 375.027480][T13532] [ 375.027489][T13532] dump_stack_lvl+0x189/0x250 [ 375.027519][T13532] ? __pfx____ratelimit+0x10/0x10 [ 375.027548][T13532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.027573][T13532] ? __pfx__printk+0x10/0x10 [ 375.027601][T13532] ? __might_fault+0xb0/0x130 [ 375.027639][T13532] should_fail_ex+0x414/0x560 [ 375.027675][T13532] _copy_from_user+0x2d/0xb0 [ 375.027700][T13532] __sys_sendto+0x25c/0x520 [ 375.027735][T13532] ? __pfx___sys_sendto+0x10/0x10 [ 375.027761][T13532] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 375.027806][T13532] ? __fget_files+0x3a0/0x420 [ 375.027847][T13532] ? ksys_write+0x22a/0x250 [ 375.027873][T13532] ? __pfx_ksys_write+0x10/0x10 [ 375.027894][T13532] ? rcu_is_watching+0x15/0xb0 [ 375.027925][T13532] __x64_sys_sendto+0xde/0x100 [ 375.027959][T13532] do_syscall_64+0xfa/0x3b0 [ 375.027986][T13532] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.028012][T13532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.028033][T13532] ? clear_bhb_loop+0x60/0xb0 [ 375.028058][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.028085][T13532] RIP: 0033:0x7feced38e929 [ 375.028104][T13532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.028121][T13532] RSP: 002b:00007fecee1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 375.028143][T13532] RAX: ffffffffffffffda RBX: 00007feced5b5fa0 RCX: 00007feced38e929 [ 375.028158][T13532] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000009 [ 375.028171][T13532] RBP: 00007fecee1dc090 R08: 00002000000001c0 R09: 0000000000000010 [ 375.028185][T13532] R10: 00000000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 375.028197][T13532] R13: 0000000000000000 R14: 00007feced5b5fa0 R15: 00007ffdf17f8c58 [ 375.028231][T13532] [ 375.414650][T13540] netlink: 'syz.0.2002': attribute type 83 has an invalid length. [ 375.433702][T13543] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 375.439958][T13541] netlink: 'syz.0.2002': attribute type 83 has an invalid length. [ 375.528625][T13541] netlink: 'syz.0.2002': attribute type 24 has an invalid length. [ 375.537622][T13540] netlink: 'syz.0.2002': attribute type 24 has an invalid length. [ 375.759282][T13555] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.855323][T13555] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.997693][T13555] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.023650][T13572] netlink: 'syz.3.2014': attribute type 5 has an invalid length. [ 376.079610][T13555] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.199499][T13584] netlink: 'syz.4.2019': attribute type 13 has an invalid length. [ 376.228371][T13584] netlink: 'syz.4.2019': attribute type 17 has an invalid length. [ 376.246653][T13584] netlink: 'syz.4.2019': attribute type 27 has an invalid length. [ 376.338224][T13584] lo speed is unknown, defaulting to 1000 [ 376.388776][T11933] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.414105][T11933] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.453989][ T4572] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.537291][ T4572] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.570628][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.687159][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.695038][T13610] __nla_validate_parse: 11 callbacks suppressed [ 376.695062][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 376.790894][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2027'. [ 376.792242][T13610] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 376.835505][T13610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2026'. [ 376.838689][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.861741][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2026'. [ 376.884577][T13610] geneve0: entered promiscuous mode [ 376.907253][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 376.944166][T13610] team0: Port device geneve0 added [ 376.964972][ T1131] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.989383][ T1131] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.044027][T13615] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 377.075608][ T1131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.134420][T13624] bridge0: port 1(vlan2) entered blocking state [ 377.147914][T13624] bridge0: port 1(vlan2) entered disabled state [ 377.166016][T13624] vlan2: entered allmulticast mode [ 377.175197][T13624] bond0: entered allmulticast mode [ 377.202286][ T1131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.243183][T13622] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2030'. [ 377.277065][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2030'. [ 377.314267][T13620] lo speed is unknown, defaulting to 1000 [ 377.381650][T13626] tunl0: left promiscuous mode [ 377.496106][T13626] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.520095][T13626] !: left promiscuous mode [ 377.531505][T13626] !: left allmulticast mode [ 377.550117][T13645] x_tables: duplicate underflow at hook 2 [ 377.556040][T13626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.743955][T13652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2039'. [ 377.772654][T13652] tipc: Resetting bearer [ 377.936630][T13652] lo speed is unknown, defaulting to 1000 [ 378.850564][T13670] lo speed is unknown, defaulting to 1000 [ 379.217781][T13677] netlink: 'syz.2.2045': attribute type 2 has an invalid length. [ 379.275172][T13677] : entered promiscuous mode [ 379.291897][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 379.324067][T13680] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 379.759870][T13688] lo speed is unknown, defaulting to 1000 [ 379.767493][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 379.793471][T13694] netlink: 'syz.2.2049': attribute type 11 has an invalid length. [ 379.810258][T13694] netlink: 'syz.2.2049': attribute type 11 has an invalid length. [ 380.013330][T13698] netlink: 'syz.2.2051': attribute type 10 has an invalid length. [ 380.349053][T13697] team0 (unregistering): Port device geneve0 removed [ 380.734251][T13713] netlink: 'syz.0.2057': attribute type 5 has an invalid length. [ 380.779386][T13713] ip6erspan0: entered promiscuous mode [ 381.059861][T13724] lo speed is unknown, defaulting to 1000 [ 381.809163][T13741] __nla_validate_parse: 3 callbacks suppressed [ 381.809185][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'. [ 381.942458][T13749] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2064'. [ 382.322401][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 382.637696][T13784] netlink: 'syz.1.2076': attribute type 27 has an invalid length. [ 382.858631][T13790] netlink: 'syz.3.2081': attribute type 16 has an invalid length. [ 382.877772][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 382.887403][T13790] netlink: 'syz.3.2081': attribute type 17 has an invalid length. [ 382.897788][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 382.909996][T13788] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 382.918217][T13788] netlink: 'syz.2.2080': attribute type 4 has an invalid length. [ 382.925959][T13788] netlink: 'syz.2.2080': attribute type 5 has an invalid length. [ 382.950748][T13788] netlink: 'syz.2.2080': attribute type 6 has an invalid length. [ 382.988641][T13788] netlink: 'syz.2.2080': attribute type 7 has an invalid length. [ 383.008325][T13788] netlink: 'syz.2.2080': attribute type 7 has an invalid length. [ 383.016130][T13788] netlink: 12902 bytes leftover after parsing attributes in process `syz.2.2080'. [ 383.223314][ T6885] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.257819][ T6885] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.273883][ T6885] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.298725][ T6885] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.387665][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2083'. [ 383.706492][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2089'. [ 383.761431][T13813] syzkaller0: entered promiscuous mode [ 383.780417][T13813] syzkaller0: entered allmulticast mode [ 384.169596][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 385.814019][T13820] lo speed is unknown, defaulting to 1000 [ 385.894877][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 386.016027][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2096'. [ 386.179251][T13844] lo speed is unknown, defaulting to 1000 [ 386.683731][T13831] lo speed is unknown, defaulting to 1000 [ 386.919422][T13875] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 387.995424][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bf4a400: rx timeout, send abort [ 388.165021][T13901] tipc: Enabling of bearer rejected, failed to enable media [ 388.223243][T13903] __nla_validate_parse: 2 callbacks suppressed [ 388.223258][T13903] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2114'. [ 388.329654][T13905] netlink: 'syz.1.2115': attribute type 13 has an invalid length. [ 388.338253][T13905] netlink: 'syz.1.2115': attribute type 17 has an invalid length. [ 388.358640][T13905] gretap0: refused to change device tx_queue_len [ 388.365408][T13905] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.449158][T13909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.504873][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bf4a400: abort rx timeout. Force session deactivation [ 388.627509][ T4572] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.822186][T13915] lo speed is unknown, defaulting to 1000 [ 389.248817][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 389.323536][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 389.346923][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 389.355062][ C0] lec:lec_tx_timeout: lec0 [ 389.459630][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 389.586179][T13946] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2129'. [ 390.389534][T13951] lo speed is unknown, defaulting to 1000 [ 390.494398][T13963] tipc: Enabling of bearer rejected, already enabled [ 390.966575][T13977] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2135'. [ 390.996098][T13980] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 391.013041][T13980] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 391.022904][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 391.129631][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2136'. [ 391.135491][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 391.201859][T13987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2139'. [ 391.299889][T13980] lo speed is unknown, defaulting to 1000 [ 391.538629][T14001] netlink: 'syz.3.2142': attribute type 6 has an invalid length. [ 391.610858][T14002] openvswitch: netlink: Key 13 has unexpected len 405 expected 24 [ 392.006147][T14005] GUP no longer grows the stack in syz.4.2144 (14005): 200000006000-20000000a000 (200000005000) [ 392.027219][T14005] CPU: 1 UID: 0 PID: 14005 Comm: syz.4.2144 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 392.027254][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.027267][T14005] Call Trace: [ 392.027276][T14005] [ 392.027286][T14005] dump_stack_lvl+0x189/0x250 [ 392.027321][T14005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.027348][T14005] ? __pfx__printk+0x10/0x10 [ 392.027373][T14005] ? find_vma+0xe7/0x160 [ 392.027415][T14005] __get_user_pages+0x2a60/0x30b0 [ 392.027479][T14005] ? __pfx___get_user_pages+0x10/0x10 [ 392.027500][T14005] ? __gup_longterm_locked+0xbf7/0x15b0 [ 392.027521][T14005] ? down_read_killable+0x1d1/0x350 [ 392.027551][T14005] ? try_get_folio+0x633/0x660 [ 392.027580][T14005] __gup_longterm_locked+0xd66/0x15b0 [ 392.027617][T14005] ? try_grab_folio_fast+0x1be/0x4f0 [ 392.027654][T14005] ? gup_fast_fallback+0x1afc/0x2260 [ 392.027681][T14005] gup_fast_fallback+0x1cd4/0x2260 [ 392.027747][T14005] ? __pfx_gup_fast_fallback+0x10/0x10 [ 392.027767][T14005] ? trace_contention_end+0x39/0x120 [ 392.027796][T14005] ? __mutex_lock+0x330/0xe80 [ 392.027830][T14005] ? is_valid_gup_args+0x11f/0x200 [ 392.027855][T14005] ? get_user_pages_fast+0x4d/0xb0 [ 392.027881][T14005] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 392.027914][T14005] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 392.027940][T14005] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 392.027963][T14005] ? wait_for_space+0x24d/0x2d0 [ 392.027992][T14005] iov_iter_get_pages2+0x5e/0xa0 [ 392.028021][T14005] __se_sys_vmsplice+0x548/0x10d0 [ 392.028062][T14005] ? wake_up_q+0xca/0x110 [ 392.028092][T14005] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 392.028123][T14005] ? __pfx_futex_wake+0x10/0x10 [ 392.028154][T14005] ? __lock_acquire+0xab9/0xd20 [ 392.028225][T14005] ? rcu_is_watching+0x15/0xb0 [ 392.028257][T14005] ? do_syscall_64+0xbe/0x3b0 [ 392.028291][T14005] do_syscall_64+0xfa/0x3b0 [ 392.028317][T14005] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.028343][T14005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028363][T14005] ? clear_bhb_loop+0x60/0xb0 [ 392.028389][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028409][T14005] RIP: 0033:0x7fec54b8e929 [ 392.028429][T14005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.028447][T14005] RSP: 002b:00007fec55a8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 392.028469][T14005] RAX: ffffffffffffffda RBX: 00007fec54db5fa0 RCX: 00007fec54b8e929 [ 392.028485][T14005] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 392.028498][T14005] RBP: 00007fec54c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.028511][T14005] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 392.028524][T14005] R13: 0000000000000000 R14: 00007fec54db5fa0 R15: 00007ffef1197d68 [ 392.028559][T14005] [ 392.378528][T14012] lo speed is unknown, defaulting to 1000 [ 393.013859][T14023] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 393.504183][T14029] bond0: left promiscuous mode [ 393.509428][T14029] bond_slave_0: left promiscuous mode [ 393.515128][T14029] bond_slave_1: left promiscuous mode [ 393.523098][T14029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.004197][T14052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.244800][T14056] lo speed is unknown, defaulting to 1000 [ 394.754606][T14067] nbd: socks must be embedded in a SOCK_ITEM attr [ 394.788176][T14067] block nbd0: shutting down sockets [ 395.176501][T14088] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 395.365051][T14092] __nla_validate_parse: 7 callbacks suppressed [ 395.365070][T14092] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2167'. [ 395.601858][T14075] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 395.741938][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 395.842449][T14114] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 395.851615][T14112] vlan2: entered allmulticast mode [ 395.871384][T14112] ip6gretap0: entered allmulticast mode [ 395.939597][T14120] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 396.030123][T14123] bridge0: port 2(ipvlan0) entered blocking state [ 396.057912][T14123] bridge0: port 2(ipvlan0) entered disabled state [ 396.064652][T14123] ipvlan0: entered allmulticast mode [ 396.094158][T14123] bridge0: entered allmulticast mode [ 396.111881][T14123] ipvlan0: left allmulticast mode [ 396.127441][T14123] bridge0: left allmulticast mode [ 396.195110][T14124] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2172'. [ 396.232707][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2180'. [ 396.360973][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 396.609014][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2186'. [ 396.903333][T14175] netlink: 'syz.4.2192': attribute type 5 has an invalid length. [ 397.015595][T14179] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 397.021520][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2194'. [ 397.032265][T14179] macvtap3: entered allmulticast mode [ 397.037895][T14179] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 397.059150][T14179] batman_adv: batadv0: Adding interface: macvtap3 [ 397.065752][T14179] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.101645][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 397.132605][T14179] batman_adv: batadv0: Interface activated: macvtap3 [ 397.163110][T14185] dummy0: entered promiscuous mode [ 397.176252][T14185] macvtap0: entered promiscuous mode [ 397.186311][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 397.189971][T14145] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 397.204212][T14185] macvtap0: entered allmulticast mode [ 397.226921][T14192] netlink: 'syz.1.2196': attribute type 2 has an invalid length. [ 397.236357][T14185] dummy0: entered allmulticast mode [ 397.262602][T14183] dummy0: left allmulticast mode [ 397.288786][T14183] dummy0: left promiscuous mode [ 397.412307][T14199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.538878][T14205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.554302][T14205] IPv6: NLM_F_CREATE should be set when creating new route [ 397.585993][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 397.615723][T14207] tipc: Resetting bearer [ 397.623916][T14209] tipc: Resetting bearer [ 397.670996][T14209] tipc: Resetting bearer [ 397.807330][T14219] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 397.881136][T14218] netlink: 'syz.4.2200': attribute type 15 has an invalid length. [ 397.903575][T14218] netlink: 'syz.4.2200': attribute type 7 has an invalid length. [ 397.913824][T14228] vlan0: entered allmulticast mode [ 397.941844][T14228] bridge_slave_0: entered allmulticast mode [ 398.130310][T14245] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.154907][T14245] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55664 - 0 [ 398.279235][T14245] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.298510][T14245] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55664 - 0 [ 398.348558][T14235] netlink: 'syz.0.2206': attribute type 25 has an invalid length. [ 398.490026][T14245] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.510008][T14245] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55664 - 0 [ 398.620948][ T1131] tipc: Resetting bearer [ 398.668324][T14245] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.688512][T14245] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55664 - 0 [ 398.976606][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.994571][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 55664 - 0 [ 399.031673][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 399.061832][T14271] lo: left promiscuous mode [ 399.066499][T14271] lo: left allmulticast mode [ 399.129345][T14271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.198717][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 399.238673][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 399.303763][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 399.333355][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.347324][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 55664 - 0 [ 399.392533][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.412793][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 55664 - 0 [ 399.430580][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.449400][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 55664 - 0 [ 400.041032][T14313] rdma_rxe: rxe_newlink: failed to add lo [ 400.123891][T14313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.425824][T14331] __nla_validate_parse: 15 callbacks suppressed [ 400.425846][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2238'. [ 400.454741][T14333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2237'. [ 400.480351][T14339] xt_hashlimit: size too large, truncated to 1048576 [ 400.500830][T14335] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2239'. [ 400.963780][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 401.598005][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 401.629788][T14376] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2251'. [ 401.639098][T14376] netlink: zone id is out of range [ 401.644332][T14376] netlink: zone id is out of range [ 401.654784][T14376] netlink: zone id is out of range [ 401.669053][T14376] netlink: zone id is out of range [ 401.674301][T14376] netlink: zone id is out of range [ 401.700693][T14376] netlink: zone id is out of range [ 401.701712][T14379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 401.706212][T14376] netlink: zone id is out of range [ 401.728914][T14376] netlink: zone id is out of range [ 404.108941][T14410] tipc: Enabling of bearer rejected, failed to enable media [ 404.325470][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 404.428785][T14431] lo speed is unknown, defaulting to 1000 [ 405.168216][T14459] lo speed is unknown, defaulting to 1000 [ 406.085367][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 406.102186][T14487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2278'. [ 406.183579][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 406.461556][T14498] net_ratelimit: 75 callbacks suppressed [ 406.461576][T14498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.765188][T14508] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 406.904088][T14508] bond0: entered promiscuous mode [ 406.912816][T14508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.051658][T14511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.070230][T14511] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 407.087025][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 407.096693][T14511] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 407.121869][T14511] bond0: (slave vcan1): making interface the new active one [ 407.136522][T14511] vcan1: entered promiscuous mode [ 407.147080][T14511] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 407.163887][T14515] 8021q: VLANs not supported on wg0 [ 407.467071][T14531] vlan2: entered promiscuous mode [ 407.478383][T14531] vlan2: entered allmulticast mode [ 407.493987][T14531] hsr_slave_1: entered allmulticast mode [ 407.761554][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 408.000911][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'. [ 408.189212][T14558] IPVS: Error joining to the multicast group [ 408.651122][ C1] ------------[ cut here ]------------ [ 408.657052][ C1] WARNING: CPU: 1 PID: 23 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 408.666403][ C1] Modules linked in: [ 408.670706][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 408.682699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.692845][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 408.698731][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 5a 8a c8 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c 8a c8 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e 8a c8 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 408.718433][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 408.724545][ C1] RAX: ffffffff89f7ad92 RBX: dffffc0000000000 RCX: ffff88801daa5a00 [ 408.732606][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 408.740671][ C1] RBP: 0000000000000fff R08: ffff888078ca9d9f R09: 1ffff1100f1953b3 [ 408.748736][ C1] R10: dffffc0000000000 R11: ffffed100f1953b4 R12: ffff888078ca9b00 [ 408.756750][ C1] R13: dffffc0000000000 R14: ffff888078ca9d84 R15: 1ffff1100f195362 [ 408.764810][ C1] FS: 0000000000000000(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 408.773825][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.780501][ C1] CR2: 00007f2ca64e56c0 CR3: 0000000028626000 CR4: 00000000003526f0 [ 408.788559][ C1] Call Trace: [ 408.791872][ C1] [ 408.794836][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 408.800128][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 408.805815][ C1] __sk_destruct+0x89/0x660 [ 408.810423][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 408.815595][ C1] ? rcu_core+0xc34/0x1710 [ 408.820106][ C1] rcu_core+0xca8/0x1710 [ 408.824403][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.829353][ C1] ? __pfx_rcu_core+0x10/0x10 [ 408.834079][ C1] ? rcu_qs+0xc4/0x170 [ 408.838235][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 408.842779][ C1] ? sched_clock_cpu+0x74/0x430 [ 408.847739][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 408.852555][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 408.857863][ C1] handle_softirqs+0x286/0x870 [ 408.862679][ C1] ? schedule+0x165/0x360 [ 408.867109][ C1] ? run_ksoftirqd+0x9b/0x100 [ 408.871877][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 408.877271][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.882369][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.887487][ C1] run_ksoftirqd+0x9b/0x100 [ 408.892054][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 408.897278][ C1] smpboot_thread_fn+0x53f/0xa60 [ 408.902281][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.907419][ C1] kthread+0x70e/0x8a0 [ 408.911552][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 408.917120][ C1] ? __pfx_kthread+0x10/0x10 [ 408.921779][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.927083][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.932347][ C1] ? __pfx_kthread+0x10/0x10 [ 408.937223][ C1] ret_from_fork+0x3fc/0x770 [ 408.941953][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 408.947181][ C1] ? __switch_to_asm+0x39/0x70 [ 408.952004][ C1] ? __switch_to_asm+0x33/0x70 [ 408.956860][ C1] ? __pfx_kthread+0x10/0x10 [ 408.961512][ C1] ret_from_fork_asm+0x1a/0x30 [ 408.966369][ C1] [ 408.969497][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.976821][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-01411-g08a305b2a5b8 #0 PREEMPT(full) [ 408.988755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.998862][ C1] Call Trace: [ 409.002195][ C1] [ 409.005167][ C1] dump_stack_lvl+0x99/0x250 [ 409.009816][ C1] ? __asan_memcpy+0x40/0x70 [ 409.014451][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.019694][ C1] ? __pfx__printk+0x10/0x10 [ 409.024348][ C1] panic+0x2db/0x790 [ 409.028290][ C1] ? __pfx_panic+0x10/0x10 [ 409.032744][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 409.038025][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 409.043015][ C1] __warn+0x31b/0x4b0 [ 409.047028][ C1] ? inet_sock_destruct+0x623/0x730 [ 409.052269][ C1] ? inet_sock_destruct+0x623/0x730 [ 409.057515][ C1] report_bug+0x2be/0x4f0 [ 409.061916][ C1] ? inet_sock_destruct+0x623/0x730 [ 409.067177][ C1] ? inet_sock_destruct+0x623/0x730 [ 409.072430][ C1] ? inet_sock_destruct+0x625/0x730 [ 409.077688][ C1] handle_bug+0x84/0x160 [ 409.082004][ C1] exc_invalid_op+0x1a/0x50 [ 409.086596][ C1] asm_exc_invalid_op+0x1a/0x20 [ 409.091490][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 409.097366][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 5a 8a c8 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c 8a c8 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e 8a c8 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 409.117017][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 409.123113][ C1] RAX: ffffffff89f7ad92 RBX: dffffc0000000000 RCX: ffff88801daa5a00 [ 409.131107][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 409.139085][ C1] RBP: 0000000000000fff R08: ffff888078ca9d9f R09: 1ffff1100f1953b3 [ 409.147060][ C1] R10: dffffc0000000000 R11: ffffed100f1953b4 R12: ffff888078ca9b00 [ 409.155043][ C1] R13: dffffc0000000000 R14: ffff888078ca9d84 R15: 1ffff1100f195362 [ 409.163039][ C1] ? inet_sock_destruct+0x622/0x730 [ 409.168256][ C1] ? inet_sock_destruct+0x622/0x730 [ 409.173465][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 409.178671][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 409.184314][ C1] __sk_destruct+0x89/0x660 [ 409.188819][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 409.193945][ C1] ? rcu_core+0xc34/0x1710 [ 409.198368][ C1] rcu_core+0xca8/0x1710 [ 409.202633][ C1] ? __lock_acquire+0xab9/0xd20 [ 409.207521][ C1] ? __pfx_rcu_core+0x10/0x10 [ 409.212209][ C1] ? rcu_qs+0xc4/0x170 [ 409.216284][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 409.220790][ C1] ? sched_clock_cpu+0x74/0x430 [ 409.225660][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 409.230431][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 409.235657][ C1] handle_softirqs+0x286/0x870 [ 409.240430][ C1] ? schedule+0x165/0x360 [ 409.244776][ C1] ? run_ksoftirqd+0x9b/0x100 [ 409.249469][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.254769][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 409.259822][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 409.264938][ C1] run_ksoftirqd+0x9b/0x100 [ 409.269453][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 409.274582][ C1] smpboot_thread_fn+0x53f/0xa60 [ 409.279529][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 409.284568][ C1] kthread+0x70e/0x8a0 [ 409.288651][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 409.294118][ C1] ? __pfx_kthread+0x10/0x10 [ 409.298724][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.303930][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.309139][ C1] ? __pfx_kthread+0x10/0x10 [ 409.313744][ C1] ret_from_fork+0x3fc/0x770 [ 409.318345][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 409.323464][ C1] ? __switch_to_asm+0x39/0x70 [ 409.328239][ C1] ? __switch_to_asm+0x33/0x70 [ 409.333012][ C1] ? __pfx_kthread+0x10/0x10 [ 409.337612][ C1] ret_from_fork_asm+0x1a/0x30 [ 409.342406][ C1] [ 409.345776][ C1] Kernel Offset: disabled [ 409.350102][ C1] Rebooting in 86400 seconds..