last executing test programs: 4.253100367s ago: executing program 4 (id=691): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x17, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1bd5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002580)='syzkaller\x00', 0x9, 0x79, &(0x7f00000025c0)=""/121, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x0, 0x10, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000026c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002700)=[{0x4, 0x1, 0x10, 0x6}, {0x5, 0x2, 0x1, 0xa}, {0x0, 0x4, 0xb}, {0x5, 0x2, 0xc, 0x5}], 0x10, 0xfff, @void, @value}, 0x94) writev(r2, &(0x7f0000002c00)=[{&(0x7f0000002800)="305eb9cfc28acf4538b2ca98d6c808843b2499703b9675d01d873bd38bf21b20dadd441e3c6d51a2235dd984dd4a9f2f4e7b6c6389e217aba0efef957d5fbba245342daf6bd3e97f98e776570c2587a6cb77", 0x52}, {&(0x7f0000002880)}, {&(0x7f00000028c0)='v$', 0x2}, {&(0x7f0000002900)="d32febd34bea7ac246c277be663c92576fc6c10be2dd6b3953593cdf07a6e7c704f67f9ee46c40e5069af579c899943712e02f62131b9e288e3d00b64eaa34b7150c16c119abb4ef0c711fb50ccf32b7b2052a447da19b0e6844a87d67cdef96484d12f9c9d8c6b9baf6320db86c7bff55c5a7d606e90a3b1204a8983f4b0c34e538fa9d4fe48538accd571c277c515beec03d3a65c2ddd25dd69a9eb45a2efbc41cb0a4465beac477e4b264dd197c1ba0662041bc4fbca6ea5e1bfd882c3172e30c2b5f03918a64e34a44fde9f63b7f2dc0b76cd3bd97d78c0d2f23e88aad151925190e5c", 0xe5}, {&(0x7f0000002a00)="0c9dc01dfea133e5468b861d4f182c0c2d00c1854b60071b08b91e67bf30bfc4c5c8c01f0fdd034ca52ab90b4e012186973a013a012d308450dcc02e6060a24a0ac5e0f8ef4a94e4", 0x48}, {&(0x7f0000002a80)="4ae426cf4abe285053eb85c9e89d7fb21f775a515bce516fbcb9c6a61daf05a1dd78", 0x22}, {&(0x7f0000002ac0)="9c7cdb66ccd1321c85b77d8ebd744126a2afb9ca4d998beb6843b62dd156216fb30609864bc3773835ad5a493b0571f378277acc884e21fc31b6f4b93c448b5e4d0c1318ff9c2cde7276cbbbec7ef1537827c7bca420dae0cfe74773bcfe4dbc33394ab3eff6a63bb022b18de5410893aedaed11a30156153fb2677519a18b1aa218e328e8209b314cc878186690e27bb98feacf68cf917537873cd63c153fb1a93f5524f72180b13698bce4d71edab7dc7239744fe336d0248cf54300306b553996e6485ae368f6", 0xc8}, {&(0x7f0000002bc0)="974f6d3e", 0x4}], 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1630, 0x12c8, 0x1400, 0x1400, 0x1400, 0x1400, 0x1560, 0x1560, 0x1560, 0x1560, 0x1560, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x7, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1690) read(r1, &(0x7f0000002480)=""/2, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3.818023102s ago: executing program 0 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'team_slave_0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="fdc0ad7ef9855d7a7a4c79109241fa8f544a6d3d2164a1ae", 0x18}], 0x2) 3.765525838s ago: executing program 3 (id=698): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket(0x28, 0xa, 0x2) getsockopt(r0, 0x112, 0x2710, 0x0, &(0x7f0000000040)) getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) 3.50935457s ago: executing program 3 (id=702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000002c0)="23000000010006", 0x7) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400}) close(r0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) bind$tipc(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 3.279161651s ago: executing program 4 (id=703): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d0, 0x0) 3.219781137s ago: executing program 2 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000002c0)="23000000010006", 0x7) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400}) close(r0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) bind$tipc(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 1.966040776s ago: executing program 3 (id=705): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x5179897db034bc11) accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000b3b9e3b27041ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_sync_file_enter\x00', r2, 0x0, 0x9}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000000002, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243a00007683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d99222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b9657ce940be783c334d2a00000000000000000000000000000000096ac982002400000000000000000"], 0xe0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140038e6b5ef93dc9101070000000000000000030000003c3766b9cb2dc638f382f563c2c4ea516dde53adba30ae255e9b04f48ceed17db3f20537c54fe1222f6d5a4f4b2efde615d5e4eea4a24b204db56fbcfbda36b42366"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x20007, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="dcd3a1668845fd580b0073bd3502fba3246a3adac33cf2a9f12dad9bb87697d981a8e95f46555192cce3972f4de3718a87aa74f53b06ca602a0f869014c643b484c16937a9fe7e554d5c7d5542a8ca8f6c501b3704b73638d7fd522ec9fd7cd30e082cf2e4108144b64475b75d7ef3250afda4019e3e1313c82bdb52ab2bfb3ec8a20b9003751bd39ef1d6a4d58219aa7d0aa1cda0ec8cbc38d2efa586a027ee1d86f82e44a27c91d0851751e119fa12d9fd5da2fb35b0993aa0497cfb0dad152074fcea4d5aade13801b5895601e753d752e679f81714be4289bac82a93304433aa6ecac2b15941018b78f8ce1b38b4b40928154f9ded000000000000"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) 1.925526978s ago: executing program 2 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000000)=ANY=[@ANYBLOB="030000086342de91e37c4c7e9c2fd5a02827773fc0a9eed40d5f5511ac339b3b03b24b9907ac1fb932119b9771a87a2e3d80a3194f47f6a5f7fbb6f9b3", @ANYRES16=r3, @ANYBLOB="01000000000000000000420000000e008e006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x84}}, 0x0) 1.867311814s ago: executing program 0 (id=707): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0xb2e8, 0x4) 1.731704223s ago: executing program 0 (id=709): pselect6(0x40, &(0x7f0000000480)={0x5, 0xd3e, 0x4, 0x4, 0x1d, 0xfffffffffffffffb, 0x8, 0xfffffffffffff800}, &(0x7f00000004c0)={0x7, 0x100, 0x8001, 0x9, 0x8000000000000000, 0x3, 0xada, 0x5}, &(0x7f0000000500)={0xfffffffffffff000, 0x7, 0xfffffffffffffffb, 0x200000000, 0x4, 0x10000000, 0x5, 0x7ff}, &(0x7f0000000540)={0x77359400}, &(0x7f0000000600)={&(0x7f0000000580)={[0x8000000000000000]}, 0x8}) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x1, 0x2000, 0xffffffffffffffff, @value}, 0x20) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004a00015909558b3300000000000000a0"], 0x14}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb38}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xc, 0x3, 0x85, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x5ea, 0x9, 0x0, 0x4]}]}, 0xa4}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffffffff, 0x6, 0xffff, 0x24a3, 0x2e, 0x3, 0xf}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x8}, &(0x7f0000000340)=0x8) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4008004}, 0x4000084) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf25030000000900030073797a32000000000900010073799731000000000900010073797a32000000000900030073797a300000000005000400020000000500040002000000141f020076657468305f746f5f687372000000001400020067656e657665310000000000000900030073797a3200000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x5, 0x3, {{0x5, 0x4, 0x3, 0x25, 0x14, 0x64, 0x4, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) 1.646716601s ago: executing program 2 (id=710): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242b", 0x6c}, {&(0x7f0000000840)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c66fdf6256fc7503c8ecb4a11568f27df555586872d6bc53d5416d6094dcca85a8833870ebe0045b850349d2e5d33518e35e366fadac0514bf61b9c592a221c5401a426ebe47761ff54b08e58a2525f53e107bcfa04f2a6b99e0f2710f5941944f73246b4e52d6f49496cae51c61a338d706e40283ad9e1a13956b210d5ef02acb74054121f09273cd68395f7e89848cdbdc871190bf92965acb65e67f3a292a273ebe0cc7dc190dcabba1381e390e358f1f1c9964fccdb3d6dc088037af1ca526c1a58c27569d64ac1ef0a1104428562aed3bc8d40b9d2d320d76c", 0xfc}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.44730988s ago: executing program 2 (id=711): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xe, 0x0, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f00000008c0)="89753ccb8f8aaeebea29523f6abad72bce8772247f13f91b6af647b5de52ff8b0f130e50f17589624f3ce5fbbc70be7699146d19bfce0b9352b3792085061bdff1a194df278ec9dcdd0c4e0b6d577175878ef9bfd31ad77a8955e25e5370fa471f748659b48c165feea4146153edd848a6a58929a7b7d98ca5630303bfec28c6c91759e6e0bd18043ab18e62c11560de5864fb133a1c9d94c5c25d986e6e997bcef896656cc619b6fa1e5d86", &(0x7f0000000380)=""/26, 0x4}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048884}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r1, 0x5, 0x70bd2d, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYBLOB="0200000001000000010000000000000000000000a80df100000000f300000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)='%pS \x00'}, 0x20) 1.301791424s ago: executing program 1 (id=712): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="4100030001001f", 0x7) 1.147206165s ago: executing program 0 (id=713): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242b", 0x6c}, {&(0x7f0000000840)="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", 0xfc}], 0x4}}], 0x2, 0xc0) 1.061053942s ago: executing program 1 (id=714): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242b", 0x6c}, {&(0x7f0000000840)="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", 0xfc}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.045965173s ago: executing program 2 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000002c0)="23000000010006", 0x7) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000a00)={'sit0\x00', 0x0}) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400}) close(r0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) bind$tipc(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 971.581186ms ago: executing program 4 (id=716): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="ace32549c74c974709ce4c1eb111c451419547dc60bd874e1fccc6df209e1c8a142b93838930ad58c89b548ee8f1daa5b787ae0148148fd1148cab2404a9b6bf3bfc044d11f90be8bf77e982a5c331c672e94b444f986810d5710f1e43b839d3b17a352d37e20bee88247e73f75259a620b8031ed2efa03c9575d0d817f68b1285f491f2feb392b9", 0x88}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="0a6d405468ebb022c63619d6ac50078c93edb6011b6941b363b1f8ca5891ba90f030f9998a6b6dc17750a8e1051400f8cde09d63b3d896dff5e69e497efd6edb393fcb", 0x43}, {&(0x7f0000000480)="1f17073a14f845e901e538a15de2ec540b2ce48c00fbd43fdeaebad695981a2a52beb3b5540e31a10b0af1edab1ffabb0f54c4c87593cdf27bd37eb7391385b688bc7d4ab5c177b7287a88783bba0ef9b8608e7f61347d15ad22607d6ccc2a5c08403ef1a00ebc71c61ae4735571c6c5c2af4cc502e3c914dafe14848253dc827d79092aebd5bdc19f9058a96704021ed1517a73e3ef57d09bfceba998aae36b5d022f440e6201d0acc1de0d2ab8912a607299dc5294ff207e72e672c995c4f1add93db206991a4eca41815f760bf15b5ddfe1e3cb7650958a31f439d494a1bee529afa8bcfe5b", 0xe7}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f0000000580)="73e2064cc0d80b63aee22483dd9c1a91780b73560387e5a2e01c54ead581f5788b8d0558c3c7260591fdf16b46440719", 0x30}, {&(0x7f00000007c0)="f599c6e86752beea0cb0a0bebac8d7b831eef28c522d0fb6717013a45fcd7272a9de2512e6bf77a4c5fa8c94679c8a94907401a5a62bad30e41d529365e6201da7605416869e3e06ddbeac87ceecff4f09c45f72ba5b0ae6d3c7c317b6bc51b1660de351770814798fe84c615d04b5ea835c739f59c4bd3fc7", 0x79}, {&(0x7f0000000840)="0b6c98ffd3c6f00999492fd6b002c002f0ca8185cf11a2f5bacf8350e5dbecd42c2a2398edc8e174a7baa6b9e3cd8bf66ccd290dd66807c4fe154976b08b4c4db5023cbcc57c59af7b0a83cd6e48353d85fdb58efd3cb2a9ce24dfa684f11ed7bc2d5e8c9ef7a3446866dd2732e5df6cc75356199e0f95b2461479f8a77ed5a273ea7200cfee87b8d4dfceaff7046092d25aa370ef008b22464634a1b583013648ebbc108cc590b0727bdc", 0xab}, {&(0x7f00000014c0)="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", 0x1c0}], 0x7}}], 0x3, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x5, 0x4) 875.194577ms ago: executing program 0 (id=717): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x61e0, 0x0) 855.493183ms ago: executing program 3 (id=718): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600cbed4bfc64e114b342a51245a721eefd45a691e9fc799e7f832bcff1f9c599", 0x86}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb499476249232f3de5f56d1482d7bab9f33f68c81514f33d3221beb6b43d9df67f51e074ca10d9098480d122fa9ecd129e742345ba1d270aaebb4ffc6a5a8e2b75164bca73279aeab172a28c2db9cd08546c686b1074a7f9084a5a6b1452a150a1ca556e5a37f98be0337277d698269edb11194b5a84130bdcdfc876210907acae04dd8f287a73d3cd3de3d2c00000000", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a6462f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d9b006afb12f21a6723daadbb1ca5a0000e88d948ba3cbca85e7471ced46c453521b9fe51f0000", 0xd8}, {&(0x7f0000000840)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c66fdf6256fc7503c8ecb4a11568f27df555586872d6bc53d5416d6094dcca85a8833870ebe0045b850349d2e5d33518e35e366fadac0514bf61b9c592a221c5401a426ebe47761ff54b08e58a2525f53e107bcfa04f2a6b99e0f2710f5941944f73246b4e52d6f49496cae51c61a338d706e40283ad9e1a13956b210d5ef02acb74054121f09273cd68395f7e89848cdbdc871190bf92965acb65e67f3a292a273ebe0cc7dc190dcabba1381e390e358f1f1c9964fccdb3d6dc088037af1ca526c1a58c27569d64a", 0xe9}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 788.603371ms ago: executing program 1 (id=719): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000103c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000009000008"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x840) 718.971029ms ago: executing program 4 (id=720): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e611", 0x2}], 0x1}, 0xffffff7f}, {{0x0, 0x0, 0x0}}], 0x2, 0x4c810) 661.449732ms ago: executing program 1 (id=721): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242b", 0x6c}, {&(0x7f0000000840)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c66fdf6256fc7503c8ecb4a11568f27df555586872d6bc53d5416d6094dcca85a8833870ebe0045b850349d2e5d33518e35e366fadac0514bf61b9c592a221c5401a426ebe47761ff54b08e58a2525f53e107bcfa04f2a6b99e0f2710f5941944f73246b4e52d6f49496cae51c61a338d706e40283ad9e1a13956b210d5ef02acb74054121f09273cd68395f7e89848cdbdc871190bf92965acb65e67f3a292a273ebe0cc7dc190dcabba1381e390e358f1f1c9964fccdb3d6dc088037af1ca526c1a58c27569d64ac1ef0a1104428562aed3bc8d40b9d2d320d76c", 0xfc}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 553.792788ms ago: executing program 3 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 515.566655ms ago: executing program 2 (id=723): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b7d8d840bb5020004000000094000d03d78ca8dff84baee74000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}]}}}}}}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 464.346822ms ago: executing program 4 (id=724): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="4100030001001f", 0x7) 462.414092ms ago: executing program 1 (id=725): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xe, 0x0, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f00000008c0)="89753ccb8f8aaeebea29523f6abad72bce8772247f13f91b6af647b5de52ff8b0f130e50f17589624f3ce5fbbc70be7699146d19bfce0b9352b3792085061bdff1a194df278ec9dcdd0c4e0b6d577175878ef9bfd31ad77a8955e25e5370fa471f748659b48c165feea4146153edd848a6a58929a7b7d98ca5630303bfec28c6c91759e6e0bd18043ab18e62c11560de5864fb133a1c9d94c5c25d986e6e997bcef896656cc619b6fa1e5d86", &(0x7f0000000380)=""/26, 0x4}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048884}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r1, 0x5, 0x70bd2d, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYBLOB="0200000001000000010000000000000000000000a80df100000000f300000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)='%pS \x00'}, 0x20) 359.545471ms ago: executing program 3 (id=726): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d0, 0x0) 253.989369ms ago: executing program 4 (id=727): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000200), 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0xf8, 0x30, 0x9, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_skbedit={0xe0, 0x1, 0x0, 0x0, {{0xc}, {0xffffffffffffffc4, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x6}]}, {0xa3, 0x6, "4f56927ae16557330b04f5ea2ac9c123da371d5e39c984fc633846a1cb95fd20ed1084ec779c0c04a0d10dc0368ecc077af61a973f2953f170cee9ea3d283386f1cd98579a120576f8d9633ec4cbd82d09afc342ab3965b0fcc0d81b651ea4bc311eaaac7c000747568001dc1c087fea97b114831c13ba00be0d7474952bd1c292b6b5807fdd3003ea74f85b1686c2112c316ded6950a2985aabb475454d54"}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc32", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0x13f}, {&(0x7f0000000640)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d", 0xe1}, {&(0x7f0000000c80)="f96be6c391f1f8b23ae44a", 0xb}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f", 0x36}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="641cadd57e795d5caabac7314d6f6cf4b69d594f9d3eac721eceacbb8b4d3514790ef181a687a1b4e86a6338a1d033e2019d66392970dc9b4ae24878995e40211c15f378581f5464891dba88abf80976dd7f2212ed4106dd079bd2b2e004", 0x5e}, {&(0x7f0000000a80)="4ec3cf8c43ce1abb39dacb7ddbf130f6a1ca625e36f9caea97049189d3376382f7ab0dd6e9b890a61495e5fd74de022d47e6153628846a49", 0x38}, {&(0x7f0000000ac0)="fc56b2ec8c10a06c070c47a96fd468a7b6766f4c39f2896343d7b7cb4da55d70c70fc9755ed3b07e173cb4ec16c67400fa074dd815e4d0f6d1c927dfc0f1c7aa1e2df20993f39d6bccba17bcbbc098a68c9fda74e46c974f5878c6517fa969a9d16d17051443e3427f49a0e46c945dd80f579c3f12025db3395a54b36de8254f5d9de13e8b1bc1072c191724a4f873dbebbc4c7c9b43342086c24b45bf55b2ff7cc23b8ec61f3e5aaccf964b2222ae288cd6db5d9048b0f9238586627a53b8b9ca1fa3c6e5252ca3631ff228c299d688a79a84319191dd3886af4a6880b8199a92", 0xe1}, {&(0x7f0000000c40)="845150dafe1351114bf20141d51213a090fe0c84c8c8d1b2ecda3b74ac2bf5abdc6d9ade9cbe74dada71f98d1cb6c404e33aaac8bf16696a0132d1970b99", 0x3e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x1}}], 0x59, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 99.066462ms ago: executing program 0 (id=728): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x5179897db034bc11) accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000b3b9e3b27041ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_sync_file_enter\x00', r2, 0x0, 0x9}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000000002, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243a00007683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d99222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b9657ce940be783c334d2a00000000000000000000000000000000096ac982002400000000000000000"], 0xe0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140038e6b5ef93dc9101070000000000000000030000003c3766b9cb2dc638f382f563c2c4ea516dde53adba30ae255e9b04f48ceed17db3f20537c54fe1222f6d5a4f4b2efde615d5e4eea4a24b204db56fbcfbda36b42366"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x20007, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="dcd3a1668845fd580b0073bd3502fba3246a3adac33cf2a9f12dad9bb87697d981a8e95f46555192cce3972f4de3718a87aa74f53b06ca602a0f869014c643b484c16937a9fe7e554d5c7d5542a8ca8f6c501b3704b73638d7fd522ec9fd7cd30e082cf2e4108144b64475b75d7ef3250afda4019e3e1313c82bdb52ab2bfb3ec8a20b9003751bd39ef1d6a4d58219aa7d0aa1cda0ec8cbc38d2efa586a027ee1d86f82e44a27c91d0851751e119fa12d9fd5da2fb35b0993aa0497cfb0dad152074fcea4d5aade13801b5895601e753d752e679f81714be4289bac82a93304433aa6ecac2b15941018b78f8ce1b38b4b40928154f9ded000000000000"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) 0s ago: executing program 1 (id=729): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434", 0x50}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600cbed4bfc64e114b342a51245a721eefd45a691e9fc799e7f832bcff1f9c599", 0x86}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x173}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c24", 0x6b}, {&(0x7f0000000840)="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", 0xfc}], 0x4}}], 0x2, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 83.142797][ T5821] cgroup: Unknown subsys name 'net' [ 83.293896][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.303723][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.948774][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.750728][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.759228][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.769918][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.789940][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.802556][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.840321][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.848427][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.860101][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.868295][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.876590][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.936016][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.956395][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.965655][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.974735][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.989932][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.997066][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.998982][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.007124][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.013450][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.020192][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.026753][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.040191][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.050683][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.058622][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.067290][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.557241][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.753861][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.894346][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.920676][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.928107][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.935865][ T5831] bridge_slave_0: entered allmulticast mode [ 89.943473][ T5831] bridge_slave_0: entered promiscuous mode [ 89.992978][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.011969][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.019128][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.027264][ T5831] bridge_slave_1: entered allmulticast mode [ 90.035811][ T5831] bridge_slave_1: entered promiscuous mode [ 90.174319][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181662][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.188918][ T5835] bridge_slave_0: entered allmulticast mode [ 90.196937][ T5835] bridge_slave_0: entered promiscuous mode [ 90.208010][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.217362][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.242795][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.250116][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.257448][ T5835] bridge_slave_1: entered allmulticast mode [ 90.265029][ T5835] bridge_slave_1: entered promiscuous mode [ 90.288754][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.344027][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.412044][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.452777][ T5831] team0: Port device team_slave_0 added [ 90.467633][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.475214][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.482594][ T5840] bridge_slave_0: entered allmulticast mode [ 90.490068][ T5840] bridge_slave_0: entered promiscuous mode [ 90.498302][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.505717][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.513355][ T5840] bridge_slave_1: entered allmulticast mode [ 90.521202][ T5840] bridge_slave_1: entered promiscuous mode [ 90.571850][ T5831] team0: Port device team_slave_1 added [ 90.605021][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.613692][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.621389][ T5839] bridge_slave_0: entered allmulticast mode [ 90.628723][ T5839] bridge_slave_0: entered promiscuous mode [ 90.638925][ T5835] team0: Port device team_slave_0 added [ 90.672671][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.679665][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.706929][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.746168][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755936][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.763332][ T5839] bridge_slave_1: entered allmulticast mode [ 90.771769][ T5839] bridge_slave_1: entered promiscuous mode [ 90.781035][ T5835] team0: Port device team_slave_1 added [ 90.787560][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.794736][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.821470][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.849298][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.860529][ T5154] Bluetooth: hci0: command tx timeout [ 90.864024][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.908991][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.916646][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.924109][ T5838] bridge_slave_0: entered allmulticast mode [ 90.931584][ T5838] bridge_slave_0: entered promiscuous mode [ 90.939894][ T5154] Bluetooth: hci1: command tx timeout [ 91.010566][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.036688][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.043741][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.070284][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.084431][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.092026][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.099212][ T5838] bridge_slave_1: entered allmulticast mode [ 91.105816][ T5154] Bluetooth: hci4: command tx timeout [ 91.109865][ T5154] Bluetooth: hci3: command tx timeout [ 91.113652][ T5838] bridge_slave_1: entered promiscuous mode [ 91.126044][ T5840] team0: Port device team_slave_0 added [ 91.136647][ T5840] team0: Port device team_slave_1 added [ 91.145046][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.183391][ T5154] Bluetooth: hci2: command tx timeout [ 91.193070][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.200290][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.226793][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.337273][ T5839] team0: Port device team_slave_0 added [ 91.347130][ T5839] team0: Port device team_slave_1 added [ 91.361589][ T5831] hsr_slave_0: entered promiscuous mode [ 91.368394][ T5831] hsr_slave_1: entered promiscuous mode [ 91.403744][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.413911][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.421326][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.447841][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.496755][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.507070][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.514468][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.540733][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.619228][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.626246][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.652683][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.695998][ T5838] team0: Port device team_slave_0 added [ 91.705803][ T5838] team0: Port device team_slave_1 added [ 91.712633][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.719593][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.746638][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.763629][ T5835] hsr_slave_0: entered promiscuous mode [ 91.770714][ T5835] hsr_slave_1: entered promiscuous mode [ 91.776940][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.784992][ T5835] Cannot create hsr debugfs directory [ 91.861421][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.868417][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.895001][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.908220][ T977] cfg80211: failed to load regulatory.db [ 91.975198][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.982445][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.008703][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.047147][ T5839] hsr_slave_0: entered promiscuous mode [ 92.054223][ T5839] hsr_slave_1: entered promiscuous mode [ 92.060764][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.068346][ T5839] Cannot create hsr debugfs directory [ 92.079541][ T5840] hsr_slave_0: entered promiscuous mode [ 92.086845][ T5840] hsr_slave_1: entered promiscuous mode [ 92.093271][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.100910][ T5840] Cannot create hsr debugfs directory [ 92.267376][ T5838] hsr_slave_0: entered promiscuous mode [ 92.274149][ T5838] hsr_slave_1: entered promiscuous mode [ 92.280667][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.288364][ T5838] Cannot create hsr debugfs directory [ 92.566203][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.633326][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.687521][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.733879][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.816376][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.827643][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.855539][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.884683][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.940892][ T5154] Bluetooth: hci0: command tx timeout [ 92.970901][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.985244][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.018495][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.029510][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.040212][ T5154] Bluetooth: hci1: command tx timeout [ 93.106316][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.147393][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.159253][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.180171][ T5154] Bluetooth: hci3: command tx timeout [ 93.180178][ T51] Bluetooth: hci4: command tx timeout [ 93.200819][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.259904][ T5154] Bluetooth: hci2: command tx timeout [ 93.276964][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.303705][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.314673][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.341230][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.358263][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.429018][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.447954][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.503562][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.510966][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.541724][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.548951][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.562525][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.583727][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.622515][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.629798][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.641411][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.648533][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.676983][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.764897][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.784987][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.807616][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.833987][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.841212][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.852361][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.859497][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.899071][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.906276][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.933263][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.940513][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.095075][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.234542][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.295378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.302585][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.351370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.358522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.408622][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.548928][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.751992][ T5831] veth0_vlan: entered promiscuous mode [ 94.791261][ T5831] veth1_vlan: entered promiscuous mode [ 94.846743][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.913825][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.964371][ T5831] veth0_macvtap: entered promiscuous mode [ 95.012585][ T5831] veth1_macvtap: entered promiscuous mode [ 95.026652][ T5154] Bluetooth: hci0: command tx timeout [ 95.057667][ T5839] veth0_vlan: entered promiscuous mode [ 95.098571][ T5840] veth0_vlan: entered promiscuous mode [ 95.100598][ T5154] Bluetooth: hci1: command tx timeout [ 95.153537][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.174969][ T5839] veth1_vlan: entered promiscuous mode [ 95.198962][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.231083][ T5840] veth1_vlan: entered promiscuous mode [ 95.241618][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252375][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261669][ T5154] Bluetooth: hci3: command tx timeout [ 95.266379][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.276352][ T5154] Bluetooth: hci4: command tx timeout [ 95.276832][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.322134][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.342028][ T5154] Bluetooth: hci2: command tx timeout [ 95.405866][ T5840] veth0_macvtap: entered promiscuous mode [ 95.438698][ T5839] veth0_macvtap: entered promiscuous mode [ 95.484265][ T5840] veth1_macvtap: entered promiscuous mode [ 95.517947][ T5839] veth1_macvtap: entered promiscuous mode [ 95.518192][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.535161][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.566197][ T5835] veth0_vlan: entered promiscuous mode [ 95.597021][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.619231][ T5838] veth0_vlan: entered promiscuous mode [ 95.627347][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.635901][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.639416][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.668002][ T5838] veth1_vlan: entered promiscuous mode [ 95.686960][ T5835] veth1_vlan: entered promiscuous mode [ 95.695867][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.706252][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.716393][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725506][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.745390][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.773981][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.787737][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.823643][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.833456][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848085][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.858229][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.977894][ T5835] veth0_macvtap: entered promiscuous mode [ 96.053567][ T5838] veth0_macvtap: entered promiscuous mode [ 96.066662][ T5835] veth1_macvtap: entered promiscuous mode [ 96.097682][ T5838] veth1_macvtap: entered promiscuous mode [ 96.137110][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.153691][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.244196][ T5954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7'. [ 96.263605][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.287766][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.326353][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.339083][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.372821][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.414021][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.417920][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.432423][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.455973][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.477409][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488002][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508438][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522460][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.536181][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.545827][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.562524][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.569929][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 96.608299][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.635553][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.645023][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'. [ 96.839015][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.886079][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.010824][ T5966] FAULT_INJECTION: forcing a failure. [ 97.010824][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.038675][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.062227][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.097189][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.1.10 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 97.097218][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.097238][ T5966] Call Trace: [ 97.097247][ T5966] [ 97.097256][ T5966] dump_stack_lvl+0x189/0x250 [ 97.097303][ T5966] ? __pfx____ratelimit+0x10/0x10 [ 97.097338][ T5966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.097372][ T5966] ? __pfx__printk+0x10/0x10 [ 97.097408][ T5966] should_fail_ex+0x414/0x560 [ 97.097440][ T5966] _copy_to_user+0x31/0xb0 [ 97.097463][ T5966] simple_read_from_buffer+0xe1/0x170 [ 97.097492][ T5966] proc_fail_nth_read+0x1df/0x250 [ 97.097521][ T5966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.097550][ T5966] ? rw_verify_area+0x258/0x650 [ 97.097581][ T5966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.097608][ T5966] vfs_read+0x200/0x980 [ 97.097646][ T5966] ? __pfx___mutex_lock+0x10/0x10 [ 97.097676][ T5966] ? __pfx_vfs_read+0x10/0x10 [ 97.097710][ T5966] ? __fget_files+0x2a/0x420 [ 97.097737][ T5966] ? __fget_files+0x3a0/0x420 [ 97.097759][ T5966] ? __fget_files+0x2a/0x420 [ 97.097792][ T5966] ksys_read+0x145/0x250 [ 97.097827][ T5966] ? __pfx_ksys_read+0x10/0x10 [ 97.097856][ T5966] ? rcu_is_watching+0x15/0xb0 [ 97.097895][ T5966] ? do_syscall_64+0xbe/0x3b0 [ 97.097928][ T5966] do_syscall_64+0xfa/0x3b0 [ 97.097956][ T5966] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.097983][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.098003][ T5966] ? clear_bhb_loop+0x60/0xb0 [ 97.098029][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.098049][ T5966] RIP: 0033:0x7f9dceb8d33c [ 97.098073][ T5966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.098091][ T5966] RSP: 002b:00007f9dcfa18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.098114][ T5966] RAX: ffffffffffffffda RBX: 00007f9dcedb5fa0 RCX: 00007f9dceb8d33c [ 97.098129][ T5966] RDX: 000000000000000f RSI: 00007f9dcfa180a0 RDI: 0000000000000005 [ 97.098141][ T5966] RBP: 00007f9dcfa18090 R08: 0000000000000000 R09: 0000000000000000 [ 97.098154][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.098165][ T5966] R13: 0000000000000000 R14: 00007f9dcedb5fa0 R15: 00007fff069dd668 [ 97.098198][ T5966] [ 97.100155][ T5154] Bluetooth: hci0: command tx timeout [ 97.190457][ T51] Bluetooth: hci1: command tx timeout [ 97.340373][ T5154] Bluetooth: hci4: command tx timeout [ 97.355770][ T5154] Bluetooth: hci3: command tx timeout [ 97.413346][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.425983][ T51] Bluetooth: hci2: command tx timeout [ 97.433823][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.552847][ T5974] netlink: 'syz.0.14': attribute type 6 has an invalid length. [ 97.654400][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.677753][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.871046][ T6012] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 99.290823][ T6023] FAULT_INJECTION: forcing a failure. [ 99.290823][ T6023] name failslab, interval 1, probability 0, space 0, times 1 [ 99.364192][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.0.29 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 99.364222][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.364235][ T6023] Call Trace: [ 99.364243][ T6023] [ 99.364252][ T6023] dump_stack_lvl+0x189/0x250 [ 99.364290][ T6023] ? __pfx____ratelimit+0x10/0x10 [ 99.364318][ T6023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.364351][ T6023] ? __pfx__printk+0x10/0x10 [ 99.364380][ T6023] ? __pfx___might_resched+0x10/0x10 [ 99.364418][ T6023] should_fail_ex+0x414/0x560 [ 99.364450][ T6023] should_failslab+0xa8/0x100 [ 99.364475][ T6023] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 99.364510][ T6023] ? __alloc_skb+0x112/0x2d0 [ 99.364536][ T6023] __alloc_skb+0x112/0x2d0 [ 99.364562][ T6023] netlink_sendmsg+0x5c6/0xb30 [ 99.364594][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.364619][ T6023] ? aa_sock_msg_perm+0x94/0x160 [ 99.364647][ T6023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.364674][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.364696][ T6023] __sock_sendmsg+0x219/0x270 [ 99.364731][ T6023] ____sys_sendmsg+0x505/0x830 [ 99.364762][ T6023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.364797][ T6023] ? import_iovec+0x74/0xa0 [ 99.364821][ T6023] ___sys_sendmsg+0x21f/0x2a0 [ 99.364848][ T6023] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.364916][ T6023] ? __fget_files+0x2a/0x420 [ 99.364938][ T6023] ? __fget_files+0x3a0/0x420 [ 99.364972][ T6023] __x64_sys_sendmsg+0x19b/0x260 [ 99.365000][ T6023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.365036][ T6023] ? __pfx_ksys_write+0x10/0x10 [ 99.365052][ T6023] ? rcu_is_watching+0x15/0xb0 [ 99.365090][ T6023] ? do_syscall_64+0xbe/0x3b0 [ 99.365129][ T6023] do_syscall_64+0xfa/0x3b0 [ 99.365156][ T6023] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.365183][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.365203][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 99.365229][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.365249][ T6023] RIP: 0033:0x7fb2d918e929 [ 99.365267][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.365284][ T6023] RSP: 002b:00007fb2da0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.365306][ T6023] RAX: ffffffffffffffda RBX: 00007fb2d93b5fa0 RCX: 00007fb2d918e929 [ 99.365321][ T6023] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 99.365334][ T6023] RBP: 00007fb2da0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 99.365346][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.365358][ T6023] R13: 0000000000000000 R14: 00007fb2d93b5fa0 R15: 00007ffd03d0ff58 [ 99.365389][ T6023] [ 99.732563][ T6033] tipc: Can't bind to reserved service type 0 [ 100.857384][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40'. [ 100.926323][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 101.140888][ T6072] FAULT_INJECTION: forcing a failure. [ 101.140888][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.170614][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.3.46 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 101.170643][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.170656][ T6072] Call Trace: [ 101.170664][ T6072] [ 101.170673][ T6072] dump_stack_lvl+0x189/0x250 [ 101.170710][ T6072] ? __pfx____ratelimit+0x10/0x10 [ 101.170738][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.170770][ T6072] ? __pfx__printk+0x10/0x10 [ 101.170793][ T6072] ? __might_fault+0xb0/0x130 [ 101.170825][ T6072] should_fail_ex+0x414/0x560 [ 101.170855][ T6072] _copy_from_user+0x2d/0xb0 [ 101.170877][ T6072] ___sys_sendmsg+0x158/0x2a0 [ 101.170905][ T6072] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.170968][ T6072] ? __fget_files+0x2a/0x420 [ 101.170990][ T6072] ? __fget_files+0x3a0/0x420 [ 101.171033][ T6072] __x64_sys_sendmsg+0x19b/0x260 [ 101.171062][ T6072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.171098][ T6072] ? __pfx_ksys_write+0x10/0x10 [ 101.171115][ T6072] ? rcu_is_watching+0x15/0xb0 [ 101.171153][ T6072] ? do_syscall_64+0xbe/0x3b0 [ 101.171186][ T6072] do_syscall_64+0xfa/0x3b0 [ 101.171219][ T6072] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.171246][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.171267][ T6072] ? clear_bhb_loop+0x60/0xb0 [ 101.171293][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.171313][ T6072] RIP: 0033:0x7f9ce118e929 [ 101.171332][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.171349][ T6072] RSP: 002b:00007f9ce2041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.171370][ T6072] RAX: ffffffffffffffda RBX: 00007f9ce13b5fa0 RCX: 00007f9ce118e929 [ 101.171385][ T6072] RDX: 0000000000004090 RSI: 0000200000000000 RDI: 0000000000000005 [ 101.171398][ T6072] RBP: 00007f9ce2041090 R08: 0000000000000000 R09: 0000000000000000 [ 101.171411][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.171423][ T6072] R13: 0000000000000000 R14: 00007f9ce13b5fa0 R15: 00007ffe0b938778 [ 101.171455][ T6072] [ 101.409237][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 101.418066][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 101.665837][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 101.857591][ T6089] vlan2: entered promiscuous mode [ 101.867117][ T6089] team_slave_0: entered promiscuous mode [ 101.957375][ T6091] FAULT_INJECTION: forcing a failure. [ 101.957375][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 101.990844][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.2.53 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 101.990875][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.990889][ T6091] Call Trace: [ 101.990897][ T6091] [ 101.990906][ T6091] dump_stack_lvl+0x189/0x250 [ 101.990944][ T6091] ? __pfx____ratelimit+0x10/0x10 [ 101.990973][ T6091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.991006][ T6091] ? __pfx__printk+0x10/0x10 [ 101.991046][ T6091] should_fail_ex+0x414/0x560 [ 101.991084][ T6091] should_failslab+0xa8/0x100 [ 101.991110][ T6091] kmem_cache_alloc_noprof+0x73/0x3c0 [ 101.991143][ T6091] ? skb_clone+0x212/0x3a0 [ 101.991175][ T6091] skb_clone+0x212/0x3a0 [ 101.991206][ T6091] __netlink_deliver_tap+0x404/0x850 [ 101.991241][ T6091] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.991264][ T6091] netlink_deliver_tap+0x19c/0x1b0 [ 101.991287][ T6091] netlink_sendskb+0x68/0x140 [ 101.991321][ T6091] netlink_rcv_skb+0x28c/0x470 [ 101.991342][ T6091] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.991373][ T6091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.991408][ T6091] ? bpf_lsm_capable+0x9/0x20 [ 101.991427][ T6091] ? security_capable+0x7e/0x2e0 [ 101.991462][ T6091] nfnetlink_rcv+0x26a/0x2520 [ 101.991494][ T6091] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 101.991527][ T6091] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 101.991564][ T6091] ? __dev_queue_xmit+0x27e/0x3a70 [ 101.991592][ T6091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.991625][ T6091] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.991660][ T6091] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.991704][ T6091] ? ref_tracker_free+0x63a/0x7d0 [ 101.991730][ T6091] ? __copy_skb_header+0xa7/0x550 [ 101.991758][ T6091] ? __pfx_ref_tracker_free+0x10/0x10 [ 101.991807][ T6091] ? skb_clone+0x246/0x3a0 [ 101.991838][ T6091] ? __netlink_deliver_tap+0x807/0x850 [ 101.991858][ T6091] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.991887][ T6091] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.991907][ T6091] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.991934][ T6091] netlink_unicast+0x758/0x8d0 [ 101.991979][ T6091] netlink_sendmsg+0x805/0xb30 [ 101.992012][ T6091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.992037][ T6091] ? aa_sock_msg_perm+0x94/0x160 [ 101.992067][ T6091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.992093][ T6091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.992115][ T6091] __sock_sendmsg+0x219/0x270 [ 101.992151][ T6091] ____sys_sendmsg+0x505/0x830 [ 101.992183][ T6091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.992220][ T6091] ? import_iovec+0x74/0xa0 [ 101.992245][ T6091] ___sys_sendmsg+0x21f/0x2a0 [ 101.992273][ T6091] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.992342][ T6091] ? __fget_files+0x2a/0x420 [ 101.992364][ T6091] ? __fget_files+0x3a0/0x420 [ 101.992400][ T6091] __x64_sys_sendmsg+0x19b/0x260 [ 101.992429][ T6091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.992466][ T6091] ? __pfx_ksys_write+0x10/0x10 [ 101.992491][ T6091] ? do_syscall_64+0xbe/0x3b0 [ 101.992525][ T6091] do_syscall_64+0xfa/0x3b0 [ 101.992555][ T6091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.992575][ T6091] ? asm_sysvec_call_function_single+0x1a/0x20 [ 101.992596][ T6091] ? clear_bhb_loop+0x60/0xb0 [ 101.992622][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.992650][ T6091] RIP: 0033:0x7fe16cf8e929 [ 101.992669][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.992686][ T6091] RSP: 002b:00007fe16de62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.992708][ T6091] RAX: ffffffffffffffda RBX: 00007fe16d1b5fa0 RCX: 00007fe16cf8e929 [ 101.992723][ T6091] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 000000000000000b [ 101.992736][ T6091] RBP: 00007fe16de62090 R08: 0000000000000000 R09: 0000000000000000 [ 101.992748][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.992760][ T6091] R13: 0000000000000000 R14: 00007fe16d1b5fa0 R15: 00007ffcadaaf928 [ 101.992794][ T6091] [ 102.701841][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 102.886214][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.402830][ T6124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 103.680268][ T6137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.845054][ T6137] x_tables: duplicate underflow at hook 2 [ 104.024876][ T6139] xt_CT: No such helper "syz0" [ 104.567115][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 104.581355][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 104.596119][ T6161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 104.610548][ T6161] vlan0: entered promiscuous mode [ 104.643355][ T6161] syzkaller1: entered promiscuous mode [ 104.701630][ T6161] syzkaller1: entered allmulticast mode [ 105.004875][ T6171] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 105.233707][ T6180] Zero length message leads to an empty skb [ 105.886430][ T6208] netlink: 72 bytes leftover after parsing attributes in process `syz.4.89'. [ 105.908999][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 105.964947][ T6211] Bluetooth: MGMT ver 1.23 [ 106.624489][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 107.155772][ T6261] FAULT_INJECTION: forcing a failure. [ 107.155772][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 107.252054][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.1.106 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 107.252085][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.252098][ T6261] Call Trace: [ 107.252106][ T6261] [ 107.252115][ T6261] dump_stack_lvl+0x189/0x250 [ 107.252163][ T6261] ? __pfx____ratelimit+0x10/0x10 [ 107.252192][ T6261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.252226][ T6261] ? __pfx__printk+0x10/0x10 [ 107.252262][ T6261] should_fail_ex+0x414/0x560 [ 107.252295][ T6261] should_failslab+0xa8/0x100 [ 107.252319][ T6261] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 107.252355][ T6261] ? __alloc_skb+0x112/0x2d0 [ 107.252382][ T6261] __alloc_skb+0x112/0x2d0 [ 107.252409][ T6261] __pskb_copy_fclone+0xa8/0xfb0 [ 107.252438][ T6261] ? kfree+0x18e/0x440 [ 107.252475][ T6261] ? tipc_dest_pop+0x19c/0x230 [ 107.252500][ T6261] tipc_sk_mcast_rcv+0x596/0xeb0 [ 107.252518][ T6261] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 107.252549][ T6261] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 107.252599][ T6261] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 107.252619][ T6261] ? __lock_acquire+0xab9/0xd20 [ 107.252672][ T6261] ? tipc_mcast_xmit+0x10a4/0x1850 [ 107.252699][ T6261] ? tipc_mcast_xmit+0x10a4/0x1850 [ 107.252723][ T6261] tipc_mcast_xmit+0x123a/0x1850 [ 107.252761][ T6261] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 107.252790][ T6261] ? _copy_from_iter+0x308/0x16f0 [ 107.252826][ T6261] ? rcu_is_watching+0x15/0xb0 [ 107.252860][ T6261] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 107.252896][ T6261] ? __pfx__copy_from_iter+0x10/0x10 [ 107.252929][ T6261] ? __build_skb_around+0x257/0x3e0 [ 107.252955][ T6261] ? tipc_msg_build+0x400/0xcf0 [ 107.253011][ T6261] ? tipc_sk_filtering+0x13c/0x510 [ 107.253035][ T6261] ? rcu_is_watching+0x15/0xb0 [ 107.253073][ T6261] __tipc_sendmsg+0x1f62/0x2960 [ 107.253098][ T6261] ? look_up_lock_class+0x74/0x170 [ 107.253138][ T6261] ? __lock_acquire+0xab9/0xd20 [ 107.253179][ T6261] ? __pfx___tipc_sendmsg+0x10/0x10 [ 107.253214][ T6261] ? ima_match_policy+0x10b/0x2150 [ 107.253258][ T6261] ? __pfx_woken_wake_function+0x10/0x10 [ 107.253293][ T6261] ? up_write+0x1c4/0x420 [ 107.253320][ T6261] ? process_measurement+0x1640/0x1a40 [ 107.253381][ T6261] ? aa_label_sk_perm+0x413/0x560 [ 107.253412][ T6261] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 107.253445][ T6261] __tipc_sendstream+0x1041/0x1290 [ 107.253475][ T6261] ? look_up_lock_class+0x74/0x170 [ 107.253537][ T6261] ? __pfx___tipc_sendstream+0x10/0x10 [ 107.253566][ T6261] ? __local_bh_enable_ip+0x12d/0x1c0 [ 107.253597][ T6261] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 107.253639][ T6261] tipc_send_packet+0x7c/0xa0 [ 107.253666][ T6261] ? __pfx_tipc_send_packet+0x10/0x10 [ 107.253694][ T6261] __sock_sendmsg+0x219/0x270 [ 107.253729][ T6261] ____sys_sendmsg+0x505/0x830 [ 107.253761][ T6261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.253797][ T6261] ? import_iovec+0x74/0xa0 [ 107.253822][ T6261] ___sys_sendmsg+0x21f/0x2a0 [ 107.253850][ T6261] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.253918][ T6261] ? __fget_files+0x2a/0x420 [ 107.253939][ T6261] ? __fget_files+0x3a0/0x420 [ 107.253975][ T6261] __x64_sys_sendmsg+0x19b/0x260 [ 107.254004][ T6261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.254041][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 107.254058][ T6261] ? rcu_is_watching+0x15/0xb0 [ 107.254096][ T6261] ? do_syscall_64+0xbe/0x3b0 [ 107.254130][ T6261] do_syscall_64+0xfa/0x3b0 [ 107.254163][ T6261] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.254190][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.254211][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 107.254237][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.254257][ T6261] RIP: 0033:0x7f9dceb8e929 [ 107.254276][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.254294][ T6261] RSP: 002b:00007f9dcfa18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.254316][ T6261] RAX: ffffffffffffffda RBX: 00007f9dcedb5fa0 RCX: 00007f9dceb8e929 [ 107.254331][ T6261] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000006 [ 107.254344][ T6261] RBP: 00007f9dcfa18090 R08: 0000000000000000 R09: 0000000000000000 [ 107.254357][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.254369][ T6261] R13: 0000000000000000 R14: 00007f9dcedb5fa0 R15: 00007fff069dd668 [ 107.254402][ T6261] [ 107.254411][ T6261] tipc: Failed to clone mcast rcv buffer [ 108.132627][ T6278] __nla_validate_parse: 1 callbacks suppressed [ 108.132648][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 108.295067][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 108.350430][ T6284] warning: `syz.4.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.407134][ T6283] netlink: 'syz.4.110': attribute type 5 has an invalid length. [ 108.463966][ T6291] netlink: 'syz.2.113': attribute type 2 has an invalid length. [ 108.476496][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.110'. [ 108.556889][ T6283] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 108.596724][ T6283] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 108.652950][ T6283] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 108.702040][ T6283] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 108.735245][ T6283] geneve2: entered promiscuous mode [ 108.778025][ T6283] geneve2: entered allmulticast mode [ 109.142864][ T6310] netlink: 'syz.0.122': attribute type 30 has an invalid length. [ 109.490399][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 109.527243][ T6314] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.572204][ T6314] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.614809][ T6314] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.644333][ T6314] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.507463][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 110.618175][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 110.676857][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 111.433994][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 111.697325][ T6398] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.757161][ T6398] syzkaller0: entered promiscuous mode [ 111.762870][ T6398] syzkaller0: entered allmulticast mode [ 111.918316][ T6421] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 111.930434][ T6420] IPVS: stopping backup sync thread 6421 ... [ 112.061867][ T6424] Bluetooth: MGMT ver 1.23 [ 112.626032][ T6446] netlink: 'syz.4.163': attribute type 16 has an invalid length. [ 112.639839][ T6446] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.163'. [ 113.797094][ T6456] netlink: 'syz.3.165': attribute type 5 has an invalid length. [ 115.578495][ T6523] netlink: 'syz.3.192': attribute type 3 has an invalid length. [ 115.589900][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 116.847682][ T6567] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 117.028824][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.199829][ T6570] bond1: (slave veth0_to_bond): making interface the new active one [ 117.283532][ T6570] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.414784][ T6570] syz.1.207 (6570) used greatest stack depth: 19864 bytes left [ 117.544187][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.593161][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.622700][ T6584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.660250][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 117.711862][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 117.733084][ T6584] syzkaller1: entered promiscuous mode [ 117.738601][ T6584] syzkaller1: entered allmulticast mode [ 118.201350][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 118.232298][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 118.263985][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.220'. [ 118.374711][ T6608] vlan0: entered promiscuous mode [ 118.450105][ T6613] syzkaller1: entered promiscuous mode [ 118.456806][ T6613] syzkaller1: entered allmulticast mode [ 118.830922][ T6616] syzkaller0: entered promiscuous mode [ 118.836521][ T6616] syzkaller0: entered allmulticast mode [ 119.716135][ T6650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.611476][ T6655] FAULT_INJECTION: forcing a failure. [ 120.611476][ T6655] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.630954][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.0.231 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 120.630985][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.631001][ T6655] Call Trace: [ 120.631009][ T6655] [ 120.631018][ T6655] dump_stack_lvl+0x189/0x250 [ 120.631066][ T6655] ? __pfx____ratelimit+0x10/0x10 [ 120.631095][ T6655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.631127][ T6655] ? __pfx__printk+0x10/0x10 [ 120.631157][ T6655] ? do_raw_spin_lock+0x121/0x290 [ 120.631187][ T6655] should_fail_ex+0x414/0x560 [ 120.631219][ T6655] get_futex_key+0x1a6/0x16c0 [ 120.631242][ T6655] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.631278][ T6655] ? look_up_lock_class+0x74/0x170 [ 120.631310][ T6655] ? __pfx_get_futex_key+0x10/0x10 [ 120.631333][ T6655] ? __lock_acquire+0xab9/0xd20 [ 120.631370][ T6655] futex_wake+0xf8/0x560 [ 120.631402][ T6655] ? __pfx_futex_wake+0x10/0x10 [ 120.631432][ T6655] ? __lock_acquire+0xab9/0xd20 [ 120.631472][ T6655] do_futex+0x395/0x420 [ 120.631499][ T6655] ? __pfx_do_futex+0x10/0x10 [ 120.631525][ T6655] ? __might_fault+0xb0/0x130 [ 120.631548][ T6655] mm_release+0x188/0x390 [ 120.631581][ T6655] ? __pfx_mm_release+0x10/0x10 [ 120.631611][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.631651][ T6655] exit_mm+0xa8/0x2c0 [ 120.631678][ T6655] ? __pfx_exit_mm+0x10/0x10 [ 120.631704][ T6655] ? rcu_is_watching+0x15/0xb0 [ 120.631741][ T6655] do_exit+0x640/0x22e0 [ 120.631772][ T6655] ? do_raw_spin_lock+0x121/0x290 [ 120.631798][ T6655] ? __pfx_do_exit+0x10/0x10 [ 120.631840][ T6655] do_group_exit+0x21c/0x2d0 [ 120.631864][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.631894][ T6655] get_signal+0x1286/0x1340 [ 120.631948][ T6655] arch_do_signal_or_restart+0x9a/0x750 [ 120.631983][ T6655] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.632028][ T6655] ? exit_to_user_mode_loop+0x40/0x110 [ 120.632062][ T6655] exit_to_user_mode_loop+0x75/0x110 [ 120.632092][ T6655] do_syscall_64+0x2bd/0x3b0 [ 120.632120][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.632146][ T6655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.632167][ T6655] ? clear_bhb_loop+0x60/0xb0 [ 120.632193][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.632212][ T6655] RIP: 0033:0x7fb2d918e929 [ 120.632235][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.632258][ T6655] RSP: 002b:00007fb2da080038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 120.632287][ T6655] RAX: fffffffffffffe00 RBX: 00007fb2d93b6080 RCX: 00007fb2d918e929 [ 120.632302][ T6655] RDX: 0000000000000006 RSI: 0000200000000d00 RDI: 0000000000000003 [ 120.632314][ T6655] RBP: 00007fb2da080090 R08: 0000000000000000 R09: 0000000000000000 [ 120.632327][ T6655] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 120.632338][ T6655] R13: 0000000000000000 R14: 00007fb2d93b6080 R15: 00007ffd03d0ff58 [ 120.632370][ T6655] [ 121.420519][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.476957][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.506459][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.591533][ T6672] syzkaller1: entered promiscuous mode [ 121.608617][ T6672] syzkaller1: entered allmulticast mode [ 122.035264][ T6694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.244'. [ 122.044504][ T6694] FAULT_INJECTION: forcing a failure. [ 122.044504][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 122.097178][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.3.244 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 122.097211][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.097224][ T6694] Call Trace: [ 122.097232][ T6694] [ 122.097242][ T6694] dump_stack_lvl+0x189/0x250 [ 122.097281][ T6694] ? __pfx____ratelimit+0x10/0x10 [ 122.097310][ T6694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.097345][ T6694] ? __pfx__printk+0x10/0x10 [ 122.097376][ T6694] ? __pfx___might_resched+0x10/0x10 [ 122.097407][ T6694] ? fs_reclaim_acquire+0x7d/0x100 [ 122.097438][ T6694] should_fail_ex+0x414/0x560 [ 122.097471][ T6694] should_failslab+0xa8/0x100 [ 122.097495][ T6694] __kmalloc_cache_noprof+0x70/0x3d0 [ 122.097516][ T6694] ? tcf_block_get_ext+0x8d4/0x17d0 [ 122.097543][ T6694] tcf_block_get_ext+0x8d4/0x17d0 [ 122.097576][ T6694] ? __pfx_sfb_init+0x10/0x10 [ 122.097598][ T6694] tcf_block_get+0x67/0xa0 [ 122.097616][ T6694] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 122.097642][ T6694] sfb_init+0x31/0xa0 [ 122.097663][ T6694] qdisc_create+0x7a9/0xea0 [ 122.097703][ T6694] tc_modify_qdisc+0x1426/0x2010 [ 122.097749][ T6694] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 122.097838][ T6694] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 122.097867][ T6694] rtnetlink_rcv_msg+0x77c/0xb70 [ 122.097900][ T6694] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 122.097920][ T6694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.097939][ T6694] ? ref_tracker_free+0x63a/0x7d0 [ 122.097965][ T6694] ? __copy_skb_header+0xa7/0x550 [ 122.097994][ T6694] ? __pfx_ref_tracker_free+0x10/0x10 [ 122.098035][ T6694] netlink_rcv_skb+0x205/0x470 [ 122.098058][ T6694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.098081][ T6694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.098117][ T6694] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.098138][ T6694] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.098165][ T6694] netlink_unicast+0x758/0x8d0 [ 122.098213][ T6694] netlink_sendmsg+0x805/0xb30 [ 122.098246][ T6694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.098272][ T6694] ? aa_sock_msg_perm+0x94/0x160 [ 122.098302][ T6694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.098330][ T6694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.098353][ T6694] __sock_sendmsg+0x219/0x270 [ 122.098389][ T6694] ____sys_sendmsg+0x505/0x830 [ 122.098422][ T6694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.098459][ T6694] ? import_iovec+0x74/0xa0 [ 122.098484][ T6694] ___sys_sendmsg+0x21f/0x2a0 [ 122.098513][ T6694] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.098582][ T6694] ? __fget_files+0x2a/0x420 [ 122.098603][ T6694] ? __fget_files+0x3a0/0x420 [ 122.098639][ T6694] __x64_sys_sendmsg+0x19b/0x260 [ 122.098668][ T6694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.098706][ T6694] ? __pfx_ksys_write+0x10/0x10 [ 122.098723][ T6694] ? rcu_is_watching+0x15/0xb0 [ 122.098762][ T6694] ? do_syscall_64+0xbe/0x3b0 [ 122.098797][ T6694] do_syscall_64+0xfa/0x3b0 [ 122.098824][ T6694] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.098851][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.098878][ T6694] ? clear_bhb_loop+0x60/0xb0 [ 122.098904][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.098925][ T6694] RIP: 0033:0x7f9ce118e929 [ 122.098944][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.098962][ T6694] RSP: 002b:00007f9ce2020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.098984][ T6694] RAX: ffffffffffffffda RBX: 00007f9ce13b6080 RCX: 00007f9ce118e929 [ 122.098999][ T6694] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 122.099012][ T6694] RBP: 00007f9ce2020090 R08: 0000000000000000 R09: 0000000000000000 [ 122.099024][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.099036][ T6694] R13: 0000000000000000 R14: 00007f9ce13b6080 R15: 00007ffe0b938778 [ 122.099069][ T6694] [ 123.066045][ T6701] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.143937][ T6701] syzkaller0: entered promiscuous mode [ 123.159869][ T6701] syzkaller0: entered allmulticast mode [ 124.316580][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 124.415401][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 124.429379][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.256'. [ 126.227069][ T6772] vlan0: entered promiscuous mode [ 126.541724][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.570408][ T6815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.267'. [ 127.775085][ T6844] xt_CT: No such helper "syz0" [ 128.033171][ T6856] bond0: entered promiscuous mode [ 128.038276][ T6856] bond_slave_0: entered promiscuous mode [ 128.080159][ T6856] bond_slave_1: entered promiscuous mode [ 128.354257][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 129.553363][ T6914] bond0: entered promiscuous mode [ 129.569906][ T6914] bond_slave_0: entered promiscuous mode [ 129.591989][ T6914] bond_slave_1: entered promiscuous mode [ 130.024213][ T6921] syzkaller0: entered promiscuous mode [ 130.030066][ T6921] syzkaller0: entered allmulticast mode [ 132.865629][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872463][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.554477][ T6932] Set syz1 is full, maxelem 65536 reached [ 135.856604][ T7020] netlink: 65031 bytes leftover after parsing attributes in process `syz.4.321'. [ 136.025696][ T7022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.326'. [ 137.455210][ T7069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.339'. [ 138.016269][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.051282][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.096212][ T7090] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.137413][ T7090] netlink: zone id is out of range [ 138.160122][ T7090] netlink: zone id is out of range [ 138.165920][ T7090] netlink: zone id is out of range [ 138.210092][ T7090] netlink: zone id is out of range [ 138.215850][ T7090] netlink: zone id is out of range [ 138.222272][ T7090] netlink: zone id is out of range [ 138.227511][ T7090] netlink: zone id is out of range [ 138.236445][ T7090] netlink: zone id is out of range [ 138.241968][ T7090] netlink: zone id is out of range [ 138.262884][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 138.286049][ T7100] netlink: 172 bytes leftover after parsing attributes in process `syz.2.348'. [ 138.316988][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 139.191047][ T7127] bond0: entered promiscuous mode [ 139.201843][ T7127] bond_slave_0: entered promiscuous mode [ 139.213669][ T7127] bond_slave_1: entered promiscuous mode [ 139.248467][ T7127] batadv0: entered promiscuous mode [ 139.290278][ T7127] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 139.403159][ T7127] bond0: left promiscuous mode [ 139.435943][ T7127] bond_slave_0: left promiscuous mode [ 139.474855][ T7127] bond_slave_1: left promiscuous mode [ 139.560076][ T7127] batadv0: left promiscuous mode [ 141.258177][ T7199] netlink: 208 bytes leftover after parsing attributes in process `syz.4.382'. [ 141.312796][ T7199] netlink: 208 bytes leftover after parsing attributes in process `syz.4.382'. [ 141.542192][ T7190] syzkaller0: entered promiscuous mode [ 141.569796][ T7190] syzkaller0: entered allmulticast mode [ 141.676301][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 141.728628][ T7205] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 143.157833][ T7206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.306839][ T7206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.497998][ T7206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.605356][ T7206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.856756][ T7206] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.907713][ T7206] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.931696][ T7206] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.958556][ T7206] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.953121][ T7255] syzkaller0: entered promiscuous mode [ 144.984787][ T7255] syzkaller0: entered allmulticast mode [ 148.361561][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 149.018568][ T7345] syzkaller0: entered promiscuous mode [ 149.047830][ T7345] syzkaller0: entered allmulticast mode [ 151.989915][ T7421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 152.031745][ T7421] IPv6: NLM_F_REPLACE set, but no existing node found! [ 152.969453][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 153.023265][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 153.055534][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.456'. [ 153.151550][ T7445] syzkaller1: entered promiscuous mode [ 153.157185][ T7445] syzkaller1: entered allmulticast mode [ 154.257752][ T7481] xt_limit: Overflow, try lower: 262144/524288 [ 154.314968][ T7484] FAULT_INJECTION: forcing a failure. [ 154.314968][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 154.336876][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.2.467 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 154.336906][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.336919][ T7484] Call Trace: [ 154.336928][ T7484] [ 154.336936][ T7484] dump_stack_lvl+0x189/0x250 [ 154.336982][ T7484] ? __pfx____ratelimit+0x10/0x10 [ 154.337010][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.337044][ T7484] ? __pfx__printk+0x10/0x10 [ 154.337073][ T7484] ? __pfx___might_resched+0x10/0x10 [ 154.337111][ T7484] should_fail_ex+0x414/0x560 [ 154.337144][ T7484] should_failslab+0xa8/0x100 [ 154.337168][ T7484] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.337203][ T7484] ? __alloc_skb+0x112/0x2d0 [ 154.337229][ T7484] __alloc_skb+0x112/0x2d0 [ 154.337253][ T7484] netlink_sendmsg+0x5c6/0xb30 [ 154.337286][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.337311][ T7484] ? aa_sock_msg_perm+0x94/0x160 [ 154.337341][ T7484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.337368][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.337391][ T7484] __sock_sendmsg+0x219/0x270 [ 154.337426][ T7484] ____sys_sendmsg+0x505/0x830 [ 154.337457][ T7484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.337490][ T7484] ? import_iovec+0x74/0xa0 [ 154.337514][ T7484] ___sys_sendmsg+0x21f/0x2a0 [ 154.337543][ T7484] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.337607][ T7484] ? __fget_files+0x2a/0x420 [ 154.337629][ T7484] ? __fget_files+0x3a0/0x420 [ 154.337664][ T7484] __x64_sys_sendmsg+0x19b/0x260 [ 154.337693][ T7484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.337734][ T7484] ? __pfx_ksys_write+0x10/0x10 [ 154.337751][ T7484] ? rcu_is_watching+0x15/0xb0 [ 154.337788][ T7484] ? do_syscall_64+0xbe/0x3b0 [ 154.337821][ T7484] do_syscall_64+0xfa/0x3b0 [ 154.337848][ T7484] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.337875][ T7484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.337896][ T7484] ? clear_bhb_loop+0x60/0xb0 [ 154.337922][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.337948][ T7484] RIP: 0033:0x7fe16cf8e929 [ 154.337968][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.337985][ T7484] RSP: 002b:00007fe16de62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.338007][ T7484] RAX: ffffffffffffffda RBX: 00007fe16d1b5fa0 RCX: 00007fe16cf8e929 [ 154.338022][ T7484] RDX: 0000000000004090 RSI: 0000200000000000 RDI: 0000000000000005 [ 154.338035][ T7484] RBP: 00007fe16de62090 R08: 0000000000000000 R09: 0000000000000000 [ 154.338048][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.338060][ T7484] R13: 0000000000000000 R14: 00007fe16d1b5fa0 R15: 00007ffcadaaf928 [ 154.338091][ T7484] [ 155.609377][ T7501] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 156.022153][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 156.112488][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 156.131778][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.481'. [ 156.153825][ T7527] vlan0: entered promiscuous mode [ 156.468525][ T7527] syzkaller1: entered promiscuous mode [ 156.474665][ T7527] syzkaller1: entered allmulticast mode [ 156.940740][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 157.739324][ T7590] netlink: 65031 bytes leftover after parsing attributes in process `syz.2.490'. [ 158.075283][ T7585] syzkaller0: entered promiscuous mode [ 158.099818][ T7585] syzkaller0: entered allmulticast mode [ 158.135578][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 158.188780][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 158.229196][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.0.500'. [ 159.627705][ T7601] vlan0: entered promiscuous mode [ 160.316553][ T7642] FAULT_INJECTION: forcing a failure. [ 160.316553][ T7642] name failslab, interval 1, probability 0, space 0, times 0 [ 160.361414][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.4.513 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 160.361444][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.361456][ T7642] Call Trace: [ 160.361464][ T7642] [ 160.361473][ T7642] dump_stack_lvl+0x189/0x250 [ 160.361511][ T7642] ? __pfx____ratelimit+0x10/0x10 [ 160.361539][ T7642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.361571][ T7642] ? __pfx__printk+0x10/0x10 [ 160.361610][ T7642] should_fail_ex+0x414/0x560 [ 160.361648][ T7642] should_failslab+0xa8/0x100 [ 160.361673][ T7642] kmem_cache_alloc_noprof+0x73/0x3c0 [ 160.361706][ T7642] ? skb_clone+0x212/0x3a0 [ 160.361738][ T7642] skb_clone+0x212/0x3a0 [ 160.361768][ T7642] __netlink_deliver_tap+0x404/0x850 [ 160.361803][ T7642] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.361826][ T7642] netlink_deliver_tap+0x19c/0x1b0 [ 160.361848][ T7642] netlink_sendskb+0x68/0x140 [ 160.361882][ T7642] netlink_rcv_skb+0x28c/0x470 [ 160.361903][ T7642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.361926][ T7642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.361961][ T7642] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.361981][ T7642] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.362008][ T7642] netlink_unicast+0x758/0x8d0 [ 160.362052][ T7642] netlink_sendmsg+0x805/0xb30 [ 160.362084][ T7642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.362109][ T7642] ? aa_sock_msg_perm+0x94/0x160 [ 160.362138][ T7642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.362164][ T7642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.362187][ T7642] __sock_sendmsg+0x219/0x270 [ 160.362221][ T7642] ____sys_sendmsg+0x505/0x830 [ 160.362253][ T7642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.362288][ T7642] ? import_iovec+0x74/0xa0 [ 160.362313][ T7642] ___sys_sendmsg+0x21f/0x2a0 [ 160.362341][ T7642] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.362407][ T7642] ? __fget_files+0x2a/0x420 [ 160.362429][ T7642] ? __fget_files+0x3a0/0x420 [ 160.362464][ T7642] __x64_sys_sendmsg+0x19b/0x260 [ 160.362492][ T7642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.362529][ T7642] ? __pfx_ksys_write+0x10/0x10 [ 160.362545][ T7642] ? rcu_is_watching+0x15/0xb0 [ 160.362583][ T7642] ? do_syscall_64+0xbe/0x3b0 [ 160.362616][ T7642] do_syscall_64+0xfa/0x3b0 [ 160.362649][ T7642] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.362675][ T7642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.362695][ T7642] ? clear_bhb_loop+0x60/0xb0 [ 160.362721][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.362741][ T7642] RIP: 0033:0x7f63ac38e929 [ 160.362759][ T7642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.362776][ T7642] RSP: 002b:00007f63ad1e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.362797][ T7642] RAX: ffffffffffffffda RBX: 00007f63ac5b5fa0 RCX: 00007f63ac38e929 [ 160.362812][ T7642] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 160.362825][ T7642] RBP: 00007f63ad1e2090 R08: 0000000000000000 R09: 0000000000000000 [ 160.362837][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.362849][ T7642] R13: 0000000000000000 R14: 00007f63ac5b5fa0 R15: 00007ffc4e4b7168 [ 160.362882][ T7642] [ 161.068129][ T7656] netlink: 65031 bytes leftover after parsing attributes in process `syz.0.514'. [ 161.257078][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 161.302197][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 161.332719][ T7659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 161.433865][ T7659] syzkaller1: entered promiscuous mode [ 161.439478][ T7659] syzkaller1: entered allmulticast mode [ 162.128783][ T7693] netlink: 'syz.2.528': attribute type 5 has an invalid length. [ 162.497300][ T7702] netlink: 'syz.2.531': attribute type 21 has an invalid length. [ 162.578444][ T7702] netlink: 156 bytes leftover after parsing attributes in process `syz.2.531'. [ 162.642898][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 162.912447][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 162.996476][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 163.039462][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.536'. [ 163.111159][ T7718] syzkaller1: entered promiscuous mode [ 163.125793][ T7718] syzkaller1: entered allmulticast mode [ 163.478481][ T7735] netlink: 65031 bytes leftover after parsing attributes in process `syz.3.535'. [ 163.994466][ T7749] FAULT_INJECTION: forcing a failure. [ 163.994466][ T7749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.045510][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.2.545 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 164.045539][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.045552][ T7749] Call Trace: [ 164.045561][ T7749] [ 164.045570][ T7749] dump_stack_lvl+0x189/0x250 [ 164.045608][ T7749] ? __pfx____ratelimit+0x10/0x10 [ 164.045637][ T7749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.045671][ T7749] ? __pfx__printk+0x10/0x10 [ 164.045697][ T7749] ? fs_reclaim_acquire+0x7d/0x100 [ 164.045733][ T7749] should_fail_ex+0x414/0x560 [ 164.045767][ T7749] prepare_alloc_pages+0x213/0x610 [ 164.045803][ T7749] __alloc_frozen_pages_noprof+0x123/0x370 [ 164.045835][ T7749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 164.045873][ T7749] ? policy_nodemask+0x27c/0x720 [ 164.045901][ T7749] alloc_pages_mpol+0x232/0x4a0 [ 164.045930][ T7749] folio_alloc_mpol_noprof+0x39/0x70 [ 164.045955][ T7749] shmem_alloc_and_add_folio+0x447/0xf60 [ 164.045993][ T7749] ? filemap_get_entry+0xad/0x2f0 [ 164.046018][ T7749] ? filemap_get_entry+0xad/0x2f0 [ 164.046040][ T7749] ? filemap_get_entry+0xad/0x2f0 [ 164.046065][ T7749] ? filemap_get_entry+0x28f/0x2f0 [ 164.046093][ T7749] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 164.046133][ T7749] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 164.046172][ T7749] shmem_get_folio_gfp+0x59d/0x1660 [ 164.046228][ T7749] shmem_write_begin+0xf7/0x2b0 [ 164.046270][ T7749] generic_perform_write+0x2c4/0x910 [ 164.046315][ T7749] ? __pfx_generic_perform_write+0x10/0x10 [ 164.046354][ T7749] ? do_raw_spin_unlock+0x122/0x240 [ 164.046380][ T7749] ? mnt_put_write_access_file+0xc0/0x100 [ 164.046413][ T7749] ? file_update_time+0x416/0x490 [ 164.046448][ T7749] shmem_file_write_iter+0xf8/0x120 [ 164.046473][ T7749] vfs_write+0x548/0xa90 [ 164.046517][ T7749] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 164.046539][ T7749] ? __pfx_vfs_write+0x10/0x10 [ 164.046586][ T7749] ? __fget_files+0x2a/0x420 [ 164.046620][ T7749] ksys_write+0x145/0x250 [ 164.046643][ T7749] ? __pfx_ksys_write+0x10/0x10 [ 164.046659][ T7749] ? rcu_is_watching+0x15/0xb0 [ 164.046698][ T7749] ? do_syscall_64+0xbe/0x3b0 [ 164.046732][ T7749] do_syscall_64+0xfa/0x3b0 [ 164.046758][ T7749] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.046785][ T7749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.046805][ T7749] ? clear_bhb_loop+0x60/0xb0 [ 164.046831][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.046851][ T7749] RIP: 0033:0x7fe16cf8e929 [ 164.046870][ T7749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.046887][ T7749] RSP: 002b:00007fe16de62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.046909][ T7749] RAX: ffffffffffffffda RBX: 00007fe16d1b5fa0 RCX: 00007fe16cf8e929 [ 164.046924][ T7749] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000003 [ 164.046937][ T7749] RBP: 00007fe16de62090 R08: 0000000000000000 R09: 0000000000000000 [ 164.046950][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.046962][ T7749] R13: 0000000000000000 R14: 00007fe16d1b5fa0 R15: 00007ffcadaaf928 [ 164.046997][ T7749] [ 166.400073][ T7824] __nla_validate_parse: 4 callbacks suppressed [ 166.400093][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 166.777162][ T7810] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 167.314404][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'. [ 167.636778][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 167.692605][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 167.734699][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.581'. [ 167.847563][ T7867] syzkaller1: entered promiscuous mode [ 167.862383][ T7867] syzkaller1: entered allmulticast mode [ 168.103413][ T7879] netlink: 65031 bytes leftover after parsing attributes in process `syz.0.580'. [ 168.762955][ T7894] xt_CT: No such helper "snmp" [ 168.860420][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 169.547350][ T7903] syzkaller0: entered promiscuous mode [ 169.599401][ T7903] syzkaller0: entered allmulticast mode [ 169.897044][ T7913] syzkaller0: entered promiscuous mode [ 169.929281][ T7913] syzkaller0: entered allmulticast mode [ 172.557092][ T7962] netlink: 208 bytes leftover after parsing attributes in process `syz.0.607'. [ 172.566297][ T7962] netlink: 208 bytes leftover after parsing attributes in process `syz.0.607'. [ 173.072225][ T7986] netlink: 176 bytes leftover after parsing attributes in process `syz.3.616'. [ 173.102677][ T7975] syzkaller0: entered promiscuous mode [ 173.109339][ T7975] syzkaller0: entered allmulticast mode [ 173.191500][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'. [ 175.374459][ T8019] netlink: 65031 bytes leftover after parsing attributes in process `syz.3.625'. [ 175.742997][ T8033] FAULT_INJECTION: forcing a failure. [ 175.742997][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 175.747607][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'. [ 175.772169][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.4.632 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 175.772198][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.772209][ T8033] Call Trace: [ 175.772217][ T8033] [ 175.772225][ T8033] dump_stack_lvl+0x189/0x250 [ 175.772263][ T8033] ? __pfx____ratelimit+0x10/0x10 [ 175.772291][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.772323][ T8033] ? __pfx__printk+0x10/0x10 [ 175.772353][ T8033] ? ref_tracker_alloc+0x318/0x460 [ 175.772384][ T8033] should_fail_ex+0x414/0x560 [ 175.772416][ T8033] should_failslab+0xa8/0x100 [ 175.772440][ T8033] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.772472][ T8033] ? skb_clone+0x212/0x3a0 [ 175.772503][ T8033] skb_clone+0x212/0x3a0 [ 175.772534][ T8033] __netlink_deliver_tap+0x404/0x850 [ 175.772569][ T8033] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.772591][ T8033] netlink_deliver_tap+0x19c/0x1b0 [ 175.772613][ T8033] netlink_unicast+0x72f/0x8d0 [ 175.772656][ T8033] netlink_sendmsg+0x805/0xb30 [ 175.772688][ T8033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.772713][ T8033] ? aa_sock_msg_perm+0x94/0x160 [ 175.772742][ T8033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.772768][ T8033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.772790][ T8033] __sock_sendmsg+0x219/0x270 [ 175.772824][ T8033] ____sys_sendmsg+0x505/0x830 [ 175.772856][ T8033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.772891][ T8033] ? import_iovec+0x74/0xa0 [ 175.772915][ T8033] ___sys_sendmsg+0x21f/0x2a0 [ 175.772963][ T8033] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.773029][ T8033] ? __fget_files+0x2a/0x420 [ 175.773048][ T8033] ? __fget_files+0x3a0/0x420 [ 175.773079][ T8033] __x64_sys_sendmsg+0x19b/0x260 [ 175.773104][ T8033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.773136][ T8033] ? __pfx_ksys_write+0x10/0x10 [ 175.773150][ T8033] ? rcu_is_watching+0x15/0xb0 [ 175.773184][ T8033] ? do_syscall_64+0xbe/0x3b0 [ 175.773214][ T8033] do_syscall_64+0xfa/0x3b0 [ 175.773241][ T8033] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.773267][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.773287][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 175.773313][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.773333][ T8033] RIP: 0033:0x7f63ac38e929 [ 175.773351][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.773369][ T8033] RSP: 002b:00007f63ad1e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.773390][ T8033] RAX: ffffffffffffffda RBX: 00007f63ac5b5fa0 RCX: 00007f63ac38e929 [ 175.773405][ T8033] RDX: 0000000020040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 175.773418][ T8033] RBP: 00007f63ad1e2090 R08: 0000000000000000 R09: 0000000000000000 [ 175.773430][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.773442][ T8033] R13: 0000000000000000 R14: 00007f63ac5b5fa0 R15: 00007ffc4e4b7168 [ 175.773474][ T8033] [ 176.432344][ T8044] netlink: 208 bytes leftover after parsing attributes in process `syz.0.636'. [ 176.434291][ T8047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.634'. [ 176.449922][ T8044] netlink: 208 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.016277][ T8058] syzkaller0: entered promiscuous mode [ 177.039782][ T8058] syzkaller0: entered allmulticast mode [ 179.716730][ T8073] netlink: 65031 bytes leftover after parsing attributes in process `syz.4.639'. [ 179.937139][ T8118] tipc: Failed to clone mcast rcv buffer [ 179.996569][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 180.048267][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 180.082160][ T8119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.657'. [ 180.457132][ T8128] syzkaller1: entered promiscuous mode [ 180.469836][ T8128] syzkaller1: entered allmulticast mode [ 181.226057][ T8150] syzkaller0: entered promiscuous mode [ 181.234366][ T8150] syzkaller0: entered allmulticast mode [ 181.324842][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.669'. [ 181.334417][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.669'. [ 181.550595][ T8172] FAULT_INJECTION: forcing a failure. [ 181.550595][ T8172] name failslab, interval 1, probability 0, space 0, times 0 [ 181.584112][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.2.671 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 181.584143][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.584156][ T8172] Call Trace: [ 181.584165][ T8172] [ 181.584174][ T8172] dump_stack_lvl+0x189/0x250 [ 181.584214][ T8172] ? __pfx____ratelimit+0x10/0x10 [ 181.584243][ T8172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.584276][ T8172] ? __pfx__printk+0x10/0x10 [ 181.584306][ T8172] ? __pfx___might_resched+0x10/0x10 [ 181.584337][ T8172] ? fs_reclaim_acquire+0x7d/0x100 [ 181.584366][ T8172] should_fail_ex+0x414/0x560 [ 181.584399][ T8172] should_failslab+0xa8/0x100 [ 181.584423][ T8172] __kmalloc_cache_noprof+0x70/0x3d0 [ 181.584444][ T8172] ? __request_module+0x2b5/0x5e0 [ 181.584480][ T8172] __request_module+0x2b5/0x5e0 [ 181.584517][ T8172] ? __pfx___request_module+0x10/0x10 [ 181.584549][ T8172] ? rcu_is_watching+0x15/0xb0 [ 181.584590][ T8172] ? bpf_lsm_capable+0x9/0x20 [ 181.584609][ T8172] ? security_capable+0x7e/0x2e0 [ 181.584641][ T8172] ? dev_load+0x21/0x1f0 [ 181.584683][ T8172] dev_load+0x190/0x1f0 [ 181.584717][ T8172] devinet_ioctl+0x130/0x1b50 [ 181.584756][ T8172] ? __pfx_devinet_ioctl+0x10/0x10 [ 181.584785][ T8172] ? get_user_ifreq+0x12c/0x180 [ 181.584817][ T8172] inet_ioctl+0x33b/0x4c0 [ 181.584851][ T8172] ? __pfx_inet_ioctl+0x10/0x10 [ 181.584904][ T8172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.584942][ T8172] sock_do_ioctl+0xd9/0x300 [ 181.584976][ T8172] ? __pfx_sock_do_ioctl+0x10/0x10 [ 181.585004][ T8172] ? __lock_acquire+0xab9/0xd20 [ 181.585056][ T8172] sock_ioctl+0x576/0x790 [ 181.585088][ T8172] ? __pfx_sock_ioctl+0x10/0x10 [ 181.585119][ T8172] ? __fget_files+0x2a/0x420 [ 181.585141][ T8172] ? __fget_files+0x3a0/0x420 [ 181.585163][ T8172] ? __fget_files+0x2a/0x420 [ 181.585190][ T8172] ? bpf_lsm_file_ioctl+0x9/0x20 [ 181.585221][ T8172] ? __pfx_sock_ioctl+0x10/0x10 [ 181.585250][ T8172] __se_sys_ioctl+0xf9/0x170 [ 181.585284][ T8172] do_syscall_64+0xfa/0x3b0 [ 181.585313][ T8172] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.585339][ T8172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.585360][ T8172] ? clear_bhb_loop+0x60/0xb0 [ 181.585387][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.585407][ T8172] RIP: 0033:0x7fe16cf8e929 [ 181.585426][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.585443][ T8172] RSP: 002b:00007fe16de41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.585466][ T8172] RAX: ffffffffffffffda RBX: 00007fe16d1b6080 RCX: 00007fe16cf8e929 [ 181.585481][ T8172] RDX: 0000200000002280 RSI: 0000000000008917 RDI: 0000000000000003 [ 181.585494][ T8172] RBP: 00007fe16de41090 R08: 0000000000000000 R09: 0000000000000000 [ 181.585507][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.585519][ T8172] R13: 0000000000000000 R14: 00007fe16d1b6080 R15: 00007ffcadaaf928 [ 181.585552][ T8172] [ 183.613426][ T8164] netlink: 65031 bytes leftover after parsing attributes in process `syz.4.668'. [ 184.070759][ T8217] FAULT_INJECTION: forcing a failure. [ 184.070759][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.155293][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.1.682 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 184.155323][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.155336][ T8217] Call Trace: [ 184.155344][ T8217] [ 184.155353][ T8217] dump_stack_lvl+0x189/0x250 [ 184.155391][ T8217] ? __pfx____ratelimit+0x10/0x10 [ 184.155421][ T8217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.155453][ T8217] ? __pfx__printk+0x10/0x10 [ 184.155477][ T8217] ? __might_fault+0xb0/0x130 [ 184.155509][ T8217] should_fail_ex+0x414/0x560 [ 184.155549][ T8217] _copy_from_iter+0x1db/0x16f0 [ 184.155589][ T8217] ? rcu_is_watching+0x15/0xb0 [ 184.155625][ T8217] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 184.155661][ T8217] ? __pfx__copy_from_iter+0x10/0x10 [ 184.155693][ T8217] ? __build_skb_around+0x257/0x3e0 [ 184.155720][ T8217] ? netlink_sendmsg+0x642/0xb30 [ 184.155740][ T8217] ? skb_put+0x11b/0x210 [ 184.155766][ T8217] netlink_sendmsg+0x6b2/0xb30 [ 184.155799][ T8217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.155824][ T8217] ? aa_sock_msg_perm+0x94/0x160 [ 184.155852][ T8217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.155879][ T8217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.155901][ T8217] __sock_sendmsg+0x219/0x270 [ 184.155936][ T8217] ____sys_sendmsg+0x505/0x830 [ 184.155967][ T8217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.156002][ T8217] ? import_iovec+0x74/0xa0 [ 184.156026][ T8217] ___sys_sendmsg+0x21f/0x2a0 [ 184.156053][ T8217] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.156121][ T8217] ? __fget_files+0x2a/0x420 [ 184.156143][ T8217] ? __fget_files+0x3a0/0x420 [ 184.156179][ T8217] __x64_sys_sendmsg+0x19b/0x260 [ 184.156207][ T8217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.156241][ T8217] ? __pfx_ksys_write+0x10/0x10 [ 184.156256][ T8217] ? rcu_is_watching+0x15/0xb0 [ 184.156293][ T8217] ? do_syscall_64+0xbe/0x3b0 [ 184.156326][ T8217] do_syscall_64+0xfa/0x3b0 [ 184.156353][ T8217] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.156380][ T8217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.156401][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 184.156426][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.156445][ T8217] RIP: 0033:0x7f9dceb8e929 [ 184.156463][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.156480][ T8217] RSP: 002b:00007f9dcf9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.156503][ T8217] RAX: ffffffffffffffda RBX: 00007f9dcedb6080 RCX: 00007f9dceb8e929 [ 184.156518][ T8217] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000006 [ 184.156538][ T8217] RBP: 00007f9dcf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.156549][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.156559][ T8217] R13: 0000000000000000 R14: 00007f9dcedb6080 R15: 00007fff069dd668 [ 184.156589][ T8217] [ 185.067851][ T8238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.320944][ T8243] netlink: 208 bytes leftover after parsing attributes in process `syz.3.693'. [ 185.352263][ T8243] netlink: 208 bytes leftover after parsing attributes in process `syz.3.693'. [ 185.549516][ T8253] tipc: Started in network mode [ 185.554482][ T8253] tipc: Node identity , cluster identity 4711 [ 185.575354][ T8253] tipc: Failed to obtain node identity [ 185.583263][ T8253] tipc: Enabling of bearer rejected, failed to enable media [ 185.729489][ T8253] syzkaller0: entered promiscuous mode [ 185.736173][ T8253] syzkaller0: entered allmulticast mode [ 185.838823][ T8264] netlink: 72 bytes leftover after parsing attributes in process `syz.3.702'. [ 185.848549][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 186.123673][ T8277] netlink: 72 bytes leftover after parsing attributes in process `syz.2.704'. [ 186.137395][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 187.701806][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 188.331184][ T8318] netlink: 72 bytes leftover after parsing attributes in process `syz.2.715'. [ 188.369835][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 189.265233][ T8347] ================================================================== [ 189.273353][ T8347] BUG: KASAN: slab-use-after-free in lane_ioctl+0xa77/0x1e60 [ 189.280766][ T8347] Read of size 8 at addr ffff88807cde4e68 by task syz.3.726/8347 [ 189.288510][ T8347] [ 189.290860][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.3.726 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 189.290887][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.290900][ T8347] Call Trace: [ 189.290908][ T8347] [ 189.290916][ T8347] dump_stack_lvl+0x189/0x250 [ 189.290952][ T8347] ? __virt_addr_valid+0x1c8/0x5c0 [ 189.290971][ T8347] ? rcu_is_watching+0x15/0xb0 [ 189.291001][ T8347] ? __kasan_check_byte+0x12/0x40 [ 189.291029][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.291058][ T8347] ? rcu_is_watching+0x15/0xb0 [ 189.291086][ T8347] ? lock_release+0x4b/0x3e0 [ 189.291115][ T8347] ? __virt_addr_valid+0x1c8/0x5c0 [ 189.291134][ T8347] ? __virt_addr_valid+0x4a5/0x5c0 [ 189.291154][ T8347] print_report+0xd2/0x2b0 [ 189.291179][ T8347] ? lane_ioctl+0xa77/0x1e60 [ 189.291196][ T8347] kasan_report+0x118/0x150 [ 189.291215][ T8347] ? lane_ioctl+0xa77/0x1e60 [ 189.291236][ T8347] lane_ioctl+0xa77/0x1e60 [ 189.291255][ T8347] ? __pfx_clip_ioctl+0x10/0x10 [ 189.291281][ T8347] ? br2684_ioctl+0x117/0x640 [ 189.291309][ T8347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.291331][ T8347] ? __pfx_lane_ioctl+0x10/0x10 [ 189.291349][ T8347] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 189.291371][ T8347] ? atmtcp_ioctl+0x1ce/0xdf0 [ 189.291392][ T8347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.291415][ T8347] do_vcc_ioctl+0x36a/0x9e0 [ 189.291437][ T8347] sock_do_ioctl+0xd9/0x300 [ 189.291465][ T8347] ? __pfx_sock_do_ioctl+0x10/0x10 [ 189.291490][ T8347] ? __lock_acquire+0xab9/0xd20 [ 189.291523][ T8347] sock_ioctl+0x576/0x790 [ 189.291549][ T8347] ? __pfx_sock_ioctl+0x10/0x10 [ 189.291574][ T8347] ? __fget_files+0x2a/0x420 [ 189.291595][ T8347] ? __fget_files+0x3a0/0x420 [ 189.291613][ T8347] ? __fget_files+0x2a/0x420 [ 189.291634][ T8347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.291661][ T8347] ? __pfx_sock_ioctl+0x10/0x10 [ 189.291686][ T8347] __se_sys_ioctl+0xf9/0x170 [ 189.291714][ T8347] do_syscall_64+0xfa/0x3b0 [ 189.291765][ T8347] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.291790][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.291809][ T8347] ? clear_bhb_loop+0x60/0xb0 [ 189.291831][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.291849][ T8347] RIP: 0033:0x7f9ce118e929 [ 189.291866][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.291883][ T8347] RSP: 002b:00007f9ce2041038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.291904][ T8347] RAX: ffffffffffffffda RBX: 00007f9ce13b5fa0 RCX: 00007f9ce118e929 [ 189.291918][ T8347] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 189.291930][ T8347] RBP: 00007f9ce1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.291942][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.291954][ T8347] R13: 0000000000000000 R14: 00007f9ce13b5fa0 R15: 00007ffe0b938778 [ 189.291975][ T8347] [ 189.291982][ T8347] [ 189.583409][ T8347] Allocated by task 8272: [ 189.587919][ T8347] kasan_save_track+0x3e/0x80 [ 189.592615][ T8347] __kasan_kmalloc+0x93/0xb0 [ 189.597301][ T8347] __kvmalloc_node_noprof+0x30d/0x5f0 [ 189.602675][ T8347] alloc_netdev_mqs+0xa6/0x11e0 [ 189.607541][ T8347] lane_ioctl+0xac6/0x1e60 [ 189.611961][ T8347] do_vcc_ioctl+0x36a/0x9e0 [ 189.616473][ T8347] sock_do_ioctl+0xd9/0x300 [ 189.620991][ T8347] sock_ioctl+0x576/0x790 [ 189.625334][ T8347] __se_sys_ioctl+0xf9/0x170 [ 189.629937][ T8347] do_syscall_64+0xfa/0x3b0 [ 189.634471][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.640379][ T8347] [ 189.642704][ T8347] Freed by task 8272: [ 189.646679][ T8347] kasan_save_track+0x3e/0x80 [ 189.651369][ T8347] kasan_save_free_info+0x46/0x50 [ 189.656401][ T8347] __kasan_slab_free+0x62/0x70 [ 189.661213][ T8347] kfree+0x18e/0x440 [ 189.665231][ T8347] lane_ioctl+0xbd2/0x1e60 [ 189.669651][ T8347] do_vcc_ioctl+0x36a/0x9e0 [ 189.674163][ T8347] sock_do_ioctl+0xd9/0x300 [ 189.678675][ T8347] sock_ioctl+0x576/0x790 [ 189.683010][ T8347] __se_sys_ioctl+0xf9/0x170 [ 189.687699][ T8347] do_syscall_64+0xfa/0x3b0 [ 189.692218][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.698122][ T8347] [ 189.700449][ T8347] The buggy address belongs to the object at ffff88807cde4000 [ 189.700449][ T8347] which belongs to the cache kmalloc-cg-4k of size 4096 [ 189.714780][ T8347] The buggy address is located 3688 bytes inside of [ 189.714780][ T8347] freed 4096-byte region [ffff88807cde4000, ffff88807cde5000) [ 189.729280][ T8347] [ 189.731614][ T8347] The buggy address belongs to the physical page: [ 189.738033][ T8347] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cde0 [ 189.746805][ T8347] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.755309][ T8347] memcg:ffff888024701e01 [ 189.759552][ T8347] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 189.767110][ T8347] page_type: f5(slab) [ 189.771101][ T8347] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 189.779783][ T8347] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024701e01 [ 189.788402][ T8347] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 189.797074][ T8347] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024701e01 [ 189.805750][ T8347] head: 00fff00000000003 ffffea0001f37801 00000000ffffffff 00000000ffffffff [ 189.814514][ T8347] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 189.823188][ T8347] page dumped because: kasan: bad access detected [ 189.829608][ T8347] page_owner tracks the page as allocated [ 189.835323][ T8347] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8271, tgid 8271 (modprobe), ts 186083730468, free_ts 185752812641 [ 189.856517][ T8347] post_alloc_hook+0x240/0x2a0 [ 189.861293][ T8347] get_page_from_freelist+0x21e4/0x22c0 [ 189.866861][ T8347] __alloc_frozen_pages_noprof+0x181/0x370 [ 189.872672][ T8347] alloc_pages_mpol+0x232/0x4a0 [ 189.877532][ T8347] allocate_slab+0x8a/0x3b0 [ 189.882052][ T8347] ___slab_alloc+0xbfc/0x1480 [ 189.886735][ T8347] __kvmalloc_node_noprof+0x429/0x5f0 [ 189.892202][ T8347] seq_read_iter+0x1fd/0xe10 [ 189.896805][ T8347] proc_reg_read_iter+0x1b4/0x280 [ 189.901840][ T8347] vfs_read+0x4cd/0x980 [ 189.906014][ T8347] ksys_read+0x145/0x250 [ 189.910273][ T8347] do_syscall_64+0xfa/0x3b0 [ 189.914893][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.920838][ T8347] page last free pid 5831 tgid 5831 stack trace: [ 189.927197][ T8347] __free_frozen_pages+0xc71/0xe70 [ 189.932316][ T8347] __put_partials+0x161/0x1c0 [ 189.937083][ T8347] put_cpu_partial+0x17c/0x250 [ 189.941988][ T8347] __slab_free+0x2f7/0x400 [ 189.946426][ T8347] qlist_free_all+0x97/0x140 [ 189.951036][ T8347] kasan_quarantine_reduce+0x148/0x160 [ 189.956507][ T8347] __kasan_slab_alloc+0x22/0x80 [ 189.961456][ T8347] __kmalloc_node_noprof+0x21b/0x4e0 [ 189.966748][ T8347] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 189.972655][ T8347] vzalloc_noprof+0xb2/0xf0 [ 189.977161][ T8347] alloc_counters+0xd3/0x6d0 [ 189.981774][ T8347] do_ip6t_get_ctl+0xa94/0x1180 [ 189.986630][ T8347] nf_getsockopt+0x26b/0x290 [ 189.991225][ T8347] ipv6_getsockopt+0x1ed/0x290 [ 189.996032][ T8347] do_sock_getsockopt+0x35d/0x650 [ 190.001059][ T8347] __x64_sys_getsockopt+0x1a5/0x250 [ 190.006265][ T8347] [ 190.008587][ T8347] Memory state around the buggy address: [ 190.014215][ T8347] ffff88807cde4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.022280][ T8347] ffff88807cde4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.030342][ T8347] >ffff88807cde4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.038404][ T8347] ^ [ 190.045858][ T8347] ffff88807cde4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.053921][ T8347] ffff88807cde4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.061984][ T8347] ================================================================== [ 190.099890][ T8347] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.107139][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.3.726 Not tainted 6.16.0-rc1-syzkaller-00234-gde74998c3008 #0 PREEMPT(full) [ 190.119062][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.129151][ T8347] Call Trace: [ 190.132464][ T8347] [ 190.135426][ T8347] dump_stack_lvl+0x99/0x250 [ 190.140065][ T8347] ? __asan_memcpy+0x40/0x70 [ 190.145130][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.150363][ T8347] ? __pfx__printk+0x10/0x10 [ 190.154981][ T8347] panic+0x2db/0x790 [ 190.158911][ T8347] ? __pfx_panic+0x10/0x10 [ 190.163359][ T8347] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 190.169315][ T8347] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 190.175745][ T8347] ? print_memory_metadata+0x314/0x400 [ 190.181295][ T8347] ? lane_ioctl+0xa77/0x1e60 [ 190.185892][ T8347] check_panic_on_warn+0x89/0xb0 [ 190.190846][ T8347] ? lane_ioctl+0xa77/0x1e60 [ 190.195439][ T8347] end_report+0x78/0x160 [ 190.199715][ T8347] kasan_report+0x129/0x150 [ 190.204232][ T8347] ? lane_ioctl+0xa77/0x1e60 [ 190.208829][ T8347] lane_ioctl+0xa77/0x1e60 [ 190.213285][ T8347] ? __pfx_clip_ioctl+0x10/0x10 [ 190.218151][ T8347] ? br2684_ioctl+0x117/0x640 [ 190.222855][ T8347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 190.228500][ T8347] ? __pfx_lane_ioctl+0x10/0x10 [ 190.233358][ T8347] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 190.238998][ T8347] ? atmtcp_ioctl+0x1ce/0xdf0 [ 190.243686][ T8347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.249682][ T8347] do_vcc_ioctl+0x36a/0x9e0 [ 190.254204][ T8347] sock_do_ioctl+0xd9/0x300 [ 190.258722][ T8347] ? __pfx_sock_do_ioctl+0x10/0x10 [ 190.263934][ T8347] ? __lock_acquire+0xab9/0xd20 [ 190.268804][ T8347] sock_ioctl+0x576/0x790 [ 190.273153][ T8347] ? __pfx_sock_ioctl+0x10/0x10 [ 190.278015][ T8347] ? __fget_files+0x2a/0x420 [ 190.282643][ T8347] ? __fget_files+0x3a0/0x420 [ 190.287331][ T8347] ? __fget_files+0x2a/0x420 [ 190.291938][ T8347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 190.296889][ T8347] ? __pfx_sock_ioctl+0x10/0x10 [ 190.301763][ T8347] __se_sys_ioctl+0xf9/0x170 [ 190.306373][ T8347] do_syscall_64+0xfa/0x3b0 [ 190.310893][ T8347] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.316192][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.322351][ T8347] ? clear_bhb_loop+0x60/0xb0 [ 190.327040][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.332943][ T8347] RIP: 0033:0x7f9ce118e929 [ 190.337363][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.356974][ T8347] RSP: 002b:00007f9ce2041038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.365398][ T8347] RAX: ffffffffffffffda RBX: 00007f9ce13b5fa0 RCX: 00007f9ce118e929 [ 190.373377][ T8347] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 190.381350][ T8347] RBP: 00007f9ce1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 190.389323][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.397293][ T8347] R13: 0000000000000000 R14: 00007f9ce13b5fa0 R15: 00007ffe0b938778 [ 190.405280][ T8347] [ 190.408660][ T8347] Kernel Offset: disabled [ 190.412988][ T8347] Rebooting in 86400 seconds..