last executing test programs: 3m49.32845528s ago: executing program 1 (id=2085): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3m48.743486819s ago: executing program 1 (id=2087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xfa4, @private2, 0x3d}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="13d7cb99", 0x4}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x600}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000680)="3a5b9e917a", 0x5}], 0x1}}], 0x2, 0x4) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0x3b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) 3m47.548864806s ago: executing program 1 (id=2090): socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair(0x1e, 0x80000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m47.054724187s ago: executing program 1 (id=2094): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c20000030806000108"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m46.568038348s ago: executing program 1 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c0, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, {0xb}, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic]}, @generic="2fead074518e91058bb047950e17b2768360625136b928fd829a3d30da54cfe03a0d19e968334910fd0018872c7ccbb8923e8119c53535bf45acb95b49ea6f964034ba566617287b63950d4502ff1b4a8fdc5f8f0d58bdc7f0400ec1a78f1903d3be4efcce5e7e469ec2e510a1ddf1e39a774ea6d41ba4976be1a254edd9334bc52d1358857a0df44e534418b644be884d8518f2f83778aa0280503523abaf4db1595898c24d05d126fcd5b69e8421b8203765d4323c8ee7d3cc32b3fabf641c5dfc833757", @generic="29ed1639a684fe780389425b8f3772bd00f78ba7e17dd6f56f9d4adc51119bc0bc6282d81abb8760c7d1cd7d49d3023e0479fc878517e9fb323501fe10be0973802c0f81075c2031353169b74a6755e61bb4943b5c490a1b278fb53ba33d4517d9cd7591aad07b979e5bb2e65c648e4cc0914e7d4acdcf478dbf559596f4db8e98c2e4650a4151e9d6a462af6b2eeb6d3f068050e9195a1612427bca8fcf7b010ea4e0780c58dfec1f93e6acf7464fc1e506216fe97f37e03bbd6ba2d9f1e7ba6f60ac4170f4efedd0", @typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x1c0}}, 0x80084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3m45.562844439s ago: executing program 3 (id=2101): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0x2}}]}, 0xcc}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x80}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r4, 0x6, 0x3ff, 0x7f}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="63f8923f9cf2686977255ce1832780a8d6ae4c0ee24226432fa45d6e15e8d480d74a9ba1871dad03783f51908223d58eaf64a8b9083645", 0x37) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0xb, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x81}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x2, 0x0, 0x300}, 0x4}], 0x400000000000202, 0x12000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(r6, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1a", 0x2}, {&(0x7f0000002300)='U', 0x1}], 0x2, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x298, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd527c800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "fa0130e58c4010e3a336e439339c97de1eb6c085587fc3d19a70e3a6cd0b22f0197c90f4c9fe61989e636595fc1e1f7a1b55c7f9737ad72036105e06c0a2f0962ca7ab022c4fe0e365eaff86fe"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6785}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ef}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x4028891) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 3m45.426574276s ago: executing program 1 (id=2103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c855}, 0x24048041) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) clock_gettime(0x3, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 3m44.878319196s ago: executing program 3 (id=2106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9efa}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000400)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x87, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}, 0x0) 3m44.735660084s ago: executing program 0 (id=2108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m44.528882498s ago: executing program 3 (id=2109): r0 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x10, 0x2, 0x6, 0x91c, 0x7}, &(0x7f0000000080)={0x7fff, 0x1ff, 0x0, 0x80000001, 0x5, 0x8, 0x0, 0x4}, &(0x7f00000000c0)={0x401, 0x5, 0x5, 0xff, 0x7, 0x5, 0x7, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x69]}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m44.528412263s ago: executing program 2 (id=2110): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x8, @broadcast}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "af5e"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x4048010) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xc, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f00000007c0)=""/174, 0xae}], 0x3, 0x0, 0x0, 0x4004001}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r10], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000280)=0xdf, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x26c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3}, {0xffff, 0x2}, {0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x2, 0x0, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "d8e470ef753df31bce10507c501a8d76e061240eeaa2611da19604ff72019935eb7698818e6ac71cdd8fa1470b956d15a18377a2f600de3750b7e8cb225c7fd3cb2fec4663277e94d0b6455b3facf60202fdc0a08cbe3f258c8e8ddc8b706b836c1d8e6e2aec2e120259744d41d51336540ca53d21b41e423618ba6ee16b3e445441e5d5db761ef1ade2aca76c407303000000c5f4e14c43e2944f06d30ec82d0753aea9e0cde9b609ebaed609df432832f4b5c6b434a2d5bb08348a06e43a73f94d28f38f4665268e6052be95dfc67a1f67219deef917dd5ab37c557dac4ddd000000000000006922f5c86ff683f6af46de987632768700"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xfffd, 0x0, 0xfd, r2, 0x200}, 0xc) 3m44.427785702s ago: executing program 0 (id=2112): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6103064b0202818102cea102"], 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40c5) 3m43.949923054s ago: executing program 3 (id=2113): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x6095}, 0x8091) recvmsg(r2, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8000) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESHEX=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) ppoll(&(0x7f0000000200), 0x1, 0x0, 0x0, 0x31) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x7ffffffb, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) 3m43.931822137s ago: executing program 4 (id=2114): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r3}) r6 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x0, 0xf0, 0x6, 0x9, 0x7, 0x0, 0xffff, 0x4f71, 0x2, 0x4, 0x2, 0x723, 0x570, 0x4, 0x8, 0x2, 0x5, 0x8001, 0xff, 0x452, 0x1000, 0x8, 0x6}}) ioctl(r6, 0x8936, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) 3m43.789757062s ago: executing program 0 (id=2115): r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$netrom(r0, &(0x7f0000000040)=""/52, 0x34, 0x20000002, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0xc3, 0x8, 0x3e, 0x2}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x1ff, 0x3, 0x8}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000000440)=""/4096, 0x1000, 0x0, &(0x7f0000001440)=""/73, 0x49}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x1b, 0x19, &(0x7f0000001540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x1, 0x2, 0x3, 0x9, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7e9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x1, 0x2, 0x3, 0x4, 0x44a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x29}], &(0x7f0000001640)='syzkaller\x00', 0xcd7, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x10, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000002680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000026c0)={0x4, 0xf, 0xb4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000002700)=[{0x6, 0x5, 0xb, 0xb}, {0x0, 0x1, 0xb, 0xa}, {0x1, 0x3, 0x8, 0xc}, {0x3, 0x2, 0x2, 0x6}, {0x5, 0x2, 0xe, 0x9}, {0x4, 0x4, 0x2, 0x8}, {0x2, 0x3, 0x5, 0x8}, {0x80000001, 0x3, 0x9}, {0x3, 0x4, 0x9}, {0x2, 0x5, 0xb, 0x4}], 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x3, 0x23, &(0x7f0000000200)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x72}], &(0x7f0000000340)='GPL\x00', 0x5, 0x3f, &(0x7f0000000380)=""/63, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x2, 0x3, 0x3}, 0x10, r4, r5, 0x4, 0x0, &(0x7f0000002880)=[{0x4, 0x1, 0x1, 0x1}, {0x1, 0x4, 0xf, 0xb}, {0x3, 0x3, 0xe, 0x9}, {0x4, 0x3, 0x0, 0x9}], 0x10, 0x7}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002980)=@assoc_value={0x0}, &(0x7f00000029c0)=0x8) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000002a00)=0xff, 0x4) r7 = socket(0x2, 0x5, 0x7f) sendmsg$inet(r7, &(0x7f0000003200)={&(0x7f0000002a40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002a80)="82949ca336268e44295dda40d132fa535b59a9b12b267a797a2deebdc1eccc0efc849ba950bcc33211f71f50ec17053b37d5abb9d75d54d2b947ff848cb1601ee2a2043b6f58a601e1a12fcc9e48bc010cde1cdcb2e92c1a47dd25defbb76de3840327b9793094e27155143e0efaa7cfdcc2f4f072d585d7d01e7c65ffa8e9a2a42e4a0ff70c06a59ec5c94bf87e524bebd411f0ea6baa88f9537e7301461e3e040a18d4488ac3df6c56d23df2f1107332996586c00d0fbd4007990bbb11bed524bfa728d85dff8c2722bd151d80de12e8319ec0730e6302ba572062c0944fe8626bad32136091678ae890404d7245c3", 0xf0}, {&(0x7f0000002b80)="5d3e7b2ea40cbe293c0c1fb19bc17b7d2c9ac394c5631b6af9dc9e644dfe5dfef0055a590f428d3b457af13198fa768132161d17d31bd35b8ca395419d5510baf72bf92bf944a6fd00600b3196036703c0b7d929a088c5835751a04b6830794bb2105e3f5e4982f0a19320f04d7e2b466d2613b2ac7a64a57e8a19b3102e043bfc0a523da8665015cef3b2036593d2608145173905045603d42b5802f66a543b55f229296c8edad748c2e56446153a722756e861195c2616b8194ab85c428bc7aab84118f4289a2aead632d02dcaa4acacd03807", 0xd4}, {&(0x7f0000002c80)="774ab776452cdcde47877238d92663060ff2cf8d4c4ec5b18374a771e25b07160d00ddbb13573f2915d1257da35019b5e1ee22fcad7dff64c0440e3aacc7b6717b69afe7a715383f7d9ff7aa698fe60ed862399c6f84c10a6e36384d2a5f9dfd7f2066955e9493431476dfc93d801cd67588dd3ed9124bd7f8357c8d7ef5d78b61d26b5432dbc56fa451aed9a93919238f353e9491cdfdcd1d81d89ea269bc23c2c1d48d744ca727dc7293a18d2dd96822676b5727af95c9ae8cb9cd854ea086a001e6f9ee3b3b3e8c37df99e9f24c04db8f858c77e4986f90abad992b0b0dbda67690", 0xe3}, {&(0x7f0000002d80)="25321625108202a8f68205126f872e3c5f6a4441da4d248a4a3dd938e47e01adf0be951f82550fd7a10d4977f3a119e95a26ed3e9379dd78ec2d52077121d93723d7a16ddf51fadcaf858a0f47fbf9186257fd5d5ce95d10a7ebf3d3df326fdf1765ea80521df8ecce507d377b6dbdccd5", 0x71}, {&(0x7f0000002e00)="fdf73791b2a424f5e217ae57b55fcae2459b50e5b6bd5f40b5b67ec100417528d77130c869ad17c2fa2202f5d4203436b1ab318bb300c76df11cf0f456429c3f15429f0c55841c6bd4a2e18f2bfbbe22db32ade4f6f8", 0x56}, {&(0x7f0000002e80)="05266ec32859f28fab74a90035f5c5fcacf47dc04fc1da85e4c7caf49d87010d1790f2a23efe4411093971b8d05c2c30d1f5a75ee321a009ecf8748efe5f399681cb659c6c9f3c39c32f7c0c9c018f2b22985c419a674f9317f58ada5f0bcdebe8e395805040da36bb5b142ea4e175d0f597833e967ce068bde56b52c47514edd668ee7196fff756406b5702c53ea459ff583ba32a02b69f74de86abd1d6c905af603983c312bab95a9f88d0469a34aec099", 0xb2}, {&(0x7f0000002f40)="66da8ed71d9a97c197f3832f66740938d3715428f657fbc3be3dfbc8", 0x1c}, {&(0x7f0000002f80)="15139ba57ac24a7d4a9b39bea89f0159956543705e72e8fd2f6a765598312834d4e193e97fd2861b2de656074427a29a9a32f67006914be17618cfd3119ab9b1d79f39bccd2c918076bed204d5bf4054b8853d6704da9e55566ff25540f355624790ad1dba42529547059ac1c19ff2747b65fa3eac56b49751bf33c70ace738c78de33dec6f009e52f046ce652d22d26f026201d196695107a61f1c7da231fd30c881f7320ada7180a34660147da2ff3ce41297a93c9f329f93a0693d4478e2188bb107a58e962d907d7ae2c873cb8a5e86bdd03c3fe28c3840aba47075c50f819e39410c832419519be8e", 0xeb}, {&(0x7f0000003080)="f4c0975bfa536b4f09c7e9c808155c66894caaa6b3c34e04a6dd86d20539f4e07015e8736f85028a6936711d7a6c2e87b7664416b760694a41397a67e5e4136407079c2adf8a2010842a3f22c96db69bdd02657c7891c1eb480941b6cd8551d39afa27ff76aaec95953e9739b9f406cb936089ee37e8998f8e9f1cc4610f46354a98fe86a6f0bdc797d7b1b3da3ca251caee339e412cec904dac008e7138ed79929be56b6edf5270f13e", 0xaa}], 0x9}, 0x20020000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003240)={0x0, 0x3, 0x18}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000032c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9aa, 0x5e}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003600)={0x11, 0x3, &(0x7f00000033c0)=@raw=[@ldst={0x6796bf5fcd2de02a, 0x1, 0x3, 0x2, 0xe, 0x40, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000003400)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000003440)=""/177, 0x40f00, 0x25, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000003500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003540)={0x4, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003580)=[{0x5, 0x3, 0x6, 0x2}, {0x0, 0x3, 0xe, 0xa}, {0x2, 0x3, 0x10, 0xb}, {0x0, 0x3, 0x5, 0x7}, {0x4, 0x5, 0x1, 0x7}], 0x10, 0x2}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000036c0)={r6, @in={{0x2, 0x4e20, @multicast1}}, 0xfffffff9, 0x1000, 0x5, 0x7, 0x4}, &(0x7f0000003780)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003840)={r11, 0x68, &(0x7f00000037c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000003880)=0x10) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000038c0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003940)=0x0) sendmsg$AUDIT_SET(r7, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x3c, 0x3e9, 0x20, 0x70bd2a, 0x25dfdbff, {0x40, 0x0, 0x0, r12, 0xb, 0x0, 0x0, 0x3, 0x0, 0xa773}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44810) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x14, r13, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000041) accept4$rose(r7, &(0x7f0000003b80)=@short={0xb, @remote, @null, 0x1, @netrom}, &(0x7f0000003bc0)=0x1c, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r7, &(0x7f0000003c00)={0x1}) 3m43.431136295s ago: executing program 4 (id=2116): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe, 0x0, &(0x7f0000000440)="9f44947021919559684010a40800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) 3m43.412413529s ago: executing program 2 (id=2117): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x610, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa75e}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x588, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x579, 0x3, "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"}]}]}, 0x610}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m43.089531236s ago: executing program 2 (id=2118): socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair(0x1e, 0x80000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m43.075823179s ago: executing program 4 (id=2119): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r2, 0x2000000, 0xb, 0x0, &(0x7f0000000280)="3a1d5bd9fcc2425a55dbb0", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 3m43.004536391s ago: executing program 0 (id=2120): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket(0x5, 0x2, 0x2) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0xb74, 0x2c, 0xd27, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xb48, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_vlan\x00'}, @TCA_U32_SEL={0x6f4, 0x5, {0x1, 0x6, 0x5, 0x6, 0x2, 0x8, 0x80, 0x5, [{0x911, 0x6, 0x3}, {0x1, 0x8, 0x9, 0x9}, {0x4, 0xe5a, 0x1b1f, 0x5}, {0xff, 0x3, 0x41b, 0xc000}, {0x9, 0x200, 0xe, 0x80000000}, {0x6, 0x6, 0x7, 0x6}, {0x5, 0x1, 0x5f27cc8c, 0x3}, {0xb0f0, 0x3, 0x8001, 0xb5}, {0x1, 0x10, 0x100, 0x8}, {0x2, 0x4, 0xd, 0x1}, {0x2, 0x7, 0x3, 0x5}, {0x3, 0xfffff981, 0x0, 0x6}, {0x2, 0x6, 0x0, 0xb1}, {0x7f2, 0x9, 0x5, 0x5}, {0x400, 0x8, 0x7, 0x3}, {0x4, 0x0, 0x0, 0xbf75}, {0x1000, 0x4, 0xc36d, 0x4}, {0x80, 0x3, 0xe, 0x7}, {0x8, 0x58, 0x2, 0x1}, {0x3, 0x8, 0x6}, {0xd55a, 0x7ff, 0x10000, 0x8001}, {0x3, 0xa6, 0x1}, {0x2fc, 0x0, 0x5, 0x5}, {0x10, 0xb646, 0x9, 0x8}, {0x5ce, 0x1ff, 0x1, 0xd6e}, {0x6, 0x7fff, 0x2, 0x9}, {0xffff, 0x0, 0x2, 0xf}, {0x7c8e, 0x2, 0x24}, {0x4800000, 0x80, 0x0, 0x1000}, {0x2000, 0x320f3733, 0x8001, 0x5}, {0x3, 0x3ea39e7d, 0x9d0c, 0x7}, {0x6, 0xa, 0x2, 0xd63}, {0x4, 0xf9b, 0x3, 0x7}, {0x5, 0x5, 0x3}, {0xe, 0x7ff, 0x8, 0x8}, {0x921, 0x5, 0x0, 0xc}, {0x8, 0x7, 0xd, 0x3}, {0x3, 0x3d7, 0x7, 0x5}, {0x5, 0x6, 0x984, 0x212}, {0x7f, 0x800, 0x4, 0x5}, {0x1, 0x3, 0x0, 0x1}, {0xffffffff, 0x1, 0xd4, 0x3}, {0x865, 0x8001, 0x2, 0x7}, {0x3, 0x4, 0x7, 0x4}, {0xec68, 0xffffffff, 0x2}, {0x8, 0x8, 0x0, 0x7}, {0x5, 0x3, 0xb, 0xe}, {0xca34, 0x80, 0x8, 0x175}, {0x0, 0x4, 0x5}, {0xe19, 0x4c, 0x7, 0x2c000000}, {0x6, 0x4, 0x3, 0x1}, {0x4, 0x9, 0x0, 0xb000000}, {0x1, 0x72da391b}, {0xf, 0x0, 0x4, 0xdd}, {0x4, 0xc, 0x5, 0x6}, {0x2, 0xa, 0x817, 0xe}, {0xe, 0x4, 0x200, 0x1}, {0x9, 0x4, 0x200}, {0x20000, 0xffff, 0x6, 0x736}, {0xc, 0x1, 0xc3, 0x2}, {0x3ff, 0x9, 0x8fd}, {0x4488, 0x1, 0x200, 0x6}, {0x7, 0x0, 0x9}, {0x800, 0x80000000, 0x7f, 0x8000}, {0x1, 0x7, 0x8, 0x3}, {0x3, 0x14, 0xfff, 0xd}, {0x8, 0x401, 0x2, 0x3}, {0xfffffbff, 0x1, 0x80, 0x1ff}, {0x25, 0x279, 0x5}, {0xd, 0x1, 0x0, 0x2}, {0x1, 0xfffffff8, 0x1000, 0x6}, {0xf, 0x38000000, 0x5, 0xffffff01}, {0x3, 0x5, 0x9, 0x8}, {0xfffffff9, 0x3, 0x9, 0x6c03}, {0x356c, 0xfff, 0x4, 0xdf}, {0x2, 0xfffff800, 0x6, 0xcc35}, {0x2, 0xa099, 0x22fe, 0x7fff}, {0x7, 0x79f, 0x8, 0x401}, {0x9, 0x7, 0x1, 0x120f}, {0x1ff, 0x5f9, 0x1, 0x3}, {0xc, 0x7, 0x0, 0x9}, {0x5, 0x8, 0xc}, {0x5, 0x0, 0x3, 0x302e}, {0x101, 0x1ff, 0xe, 0x8fa}, {0x0, 0xe, 0x240, 0x9}, {0x7fffffff, 0x8, 0x2, 0x4}, {0x80000001, 0xe, 0x9, 0x2}, {0x9, 0x0, 0x2, 0x2}, {0xe, 0x9, 0x2, 0x8}, {0x0, 0x7, 0xbab, 0x1d}, {0x8, 0xc53, 0x0, 0x8}, {0x4, 0xf, 0x3, 0x2}, {0x9, 0x2, 0x6, 0x8000}, {0x2, 0x1, 0x3, 0x1}, {0x6, 0x27e, 0xffff, 0x5}, {0x6e3, 0x10, 0x100, 0x7fff}, {0xff, 0x6, 0x2, 0x5}, {0x9629, 0xa, 0x7, 0x180}, {0x400, 0x3ff, 0x3, 0x5}, {0x4, 0x8, 0x0, 0x7}, {0x7, 0x6, 0xc730, 0x7}, {0xfffffff9, 0xc3, 0x10, 0x9}, {0x1, 0xfffffffb, 0x4, 0x401}, {0x8000, 0x68fb, 0x3, 0xe}, {0x80000001, 0xae, 0x6dbb, 0xbad2}, {0x1, 0x7, 0x6, 0x5}, {0x100, 0xfff, 0x100, 0x2}, {0x9, 0x9, 0xff, 0x53a}, {0x5, 0x7, 0x5, 0xe}, {0x3, 0x7, 0x3, 0x2705}]}}, @TCA_U32_POLICE={0x42c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7fff, 0xfffffffb, 0x80, 0x7fffffff, 0x8, 0x2, 0xfffffffe, 0x0, 0x6, 0x3, 0xe99d, 0xc7, 0x8, 0x9, 0x0, 0x1, 0x5, 0x4, 0x54b2, 0x6, 0x40, 0x7fffffff, 0x8, 0x400, 0xcd2, 0x3, 0xf92, 0x96, 0x400, 0x3d8, 0x2, 0x4, 0xd8, 0x3, 0x8, 0x5, 0xff, 0x8, 0x7, 0x4, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffffff94, 0x7, 0x4, 0xff, 0x2, 0xb, 0x6, 0x1, 0x7, 0x1, 0x1, 0xc, 0x7, 0x6, 0x7, 0x4, 0x5, 0x1, 0x5, 0x9, 0xffffff80, 0xfff, 0x40, 0x9, 0x1, 0x12, 0x13cc, 0x510c, 0x9, 0x0, 0x5, 0x23da3303, 0x40, 0x0, 0x3, 0x2, 0xb7b1, 0xb, 0xfffffff9, 0x4, 0x8, 0x9e, 0x7, 0x4, 0x1, 0x9, 0x3, 0xdb, 0x514b, 0x8000, 0xff, 0x7, 0x8001, 0x80000001, 0xd, 0x4, 0x13, 0x6fa, 0xc, 0x6, 0x9, 0x8, 0x3, 0xa252, 0x9, 0x9, 0x8, 0xffffffff, 0x8, 0x4, 0x5, 0x4, 0x8, 0xffff, 0x2, 0xe, 0x4, 0xffffffff, 0x9, 0x5, 0x3, 0x6, 0x9, 0x40, 0x74bf, 0x3, 0x9, 0xb8, 0x2, 0xc4d, 0x2, 0x7, 0xfc, 0x1, 0x6, 0x6, 0x7fffffff, 0xaa, 0x10000, 0x79, 0x40, 0x400, 0xffffffff, 0x4, 0x32, 0xa6c, 0x9, 0x9, 0x9, 0x9, 0x3, 0x4, 0x7, 0x7, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x6, 0x6, 0x7ff, 0xff, 0x4, 0x100, 0x4, 0x3, 0x2, 0x7fff, 0x9, 0x401, 0x1ff, 0xe1, 0x3, 0x304, 0x1, 0x1c3c, 0x8, 0x9, 0xa84, 0xffffecf0, 0x8, 0x0, 0xffff0001, 0x80, 0x4, 0x21, 0x4, 0x80000001, 0x1, 0x0, 0x401, 0xd, 0x90000, 0x7, 0x9d1, 0x5, 0x5, 0x5, 0x6, 0x1, 0x1, 0x6, 0x4, 0x2, 0x0, 0x6, 0xf, 0x2ffc, 0x7, 0x7d, 0x1a6, 0x0, 0x6, 0x0, 0x0, 0x4, 0x80000001, 0x7fffffff, 0x0, 0x557, 0x6, 0x0, 0xa3, 0x7, 0xe9, 0x2b, 0xff, 0xe8b, 0x3ff, 0x7, 0x7, 0xfff, 0xfffffff6, 0xffff4485, 0x6, 0x3, 0xffff3c26, 0x6, 0x3, 0xffffffff, 0x5, 0xfffff001, 0x5, 0x5, 0x4, 0x2, 0xe3a5, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x1}}]}}]}, 0xb74}, 0x1, 0x0, 0x0, 0x20000}, 0x20004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$inet(0x2, 0x4, 0x9) read(r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 3m42.744183975s ago: executing program 3 (id=2121): unshare(0x20040600) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x3, 0x7}}, 0x26) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x19}]}, @nested={0x4, 0x104}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2400}}], 0x18}, 0x40010) r3 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x491, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m42.595808317s ago: executing program 2 (id=2122): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='coup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x963, 0x6ee, 0xc, 0x84, 0x7, 0x6, 0x8e, "00f1ff00000080000000ff00001500020800", "ac369e87cc2c0000397ffffff5fbffffff00"}) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m42.524153366s ago: executing program 4 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000000)="9bfd946d966b5320fa9ed36ec1bceb6305edb054034c6aa42ccc9a7e03de783b1bf8a8350a9528bb7ce0016841f2c39b7377dcd36e3355784f2ce3e37d21d703c4efebbfed98679d61f5a98e8212b8c81b6159c85ea785c1feb4b34be13c40fb9838564c6ca73b3e7391e6dacb66a668fa68455633585814cd14d93f8183e0024059b54928bc43a73ed05405aac7bc3fd8bddec6ca45cc79222e06d90ba719dfa96670120f6f0b246d81cae62e", &(0x7f0000000380)=""/242}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0xfffffffffffffe78, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x1a, 0x0, 0x0, 0x2}, 0x28) 3m41.480482962s ago: executing program 2 (id=2124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101eaff000000000000010000000900010073797a30000000000900030073797a320000000028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140100001100010000000000000000000700000a"], 0x9c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) close(r0) (async) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ffffff7f00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0x5, 0xffff}, {0x10, 0xfff2}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb3, 0x3, 0x9, 0x1, 0x0, 0x7f, 0x5, 0x7}}, {0x12, 0x2, [0x6, 0x6, 0x7, 0x4, 0x1, 0x6, 0x40]}}]}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) (async, rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000200)=0xa58, 0x4) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="e8da0b70de94907ea28b5cdc8243d23fec642d3711198d0d84213f66b570d96ff4aebb8727c68030", 0x28}], 0x1, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}], 0x18}, 0x4000) 3m41.36827016s ago: executing program 0 (id=2125): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000e560310000000000007300000000009500000000000000077bacafdecdbc851098169d45635adc67f0cc71914988ade424bd859683afad74bd44071289d6b002841f548a32345a807f82c0293b7103739aba59f1b454daf0d3acadf073e6fcdce38d0b5a311b781c2530e4a956f5b549ff039754c63d80756986cde9824dc02e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x100000000}, 0x18) accept4(r0, 0x0, 0x0, 0x80800) 3m41.298310643s ago: executing program 4 (id=2126): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x206c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x2050, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x44, 0x91, "02a24023d548793a84576e018f0c42c37f82ed9ae2830a339b6b63e3a8a32b941902edc25816bab6950233dd7cd949f817b2d2b67e6f5070c690d44ddeda489c"}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@chsw_timing={0x68, 0x4, {0xf000, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x34, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x7, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7, 0x81}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1, 0x35}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xce, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x27, 0x48}}, @supported_rates={0x1, 0x5, [{0x2, 0x1}, {0x30}, {0x18, 0x1}, {0x6}, {0x1f, 0x1}]}, @cf={0x4, 0x6, {0x5, 0x1, 0xc5, 0x400}}, @random_vendor={0xdd, 0x22, "f795d43b4e97dc01be8c4791534e947b9f794ff08bab5b24169dbc4ad9463a84db95"}, @random_vendor={0xdd, 0x60, "955dd5963b3c673df47e79a7ff5921dca773f782d03bcf8215d8e196705c861c5d55dea6cef306bb353f99e5f1ecdf27e16e9ed82fed31d871f685eb2b0d67402ea14d741823b201c3c867d1c3194b53252e3d38d999fb5b6ebada9225128ee1"}, @mic={0x8c, 0x10, {0x854, "ef5f10222e56", @short="f5ed480148929483"}}, @supported_rates={0x1, 0x8, [{0x75dffb1b5c8d45c8, 0x1}, {0x4}, {0x6}, {0x6c, 0x1}, {0x4}, {0x24, 0x1}, {0x1b}, {0x30}]}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x1, 0x0, 0x7}}]}, @NL80211_ATTR_FTM_RESPONDER={0x574, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd4, 0x3, "62f8b7e4f1c3701bc07a0aea6a094a10a1ac2c6d64f4543cc97073c84996ab4a6b6ae4cdde6a314c6c7bc2372a4601653cd7df31a770088a55474b591c39da49182901087e5f2beef650643857511e261d57b85ea68a6e661f6bb7ec6ad1019d82a60c229e85a042c6591165fcbcebf9138dc06a88d8e938291662b19414aff63f3a22b1ef53a0dfa90435da0071cd054f34a8bc249c20d8764339bd2d3f3fe05ec7a66cdda7d222e320af44c9876358a855e092e3b24b9716587edacbbe1eb2b1730740714f697d112117f1f23a7a5d"}, @NL80211_FTM_RESP_ATTR_LCI={0x37, 0x2, "7bda5f1ddf4e217c49a43f4a195fbe2489be628069891ceab0b30d97198bbdc762285d53dbc4dabe6c259f594ad4e130e7fc9f"}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "5c8cfc8ba7b132500b3ebf0a622360e87a63a3476e91d5f32703906748c6ebec2491f0c5e8d5ca0764fb4f6537b4bee6840cd7dcbda1d97c2a154fea445f5030701d547799e5801db83687a4b3ccd3f098750ee364b9cba10c236945fe27eead973471aa2eb7fc5a377d03c14e5a7b3692f96daf9d11fbcf6c0865e5e5c76df545679cc03e0e453247ad9d0bf00f3f0ab2f73c13cf9e923af9076474122f23c42b0c6c2ee79a7ff5473a07d3b10892ef341bc1a034b812ef8370b054da488599b0d7c402e8fdbdf7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3c, 0x3, "cfe0e73985f012cc9723c4dc39c2f4e883daf4ddbee96895cc0f3d336d33aab53962b96f9630ab442fdb769693285d56af523b1ae58c82f2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd1, 0x3, "a5e1856e248c035cb2f906078f94ab8740fea19ef1a87f635434cf5de1c66115c0ce70f59a52e13ab60a661a158ae7e79667729c56030b9fa2c155e5fd79c68585dcf7db715686a305808c6fb1bde4841c3f2ec854400cac947e1fd64ad0d0e571777e135466ee3bba463facf95df18f567eb7422b39cc1d9a7eca034fd9daee40796b48a926b3e29b5a26e351f35c05a93d43174e12e088927d7d71c0fcdcd0062f09ab5b0544a5140b1862254fb34a82f4e8ff23327c708f0f261420663bb090f9276b014275de80a07148cc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcb, 0x3, "299ff4fe900a1514d5a72ce93c3fc190d8727ae44d4212fee64c509ba9b946d7cd0797266cd7dd75b401edded48b0b383b2b0f4798219369d538695c559bdd3240710ebc17e39244a17b48580e076b7c96328e95d3391802183e8999e848c7b2403bec955be1736ad89e570d1a8625b453be011fa1b60e6e68a53f9e3a33299711d562412e65280aaf9aba5a0cf95964bf50dee431c147d2198ecc6c3bc1bca14c6cd06ef38c02c2db2c290ca14a199ad361e8eff77bd9eaf975f13c9e9ca0218b987a56f5bc54"}, @NL80211_FTM_RESP_ATTR_LCI={0xf3, 0x2, "b95e7cbfae3f0cd70423a3df2ed29056fcd8fe6e2e321d2f67e6884dc68e6784facfc8150b76034d8d270a9a68cfa518d04c3bfd7d742d4a7d3e6127a01b8a4cd7f906a678c070473449602e34665173faa241f9618f6494014faa18710a18fed11799b291e25592917637c088e31ec6d12a4d1fab0c3410f4ad90f47dea9bac61da9c3ca2946ea49147358c100d1d4c350bfbe4dff87981f7cb08c7001454a04c43161778f0aa7bdfee4a4696403189449c749e981d524f12d463e6018abfbbf269b13bc4a23632c6da36ed135485fc181dc3a9be78cd91c8f5b97c4746c9c6723ebf629bc64ca485856f71783e25"}, @NL80211_FTM_RESP_ATTR_LCI={0xbd, 0x2, "2855e53de275ab3884366ee64a3e2c7ca7ba60a7b39062c400640ee8c1c2f0d2dd63d102108fd2c6c951859d36dfd21f36c50d6483a728817ea057076a7f1df053fb9cfd65eb0c82668c9d35260ab6e1a52b3165cae30e5f6ffc72855ce9197310e434246e0c5416b8404651b98baa8f2e9ea2c86f8354cdaa6cd26d684845f7c1bdcb29249f9417373659e0b7b7cf117c2d2cd405ae224c4de6349629043b30a02579b9a61dddb9fa495c0ec5e36d5ec346bc94f6b255189c"}]}, @NL80211_ATTR_FTM_RESPONDER={0x2d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x18, 0x2, "bc957dd7a0aee0b674e37ba99b4f5ddf5b9925a9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc9, 0x3, "0b7cb2356c638d6795b4f538534c07aacb0df806e12e118d257ffa4e30222e17f05d0ec98658ab01c2a73d82d8ca0cf4ac4b1aead6bf69977d5b138fbed61f89b1622b1c1f0d5d684d8113cfb60f2418d4291e9f320413413e834ca28d295210265fd3518e20eb70a23ee105df4b7775e85e61fdbe05293d56b2a230389ae885b4bf45e0345fb6d0011c97587fe7e857c74d3a26a70e3c1e5027baddac5e068851bc4ae2352f66a1367d53bcfa0e4bf333be0863bd5006a61cb435443ec7aa6a352d4e3dd6"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "fca1e85ac319d452430b6e44fe50bf45fdc358480c3e0e2360309a8f2580d6a3000431eef990152b30523ae6e7e29c83ace2f1aa2173702686eb0a403635614cb8b9254b61fa988dbf52b89998627993eeb2d544d2b3920e0c5a827b55a33df7ebf9ac021c6236f44efa0f9d4775603f5bd428dde057924ca4aa91b2d3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf0, 0x3, "9dfac09f7580a21c267a2bf73f8b9d48d81ad251716468f9775201a11e12ee32afd77f98d812766a2d3fee22f80a5bc5885aeb9397e6342deb737c822f4aea98429b161784454442487792f1ee75bb50e9f9e7991404782cac73fd2247f0a3bac289307a3ec8838c36d121536ea6b8960cb1df40416ff05a852db0d296da70702d754e438dbe3a491e1a17b6438de1d50cc8cf6eeb0a8351bffd8afa4e749b6520b79093dccecd0208f86ec6cd64bdd05b1398252d6366ac1b9d9eb2ae00d90fc5b0d095bc746c20a06a3a7192ecdd32def17fd8528709afc75e7cd0d857356f693a8408abaaca69699f67c1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "63b7a51b1f150e2011490b588af3e2aa84052ad77d6b04a16fdfb5a87772d5e2e33083bb2f213093d8a4f2a327ca57539379879dd1fcf04e351c4a9f358e625e6b226bf0e62ca4d0d568b935a5057d6ea69ec569cf8f11ed200a22f3fe4234a353a1ab96f9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xd1, 0xf, [@mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x3b, 0xddf}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x14, {0x1, 0xff56, @void, @void, @val="a69e4063bd9823e21ff6bc12c26e2a80"}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x7, 0x0, {0x3ff, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x9, 0x81}}, @measure_req={0x26, 0x6b, {0x5, 0x6, 0x81, "db445a8ee9750ac1f0c73675966de9e0bea2499e87b8a3c2f111bb6a7fc9b179ceb5c43b6039c923bdc6ba41b0410432289b7cc9e635c210e2681c76a53636d7b2d50fcf2bdac8e7eafb3739acd629dc5c6e086ae151268779f9b24810c8f2aa27ff59710e22ef45"}}, @link_id={0x65, 0x12, {@random="74c2d7bf791c", @device_b}}, @peer_mgmt={0x75, 0x8, {0x1, 0x4, @val=0x1, @val=0xb, @void}}]}, @NL80211_ATTR_BEACON_TAIL={0xe9, 0xf, [@chsw_timing={0x68, 0x4, {0x1ff, 0xd152}}, @random_vendor={0xdd, 0xa, "0cfab8d968046668ab11"}, @mic={0x8c, 0x10, {0xcbf, "0ebfc5336d31", @short="952b1debb2a3fa9e"}}, @peer_mgmt={0x75, 0x16, {0x5, 0xd, @val=0xd, @void, @val="dc2c4465f47e444f09e1ffc567b2dca0"}}, @cf={0x4, 0x6, {0x3, 0x1, 0x4, 0x3ff}}, @random={0x5a, 0x82, "bee73c3966a49c00d66c3a148525e5ee552f76d2cbb601f0a5acc089938b3bd762db46b60d194551d256fbaee1e0a11b3eae36ecc65e2f66008ff75c41913f1313248af75f4698c2050ad303aa9d2e2d2a30ef7a2691b5b693677c556856a60743344cf8bdcb0902df00220567e8fe1bc81daf6c7d6392d0506902d8e41f8165a306"}, @ssid={0x0, 0x18, @random="1dccb02ffd0515ce10f2c85ca46ffdbff889abf24e2e5c2c"}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xc]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0xffff, 0x0, 0x2, 0x5, 0xb, 0x401]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xfffb]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0xbd, 0x7f, 0x401, 0x3ff, 0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2b, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x5, @broadcast, 0x36, @value=@broadcast, 0xffffff7f, 0xb2, @broadcast, 0xffffff80}}]}, @NL80211_ATTR_BEACON_TAIL={0xab, 0xf, [@preq={0x82, 0x67, {{0x1}, 0x2, 0x5, 0xf5e, @device_b, 0x10, @void, 0xffffffff, 0x3, 0x7, [{{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0xdd21}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x1000}, {{}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xa4}]}}, @challenge={0x10, 0x1, 0xbf}, @mic={0x8c, 0x10, {0xd99, "aa71491dac27", @short="278030bebfc9394f"}}, @prep={0x83, 0x1f, {{}, 0x2, 0x3, @device_b, 0x4a, @void, 0x2, 0x14a, @device_a, 0x50d506cb}}, @cf={0x4, 0x6, {0x4a, 0x8, 0x1, 0xb}}]}, @NL80211_ATTR_BEACON_TAIL={0xb, 0xf, [@dsss={0x3, 0x1, 0x78}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x199, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0xda, {0x1, 0x48, 0x2, "19387e35fcbd21e0bed783ce5f59005a81bdf455a0ae5a7cb70237dad89f39e022bfd65b4058717b12dd9efd6fe479c1a7bdb70d5fda737f47658d339705c8bf956384637bb5270abaa1a67a988240a2e6f5b8605aa9ad9fa8f9b7bd128624600188d98e34ac7d94e289b4f5a786a5ae004361d4df5cc7f3306cde7bd335c266cab2f5a4336bbd44ed1e01d89d1e4c2ee4dc171770b8871109de82d7d5d4100b8c444253a54dcb160ed8e156053b499f71e130f5ebaad0b58c282cab3e234e7c016a65a5c0fa453b76ce48f898daa1c16bfd91b820fd15"}}, @random_vendor={0xdd, 0x5c, "b8fdfacd979a1d2e3726e8a9fe05973f78cd000bc18272dc71a43b8b0ca035fbd7bb9b8f4b722e8c4dedcdf91f6421f112bf811d194ad75d7ae024e2628e75fde9aaf656e29781f17d073b8a8836095a8c085c73bd5d9b11c9c3ccc2"}, @preq={0x82, 0x51, {{0x1, 0x1, 0x1}, 0x2, 0x3, 0x6, @device_b, 0x8, @void, 0x3, 0xf3, 0x5, [{{0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @broadcast, 0x398}, {{0x1, 0x0, 0x1}, @broadcast, 0xff}, {{0x0, 0x0, 0x1}, @device_a, 0xd}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_chsw={0x76, 0x6, {0xd, 0x3, 0x37, 0xa}}]}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x81, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @random="66bf03b9eba2", {0x1, 0x9}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x6, @random, 0x1, @val={0x0, 0x2, @random='Po'}, @val={0x1, 0x8, [{0x48}, {0x3e, 0x1}, {0x9}, {0x16, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}, @void, @val={0x4, 0x6, {0x3, 0x0, 0x4, 0xe4d}}, @val={0x6, 0x2, 0x6f5}, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x31, "8cb553fcf6a39df34fdddcaf82a2286d54e596fb509babdc7b8b5fe4a220215d8fbd67e7ce2fa7496464ac5aa4e1c65193"}, {0xdd, 0x6, "06bea275eb41"}]}}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x52}]}, @NL80211_ATTR_PROBE_RESP={0x1dd, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x425, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0xb, 0xac}}, 0x9, @default, 0x1020, @void, @val={0x1, 0x6, [{0x30, 0x1}, {0x12}, {0x16, 0x1}, {0x9}, {0x3}, {0x4}]}, @val={0x3, 0x1, 0x5}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x95, 0xd4}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x0, 0x0, {0x9c, 0x2, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x400, 0x6, 0x7}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa3, "2022412668482b577500cef8e4d2baf2e9a46b9e0e55f8ddfc79735ac0e7637b4e4435d209d96b2fa70282580474d02b96bc941821f1275134aa85dcdd04f2e43ceb128ad673db0fa0d1d8fdad9fa8a3b303826bdb6e0b28dd5295d1b6a0ca3deb5cee13be1f199f33c06ef8a17fa9e217f64b32bec939fe323edab7bfd81984cdb934dec40b5cd0bc81b322365c44be7f74c0705f1143175481f5d09cadd8b4e84781"}, {0xdd, 0xd7, "52ff0d72386d9f6a5d22b87f660ff34aa4f69f5b05eb160f8e4f43f364f7b21a0731b08d187adc01c4a17f0a6084127b29bbcc0a7c1eef2a484bd9ab1a31ce5e78ce018f2a08f004b199d2be3b511c05c5a894777056ab922c8f36c4aad20c0b0e1074520736f8117ac6aa162080a5f4d3778416182fc0d6ecc3517019f1eb37e918593a7ac055eea6fb5d7b165d20a4638c43f99914408c1c784e92ea4a732b4da89007c980df13fe38efc152b0c482f76f23efe964c6aed744517dfc0426ab13b21540797b86390e33ece14120a11f52e72ea14d3abe"}, {0xdd, 0x53, "d7f64ccf3cadc12f2aab4d1a428a2870050f7cdefab189b7feb22eb971db5a5d3467917bc3be0da7a53d8b7bab759361b4be571151b18464e22f689d870778e8c3437f7a46777ffa31db9d407227cb8b1e9f79"}, {0xdd, 0x6c, "ded4812111c68302489d4ac679ca4931e3f2c66eaabef90322235c9ea8802f5232c3d2fc0fec401e8ad5ce717fe46eb657e4309bf2af2895a57ee6b7d313da843f2bdf810eeaac4a7c8dfbad3adcd7cdcf08de5d83d36bb4e58e70171532f08a52c65fc7e5906f085e3cba4a"}, {0xdd, 0x21, "73043c9f3c87b54498a9597f34f0479b2fa5769016b213e9cdd51f5a30e8baf9ef"}, {0xdd, 0xa3, "f2e7cd3681a0c1e8bc1b0b591e89102c889a3a62e9b45c7721b44af90d4efae9b0f952af8f2ebbfb6c0f6ec163fef6d9b0872a1e346f655b179a5252d5c02a89d6b0db59197f0d61b6d36de9cfe6ebfa3b0f411c76b37fbea3d116306b50b82451280a1c31e990de0f763d437f75b1390b925d198bac9945537e3d890a789b5635444823c7c0c8110b36d8dc8d493773bc3e476cd1b70b6ade1950ae82523f350b6aaf"}, {0xdd, 0x3f, "42543580732f13adf63f358709bfb6e5e8714bae852de2b6efb8f7fceaec70ecfc985c324c5800889c125a7b72fdb4ffbf3a8b48e491695954558acfd59421"}, {0xdd, 0x22, "f59caf950b1c98b30f9232487027e01e2906fc53a93f1ac9974cab24639380357bb0"}, {0xdd, 0x52, "665f838721a7a42345f23201ae06424336e24aa749f02808e512d88e7fd5ef5d9a91f483c53adecc077c4de5b682990e0c8ffea331663d1d6d5e27aec75ed54945e419723b7689315ed08a5ebbf919fd81fc"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x48}}, @measure_req={0x26, 0x3, {0x3, 0x9, 0xa3}}]}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd, 0x3, "d3872586b03e2d52b2"}]}, @NL80211_ATTR_PROBE_RESP={0x595, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x5a5, 0x91, "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"}]]}]}, 0x206c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000011) 3m40.2081958s ago: executing program 0 (id=2127): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @empty}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) getsockopt(r0, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3e, 0xfffffffffffffffd, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0xc8}, 0x50) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140)={0x6, 0xfffffffc, 0x2, 0x8001, 0x7}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="210000004000000005000000810000000a000000", @ANYRES32=r4, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0281820d05000000c22a014800000000000000290000000000cd0000cc954ccd83903f02364b184c006740337625b10ecad4184d76ecc1140f6820488b6c14f17aba66cc34d7057f97137fa6e880ae6d04053b251553bd0efd8d6bd51c2b77b9deeb6e17e55852565790d1151e90f6c14bddb5c81daf4c753375f139134dacd51a94574dcc7e8066116988b8992db54c9f13067e43821baa0de2cb2082d4f9dce87393853f87b9b0f8982c1609ccface3733eda08c8fcae96d13a12fdb3ee236c33c71ddd7751edd70bd03a518fabd739d578230761cc2748ed5"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r8, &(0x7f0000000440)="f1117545b68e3097e0f9a5f3b9e6f6e5d192630c62db6c6f49de3239959686dfdef1d7fe5b825c1227f3be8a55ce15cf500e68e8ed86b432578352a74dcc6af2a9a81f7f8abd09efb4800a50457b3841920da8680c9da25ad601e537fec79c6c", &(0x7f00000004c0)=""/105, 0x4}, 0x20) ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x890c, 0x0) r9 = socket(0x15, 0x5, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) getsockopt(r9, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94) 3m39.060785011s ago: executing program 2 (id=2128): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x614, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa75e}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x588, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x579, 0x3, "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"}]}]}, 0x614}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m36.932175965s ago: executing program 4 (id=2129): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000019c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)={0x314, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x31, 0x3, "d47af92b3031c1c8a66fba5dc17d23e650139824f42bb294f3ddf333f981909fb828554732682490c2617c041a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "401403c7bbd407b38de2ba9feb26147316b04a175a15d048d99d079516553cbcb7205f47b802e6f8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "920ed4fdbef46ffafcb2c16b1d099008359d99502d7253042a09e612539f5b2f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ID={0x77, 0x3, "0dc0184b4f4c994adb1ad882eb66afa307f0f28343b2a726c5c708ffe4320830487d19007ceb7c7273b0f0553dfc10879f9ec970ac8f419c151e3cba8011d5a41ba8d19b74cdf4e502659c0d816bb9fd50af1d8b9e8c31d757afd7a6a02dd660b956730497b7c4f8d8f109927bf457a882c64c"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc53}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x98c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe80e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000040}, 0x4054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@local, 0x0, 0x0, 0x50, 0x0, [{@private}, {@multicast1}, {@multicast2}, {@empty}, {@empty}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001500)={0xa8, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x85b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x68f]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m28.173643352s ago: executing program 3 (id=2130): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x2e, @private, 0x4e20, 0x0, 'fo\x00', 0x4, 0x6000000}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200fe8000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000380)=0x60, 0x800) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000880)='ns/time\x00') r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r11, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x20, 0x20040045}}], 0x1, 0x5) r15 = getgid() r16 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r17 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r18, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r18, 0x0, 0x0, 0x800) sendmsg$unix(r4, &(0x7f0000000a40)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="60896b1b8c177826445d863d5b2dbd919e25c0dd4f3cfbf435234a358773171c2c76ddb334b08750106bb401e0318bdfa2827b0a75c214b843d4fad23d08873d980e5b85b4a00d0c665b4c9b55762e5cb2eb66bfb28ca7aa691255e433d6d8cb82cd33cf8f4e1b9680d4330e39c5560ac29ef79921c88331e47b4d95a99547903af1282042cfa4014272", 0x8a}, {&(0x7f0000000780)="896910e7ba448435dc0b7daf5becfc897f561dd9f307768dbf4cd2ac181710910bfb5625e3edefaa9b4b001df57428d1a2ecac584e2800a378bfbdbac1b8ddf00c956be8484ce364211455516869cbb72ff13067ed62cf2d7504117dcb24a5d8edfa544d845ae6ceed4df2f6ff1bc4cc697de354bb77050ec166d8362eae2d67450b69613919232a3bd3c9688bb007b6983aa1a9a75888f4f05de69691be1b63de8296a576b531e5c02d39e7a54b0b8fb674f2dd00a04b2d48a922e6c5ccad774c2c282bde576500b939bea2849497e2f7b23d6fd992d88c01044ba83f0dc42f746b7026e03e4846b6126220", 0xec}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r16, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r17, @ANYRES32=r1, @ANYBLOB="9c38762f6f9100000000000000000000b3b3db4c5e3838", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r18, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4048080}, 0x4008000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000080004007a9490"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m25.268308651s ago: executing program 32 (id=2103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c855}, 0x24048041) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) clock_gettime(0x3, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 3m2.494439891s ago: executing program 33 (id=2127): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @empty}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) getsockopt(r0, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3e, 0xfffffffffffffffd, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0xc8}, 0x50) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140)={0x6, 0xfffffffc, 0x2, 0x8001, 0x7}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="38007cda5b6cf74da01c000000000000020053926ad701801400018008000100e00000010800000088a8f4cd0f04f0b15c2eca995aa30fed1f8b4e1ab6b8a66a9cb2f98d5daee625ef99431f1cfdfb6394a53ccb68f806b6bea34b5cd4c4880b82b8383b049386433f07930ca7e69c1103762dd09d7831805b57cd27fea53b8846e9de25b340fb62f140445a3cb8926da67806f92c12be1c6c841bafae4c1a061c0a29c4dabbb9563fd833912e40d8e5657918e19f2ec9f7ae26d23ad1e6f5fe690193fe6b52b98482a32c63cebf4ca056707f79d7de6e15d11b68b877f2561447ea62a678129484981a994d94c3787effe6305930e9858103dcd1ba5bf0801dd3c6f750"], 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="210000004000000005000000810000000a000000", @ANYRES32=r4, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0281820d05000000c22a014800000000000000290000000000cd0000cc954ccd83903f02364b184c006740337625b10ecad4184d76ecc1140f6820488b6c14f17aba66cc34d7057f97137fa6e880ae6d04053b251553bd0efd8d6bd51c2b77b9deeb6e17e55852565790d1151e90f6c14bddb5c81daf4c753375f139134dacd51a94574dcc7e8066116988b8992db54c9f13067e43821baa0de2cb2082d4f9dce87393853f87b9b0f8982c1609ccface3733eda08c8fcae96d13a12fdb3ee236c33c71ddd7751edd70bd03a518fabd739d578230761cc2748ed5"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r8, &(0x7f0000000440)="f1117545b68e3097e0f9a5f3b9e6f6e5d192630c62db6c6f49de3239959686dfdef1d7fe5b825c1227f3be8a55ce15cf500e68e8ed86b432578352a74dcc6af2a9a81f7f8abd09efb4800a50457b3841920da8680c9da25ad601e537fec79c6c", &(0x7f00000004c0)=""/105, 0x4}, 0x20) ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x890c, 0x0) r9 = socket(0x15, 0x5, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) getsockopt(r9, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94) 2m55.130410096s ago: executing program 34 (id=2128): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x614, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa75e}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x588, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x579, 0x3, "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"}]}]}, 0x614}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2m27.582189062s ago: executing program 35 (id=2130): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x2e, @private, 0x4e20, 0x0, 'fo\x00', 0x4, 0x6000000}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200fe8000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000380)=0x60, 0x800) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000880)='ns/time\x00') r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="100000620714017f000000000b000002af21a90e9aea2371c5d828eceaeb9f11169ed7b802d79fb6666e3e55984b58f2a298e7a63e7df91bbcf0165cd91213d5a617135566e5df0a4f1555c7e2f75e68cabd1c2ccaa16962d89e6ece785a010d12c6cbcf9ac23339497b9bb81a3e4effffa321453484ed8e21d9333dce0ecadd2f24a7805c904f0bdcf7db94e95cb2e1523c32b32c13219ece95055c236d92d5de39f1f18b86736bb00a35047e79990cebb2bf8576d8ad9aaaa7765b42a0104977191ab21b41b7bee2a48464460271c0d8e9b80e9d95d014c8b2bd609288b95ab842b40570ee6c0434e0fb205008e2c6726c24108bfce8014cfb6a4ccefa2348c951de8e7e9eb5e67b04b1146132a414aa7eef26143d7fd26c8c4e5539ec656557f7319c387a453b243e66d0f94a91c6c48f5a89d2fa53bb1d2b3a83e916d25892369ebd05485d8908d6e71a2891c27c8a3e95b1e12cee3d76931709db58b44607e89680fb6b02aae23b6081edeeb421a0d1c89d50062ae702e12974597dbc904c02fda229efd765344a68b8f97f"], 0x10}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r11, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x20, 0x20040045}}], 0x1, 0x5) r15 = getgid() r16 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r17 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r18, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r18, 0x0, 0x0, 0x800) sendmsg$unix(r4, &(0x7f0000000a40)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="60896b1b8c177826445d863d5b2dbd919e25c0dd4f3cfbf435234a358773171c2c76ddb334b08750106bb401e0318bdfa2827b0a75c214b843d4fad23d08873d980e5b85b4a00d0c665b4c9b55762e5cb2eb66bfb28ca7aa691255e433d6d8cb82cd33cf8f4e1b9680d4330e39c5560ac29ef79921c88331e47b4d95a99547903af1282042cfa4014272", 0x8a}, {&(0x7f0000000780)="896910e7ba448435dc0b7daf5becfc897f561dd9f307768dbf4cd2ac181710910bfb5625e3edefaa9b4b001df57428d1a2ecac584e2800a378bfbdbac1b8ddf00c956be8484ce364211455516869cbb72ff13067ed62cf2d7504117dcb24a5d8edfa544d845ae6ceed4df2f6ff1bc4cc697de354bb77050ec166d8362eae2d67450b69613919232a3bd3c9688bb007b6983aa1a9a75888f4f05de69691be1b63de8296a576b531e5c02d39e7a54b0b8fb674f2dd00a04b2d48a922e6c5ccad774c2c282bde576500b939bea2849497e2f7b23d6fd992d88c01044ba83f0dc42f746b7026e03e4846b6126220", 0xec}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r16, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r17, @ANYRES32=r1, @ANYBLOB="9c38762f6f9100000000000000000000b3b3db4c5e3838", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r18, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4048080}, 0x4008000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000080004007a9490"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m15.388976136s ago: executing program 36 (id=2129): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000019c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)={0x314, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x31, 0x3, "d47af92b3031c1c8a66fba5dc17d23e650139824f42bb294f3ddf333f981909fb828554732682490c2617c041a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "401403c7bbd407b38de2ba9feb26147316b04a175a15d048d99d079516553cbcb7205f47b802e6f8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "920ed4fdbef46ffafcb2c16b1d099008359d99502d7253042a09e612539f5b2f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ID={0x77, 0x3, "0dc0184b4f4c994adb1ad882eb66afa307f0f28343b2a726c5c708ffe4320830487d19007ceb7c7273b0f0553dfc10879f9ec970ac8f419c151e3cba8011d5a41ba8d19b74cdf4e502659c0d816bb9fd50af1d8b9e8c31d757afd7a6a02dd660b956730497b7c4f8d8f109927bf457a882c64c"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc53}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x98c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe80e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000040}, 0x4054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@local, 0x0, 0x0, 0x50, 0x0, [{@private}, {@multicast1}, {@multicast2}, {@empty}, {@empty}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001500)={0xa8, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x85b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x68f]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 8 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x410001, 0x8, 0x0, 0x400, 0x7111, 0x970113}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa4, 0x0, 0x1, 0x809, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x93d3, 0x3, 0x6, 0x8, 0x401]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="22b946022202b3533c691edcdc7222982c09b4d08e052860bc4f3075ad60d5ed87690a28e6fc4570ca6dda8ecb43705bd59f65aa3a69dd8fe0bd627d78e1cf160fa4ad08e249ed7107acf17a322f2af6e1e4e8e99ec5676a51793143c07f5e8d58f7add406abe2378f52ffcbae4983f7a0e963ca11af075705cb2ed889cf57eafdd273fd7a42a61be997e67cb09a72d86dc4e4ebd210b1cc8199af20e11295fd675ab2d6989c1cdb10013ccc17e447c8fd201934448d22b3efe73304704bcdbfcdc8dc14266a144cc6060d7b30a18fce", 0xd0}, {&(0x7f0000000300)="5f2c2e6a9a6647e24c2fe99292c75a9508de26f21e7e2ff1b000229e7ebc9e9029075c6b43642e4c5c63bb1c70e0075212fe9bf75f4b9be4bde2a96a06985031e74e869885fe6c8d20db082d691aeb433406b275e4f1f96686e8c3327f36fea317e43090a7092f97301749ac28eea49cd46626b3e541633325e3d734ec3eadc1e05dc1b6", 0x84}, {&(0x7f0000000640)="cd1ac03a69420d0eb771d8f8b3fd48e1709a9ff4e70c900bcfbd4cf87ee06262f454d9d9d8ffff5fbe712ccd464c00d43c948b1f8bd4234216d48854f8b56b24461824defdd390c24aaf38f7196fcba6737d7978a7061654bc23355d37af37e5c2750dfcae3930be81af914c8212b408078a494be56163db9c2c10ba466d724e7bb81a9f7b65eb3f262564010707d24d2d732f0b25b0ee0c34b78e36224ed878b02a6fd61caa549ce92291ad9d324812dfef88ae459539c0ea4c96687cd798d1e529b5e788de1be3", 0xc8}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x260}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f68737200e3ffff07000240"], 0xf8}, 0x1, 0x0, 0x0, 0x44008894}, 0x200068d0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r5], 0x40}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000080850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r14], 0x20}}, 0x0) kernel console output (not intermixed with test programs): _to_user+0x31/0xb0 [ 219.763671][ T9744] put_user_ifreq+0x6b/0xd0 [ 219.763698][ T9744] sock_do_ioctl+0x25b/0x300 [ 219.763729][ T9744] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.763754][ T9744] ? __lock_acquire+0xab9/0xd20 [ 219.763792][ T9744] sock_ioctl+0x576/0x790 [ 219.763821][ T9744] ? __pfx_sock_ioctl+0x10/0x10 [ 219.763848][ T9744] ? __fget_files+0x2a/0x420 [ 219.763865][ T9744] ? __fget_files+0x3a0/0x420 [ 219.763882][ T9744] ? __fget_files+0x2a/0x420 [ 219.763903][ T9744] ? bpf_lsm_file_ioctl+0x9/0x20 [ 219.763928][ T9744] ? __pfx_sock_ioctl+0x10/0x10 [ 219.763953][ T9744] __se_sys_ioctl+0xf9/0x170 [ 219.763981][ T9744] do_syscall_64+0xfa/0x3b0 [ 219.764002][ T9744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.764020][ T9744] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.764041][ T9744] ? clear_bhb_loop+0x60/0xb0 [ 219.764065][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.764085][ T9744] RIP: 0033:0x7fc2d6d8e9a9 [ 219.764104][ T9744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.764120][ T9744] RSP: 002b:00007fc2d7c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.764141][ T9744] RAX: ffffffffffffffda RBX: 00007fc2d6fb5fa0 RCX: 00007fc2d6d8e9a9 [ 219.764155][ T9744] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000003 [ 219.764168][ T9744] RBP: 00007fc2d7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 219.764180][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.764191][ T9744] R13: 0000000000000000 R14: 00007fc2d6fb5fa0 R15: 00007fffdf9d11e8 [ 219.764222][ T9744] [ 220.081884][ T9746] bond0: (slave bond_slave_0): Releasing backup interface [ 220.098526][ T9746] bond_slave_0: left promiscuous mode [ 220.112132][ T9746] bond0: (slave bond_slave_1): Releasing backup interface [ 220.126979][ T9746] bond_slave_1: left promiscuous mode [ 220.157885][ T9746] team0: Port device team_slave_0 removed [ 220.170897][ T9746] team0: Port device team_slave_1 removed [ 220.177844][ T9746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.187097][ T9746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.198430][ T9746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.206548][ T9746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.222838][ T9755] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 220.475129][ T9755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.483100][ T9756] erspan0: entered allmulticast mode [ 220.501367][ T9756] bond1: (slave erspan0): making interface the new active one [ 220.511835][ T9756] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 220.711872][ T9768] lo speed is unknown, defaulting to 1000 [ 221.031851][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1075'. [ 221.062396][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1075'. [ 221.352420][ T9786] !: renamed from dummy0 (while UP) [ 221.747401][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 221.778567][ T1157] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.815382][ T1157] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.936534][ T9800] veth3: entered allmulticast mode [ 221.954897][ T1157] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.332150][ T1157] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.594323][ T9818] 8021q: VLANs not supported on vcan0 [ 222.790905][ T9792] lo speed is unknown, defaulting to 1000 [ 222.891173][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1089'. [ 223.554778][ T9845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 223.950884][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 224.908773][ T9897] ip6gretap0: entered promiscuous mode [ 224.939986][ T9897] ip6gretap0: left promiscuous mode [ 225.183840][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 225.201853][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'. [ 225.230077][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1112'. [ 225.239631][ T9907] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1112'. [ 225.301199][ T9888] lo speed is unknown, defaulting to 1000 [ 225.460039][ T9915] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 225.480580][ T9913] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 225.793556][ T9919] bond0: (slave wlan1): Releasing backup interface [ 225.815495][ T9919] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 226.277984][ T9935] __nla_validate_parse: 4 callbacks suppressed [ 226.278004][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 226.295377][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 226.314548][ T9935] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1121'. [ 226.772716][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1126'. [ 226.860555][ T9951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1125'. [ 226.942370][ T1069] IPVS: starting estimator thread 0... [ 227.039781][ T9954] IPVS: using max 25 ests per chain, 60000 per kthread [ 227.249920][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 227.435988][ T9967] netlink: 'syz.4.1132': attribute type 11 has an invalid length. [ 227.466047][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 227.521700][ T9970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1132'. [ 227.566434][ T9964] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 227.599717][ T9965] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1131'. [ 227.727067][ T9959] bond1: entered promiscuous mode [ 227.732698][ T9959] bridge3: entered promiscuous mode [ 227.738695][ T9959] macvlan2: entered promiscuous mode [ 227.748637][ T9959] macvlan2: entered allmulticast mode [ 227.755002][ T9959] bond1: entered allmulticast mode [ 227.764783][ T9959] bridge3: entered allmulticast mode [ 227.772373][ T9959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.786482][ T9959] bond1: left promiscuous mode [ 227.791879][ T9959] bridge3: left promiscuous mode [ 227.868099][ T9968] netlink: 'syz.3.1131': attribute type 29 has an invalid length. [ 228.014257][ T9965] batman_adv: batadv0: Adding interface: ip6gretap1 [ 228.036504][ T9965] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.101212][ T9965] batman_adv: batadv0: Interface activated: ip6gretap1 [ 228.115796][ T9969] netlink: 'syz.3.1131': attribute type 29 has an invalid length. [ 228.271052][ T9975] 8021q: VLANs not supported on vcan0 [ 228.587056][ T9980] bond1: (slave bridge3): Releasing backup interface [ 228.599931][ T9980] bridge3: left allmulticast mode [ 228.667007][ T9986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.219128][T10011] tipc: Enabled bearer , priority 0 [ 229.244518][T10011] syzkaller0: entered promiscuous mode [ 229.254085][T10011] syzkaller0: entered allmulticast mode [ 229.258276][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 229.290856][T10011] tipc: Resetting bearer [ 229.308010][T10010] tipc: Resetting bearer [ 229.337316][T10010] tipc: Disabling bearer [ 229.573198][T10017] 8021q: VLANs not supported on vcan0 [ 229.856315][T10036] tipc: Enabled bearer , priority 0 [ 229.886143][T10035] tipc: Disabling bearer [ 229.910420][T10040] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004 [ 230.418610][T10066] netlink: 'syz.0.1164': attribute type 21 has an invalid length. [ 230.421445][T10064] vlan2: entered promiscuous mode [ 230.478294][T10069] netlink: 'syz.3.1165': attribute type 1 has an invalid length. [ 231.645724][T10115] __nla_validate_parse: 7 callbacks suppressed [ 231.645743][T10115] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1178'. [ 231.661832][T10115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.703517][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.712851][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.945828][T10127] team0: left allmulticast mode [ 231.952169][T10127] team_slave_0: left allmulticast mode [ 231.957806][T10127] team_slave_1: left allmulticast mode [ 231.963807][T10127] team0: left promiscuous mode [ 231.968739][T10127] team_slave_0: left promiscuous mode [ 231.975805][T10127] team_slave_1: left promiscuous mode [ 231.982361][T10127] bridge0: port 3(team0) entered disabled state [ 232.019981][T10127] bridge_slave_0: left allmulticast mode [ 232.036727][T10127] bridge_slave_0: left promiscuous mode [ 232.042873][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.092344][T10127] bridge_slave_1: left allmulticast mode [ 232.098062][T10127] bridge_slave_1: left promiscuous mode [ 232.117880][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.162982][T10127] bond0: (slave bond_slave_0): Releasing backup interface [ 232.193787][T10127] bond_slave_0: left promiscuous mode [ 232.226361][T10127] bond0: (slave bond_slave_1): Releasing backup interface [ 232.265197][T10127] bond_slave_1: left promiscuous mode [ 232.281467][T10127] team0: Port device team_slave_0 removed [ 232.304451][T10127] team0: Port device team_slave_1 removed [ 232.311449][T10127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.324751][T10127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.360560][T10127] batman_adv: batadv0: Removing interface: macvtap1 [ 232.652790][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 234.063104][T10207] netlink: 'syz.0.1205': attribute type 16 has an invalid length. [ 234.071646][T10207] netlink: 'syz.0.1205': attribute type 17 has an invalid length. [ 234.114376][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 234.132976][T10207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.143042][T10207] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.156620][T10207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.185658][T10209] ip6gretap0: entered promiscuous mode [ 234.195030][T10209] ip6gretap0: left promiscuous mode [ 234.337351][T10211] macvlan0: entered allmulticast mode [ 234.348170][T10211] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 234.356841][T10211] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 234.393944][T10211] lo speed is unknown, defaulting to 1000 [ 234.670131][T10194] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.714775][T10218] netlink: 'syz.1.1211': attribute type 32 has an invalid length. [ 235.280606][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 235.736813][T10264] netlink: 'syz.0.1223': attribute type 64 has an invalid length. [ 236.601026][T10278] x_tables: duplicate underflow at hook 3 [ 237.095767][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 237.533779][T10313] lo speed is unknown, defaulting to 1000 [ 238.333132][T10325] lo speed is unknown, defaulting to 1000 [ 238.487906][T10340] dvmrp8: entered allmulticast mode [ 238.563851][T10334] dvmrp8: left allmulticast mode [ 238.880683][T10342] netlink: 'syz.1.1249': attribute type 6 has an invalid length. [ 238.919633][T10342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1249'. [ 240.187050][T10369] bond1: (slave erspan0): Releasing active interface [ 240.335986][T10374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1260'. [ 240.358839][T10369] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 240.362125][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1260'. [ 240.426835][T10369] batman_adv: batadv0: Removing interface: ip6gretap1 [ 240.467105][T10371] 8021q: VLANs not supported on vcan0 [ 240.836757][T10383] lo speed is unknown, defaulting to 1000 [ 241.105231][T10389] FAULT_INJECTION: forcing a failure. [ 241.105231][T10389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.140680][T10389] CPU: 1 UID: 0 PID: 10389 Comm: syz.3.1265 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 241.140713][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.140726][T10389] Call Trace: [ 241.140735][T10389] [ 241.140744][T10389] dump_stack_lvl+0x189/0x250 [ 241.140775][T10389] ? __pfx____ratelimit+0x10/0x10 [ 241.140807][T10389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.140831][T10389] ? __pfx__printk+0x10/0x10 [ 241.140858][T10389] ? __might_fault+0xb0/0x130 [ 241.140898][T10389] should_fail_ex+0x414/0x560 [ 241.140924][T10389] _copy_from_user+0x2d/0xb0 [ 241.140953][T10389] ___sys_sendmsg+0x158/0x2a0 [ 241.140980][T10389] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.141040][T10389] ? __fget_files+0x2a/0x420 [ 241.141057][T10389] ? __fget_files+0x3a0/0x420 [ 241.141085][T10389] __x64_sys_sendmsg+0x19b/0x260 [ 241.141112][T10389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.141146][T10389] ? __pfx_ksys_write+0x10/0x10 [ 241.141170][T10389] ? rcu_is_watching+0x15/0xb0 [ 241.141198][T10389] ? do_syscall_64+0xbe/0x3b0 [ 241.141220][T10389] do_syscall_64+0xfa/0x3b0 [ 241.141238][T10389] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.141267][T10389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.141286][T10389] ? clear_bhb_loop+0x60/0xb0 [ 241.141309][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.141329][T10389] RIP: 0033:0x7fc2d6d8e9a9 [ 241.141347][T10389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.141364][T10389] RSP: 002b:00007fc2d7c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.141386][T10389] RAX: ffffffffffffffda RBX: 00007fc2d6fb5fa0 RCX: 00007fc2d6d8e9a9 [ 241.141400][T10389] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 241.141413][T10389] RBP: 00007fc2d7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 241.141425][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.141436][T10389] R13: 0000000000000000 R14: 00007fc2d6fb5fa0 R15: 00007fffdf9d11e8 [ 241.141467][T10389] [ 241.492450][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 241.550356][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 241.561048][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 241.668128][T10400] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1269'. [ 241.858486][T10406] vlan2: entered promiscuous mode [ 241.916577][T10396] lo speed is unknown, defaulting to 1000 [ 242.788294][T10416] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.308514][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.308926][ T5840] syz1: Port: 1 Link DOWN [ 243.327611][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.380516][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.389010][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.684493][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 243.744666][T10424] lo speed is unknown, defaulting to 1000 [ 243.776075][T10427] syz_tun: entered promiscuous mode [ 243.804642][T10427] syz_tun: left promiscuous mode [ 245.608152][T10436] FAULT_INJECTION: forcing a failure. [ 245.608152][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 245.639265][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.0.1280 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 245.639296][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.639317][T10436] Call Trace: [ 245.639326][T10436] [ 245.639336][T10436] dump_stack_lvl+0x189/0x250 [ 245.639364][T10436] ? __pfx____ratelimit+0x10/0x10 [ 245.639394][T10436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.639417][T10436] ? __pfx__printk+0x10/0x10 [ 245.639448][T10436] ? __pfx___might_resched+0x10/0x10 [ 245.639491][T10436] should_fail_ex+0x414/0x560 [ 245.639516][T10436] should_failslab+0xa8/0x100 [ 245.639547][T10436] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 245.639577][T10436] ? __alloc_skb+0x112/0x2d0 [ 245.639601][T10436] __alloc_skb+0x112/0x2d0 [ 245.639624][T10436] netlink_sendmsg+0x5c6/0xb30 [ 245.639654][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.639676][T10436] ? aa_sock_msg_perm+0x94/0x160 [ 245.639699][T10436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.639719][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.639739][T10436] __sock_sendmsg+0x219/0x270 [ 245.639770][T10436] ____sys_sendmsg+0x505/0x830 [ 245.639798][T10436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.639830][T10436] ? import_iovec+0x74/0xa0 [ 245.639861][T10436] ___sys_sendmsg+0x21f/0x2a0 [ 245.639886][T10436] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.639941][T10436] ? __fget_files+0x2a/0x420 [ 245.639955][T10436] ? __fget_files+0x3a0/0x420 [ 245.639981][T10436] __x64_sys_sendmsg+0x19b/0x260 [ 245.640007][T10436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.640038][T10436] ? __pfx_ksys_write+0x10/0x10 [ 245.640060][T10436] ? rcu_is_watching+0x15/0xb0 [ 245.640086][T10436] ? do_syscall_64+0xbe/0x3b0 [ 245.640106][T10436] do_syscall_64+0xfa/0x3b0 [ 245.640122][T10436] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.640148][T10436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.640166][T10436] ? clear_bhb_loop+0x60/0xb0 [ 245.640188][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.640205][T10436] RIP: 0033:0x7fd880b8e9a9 [ 245.640223][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.640240][T10436] RSP: 002b:00007fd881ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.640261][T10436] RAX: ffffffffffffffda RBX: 00007fd880db5fa0 RCX: 00007fd880b8e9a9 [ 245.640275][T10436] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 245.640287][T10436] RBP: 00007fd881ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 245.640299][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.640310][T10436] R13: 0000000000000000 R14: 00007fd880db5fa0 R15: 00007fffacfbbc48 [ 245.640340][T10436] [ 246.383214][T10440] lo speed is unknown, defaulting to 1000 [ 247.131603][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'. [ 247.153635][T10448] lo speed is unknown, defaulting to 1000 [ 247.296098][T10453] vlan2: entered promiscuous mode [ 248.090508][T10470] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 248.115752][T10470] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.217939][T10471] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 248.286390][T10470] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 248.312015][T10470] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.379139][T10460] lo speed is unknown, defaulting to 1000 [ 248.398411][T10470] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 248.419588][T10470] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.647736][T10470] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 248.660282][T10470] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.752414][T10472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.963558][T10478] FAULT_INJECTION: forcing a failure. [ 248.963558][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.976815][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.1.1295 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 248.976845][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.976857][T10478] Call Trace: [ 248.976864][T10478] [ 248.976872][T10478] dump_stack_lvl+0x189/0x250 [ 248.976901][T10478] ? __pfx____ratelimit+0x10/0x10 [ 248.976930][T10478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.976953][T10478] ? __pfx__printk+0x10/0x10 [ 248.976979][T10478] ? __might_fault+0xb0/0x130 [ 248.977017][T10478] should_fail_ex+0x414/0x560 [ 248.977042][T10478] _copy_from_iter+0x1db/0x16f0 [ 248.977070][T10478] ? rcu_is_watching+0x15/0xb0 [ 248.977094][T10478] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 248.977122][T10478] ? __pfx__copy_from_iter+0x10/0x10 [ 248.977147][T10478] ? __build_skb_around+0x257/0x3e0 [ 248.977169][T10478] ? netlink_sendmsg+0x642/0xb30 [ 248.977186][T10478] ? skb_put+0x11b/0x210 [ 248.977209][T10478] netlink_sendmsg+0x6b2/0xb30 [ 248.977237][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.977259][T10478] ? aa_sock_msg_perm+0x94/0x160 [ 248.977281][T10478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.977301][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.977319][T10478] __sock_sendmsg+0x219/0x270 [ 248.977360][T10478] ____sys_sendmsg+0x505/0x830 [ 248.977398][T10478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.977429][T10478] ? import_iovec+0x74/0xa0 [ 248.977457][T10478] ___sys_sendmsg+0x21f/0x2a0 [ 248.977481][T10478] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.977537][T10478] ? __fget_files+0x2a/0x420 [ 248.977553][T10478] ? __fget_files+0x3a0/0x420 [ 248.977579][T10478] __x64_sys_sendmsg+0x19b/0x260 [ 248.977603][T10478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.977635][T10478] ? __pfx_ksys_write+0x10/0x10 [ 248.977656][T10478] ? rcu_is_watching+0x15/0xb0 [ 248.977682][T10478] ? do_syscall_64+0xbe/0x3b0 [ 248.977702][T10478] do_syscall_64+0xfa/0x3b0 [ 248.977736][T10478] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.977763][T10478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.977781][T10478] ? clear_bhb_loop+0x60/0xb0 [ 248.977805][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.977823][T10478] RIP: 0033:0x7effb4d8e9a9 [ 248.977841][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.977857][T10478] RSP: 002b:00007effb5cd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.977877][T10478] RAX: ffffffffffffffda RBX: 00007effb4fb5fa0 RCX: 00007effb4d8e9a9 [ 248.977891][T10478] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 248.977903][T10478] RBP: 00007effb5cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.977915][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.977926][T10478] R13: 0000000000000000 R14: 00007effb4fb5fa0 R15: 00007ffc37024308 [ 248.977957][T10478] [ 249.371154][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.461360][ T59] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.732183][T10483] netlink: 'syz.1.1297': attribute type 4 has an invalid length. [ 249.922931][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.950813][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.014846][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.033605][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.112070][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.133165][ T59] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.364397][T10494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.105174][T10503] 8021q: VLANs not supported on vcan0 [ 251.432697][T10514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.472285][T10514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.659769][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1307'. [ 251.741721][T10518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.846217][T10514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.869608][T10514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.012465][T10514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.080200][T10514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.272131][T10514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.289901][T10514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.673446][T10530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1310'. [ 252.700713][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 252.725141][T10531] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1310'. [ 252.764244][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 253.037204][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1311'. [ 253.271790][T10547] 8021q: VLANs not supported on vcan0 [ 253.569788][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.578126][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.762569][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.779682][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.827844][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.857322][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.904393][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.919050][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.124024][T10574] FAULT_INJECTION: forcing a failure. [ 254.124024][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 254.140221][T10572] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 254.171957][T10574] CPU: 1 UID: 0 PID: 10574 Comm: syz.0.1322 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 254.171989][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.172002][T10574] Call Trace: [ 254.172010][T10574] [ 254.172019][T10574] dump_stack_lvl+0x189/0x250 [ 254.172050][T10574] ? __pfx____ratelimit+0x10/0x10 [ 254.172081][T10574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.172106][T10574] ? __pfx__printk+0x10/0x10 [ 254.172141][T10574] ? __pfx___might_resched+0x10/0x10 [ 254.172188][T10574] should_fail_ex+0x414/0x560 [ 254.172216][T10574] should_failslab+0xa8/0x100 [ 254.172249][T10574] __kmalloc_cache_noprof+0x70/0x3d0 [ 254.172277][T10574] ? sctp_association_new+0x89/0x25f0 [ 254.172306][T10574] sctp_association_new+0x89/0x25f0 [ 254.172334][T10574] ? sctp_has_association+0x1cd/0x1f0 [ 254.172359][T10574] ? sctp_has_association+0x2f/0x1f0 [ 254.172386][T10574] ? __ipv6_addr_type+0x247/0x2f0 [ 254.172418][T10574] sctp_connect_new_asoc+0x2c5/0x690 [ 254.172446][T10574] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 254.172470][T10574] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.172493][T10574] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.172515][T10574] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.172538][T10574] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 254.172563][T10574] ? security_sctp_bind_connect+0x7e/0x2e0 [ 254.172597][T10574] sctp_sendmsg+0x155c/0x2810 [ 254.172632][T10574] ? __pfx_sctp_sendmsg+0x10/0x10 [ 254.172658][T10574] ? aa_sk_perm+0x81e/0x950 [ 254.172697][T10574] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.172732][T10574] ? sock_rps_record_flow+0x19/0x410 [ 254.172762][T10574] ? inet_sendmsg+0x2f4/0x370 [ 254.172786][T10574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.172812][T10574] __sock_sendmsg+0x19c/0x270 [ 254.172845][T10574] ____sys_sendmsg+0x52d/0x830 [ 254.172876][T10574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.172910][T10574] ? import_iovec+0x74/0xa0 [ 254.172943][T10574] ___sys_sendmsg+0x21f/0x2a0 [ 254.172970][T10574] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.173039][T10574] ? __fget_files+0x2a/0x420 [ 254.173058][T10574] ? __fget_files+0x3a0/0x420 [ 254.173088][T10574] __sys_sendmmsg+0x227/0x430 [ 254.173119][T10574] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.173140][T10574] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 254.173200][T10574] ? ksys_write+0x22a/0x250 [ 254.173230][T10574] ? __pfx_ksys_write+0x10/0x10 [ 254.173266][T10574] __x64_sys_sendmmsg+0xa0/0xc0 [ 254.173293][T10574] do_syscall_64+0xfa/0x3b0 [ 254.173314][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.173334][T10574] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.173367][T10574] ? clear_bhb_loop+0x60/0xb0 [ 254.173391][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.173410][T10574] RIP: 0033:0x7fd880b8e9a9 [ 254.173429][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.173446][T10574] RSP: 002b:00007fd881ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.173467][T10574] RAX: ffffffffffffffda RBX: 00007fd880db5fa0 RCX: 00007fd880b8e9a9 [ 254.173482][T10574] RDX: 0000000000000001 RSI: 0000200000003c40 RDI: 0000000000000003 [ 254.173495][T10574] RBP: 00007fd881ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 254.173508][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.173519][T10574] R13: 0000000000000000 R14: 00007fd880db5fa0 R15: 00007fffacfbbc48 [ 254.173551][T10574] [ 254.691038][T10579] IPVS: Scheduler module ip_vs_sip not found [ 254.963843][T10593] 8021q: VLANs not supported on vcan0 [ 255.226465][T10600] netlink: 'syz.4.1333': attribute type 13 has an invalid length. [ 255.253347][T10600] netlink: 'syz.4.1333': attribute type 17 has an invalid length. [ 255.272862][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 255.332093][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 255.371369][T10600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.394950][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 255.405615][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.435734][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.488986][T10607] lo speed is unknown, defaulting to 1000 [ 255.524277][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.541414][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.592706][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.713994][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.830778][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.849982][T10612] x_tables: duplicate underflow at hook 3 [ 256.001918][T10620] netlink: 'syz.2.1339': attribute type 11 has an invalid length. [ 256.030974][T10620] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 256.050137][T10620] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1339'. [ 256.183661][T10623] FAULT_INJECTION: forcing a failure. [ 256.183661][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 256.203601][T10623] CPU: 1 UID: 0 PID: 10623 Comm: syz.1.1341 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 256.203633][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.203645][T10623] Call Trace: [ 256.203654][T10623] [ 256.203663][T10623] dump_stack_lvl+0x189/0x250 [ 256.203694][T10623] ? __pfx____ratelimit+0x10/0x10 [ 256.203726][T10623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.203751][T10623] ? __pfx__printk+0x10/0x10 [ 256.203786][T10623] ? __pfx___might_resched+0x10/0x10 [ 256.203810][T10623] ? fs_reclaim_acquire+0x7d/0x100 [ 256.203836][T10623] should_fail_ex+0x414/0x560 [ 256.203863][T10623] should_failslab+0xa8/0x100 [ 256.203897][T10623] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 256.203927][T10623] ? __alloc_skb+0x112/0x2d0 [ 256.203952][T10623] __alloc_skb+0x112/0x2d0 [ 256.203978][T10623] netlink_ack+0x146/0xa50 [ 256.204007][T10623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.204037][T10623] ? __asan_memcpy+0x40/0x70 [ 256.204060][T10623] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.204099][T10623] netlink_rcv_skb+0x28c/0x470 [ 256.204128][T10623] ? __lock_acquire+0xab9/0xd20 [ 256.204149][T10623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.204176][T10623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.204230][T10623] ? down_read+0x1ad/0x2e0 [ 256.204254][T10623] genl_rcv+0x28/0x40 [ 256.204276][T10623] netlink_unicast+0x82f/0x9e0 [ 256.204316][T10623] ? __pfx_netlink_unicast+0x10/0x10 [ 256.204346][T10623] ? netlink_sendmsg+0x642/0xb30 [ 256.204364][T10623] ? skb_put+0x11b/0x210 [ 256.204390][T10623] netlink_sendmsg+0x805/0xb30 [ 256.204422][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.204445][T10623] ? aa_sock_msg_perm+0x94/0x160 [ 256.204469][T10623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.204490][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.204512][T10623] __sock_sendmsg+0x219/0x270 [ 256.204545][T10623] ____sys_sendmsg+0x505/0x830 [ 256.204576][T10623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.204611][T10623] ? import_iovec+0x74/0xa0 [ 256.204644][T10623] ___sys_sendmsg+0x21f/0x2a0 [ 256.204671][T10623] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.204738][T10623] ? __fget_files+0x2a/0x420 [ 256.204756][T10623] ? __fget_files+0x3a0/0x420 [ 256.204786][T10623] __x64_sys_sendmsg+0x19b/0x260 [ 256.204814][T10623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.204850][T10623] ? __pfx_ksys_write+0x10/0x10 [ 256.204874][T10623] ? rcu_is_watching+0x15/0xb0 [ 256.204904][T10623] ? do_syscall_64+0xbe/0x3b0 [ 256.204929][T10623] do_syscall_64+0xfa/0x3b0 [ 256.204946][T10623] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.204977][T10623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.204996][T10623] ? clear_bhb_loop+0x60/0xb0 [ 256.205021][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.205041][T10623] RIP: 0033:0x7effb4d8e9a9 [ 256.205065][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.205083][T10623] RSP: 002b:00007effb5cd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.205132][T10623] RAX: ffffffffffffffda RBX: 00007effb4fb5fa0 RCX: 00007effb4d8e9a9 [ 256.205147][T10623] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 256.205160][T10623] RBP: 00007effb5cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.205172][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.205184][T10623] R13: 0000000000000000 R14: 00007effb4fb5fa0 R15: 00007ffc37024308 [ 256.205217][T10623] [ 256.600817][T10628] x_tables: duplicate underflow at hook 3 [ 256.898454][T10636] tipc: Enabled bearer , priority 0 [ 256.915885][T10636] syzkaller0: entered promiscuous mode [ 256.923140][T10636] syzkaller0: entered allmulticast mode [ 256.977514][T10635] __nla_validate_parse: 1 callbacks suppressed [ 256.977535][T10635] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1346'. [ 257.008166][T10636] tipc: Resetting bearer [ 257.008717][T10641] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 257.024899][T10632] tipc: Resetting bearer [ 257.108664][T10632] tipc: Disabling bearer [ 257.174236][T10646] netlink: 'syz.1.1349': attribute type 8 has an invalid length. [ 257.587559][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 257.639221][T10665] ip6gretap0: entered promiscuous mode [ 257.651045][T10665] ip6gretap0: left promiscuous mode [ 257.854798][T10677] FAULT_INJECTION: forcing a failure. [ 257.854798][T10677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.947106][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.2.1360 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 257.947138][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.947151][T10677] Call Trace: [ 257.947159][T10677] [ 257.947167][T10677] dump_stack_lvl+0x189/0x250 [ 257.947197][T10677] ? __pfx____ratelimit+0x10/0x10 [ 257.947228][T10677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.947252][T10677] ? __pfx__printk+0x10/0x10 [ 257.947278][T10677] ? __might_fault+0xb0/0x130 [ 257.947326][T10677] should_fail_ex+0x414/0x560 [ 257.947353][T10677] _copy_from_user+0x2d/0xb0 [ 257.947382][T10677] ___sys_sendmsg+0x158/0x2a0 [ 257.947409][T10677] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.947498][T10677] ? __fget_files+0x2a/0x420 [ 257.947515][T10677] ? __fget_files+0x3a0/0x420 [ 257.947544][T10677] __x64_sys_sendmsg+0x19b/0x260 [ 257.947570][T10677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.947604][T10677] ? __pfx_ksys_write+0x10/0x10 [ 257.947636][T10677] ? do_syscall_64+0xbe/0x3b0 [ 257.947659][T10677] do_syscall_64+0xfa/0x3b0 [ 257.947678][T10677] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.947707][T10677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.947726][T10677] ? clear_bhb_loop+0x60/0xb0 [ 257.947750][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.947770][T10677] RIP: 0033:0x7f283fd8e9a9 [ 257.947786][T10677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.947804][T10677] RSP: 002b:00007f2840b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.947824][T10677] RAX: ffffffffffffffda RBX: 00007f283ffb5fa0 RCX: 00007f283fd8e9a9 [ 257.947839][T10677] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 257.947852][T10677] RBP: 00007f2840b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 257.947864][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.947875][T10677] R13: 0000000000000000 R14: 00007f283ffb5fa0 R15: 00007ffc4abecfa8 [ 257.947906][T10677] [ 258.195587][T10682] vlan3: entered promiscuous mode [ 258.331752][T10685] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 258.379271][T10685] netlink: 'syz.1.1363': attribute type 11 has an invalid length. [ 258.447949][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 259.091755][T10707] lo speed is unknown, defaulting to 1000 [ 259.116213][T10713] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1372'. [ 259.166294][T10713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1372'. [ 259.223526][T10718] FAULT_INJECTION: forcing a failure. [ 259.223526][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 259.236710][T10717] syz0: rxe_newlink: already configured on lo [ 259.288326][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.0.1374 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 259.288359][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.288372][T10718] Call Trace: [ 259.288379][T10718] [ 259.288388][T10718] dump_stack_lvl+0x189/0x250 [ 259.288418][T10718] ? __pfx____ratelimit+0x10/0x10 [ 259.288448][T10718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.288472][T10718] ? __pfx__printk+0x10/0x10 [ 259.288505][T10718] ? __pfx___might_resched+0x10/0x10 [ 259.288535][T10718] should_fail_ex+0x414/0x560 [ 259.288560][T10718] should_failslab+0xa8/0x100 [ 259.288591][T10718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.288621][T10718] ? __alloc_skb+0x112/0x2d0 [ 259.288646][T10718] __alloc_skb+0x112/0x2d0 [ 259.288669][T10718] netlink_sendmsg+0x5c6/0xb30 [ 259.288700][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.288724][T10718] ? aa_sock_msg_perm+0x94/0x160 [ 259.288747][T10718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.288768][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.288789][T10718] __sock_sendmsg+0x219/0x270 [ 259.288820][T10718] ____sys_sendmsg+0x505/0x830 [ 259.288850][T10718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.288884][T10718] ? import_iovec+0x74/0xa0 [ 259.288916][T10718] ___sys_sendmsg+0x21f/0x2a0 [ 259.288942][T10718] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.289031][T10718] ? __fget_files+0x2a/0x420 [ 259.289048][T10718] ? __fget_files+0x3a0/0x420 [ 259.289077][T10718] __x64_sys_sendmsg+0x19b/0x260 [ 259.289109][T10718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.289144][T10718] ? __pfx_ksys_write+0x10/0x10 [ 259.289169][T10718] ? rcu_is_watching+0x15/0xb0 [ 259.289197][T10718] ? do_syscall_64+0xbe/0x3b0 [ 259.289221][T10718] do_syscall_64+0xfa/0x3b0 [ 259.289238][T10718] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.289269][T10718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.289288][T10718] ? clear_bhb_loop+0x60/0xb0 [ 259.289314][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.289333][T10718] RIP: 0033:0x7fd880b8e9a9 [ 259.289352][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.289370][T10718] RSP: 002b:00007fd881aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.289392][T10718] RAX: ffffffffffffffda RBX: 00007fd880db6080 RCX: 00007fd880b8e9a9 [ 259.289407][T10718] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 259.289421][T10718] RBP: 00007fd881aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.289434][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.289446][T10718] R13: 0000000000000000 R14: 00007fd880db6080 R15: 00007fffacfbbc48 [ 259.289482][T10718] [ 259.728111][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.744188][T10717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.765904][ T1069] lo speed is unknown, defaulting to 1000 [ 259.783943][ T1069] syz0: Port: 1 Link ACTIVE [ 259.799830][T10721] x_tables: duplicate underflow at hook 3 [ 259.829228][ T1069] lo speed is unknown, defaulting to 1000 [ 259.846884][T10721] FAULT_INJECTION: forcing a failure. [ 259.846884][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 259.897635][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.3.1375 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 259.897667][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.897680][T10721] Call Trace: [ 259.897688][T10721] [ 259.897697][T10721] dump_stack_lvl+0x189/0x250 [ 259.897727][T10721] ? __pfx____ratelimit+0x10/0x10 [ 259.897760][T10721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.897784][T10721] ? __pfx__printk+0x10/0x10 [ 259.897815][T10721] ? __pfx___might_resched+0x10/0x10 [ 259.897840][T10721] ? fs_reclaim_acquire+0x7d/0x100 [ 259.897865][T10721] should_fail_ex+0x414/0x560 [ 259.897893][T10721] should_failslab+0xa8/0x100 [ 259.897925][T10721] __kmalloc_noprof+0xcb/0x4f0 [ 259.897952][T10721] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 259.897985][T10721] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 259.898029][T10721] genl_family_rcv_msg_doit+0xb8/0x300 [ 259.898064][T10721] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.898093][T10721] ? rcu_is_watching+0x15/0xb0 [ 259.898121][T10721] ? apparmor_capable+0x137/0x1b0 [ 259.898150][T10721] ? bpf_lsm_capable+0x9/0x20 [ 259.898177][T10721] ? security_capable+0x7e/0x2e0 [ 259.898205][T10721] genl_rcv_msg+0x60e/0x790 [ 259.898238][T10721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.898262][T10721] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 259.898311][T10721] netlink_rcv_skb+0x208/0x470 [ 259.898340][T10721] ? __lock_acquire+0xab9/0xd20 [ 259.898362][T10721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.898389][T10721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.898443][T10721] ? down_read+0x1ad/0x2e0 [ 259.898468][T10721] genl_rcv+0x28/0x40 [ 259.898491][T10721] netlink_unicast+0x82f/0x9e0 [ 259.898531][T10721] ? __pfx_netlink_unicast+0x10/0x10 [ 259.898563][T10721] ? netlink_sendmsg+0x642/0xb30 [ 259.898580][T10721] ? skb_put+0x11b/0x210 [ 259.898606][T10721] netlink_sendmsg+0x805/0xb30 [ 259.898637][T10721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.898661][T10721] ? aa_sock_msg_perm+0x94/0x160 [ 259.898684][T10721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.898705][T10721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.898726][T10721] __sock_sendmsg+0x219/0x270 [ 259.898759][T10721] ____sys_sendmsg+0x505/0x830 [ 259.898790][T10721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.898824][T10721] ? import_iovec+0x74/0xa0 [ 259.898857][T10721] ___sys_sendmsg+0x21f/0x2a0 [ 259.898883][T10721] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.898915][T10721] ? rcu_read_lock_any_held+0xb3/0x120 [ 259.898956][T10721] ? sb_end_write+0xe9/0x1c0 [ 259.898991][T10721] ? __pfx_vfs_write+0x10/0x10 [ 259.899045][T10721] __x64_sys_sendmsg+0x19b/0x260 [ 259.899073][T10721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.899107][T10721] ? __pfx_ksys_write+0x10/0x10 [ 259.899131][T10721] ? rcu_is_watching+0x15/0xb0 [ 259.899161][T10721] ? do_syscall_64+0xbe/0x3b0 [ 259.899185][T10721] do_syscall_64+0xfa/0x3b0 [ 259.899203][T10721] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.899233][T10721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.899253][T10721] ? clear_bhb_loop+0x60/0xb0 [ 259.899279][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.899298][T10721] RIP: 0033:0x7fc2d6d8e9a9 [ 259.899317][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.899334][T10721] RSP: 002b:00007fc2d7c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.899356][T10721] RAX: ffffffffffffffda RBX: 00007fc2d6fb5fa0 RCX: 00007fc2d6d8e9a9 [ 259.899371][T10721] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 259.899384][T10721] RBP: 00007fc2d7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 259.899396][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.899408][T10721] R13: 0000000000000000 R14: 00007fc2d6fb5fa0 R15: 00007fffdf9d11e8 [ 259.899441][T10721] [ 260.503904][T10729] pim6reg1: entered promiscuous mode [ 260.525014][T10729] pim6reg1: entered allmulticast mode [ 260.644722][T10736] lo speed is unknown, defaulting to 1000 [ 261.221836][T10749] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 261.655708][T10766] x_tables: duplicate underflow at hook 3 [ 261.682017][T10766] FAULT_INJECTION: forcing a failure. [ 261.682017][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 261.735242][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.4.1391 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 261.735274][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.735286][T10766] Call Trace: [ 261.735295][T10766] [ 261.735304][T10766] dump_stack_lvl+0x189/0x250 [ 261.735333][T10766] ? __pfx____ratelimit+0x10/0x10 [ 261.735364][T10766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.735388][T10766] ? __pfx__printk+0x10/0x10 [ 261.735419][T10766] ? __pfx___might_resched+0x10/0x10 [ 261.735442][T10766] ? fs_reclaim_acquire+0x7d/0x100 [ 261.735468][T10766] should_fail_ex+0x414/0x560 [ 261.735495][T10766] should_failslab+0xa8/0x100 [ 261.735526][T10766] __kmalloc_noprof+0xcb/0x4f0 [ 261.735553][T10766] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.735586][T10766] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.735620][T10766] genl_family_rcv_msg_doit+0xb8/0x300 [ 261.735653][T10766] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.735681][T10766] ? rcu_is_watching+0x15/0xb0 [ 261.735708][T10766] ? apparmor_capable+0x137/0x1b0 [ 261.735737][T10766] ? bpf_lsm_capable+0x9/0x20 [ 261.735763][T10766] ? security_capable+0x7e/0x2e0 [ 261.735791][T10766] genl_rcv_msg+0x60e/0x790 [ 261.735841][T10766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.735866][T10766] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 261.735900][T10766] ? __asan_memcpy+0x40/0x70 [ 261.735923][T10766] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.735962][T10766] netlink_rcv_skb+0x208/0x470 [ 261.735992][T10766] ? __lock_acquire+0xab9/0xd20 [ 261.736013][T10766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.736040][T10766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.736095][T10766] ? down_read+0x1ad/0x2e0 [ 261.736125][T10766] genl_rcv+0x28/0x40 [ 261.736148][T10766] netlink_unicast+0x82f/0x9e0 [ 261.736188][T10766] ? __pfx_netlink_unicast+0x10/0x10 [ 261.736220][T10766] ? netlink_sendmsg+0x642/0xb30 [ 261.736237][T10766] ? skb_put+0x11b/0x210 [ 261.736264][T10766] netlink_sendmsg+0x805/0xb30 [ 261.736295][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.736319][T10766] ? aa_sock_msg_perm+0x94/0x160 [ 261.736343][T10766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.736364][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.736385][T10766] __sock_sendmsg+0x219/0x270 [ 261.736418][T10766] ____sys_sendmsg+0x505/0x830 [ 261.736449][T10766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.736483][T10766] ? import_iovec+0x74/0xa0 [ 261.736517][T10766] ___sys_sendmsg+0x21f/0x2a0 [ 261.736544][T10766] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.736576][T10766] ? rcu_read_lock_any_held+0xb3/0x120 [ 261.736617][T10766] ? sb_end_write+0xe9/0x1c0 [ 261.736652][T10766] ? __pfx_vfs_write+0x10/0x10 [ 261.736691][T10766] __x64_sys_sendmsg+0x19b/0x260 [ 261.736718][T10766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.736754][T10766] ? __pfx_ksys_write+0x10/0x10 [ 261.736778][T10766] ? rcu_is_watching+0x15/0xb0 [ 261.736808][T10766] ? do_syscall_64+0xbe/0x3b0 [ 261.736833][T10766] do_syscall_64+0xfa/0x3b0 [ 261.736851][T10766] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.736881][T10766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.736901][T10766] ? clear_bhb_loop+0x60/0xb0 [ 261.736926][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.736954][T10766] RIP: 0033:0x7fcb9e98e9a9 [ 261.736972][T10766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.736990][T10766] RSP: 002b:00007fcb9f850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.737012][T10766] RAX: ffffffffffffffda RBX: 00007fcb9ebb5fa0 RCX: 00007fcb9e98e9a9 [ 261.737027][T10766] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 261.737039][T10766] RBP: 00007fcb9f850090 R08: 0000000000000000 R09: 0000000000000000 [ 261.737051][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.737063][T10766] R13: 0000000000000000 R14: 00007fcb9ebb5fa0 R15: 00007ffcfdab9bc8 [ 261.737096][T10766] [ 263.410460][T10794] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 263.443002][T10798] nbd: must specify an index to disconnect [ 263.571254][T10790] lo speed is unknown, defaulting to 1000 [ 264.280502][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 264.322871][T10809] ip6gretap0: entered promiscuous mode [ 264.336865][T10809] ip6gretap0: left promiscuous mode [ 264.691514][T10819] FAULT_INJECTION: forcing a failure. [ 264.691514][T10819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.736739][T10819] CPU: 0 UID: 0 PID: 10819 Comm: syz.2.1405 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 264.736785][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.736798][T10819] Call Trace: [ 264.736807][T10819] [ 264.736816][T10819] dump_stack_lvl+0x189/0x250 [ 264.736847][T10819] ? __pfx____ratelimit+0x10/0x10 [ 264.736879][T10819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.736903][T10819] ? __pfx__printk+0x10/0x10 [ 264.736932][T10819] ? __might_fault+0xb0/0x130 [ 264.736973][T10819] should_fail_ex+0x414/0x560 [ 264.737000][T10819] _copy_from_user+0x2d/0xb0 [ 264.737029][T10819] ___sys_recvmsg+0x12e/0x510 [ 264.737061][T10819] ? __pfx____sys_recvmsg+0x10/0x10 [ 264.737121][T10819] ? __fget_files+0x3a0/0x420 [ 264.737153][T10819] do_recvmmsg+0x307/0x770 [ 264.737188][T10819] ? __pfx_do_recvmmsg+0x10/0x10 [ 264.737227][T10819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.737268][T10819] __x64_sys_recvmmsg+0x190/0x240 [ 264.737297][T10819] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 264.737319][T10819] ? rcu_is_watching+0x15/0xb0 [ 264.737349][T10819] ? do_syscall_64+0xbe/0x3b0 [ 264.737374][T10819] do_syscall_64+0xfa/0x3b0 [ 264.737391][T10819] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.737421][T10819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.737442][T10819] ? clear_bhb_loop+0x60/0xb0 [ 264.737467][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.737487][T10819] RIP: 0033:0x7f283fd8e9a9 [ 264.737505][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.737523][T10819] RSP: 002b:00007f2840b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 264.737545][T10819] RAX: ffffffffffffffda RBX: 00007f283ffb5fa0 RCX: 00007f283fd8e9a9 [ 264.737560][T10819] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003 [ 264.737573][T10819] RBP: 00007f2840b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 264.737593][T10819] R10: 0000000040010001 R11: 0000000000000246 R12: 0000000000000001 [ 264.737606][T10819] R13: 0000000000000000 R14: 00007f283ffb5fa0 R15: 00007ffc4abecfa8 [ 264.737639][T10819] [ 265.288064][T10831] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1406'. [ 265.337288][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 265.486503][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 266.371500][T10861] x_tables: duplicate underflow at hook 3 [ 266.711321][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 266.756530][T10865] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1419'. [ 267.025889][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 267.358666][T10880] FAULT_INJECTION: forcing a failure. [ 267.358666][T10880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.375370][T10880] CPU: 1 UID: 0 PID: 10880 Comm: syz.3.1423 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 267.375403][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.375421][T10880] Call Trace: [ 267.375429][T10880] [ 267.375438][T10880] dump_stack_lvl+0x189/0x250 [ 267.375469][T10880] ? __pfx____ratelimit+0x10/0x10 [ 267.375500][T10880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.375524][T10880] ? __pfx__printk+0x10/0x10 [ 267.375552][T10880] ? __might_fault+0xb0/0x130 [ 267.375594][T10880] should_fail_ex+0x414/0x560 [ 267.375621][T10880] _copy_from_user+0x2d/0xb0 [ 267.375651][T10880] kstrtouint_from_user+0xc4/0x170 [ 267.375678][T10880] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.375722][T10880] proc_fail_nth_write+0x88/0x240 [ 267.375742][T10880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.375768][T10880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.375791][T10880] vfs_write+0x27e/0xa90 [ 267.375829][T10880] ? __pfx_vfs_write+0x10/0x10 [ 267.375857][T10880] ? __fget_files+0x2a/0x420 [ 267.375881][T10880] ? __fget_files+0x3a0/0x420 [ 267.375897][T10880] ? __fget_files+0x2a/0x420 [ 267.375926][T10880] ksys_write+0x145/0x250 [ 267.375956][T10880] ? __pfx_ksys_write+0x10/0x10 [ 267.375980][T10880] ? rcu_is_watching+0x15/0xb0 [ 267.376009][T10880] ? do_syscall_64+0xbe/0x3b0 [ 267.376040][T10880] do_syscall_64+0xfa/0x3b0 [ 267.376058][T10880] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.376089][T10880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.376109][T10880] ? clear_bhb_loop+0x60/0xb0 [ 267.376134][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.376154][T10880] RIP: 0033:0x7fc2d6d8d45f [ 267.376172][T10880] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.376190][T10880] RSP: 002b:00007fc2d7c56030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.376211][T10880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2d6d8d45f [ 267.376226][T10880] RDX: 0000000000000001 RSI: 00007fc2d7c560a0 RDI: 000000000000000b [ 267.376238][T10880] RBP: 00007fc2d7c56090 R08: 0000000000000000 R09: 0000000000000000 [ 267.376251][T10880] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 267.376262][T10880] R13: 0000000000000000 R14: 00007fc2d6fb6080 R15: 00007fffdf9d11e8 [ 267.376297][T10880] [ 268.353868][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 268.402356][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 268.477562][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.491105][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.500715][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.660286][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.807087][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 268.827145][T10911] syz_tun: entered promiscuous mode [ 268.836859][T10911] syz_tun: left promiscuous mode [ 269.350430][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.621857][T10922] block nbd0: server does not support multiple connections per device. [ 269.636100][T10922] block nbd0: shutting down sockets [ 269.703207][T10921] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1438'. [ 269.920553][T10938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1442'. [ 269.986252][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 269.993574][T10942] batadv_slave_0: entered promiscuous mode [ 270.052602][T10942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1441'. [ 270.077625][T10937] batadv_slave_0: left promiscuous mode [ 270.274828][T10949] bond1: (slave veth3): Releasing active interface [ 270.360634][ T5840] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 270.630858][T10965] syz.2.1449 (10965) used obsolete PPPIOCDETACH ioctl [ 270.861266][T10980] ipt_rpfilter: unknown options [ 270.994686][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.193626][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 271.256139][T10988] lo speed is unknown, defaulting to 1000 [ 271.894358][T11024] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1466'. [ 271.905564][T11023] xt_connbytes: Forcing CT accounting to be enabled [ 271.950234][T11023] Cannot find set identified by id 0 to match [ 272.080704][T11031] netlink: 'syz.3.1467': attribute type 9 has an invalid length. [ 272.109154][T11031] netlink: 'syz.3.1467': attribute type 6 has an invalid length. [ 272.634479][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 272.659572][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 272.789793][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 273.226212][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1473'. [ 273.267772][T11048] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 273.780363][T11062] lo speed is unknown, defaulting to 1000 [ 274.075060][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 274.103382][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 274.757354][T11091] __nla_validate_parse: 1 callbacks suppressed [ 274.757376][T11091] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1486'. [ 275.040500][ T5840] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.108771][T11099] vlan2: entered promiscuous mode [ 275.267486][T11102] sit0: mtu less than device minimum [ 275.416160][T11109] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1494'. [ 275.640880][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 275.843979][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.923208][T11125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1497'. [ 275.956893][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 276.118654][T11127] x_tables: duplicate underflow at hook 3 [ 276.815740][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 277.001830][T11147] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 277.053638][T11152] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 277.062581][T11151] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 277.106345][T11147] netlink: 'syz.4.1505': attribute type 10 has an invalid length. [ 277.159162][T11157] netlink: 'syz.4.1505': attribute type 10 has an invalid length. [ 277.193955][T11157] dummy0: entered promiscuous mode [ 277.203625][T11154] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 277.214677][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 277.223802][T11154] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 277.235818][T11147] team0: Failed to send options change via netlink (err -105) [ 277.243809][T11147] team0: Port device dummy0 added [ 277.741930][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 277.752094][T11181] netlink: 'syz.3.1518': attribute type 20 has an invalid length. [ 277.780860][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 277.783832][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.805591][T11181] netlink: 'syz.3.1518': attribute type 20 has an invalid length. [ 277.836244][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.846141][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.855357][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.073601][T11191] vlan3: entered allmulticast mode [ 278.097073][T11191] ip6gretap0: entered allmulticast mode [ 278.349044][T11204] lo speed is unknown, defaulting to 1000 [ 278.537435][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 279.175050][T11235] syzkaller1: entered promiscuous mode [ 279.181131][T11235] syzkaller1: entered allmulticast mode [ 279.356677][T11241] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 279.371916][T11241] macsec1: entered promiscuous mode [ 279.377590][T11241] macsec1: entered allmulticast mode [ 279.388372][T11241] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 279.487573][T11239] lo speed is unknown, defaulting to 1000 [ 279.533503][ T6887] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 279.564785][T11253] x_tables: duplicate underflow at hook 3 [ 280.892864][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 281.046497][T11283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.088435][T11285] macvlan2: entered promiscuous mode [ 281.110820][T11285] macvlan2: entered allmulticast mode [ 281.133828][T11285] bond2: entered promiscuous mode [ 281.147768][T11285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.195991][T11285] bond2: left promiscuous mode [ 281.596556][T11289] netlink: 'syz.4.1545': attribute type 10 has an invalid length. [ 281.605211][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1545'. [ 281.715459][T11289] team0: Port device dummy0 removed [ 281.724818][T11289] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 281.989735][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 283.216353][T11333] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 283.455659][T11333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.517396][T11335] netlink: 'syz.2.1561': attribute type 3 has an invalid length. [ 283.541054][T11335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 283.607259][T11332] bond2: (slave gretap4): making interface the new active one [ 283.617858][T11332] bond2: (slave gretap4): Enslaving as an active interface with an up link [ 283.712712][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 283.810202][T11357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1567'. [ 283.884977][T11362] netlink: 'syz.1.1566': attribute type 21 has an invalid length. [ 283.929632][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1566'. [ 284.156744][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1570'. [ 284.630032][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 284.953495][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 284.977643][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 285.015219][T11408] tipc: Enabled bearer , priority 0 [ 285.127350][T11408] tipc: Disabling bearer [ 285.235281][T11418] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 285.665971][T11433] FAULT_INJECTION: forcing a failure. [ 285.665971][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.710236][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.2.1588 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 285.710270][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.710282][T11433] Call Trace: [ 285.710291][T11433] [ 285.710299][T11433] dump_stack_lvl+0x189/0x250 [ 285.710328][T11433] ? __pfx____ratelimit+0x10/0x10 [ 285.710360][T11433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.710384][T11433] ? __pfx__printk+0x10/0x10 [ 285.710411][T11433] ? __might_fault+0xb0/0x130 [ 285.710449][T11433] should_fail_ex+0x414/0x560 [ 285.710475][T11433] _copy_from_iter+0x1db/0x16f0 [ 285.710504][T11433] ? rcu_is_watching+0x15/0xb0 [ 285.710528][T11433] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 285.710558][T11433] ? __pfx__copy_from_iter+0x10/0x10 [ 285.710583][T11433] ? __build_skb_around+0x257/0x3e0 [ 285.710606][T11433] ? netlink_sendmsg+0x642/0xb30 [ 285.710623][T11433] ? skb_put+0x11b/0x210 [ 285.710646][T11433] netlink_sendmsg+0x6b2/0xb30 [ 285.710674][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.710697][T11433] ? aa_sock_msg_perm+0x94/0x160 [ 285.710720][T11433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.710742][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.710762][T11433] __sock_sendmsg+0x219/0x270 [ 285.710798][T11433] ____sys_sendmsg+0x505/0x830 [ 285.710828][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.710861][T11433] ? import_iovec+0x74/0xa0 [ 285.710892][T11433] ___sys_sendmsg+0x21f/0x2a0 [ 285.710917][T11433] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.710979][T11433] ? __fget_files+0x2a/0x420 [ 285.710996][T11433] ? __fget_files+0x3a0/0x420 [ 285.711024][T11433] __x64_sys_sendmsg+0x19b/0x260 [ 285.711051][T11433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.711085][T11433] ? __pfx_ksys_write+0x10/0x10 [ 285.711109][T11433] ? rcu_is_watching+0x15/0xb0 [ 285.711145][T11433] ? do_syscall_64+0xbe/0x3b0 [ 285.711169][T11433] do_syscall_64+0xfa/0x3b0 [ 285.711187][T11433] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.711216][T11433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.711236][T11433] ? clear_bhb_loop+0x60/0xb0 [ 285.711261][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.711281][T11433] RIP: 0033:0x7f283fd8e9a9 [ 285.711299][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.711316][T11433] RSP: 002b:00007f2840b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.711338][T11433] RAX: ffffffffffffffda RBX: 00007f283ffb5fa0 RCX: 00007f283fd8e9a9 [ 285.711353][T11433] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 285.711367][T11433] RBP: 00007f2840b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 285.711379][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.711392][T11433] R13: 0000000000000000 R14: 00007f283ffb5fa0 R15: 00007ffc4abecfa8 [ 285.711424][T11433] [ 287.626961][T11484] FAULT_INJECTION: forcing a failure. [ 287.626961][T11484] name failslab, interval 1, probability 0, space 0, times 0 [ 287.662744][T11484] CPU: 0 UID: 0 PID: 11484 Comm: syz.4.1603 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 287.662780][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.662794][T11484] Call Trace: [ 287.662804][T11484] [ 287.662813][T11484] dump_stack_lvl+0x189/0x250 [ 287.662846][T11484] ? __pfx____ratelimit+0x10/0x10 [ 287.662879][T11484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.662904][T11484] ? __pfx__printk+0x10/0x10 [ 287.662936][T11484] ? __lock_acquire+0xab9/0xd20 [ 287.662969][T11484] should_fail_ex+0x414/0x560 [ 287.662997][T11484] should_failslab+0xa8/0x100 [ 287.663031][T11484] kmem_cache_alloc_noprof+0x73/0x3c0 [ 287.663059][T11484] ? skb_clone+0x212/0x3a0 [ 287.663102][T11484] skb_clone+0x212/0x3a0 [ 287.663132][T11484] __netlink_deliver_tap+0x404/0x850 [ 287.663167][T11484] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.663201][T11484] netlink_deliver_tap+0x19c/0x1b0 [ 287.663236][T11484] netlink_unicast+0x7fa/0x9e0 [ 287.663275][T11484] ? __pfx_netlink_unicast+0x10/0x10 [ 287.663307][T11484] ? netlink_sendmsg+0x642/0xb30 [ 287.663325][T11484] ? skb_put+0x11b/0x210 [ 287.663350][T11484] netlink_sendmsg+0x805/0xb30 [ 287.663381][T11484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.663406][T11484] ? aa_sock_msg_perm+0x94/0x160 [ 287.663430][T11484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.663451][T11484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.663472][T11484] __sock_sendmsg+0x219/0x270 [ 287.663505][T11484] ____sys_sendmsg+0x505/0x830 [ 287.663534][T11484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.663570][T11484] ? import_iovec+0x74/0xa0 [ 287.663603][T11484] ___sys_sendmsg+0x21f/0x2a0 [ 287.663630][T11484] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.663690][T11484] ? __fget_files+0x2a/0x420 [ 287.663711][T11484] ? __fget_files+0x3a0/0x420 [ 287.663742][T11484] __x64_sys_sendmsg+0x19b/0x260 [ 287.663769][T11484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.663806][T11484] ? __pfx_ksys_write+0x10/0x10 [ 287.663830][T11484] ? rcu_is_watching+0x15/0xb0 [ 287.663861][T11484] ? do_syscall_64+0xbe/0x3b0 [ 287.663885][T11484] do_syscall_64+0xfa/0x3b0 [ 287.663906][T11484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.663926][T11484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.663946][T11484] ? clear_bhb_loop+0x60/0xb0 [ 287.663972][T11484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.663991][T11484] RIP: 0033:0x7fcb9e98e9a9 [ 287.664010][T11484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.664029][T11484] RSP: 002b:00007fcb9f850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.664051][T11484] RAX: ffffffffffffffda RBX: 00007fcb9ebb5fa0 RCX: 00007fcb9e98e9a9 [ 287.664066][T11484] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 287.664086][T11484] RBP: 00007fcb9f850090 R08: 0000000000000000 R09: 0000000000000000 [ 287.664098][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.664111][T11484] R13: 0000000000000000 R14: 00007fcb9ebb5fa0 R15: 00007ffcfdab9bc8 [ 287.664145][T11484] [ 288.481952][T11507] smc: net device bond0 applied user defined pnetid SYZ2 [ 288.492643][T11507] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1613'. [ 288.693341][T11507] smc: removing net device bond0 with user defined pnetid SYZ2 [ 288.702446][T11507] bond0 (unregistering): Released all slaves [ 288.749172][T11523] netlink: 'syz.0.1617': attribute type 3 has an invalid length. [ 288.759688][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 288.761802][T11514] x_tables: duplicate underflow at hook 3 [ 288.780412][T11523] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1617'. [ 288.906005][T11526] FAULT_INJECTION: forcing a failure. [ 288.906005][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 288.979130][T11526] CPU: 0 UID: 0 PID: 11526 Comm: syz.2.1618 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 288.979162][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.979173][T11526] Call Trace: [ 288.979181][T11526] [ 288.979190][T11526] dump_stack_lvl+0x189/0x250 [ 288.979221][T11526] ? __pfx____ratelimit+0x10/0x10 [ 288.979252][T11526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.979277][T11526] ? __pfx__printk+0x10/0x10 [ 288.979308][T11526] ? __pfx___might_resched+0x10/0x10 [ 288.979332][T11526] ? fs_reclaim_acquire+0x7d/0x100 [ 288.979357][T11526] should_fail_ex+0x414/0x560 [ 288.979383][T11526] should_failslab+0xa8/0x100 [ 288.979415][T11526] __kmalloc_noprof+0xcb/0x4f0 [ 288.979442][T11526] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 288.979480][T11526] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 288.979515][T11526] genl_family_rcv_msg_doit+0xb8/0x300 [ 288.979549][T11526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 288.979578][T11526] ? rcu_is_watching+0x15/0xb0 [ 288.979606][T11526] ? apparmor_capable+0x137/0x1b0 [ 288.979636][T11526] ? bpf_lsm_capable+0x9/0x20 [ 288.979662][T11526] ? security_capable+0x7e/0x2e0 [ 288.979690][T11526] genl_rcv_msg+0x60e/0x790 [ 288.979722][T11526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.979746][T11526] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 288.979769][T11526] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 288.979792][T11526] ? __pfx_nl80211_post_doit+0x10/0x10 [ 288.979819][T11526] ? __asan_memcpy+0x40/0x70 [ 288.979842][T11526] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.979873][T11526] netlink_rcv_skb+0x208/0x470 [ 288.979903][T11526] ? __lock_acquire+0xab9/0xd20 [ 288.979924][T11526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.979952][T11526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.980021][T11526] ? down_read+0x1ad/0x2e0 [ 288.980047][T11526] genl_rcv+0x28/0x40 [ 288.980069][T11526] netlink_unicast+0x82f/0x9e0 [ 288.980106][T11526] ? __pfx_netlink_unicast+0x10/0x10 [ 288.980136][T11526] ? netlink_sendmsg+0x642/0xb30 [ 288.980153][T11526] ? skb_put+0x11b/0x210 [ 288.980179][T11526] netlink_sendmsg+0x805/0xb30 [ 288.980209][T11526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.980233][T11526] ? aa_sock_msg_perm+0x94/0x160 [ 288.980256][T11526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.980278][T11526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.980298][T11526] __sock_sendmsg+0x219/0x270 [ 288.980332][T11526] ____sys_sendmsg+0x505/0x830 [ 288.980363][T11526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.980397][T11526] ? import_iovec+0x74/0xa0 [ 288.980430][T11526] ___sys_sendmsg+0x21f/0x2a0 [ 288.980457][T11526] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.980523][T11526] ? __fget_files+0x2a/0x420 [ 288.980541][T11526] ? __fget_files+0x3a0/0x420 [ 288.980571][T11526] __x64_sys_sendmsg+0x19b/0x260 [ 288.980598][T11526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.980631][T11526] ? __pfx_ksys_write+0x10/0x10 [ 288.980664][T11526] ? do_syscall_64+0xbe/0x3b0 [ 288.980688][T11526] do_syscall_64+0xfa/0x3b0 [ 288.980706][T11526] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.980735][T11526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.980756][T11526] ? clear_bhb_loop+0x60/0xb0 [ 288.980781][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.980801][T11526] RIP: 0033:0x7f283fd8e9a9 [ 288.980819][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.980837][T11526] RSP: 002b:00007f2840b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.980859][T11526] RAX: ffffffffffffffda RBX: 00007f283ffb5fa0 RCX: 00007f283fd8e9a9 [ 288.980874][T11526] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 288.980888][T11526] RBP: 00007f2840b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 288.980900][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.980912][T11526] R13: 0000000000000000 R14: 00007f283ffb5fa0 R15: 00007ffc4abecfa8 [ 288.980944][T11526] [ 290.273216][T11571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1628'. [ 290.410830][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'. [ 292.093628][T11584] FAULT_INJECTION: forcing a failure. [ 292.093628][T11584] name failslab, interval 1, probability 0, space 0, times 0 [ 292.122410][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.0.1631 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 292.122443][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.122456][T11584] Call Trace: [ 292.122465][T11584] [ 292.122474][T11584] dump_stack_lvl+0x189/0x250 [ 292.122506][T11584] ? __pfx____ratelimit+0x10/0x10 [ 292.122538][T11584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.122563][T11584] ? __pfx__printk+0x10/0x10 [ 292.122588][T11584] ? __schedule+0x1713/0x4d00 [ 292.122626][T11584] ? __lock_acquire+0xab9/0xd20 [ 292.122652][T11584] should_fail_ex+0x414/0x560 [ 292.122679][T11584] should_failslab+0xa8/0x100 [ 292.122712][T11584] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 292.122743][T11584] ? __alloc_skb+0x112/0x2d0 [ 292.122769][T11584] __alloc_skb+0x112/0x2d0 [ 292.122794][T11584] __netdev_alloc_skb+0x108/0x970 [ 292.122816][T11584] ? __pfx___mutex_trylock_common+0x10/0x10 [ 292.122844][T11584] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 292.122880][T11584] ieee80211_tx_control_port+0x19f/0xcc0 [ 292.122912][T11584] ? __rtnl_unlock+0xc8/0xf0 [ 292.122937][T11584] ? netdev_run_todo+0xe1d/0xea0 [ 292.122968][T11584] nl80211_tx_control_port+0x610/0x980 [ 292.123009][T11584] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 292.123040][T11584] ? nl80211_pre_doit+0x4f1/0x930 [ 292.123074][T11584] genl_family_rcv_msg_doit+0x212/0x300 [ 292.123109][T11584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.123151][T11584] ? bpf_lsm_capable+0x9/0x20 [ 292.123185][T11584] ? security_capable+0x7e/0x2e0 [ 292.123214][T11584] genl_rcv_msg+0x60e/0x790 [ 292.123248][T11584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.123271][T11584] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 292.123294][T11584] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 292.123316][T11584] ? __pfx_nl80211_post_doit+0x10/0x10 [ 292.123343][T11584] ? __asan_memcpy+0x40/0x70 [ 292.123367][T11584] ? __pfx_ref_tracker_free+0x10/0x10 [ 292.123398][T11584] netlink_rcv_skb+0x208/0x470 [ 292.123428][T11584] ? __lock_acquire+0xab9/0xd20 [ 292.123449][T11584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.123477][T11584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.123532][T11584] ? down_read+0x1ad/0x2e0 [ 292.123556][T11584] genl_rcv+0x28/0x40 [ 292.123579][T11584] netlink_unicast+0x82f/0x9e0 [ 292.123619][T11584] ? __pfx_netlink_unicast+0x10/0x10 [ 292.123652][T11584] ? netlink_sendmsg+0x642/0xb30 [ 292.123669][T11584] ? skb_put+0x11b/0x210 [ 292.123694][T11584] netlink_sendmsg+0x805/0xb30 [ 292.123726][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.123750][T11584] ? aa_sock_msg_perm+0x94/0x160 [ 292.123774][T11584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.123795][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.123816][T11584] __sock_sendmsg+0x219/0x270 [ 292.123849][T11584] ____sys_sendmsg+0x505/0x830 [ 292.123880][T11584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.123915][T11584] ? import_iovec+0x74/0xa0 [ 292.123948][T11584] ___sys_sendmsg+0x21f/0x2a0 [ 292.123975][T11584] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.124043][T11584] ? __fget_files+0x2a/0x420 [ 292.124061][T11584] ? __fget_files+0x3a0/0x420 [ 292.124092][T11584] __x64_sys_sendmsg+0x19b/0x260 [ 292.124120][T11584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.124170][T11584] ? __pfx_ksys_write+0x10/0x10 [ 292.124195][T11584] ? rcu_is_watching+0x15/0xb0 [ 292.124225][T11584] ? do_syscall_64+0xbe/0x3b0 [ 292.124250][T11584] do_syscall_64+0xfa/0x3b0 [ 292.124268][T11584] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.124299][T11584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.124320][T11584] ? clear_bhb_loop+0x60/0xb0 [ 292.124345][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.124365][T11584] RIP: 0033:0x7fd880b8e9a9 [ 292.124385][T11584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.124403][T11584] RSP: 002b:00007fd881ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.124425][T11584] RAX: ffffffffffffffda RBX: 00007fd880db5fa0 RCX: 00007fd880b8e9a9 [ 292.124439][T11584] RDX: 0000000024040040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 292.124453][T11584] RBP: 00007fd881ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 292.124465][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.124477][T11584] R13: 0000000000000000 R14: 00007fd880db5fa0 R15: 00007fffacfbbc48 [ 292.124511][T11584] [ 292.750275][T11586] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 292.771812][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1634'. [ 292.781889][T11591] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1633'. [ 292.797428][T11594] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1636'. [ 292.810818][T11594] x_tables: duplicate underflow at hook 3 [ 293.007230][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 293.156465][T11599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1638'. [ 293.557076][T11628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1643'. [ 293.596868][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 293.663154][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 294.136888][T11647] bond3: entered promiscuous mode [ 294.337345][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 294.476289][T11666] netlink: 'syz.2.1651': attribute type 21 has an invalid length. [ 294.487410][T11666] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1651'. [ 294.497630][T11666] netlink: 'syz.2.1651': attribute type 5 has an invalid length. [ 294.506106][T11666] netlink: 'syz.2.1651': attribute type 6 has an invalid length. [ 294.514385][T11666] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1651'. [ 294.671374][T11670] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.802598][T11670] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.887240][T11670] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.952328][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'. [ 294.965600][T11670] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.057287][T11673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.112886][ T1097] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.161129][ T1097] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.205278][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.255301][ T6887] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.451205][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 297.533002][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 297.620521][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 297.657140][T11735] ip6gretap0: entered promiscuous mode [ 297.694043][T11735] ip6gretap0: left promiscuous mode [ 297.917550][T11749] : entered promiscuous mode [ 298.253819][T11762] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 298.320212][T11761] vlan2: entered promiscuous mode [ 298.344321][T11761] bond0: entered promiscuous mode [ 298.390649][T11762] dummy0: entered promiscuous mode [ 298.395832][T11762] dummy0: entered allmulticast mode [ 298.422908][T11762] bridge0: port 1(dummy0) entered blocking state [ 298.442131][T11762] bridge0: port 1(dummy0) entered disabled state [ 298.816151][T11774] lo speed is unknown, defaulting to 1000 [ 298.931943][T11789] 8021q: VLANs not supported on ip6gre0 [ 299.754892][T11823] __nla_validate_parse: 2 callbacks suppressed [ 299.754934][T11823] netlink: 14220 bytes leftover after parsing attributes in process `syz.4.1695'. [ 300.025395][T11803] lo speed is unknown, defaulting to 1000 [ 300.220736][T11838] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 300.549735][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.572935][T11829] lo speed is unknown, defaulting to 1000 [ 301.025445][T11843] netlink: 'syz.4.1699': attribute type 13 has an invalid length. [ 301.039642][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1699'. [ 301.048825][T11838] lo speed is unknown, defaulting to 1000 [ 301.414344][T11848] tap0: tun_chr_ioctl cmd 1074025680 [ 303.125162][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 303.137679][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 303.539192][T11864] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 303.553869][T11864] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 303.613329][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 304.154434][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'. [ 304.180546][T11885] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1715'. [ 304.332161][T11889] xt_hashlimit: size too large, truncated to 1048576 [ 304.359332][T11889] xt_hashlimit: max too large, truncated to 1048576 [ 304.467885][T11896] macvtap2: entered promiscuous mode [ 304.485272][T11896] batadv0: entered promiscuous mode [ 304.504277][T11896] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 304.525847][T11896] batadv0: left promiscuous mode [ 305.152501][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 305.196929][T11926] bridge0: entered promiscuous mode [ 305.483669][T11931] lo speed is unknown, defaulting to 1000 [ 305.649442][ T30] audit: type=1804 audit(1752900443.442:3): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1734" name="/newroot/370/cgroup.controllers" dev="tmpfs" ino=1904 res=1 errno=0 [ 305.698803][ T30] audit: type=1800 audit(1752900443.452:4): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1734" name="cgroup.controllers" dev="tmpfs" ino=1904 res=0 errno=0 [ 305.720747][T11947] tun0: tun_chr_ioctl cmd 2147767521 [ 306.119097][T11956] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 306.416260][T11965] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 306.436796][T11965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1739'. [ 306.483566][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1739'. [ 306.505518][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 306.544202][T11965] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 306.697071][T11974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1741'. [ 306.708593][T11969] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 307.443903][T12003] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1748'. [ 307.472270][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 307.944729][T12015] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 307.983614][T12004] lo speed is unknown, defaulting to 1000 [ 307.992154][T12015] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 308.001119][T12015] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1752'. [ 308.489590][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 308.871893][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 309.532390][T12050] netlink: 'syz.4.1764': attribute type 16 has an invalid length. [ 309.541090][T12050] netlink: 'syz.4.1764': attribute type 3 has an invalid length. [ 309.660575][T12050] hsr_slave_0: left promiscuous mode [ 309.671979][T12050] hsr_slave_1: left promiscuous mode [ 310.550333][T12071] __nla_validate_parse: 7 callbacks suppressed [ 310.550356][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'. [ 310.633834][T12072] openvswitch: netlink: Missing valid actions attribute. [ 310.648778][T12072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.030034][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 311.769337][ T1069] lo speed is unknown, defaulting to 1000 [ 311.810784][ T1069] syz0: Port: 1 Link DOWN [ 312.114163][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.153173][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 312.169594][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.198715][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 312.209404][T12101] lo speed is unknown, defaulting to 1000 [ 312.358695][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.376664][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 312.400220][T12071] lo speed is unknown, defaulting to 1000 [ 312.400792][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.414392][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 312.462404][T12118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1775'. [ 312.822724][T12044] lo speed is unknown, defaulting to 1000 [ 313.622983][T12135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1781'. [ 315.031001][T12191] delete_channel: no stack [ 315.328686][T12202] tipc: Enabled bearer , priority 0 [ 315.346121][T12195] syzkaller0: entered promiscuous mode [ 315.366275][T12195] syzkaller0: entered allmulticast mode [ 315.413411][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 315.449038][T12195] tipc: Resetting bearer [ 315.533088][T12194] tipc: Resetting bearer [ 315.583531][T12194] tipc: Disabling bearer [ 315.645571][T12203] lo speed is unknown, defaulting to 1000 [ 315.735990][T12209] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 316.305868][T12225] syz.1.1806 uses old SIOCAX25GETINFO [ 316.713719][T12244] bridge0: port 1(dummy0) entered disabled state [ 316.775004][T12244] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 316.800433][T12244] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 316.846780][T12244] wlan1: mtu less than device minimum [ 316.910628][T12244] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 316.966022][T12260] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 316.976041][T12252] veth1_to_team: entered allmulticast mode [ 317.001448][T12252] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 317.317799][T12269] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1817'. [ 317.944640][T12290] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1825'. [ 318.105658][T12294] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 318.134969][T12297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1828'. [ 318.184089][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1828'. [ 318.239365][T12294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.402891][T12295] veth9: entered promiscuous mode [ 318.585254][T12300] veth9: entered promiscuous mode [ 318.893700][T12317] lo speed is unknown, defaulting to 1000 [ 318.961437][T12323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.039882][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 319.182174][T12329] bridge3: entered promiscuous mode [ 319.321081][T12333] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 319.352649][T12333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1837'. [ 319.362716][T12333] batadv0: entered promiscuous mode [ 319.390557][T12333] batadv0: entered allmulticast mode [ 319.396381][T12333] bridge0: port 1(batadv0) entered blocking state [ 319.434211][T12333] bridge0: port 1(batadv0) entered disabled state [ 319.483798][T12157] batman_adv: batadv0: IGMP Querier appeared [ 319.490530][T12157] batman_adv: batadv0: MLD Querier appeared [ 319.864385][T12347] syzkaller1: entered promiscuous mode [ 319.875498][T12347] syzkaller1: entered allmulticast mode [ 319.884555][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 319.927491][T12350] vlan3: entered promiscuous mode [ 320.328442][T12366] nbd: must specify a device to reconfigure [ 320.494914][T12372] lo speed is unknown, defaulting to 1000 [ 320.792304][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1851'. [ 320.888754][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'. [ 320.937728][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'. [ 321.187115][T12393] vlan4: entered promiscuous mode [ 321.207117][T12393] vlan4: entered allmulticast mode [ 321.238952][T12393] bridge0: entered allmulticast mode [ 321.259353][T12392] vlan2: entered promiscuous mode [ 321.781830][T12428] netlink: 'syz.0.1862': attribute type 2 has an invalid length. [ 322.092095][T12438] lo speed is unknown, defaulting to 1000 [ 322.202346][T12443] hsr_slave_0: left promiscuous mode [ 322.319993][T12443] hsr_slave_1: left promiscuous mode [ 323.223742][T12459] C: renamed from team_slave_0 [ 323.243681][T12459] netlink: 'syz.0.1869': attribute type 3 has an invalid length. [ 323.256848][T12459] __nla_validate_parse: 8 callbacks suppressed [ 323.256873][T12459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1869'. [ 323.282853][T12459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 323.302797][T12449] lo speed is unknown, defaulting to 1000 [ 323.981947][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 324.986814][T12475] lo speed is unknown, defaulting to 1000 [ 325.301101][T12495] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 325.475921][T12495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.572203][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1881'. [ 325.797354][T12512] syzkaller1: entered promiscuous mode [ 325.811522][T12512] syzkaller1: entered allmulticast mode [ 326.512353][T12512] lo speed is unknown, defaulting to 1000 [ 326.660441][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 327.558683][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 327.622568][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 327.677897][T12561] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1898'. [ 327.822196][T12566] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 327.963394][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 327.986835][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1900'. [ 328.092356][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 328.678508][T12589] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 328.689848][T12589] netlink: 'syz.2.1905': attribute type 3 has an invalid length. [ 328.697636][T12589] __nla_validate_parse: 1 callbacks suppressed [ 328.697655][T12589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1905'. [ 328.757474][T12592] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1905'. [ 328.772169][T12589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1905'. [ 329.331295][T12598] bond3: entered promiscuous mode [ 330.275243][T12634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1917'. [ 330.561348][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 330.984440][T12637] batadv0: left allmulticast mode [ 330.999991][T12637] batadv0: left promiscuous mode [ 331.005438][T12637] bridge0: port 1(batadv0) entered disabled state [ 331.031711][T12637] vlan0: left promiscuous mode [ 331.066706][T12637] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 331.079279][T12637] ip6erspan0: left allmulticast mode [ 331.177698][T12637] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 331.193427][T12637] macsec1: left promiscuous mode [ 331.198426][T12637] macsec1: left allmulticast mode [ 331.257898][T12637] bond2: (slave gretap4): Releasing active interface [ 331.293155][T12652] tipc: Started in network mode [ 331.298156][T12652] tipc: Node identity e64707013de2, cluster identity 4711 [ 331.314140][T12652] tipc: Enabled bearer , priority 0 [ 331.323553][T12655] syzkaller0: entered promiscuous mode [ 331.333140][T12655] syzkaller0: entered allmulticast mode [ 331.385094][T12649] tipc: Resetting bearer [ 331.482513][T12649] tipc: Disabling bearer [ 331.520566][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 331.531919][T12671] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1925'. [ 331.683294][T12676] delete_channel: no stack [ 331.757525][T12679] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1929'. [ 332.021239][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 332.068176][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'. [ 332.150793][T12686] gtp0: entered promiscuous mode [ 332.198287][T12686] gtp0: entered allmulticast mode [ 333.974835][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 334.003667][T12728] netlink: 'syz.3.1941': attribute type 3 has an invalid length. [ 334.208560][T12732] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1943'. [ 334.651205][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 335.101722][T12745] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1947'. [ 335.255917][T12748] lo speed is unknown, defaulting to 1000 [ 335.783829][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 337.885014][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1962'. [ 337.941409][T12815] netlink: 'syz.3.1963': attribute type 9 has an invalid length. [ 338.170633][T12822] openvswitch: netlink: Unknown key attributes 2 [ 340.034714][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 340.100302][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 340.320196][T12862] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 340.613973][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 341.040790][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'. [ 341.113421][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 341.999687][T12881] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1981'. [ 342.091777][T12879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 342.797666][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 343.535877][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 343.626813][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 343.671641][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 344.603430][T12940] bond5: entered promiscuous mode [ 345.094583][T12945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2002'. [ 345.788091][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'. [ 345.891733][T12971] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2006'. [ 346.026989][T12968] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.2007'. [ 346.117218][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2007'. [ 347.276525][T12996] netlink: 'syz.3.2015': attribute type 21 has an invalid length. [ 347.334063][T12996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2015'. [ 347.881020][T13004] tipc: Enabled bearer , priority 0 [ 347.915194][T13004] syzkaller0: entered promiscuous mode [ 347.939360][T13004] syzkaller0: entered allmulticast mode [ 348.051404][T13004] tipc: Resetting bearer [ 348.100888][T13003] tipc: Resetting bearer [ 348.302022][T13003] tipc: Disabling bearer [ 349.318635][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 349.489467][ C0] sched: DL replenish lagged too much [ 349.803756][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2025'. [ 349.882964][T13034] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2026'. [ 349.968470][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2026'. [ 350.012552][T13043] lo speed is unknown, defaulting to 1000 [ 350.114931][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 350.202728][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 350.822368][T13055] netlink: 'syz.4.2031': attribute type 32 has an invalid length. [ 350.861743][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 350.915313][T13055] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 351.433681][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 351.722761][T13051] siw: device registration error -23 [ 351.778166][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 352.390224][T13079] 8021q: VLANs not supported on ip_vti0 [ 352.620148][T13088] FAULT_INJECTION: forcing a failure. [ 352.620148][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.714172][T13088] CPU: 1 UID: 0 PID: 13088 Comm: syz.4.2039 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 352.714205][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.714218][T13088] Call Trace: [ 352.714226][T13088] [ 352.714235][T13088] dump_stack_lvl+0x189/0x250 [ 352.714265][T13088] ? __pfx____ratelimit+0x10/0x10 [ 352.714296][T13088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.714321][T13088] ? __pfx__printk+0x10/0x10 [ 352.714353][T13088] ? 0xffffffffa0201a18 [ 352.714380][T13088] should_fail_ex+0x414/0x560 [ 352.714407][T13088] _copy_to_user+0x31/0xb0 [ 352.714439][T13088] bpf_test_finish+0x1ab/0x700 [ 352.714482][T13088] ? __pfx_bpf_test_finish+0x10/0x10 [ 352.714521][T13088] ? bpf_test_init+0x133/0x170 [ 352.714554][T13088] bpf_prog_test_run_xdp+0x79a/0x1000 [ 352.714606][T13088] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 352.714644][T13088] ? __fget_files+0x2a/0x420 [ 352.714669][T13088] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 352.714703][T13088] bpf_prog_test_run+0x2c4/0x340 [ 352.714728][T13088] __sys_bpf+0x4a4/0x860 [ 352.714762][T13088] ? __pfx___sys_bpf+0x10/0x10 [ 352.714808][T13088] ? ksys_write+0x22a/0x250 [ 352.714838][T13088] ? __pfx_ksys_write+0x10/0x10 [ 352.714862][T13088] ? rcu_is_watching+0x15/0xb0 [ 352.714896][T13088] __x64_sys_bpf+0x7c/0x90 [ 352.714925][T13088] do_syscall_64+0xfa/0x3b0 [ 352.714943][T13088] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.714974][T13088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.714994][T13088] ? clear_bhb_loop+0x60/0xb0 [ 352.715020][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.715040][T13088] RIP: 0033:0x7fcb9e98e9a9 [ 352.715057][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.715075][T13088] RSP: 002b:00007fcb9f850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.715097][T13088] RAX: ffffffffffffffda RBX: 00007fcb9ebb5fa0 RCX: 00007fcb9e98e9a9 [ 352.715112][T13088] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 000000000000000a [ 352.715126][T13088] RBP: 00007fcb9f850090 R08: 0000000000000000 R09: 0000000000000000 [ 352.715149][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.715161][T13088] R13: 0000000000000000 R14: 00007fcb9ebb5fa0 R15: 00007ffcfdab9bc8 [ 352.715194][T13088] [ 354.400755][T13120] FAULT_INJECTION: forcing a failure. [ 354.400755][T13120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.476198][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.3.2049 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 354.476230][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.476243][T13120] Call Trace: [ 354.476251][T13120] [ 354.476260][T13120] dump_stack_lvl+0x189/0x250 [ 354.476289][T13120] ? __pfx____ratelimit+0x10/0x10 [ 354.476321][T13120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.476344][T13120] ? __pfx__printk+0x10/0x10 [ 354.476370][T13120] ? __might_fault+0xb0/0x130 [ 354.476411][T13120] should_fail_ex+0x414/0x560 [ 354.476436][T13120] _copy_from_user+0x2d/0xb0 [ 354.476464][T13120] ___sys_sendmsg+0x158/0x2a0 [ 354.476491][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.476555][T13120] ? __fget_files+0x2a/0x420 [ 354.476571][T13120] ? __fget_files+0x3a0/0x420 [ 354.476600][T13120] __x64_sys_sendmsg+0x19b/0x260 [ 354.476627][T13120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.476661][T13120] ? __pfx_ksys_write+0x10/0x10 [ 354.476685][T13120] ? rcu_is_watching+0x15/0xb0 [ 354.476714][T13120] ? do_syscall_64+0xbe/0x3b0 [ 354.476738][T13120] do_syscall_64+0xfa/0x3b0 [ 354.476754][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.476783][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.476802][T13120] ? clear_bhb_loop+0x60/0xb0 [ 354.476827][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.476853][T13120] RIP: 0033:0x7fc2d6d8e9a9 [ 354.476870][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.476904][T13120] RSP: 002b:00007fc2d7c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.476926][T13120] RAX: ffffffffffffffda RBX: 00007fc2d6fb5fa0 RCX: 00007fc2d6d8e9a9 [ 354.476941][T13120] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000006 [ 354.476954][T13120] RBP: 00007fc2d7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 354.476967][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.476979][T13120] R13: 0000000000000000 R14: 00007fc2d6fb5fa0 R15: 00007fffdf9d11e8 [ 354.477013][T13120] [ 354.702462][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 355.053445][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 356.178051][T13141] FAULT_INJECTION: forcing a failure. [ 356.178051][T13141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.225232][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 356.248594][T13141] CPU: 1 UID: 0 PID: 13141 Comm: syz.0.2054 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 356.248629][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.248642][T13141] Call Trace: [ 356.248650][T13141] [ 356.248660][T13141] dump_stack_lvl+0x189/0x250 [ 356.248690][T13141] ? __pfx____ratelimit+0x10/0x10 [ 356.248722][T13141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.248747][T13141] ? __pfx__printk+0x10/0x10 [ 356.248779][T13141] ? 0xffffffffa0201a18 [ 356.248806][T13141] should_fail_ex+0x414/0x560 [ 356.248842][T13141] _copy_to_user+0x31/0xb0 [ 356.248873][T13141] bpf_test_finish+0x24e/0x700 [ 356.248916][T13141] ? __pfx_bpf_test_finish+0x10/0x10 [ 356.248955][T13141] ? bpf_test_init+0x133/0x170 [ 356.248988][T13141] bpf_prog_test_run_xdp+0x79a/0x1000 [ 356.249041][T13141] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.249077][T13141] ? __fget_files+0x2a/0x420 [ 356.249103][T13141] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.249135][T13141] bpf_prog_test_run+0x2c4/0x340 [ 356.249161][T13141] __sys_bpf+0x4a4/0x860 [ 356.249194][T13141] ? __pfx___sys_bpf+0x10/0x10 [ 356.249240][T13141] ? ksys_write+0x22a/0x250 [ 356.249270][T13141] ? __pfx_ksys_write+0x10/0x10 [ 356.249294][T13141] ? rcu_is_watching+0x15/0xb0 [ 356.249327][T13141] __x64_sys_bpf+0x7c/0x90 [ 356.249356][T13141] do_syscall_64+0xfa/0x3b0 [ 356.249375][T13141] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.249405][T13141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.249425][T13141] ? clear_bhb_loop+0x60/0xb0 [ 356.249454][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.249473][T13141] RIP: 0033:0x7fd880b8e9a9 [ 356.249490][T13141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.249506][T13141] RSP: 002b:00007fd881ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.249526][T13141] RAX: ffffffffffffffda RBX: 00007fd880db5fa0 RCX: 00007fd880b8e9a9 [ 356.249542][T13141] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 000000000000000a [ 356.249555][T13141] RBP: 00007fd881ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 356.249568][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.249579][T13141] R13: 0000000000000000 R14: 00007fd880db5fa0 R15: 00007fffacfbbc48 [ 356.249612][T13141] [ 356.514748][T13147] lo speed is unknown, defaulting to 1000 [ 357.373969][T13152] lo speed is unknown, defaulting to 1000 [ 358.106085][T13167] nft_compat: unsupported protocol 0 [ 358.241648][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 358.605976][T13150] lo speed is unknown, defaulting to 1000 [ 360.312118][T13198] netlink: 'syz.0.2069': attribute type 13 has an invalid length. [ 360.373555][T13198] netlink: 'syz.0.2069': attribute type 17 has an invalid length. [ 360.479036][T13202] netlink: 'syz.1.2071': attribute type 64 has an invalid length. [ 360.594869][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 360.732210][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'. [ 360.938151][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.190750][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.281807][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.340478][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.401972][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.452425][T13198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.886071][T13204] lo speed is unknown, defaulting to 1000 [ 362.260700][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 363.142447][T13234] IPv6: Can't replace route, no match found [ 365.411090][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 365.853385][T13265] smc: adding net device bond0 with user defined pnetid SYZ2 [ 366.203922][T13272] netlink: 'syz.2.2086': attribute type 20 has an invalid length. [ 367.575412][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 367.672850][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 368.121182][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2095'. [ 368.251427][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2095'. [ 368.443914][ T43] IPVS: starting estimator thread 0... [ 368.545716][T13305] IPVS: using max 26 ests per chain, 62400 per kthread [ 368.702325][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.740054][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.784947][T13313] netlink: 'syz.1.2098': attribute type 10 has an invalid length. [ 368.887269][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.138988][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.757915][T13328] lo speed is unknown, defaulting to 1000 [ 369.941740][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'. [ 370.620643][T13353] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2111'. [ 370.660468][ T59] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 370.694583][T13353] xt_hashlimit: invalid interval [ 370.720109][ T59] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 370.803460][ T59] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 370.873942][ T59] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 372.021817][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2118'. [ 372.164062][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 372.451147][T13391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.652179][T13402] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 406.829903][T13423] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20000 [ 478.397911][ T9647] Bluetooth: hci4: command 0x0406 tx timeout [ 549.468521][ T9647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.715807][ T9647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.737674][ T9647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.786507][ T9647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.802757][ T9647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.155561][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.958218][ T51] Bluetooth: hci0: command tx timeout [ 552.166990][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 552.759019][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 552.908019][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 552.952886][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.056598][ T51] Bluetooth: hci0: command tx timeout [ 556.445794][T13451] Bluetooth: hci0: command tx timeout [ 556.458418][T13451] Bluetooth: hci1: command tx timeout [ 558.608943][T13451] Bluetooth: hci0: command tx timeout [ 558.645780][T13451] Bluetooth: hci1: command tx timeout [ 560.742590][T13451] Bluetooth: hci1: command tx timeout [ 562.807439][T13451] Bluetooth: hci1: command tx timeout [ 567.231101][ T5851] syz_tun (unregistering): left allmulticast mode [ 575.338287][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.355253][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.385021][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.406967][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.423358][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 578.008494][T13451] Bluetooth: hci2: command tx timeout [ 582.617453][ T5849] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 582.631298][ T5849] Bluetooth: hci2: command tx timeout [ 584.746773][T13458] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 584.766997][ T51] Bluetooth: hci2: command tx timeout [ 586.844899][ T51] Bluetooth: hci2: command tx timeout [ 632.804645][T13451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.915246][T13451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.967406][T13451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.026872][T13451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.649119][T13451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.626801][ T51] Bluetooth: hci2: Opcode 0x0c39 failed: -110 [ 638.718550][T13465] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 638.938293][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c39 [ 645.216287][T13451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.746072][T13451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.966285][T13451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.999226][T13451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 646.014791][T13451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.158742][T13451] Bluetooth: hci4: command tx timeout [ 650.241786][T13451] Bluetooth: hci4: command tx timeout [ 652.538139][T13451] Bluetooth: hci4: command tx timeout [ 654.657490][T13451] Bluetooth: hci4: command tx timeout [ 663.030189][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.046956][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.069287][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.099222][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.120887][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 665.318919][T13451] Bluetooth: hci0: Opcode 0x0c16 failed: -110 [ 665.333109][ T51] Bluetooth: hci0: command 0x0c16 tx timeout [ 665.457639][ T5849] Bluetooth: hci0: unexpected event for opcode 0x0c16 [ 665.539255][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.907985][T13477] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 672.423783][T13451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.487405][T13451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.518200][T13451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.623704][T13451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.655092][T13451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.877807][T13451] Bluetooth: hci1: command tx timeout [ 677.127765][T13451] Bluetooth: hci1: command tx timeout [ 679.198200][T13451] Bluetooth: hci1: command tx timeout [ 681.318572][T13451] Bluetooth: hci1: command tx timeout [ 683.300345][T13482] lo speed is unknown, defaulting to 1000 [ 718.008850][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 718.032499][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 718.048582][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 718.115304][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 718.163635][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.694710][ T5849] Bluetooth: hci0: command tx timeout [ 722.853976][ T5849] Bluetooth: hci0: command tx timeout [ 725.464404][ T5849] Bluetooth: hci0: command tx timeout [ 728.010797][ T5849] Bluetooth: hci0: command tx timeout [ 751.563418][T13451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.628769][T13451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 751.728052][T13451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 751.964121][T13451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 752.077394][T13451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.872935][T13451] Bluetooth: hci2: command tx timeout [ 756.978375][T13451] Bluetooth: hci2: command tx timeout [ 759.051502][T13451] Bluetooth: hci2: command tx timeout [ 761.254502][T13451] Bluetooth: hci2: command tx timeout [ 795.757948][T13451] Bluetooth: hci1: command 0x0406 tx timeout [ 817.156256][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 817.247713][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 817.263287][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.293570][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 817.324082][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 817.367534][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 817.389064][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 817.405689][ T9647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 817.421071][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.475783][ T9647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.637447][ T5849] Bluetooth: hci2: command tx timeout [ 820.807836][ T5849] Bluetooth: hci3: command tx timeout [ 822.135123][ T5849] Bluetooth: hci2: command tx timeout [ 822.936478][ T5849] Bluetooth: hci3: command tx timeout [ 825.129953][ T5849] Bluetooth: hci2: command tx timeout [ 825.135438][ T5849] Bluetooth: hci3: command tx timeout [ 827.800377][ T9647] Bluetooth: hci2: command tx timeout [ 827.805858][ T9647] Bluetooth: hci3: command tx timeout [ 835.272907][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.296449][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 835.312089][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 835.328430][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 835.343438][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 837.751247][ T9647] Bluetooth: hci4: command tx timeout [ 839.918786][ T5849] Bluetooth: hci4: command tx timeout [ 842.268154][T13451] Bluetooth: hci4: command tx timeout [ 842.280580][T13451] Bluetooth: hci0: command 0x0406 tx timeout [ 844.501092][T13451] Bluetooth: hci4: command tx timeout [ 858.577072][T13451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.636191][T13451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.652266][T13451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.959138][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 858.975598][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.992916][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 859.024269][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 859.068681][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 859.084609][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 859.226565][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 863.046213][T13451] Bluetooth: hci6: command tx timeout [ 863.060016][T13451] Bluetooth: hci5: command tx timeout [ 865.308763][T13451] Bluetooth: hci6: command tx timeout [ 865.697914][T13451] Bluetooth: hci5: command tx timeout [ 865.716209][ T31] INFO: task syz-executor:13494 blocked for more than 145 seconds. [ 865.918187][ T31] Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 [ 865.932384][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 866.442737][ T31] task:syz-executor state:D stack:26920 pid:13494 tgid:13494 ppid:1 task_flags:0x400140 flags:0x00004004 [ 866.498540][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 866.528007][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 866.544857][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 866.560980][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 866.568787][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 866.807856][ T31] Call Trace: [ 866.824242][ T31] [ 866.827322][ T31] __schedule+0x16f5/0x4d00 [ 867.359982][ T51] Bluetooth: hci6: command tx timeout [ 867.819379][ T51] Bluetooth: hci5: command tx timeout [ 869.021628][ T31] ? __lock_acquire+0xab9/0xd20 [ 869.026576][ T31] ? schedule+0x165/0x360 [ 869.496147][ T51] Bluetooth: hci7: command tx timeout [ 869.510001][ T51] Bluetooth: hci6: command tx timeout [ 869.926868][T13451] Bluetooth: hci5: command tx timeout [ 870.067149][ T31] ? __pfx___schedule+0x10/0x10 [ 870.078780][ T31] ? schedule+0x91/0x360 [ 870.122886][ T31] schedule+0x165/0x360 [ 870.127134][ T31] schedule_preempt_disabled+0x13/0x30 [ 870.501176][ T31] __mutex_lock+0x724/0xe80 [ 870.505772][ T31] ? __mutex_lock+0x51b/0xe80 [ 871.897902][T13451] Bluetooth: hci7: command tx timeout [ 871.973328][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 871.978532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 872.248163][ T31] ? __nla_parse+0x40/0x60 [ 872.617657][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 872.629525][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 872.634976][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 872.978585][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 873.162024][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.166979][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 873.745789][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.764706][ T31] netlink_rcv_skb+0x208/0x470 [ 874.350689][T13451] Bluetooth: hci7: command tx timeout [ 874.468675][ T31] ? __lock_acquire+0xab9/0xd20 [ 874.565542][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 874.650808][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.656201][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.835532][ T31] netlink_unicast+0x82f/0x9e0 [ 875.284730][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 875.303803][ T31] ? netlink_sendmsg+0x642/0xb30 [ 875.308809][ T31] ? skb_put+0x11b/0x210 [ 875.471195][ T31] netlink_sendmsg+0x805/0xb30 [ 875.476058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.657076][ T31] ? aa_sock_msg_perm+0x94/0x160