last executing test programs: 1m2.637851616s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 55.745822248s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 42.242649791s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 32.342801433s ago: executing program 4 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/53, 0x35}], 0x4, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x1, 0x2000, 0x0) 32.224788264s ago: executing program 4 (id=2464): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0xfffe) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee", 0xda}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000003d80)="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", 0x110}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0xfffffea7}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08", 0x76}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0xdff5c000) 31.997954018s ago: executing program 4 (id=2467): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b735700000092", @ANYBLOB], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 31.45766844s ago: executing program 4 (id=2471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) sendmsg$sock(r5, &(0x7f0000000440)={&(0x7f0000000340)=@x25, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0xfc}], 0x2, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0xc7}}, @txtime={{0x18, 0x1, 0x3d, 0x209}}, @mark={{0x14, 0x1, 0x24, 0xffff7a4b}}], 0x48}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00018008000100000001000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000002f89968c24c2b6c126d7a2b431aed70163cb294f8042bff1762de0b8e79a0f3c3afeb9315fcac3a22f7a5163b64895448ff0334c578244c875093b16c4b913c2896e223e88f2a341f7eb35312adf1983807ba3b702d11285ad6709902359322f292af75c4bd97dad06f2fa3561c10e93a0f85a3c9179400e05a11079dba2959df465cbd18f94cf0bb7cd809fa443b8d1404ea30fa3da6c27babb45a6a61fcbe8b14f77c564d6dc6df2beb7fa2503", @ANYRES32=r8, @ANYBLOB="08000100ac1e0001080009000000000014000600000000000300000009000000010001001400030076657468305f6d616376746170000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000004}, 0x1044) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xaa, 0x2, 0x4, 0x1, @mcast2, @private0, 0x80, 0x700, 0xfffff95b, 0x81b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48002) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000104000000000008000000000000", @ANYRES32=r9, @ANYBLOB="2b030000000000f407002900eb53020008001f0009000000"], 0x30}}, 0x0) 31.234037951s ago: executing program 4 (id=2474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/53, 0x35}], 0x4, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x1, 0x2000, 0x0) 31.148008251s ago: executing program 4 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000071103000000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd70db37fa4598afb1cdc3aaa100fc", @ANYRES32=r2, @ANYBLOB="05005300010000000800050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) (async) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000580)=0x1e2a, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2, @ANYRESOCT=r2], 0x3c}}, 0x846) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) 29.858236087s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 20.180124659s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.806378407s ago: executing program 32 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000071103000000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd70db37fa4598afb1cdc3aaa100fc", @ANYRES32=r2, @ANYBLOB="05005300010000000800050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) (async) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000580)=0x1e2a, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2, @ANYRESOCT=r2], 0x3c}}, 0x846) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) 8.401978446s ago: executing program 1 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe38"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x9, 0x0, "e1d367685ef399bfbe"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x4}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1, 0x9}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.724294801s ago: executing program 0 (id=2727): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000203aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002f0000000000040000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) 1.512079286s ago: executing program 0 (id=2731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000027c0)="dc9df1493d8457aa73c4937b0ef1e29b7fa066157d6ad4e635c41d393345e65990b6c466b14a5fc355e02b0de9d179244ad8c6acadb29840d3dcb4a149586306e60a41bfc2da0a492e289e0524ad8e43dde6a4ec8b551ae38676015a30dae137fc9e4c172565f99075b793f56f6cbe7bfe3b9b4dbbc8485b0ff50b088e5398b1b87f0281928a083f7e39f5393c2d6cf22eef58e022ce730f35317619b082e210a8f64b9ca6ca2830a20099fe9c41c951cd41811f3313a694a0fc6041e347cea8e0ed5e44a10455961c319f73cd83487a12d9bd61c1f186648177e63e5c303d7ecf3425480ed3e383651b55711cc205b83643b515666ab27617c05fc75dc0b80905d42cf1890e57c7454fe40a4dba5458e9a6183217e34b4d911541ce7be57467b4eaf3e7407224aa7948e741ea8dfc67c319ae89f6ca322326cd2a00c05956acba356e4626123ea2b5763fa86dcb0fd642971052f8c55bbc636e06b01bc45b7f61b72a00c83a1f374af03e7448e61cf556ce6fea99172ab312", 0x179, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 1.154680786s ago: executing program 2 (id=2738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0xf}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.047683493s ago: executing program 3 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5000000, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.005243837s ago: executing program 5 (id=2741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000203aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002f0000000000040000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) 857.965795ms ago: executing program 3 (id=2742): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21100500}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf250400000008000400b8e800000800060080ffffff2894d1b1486db2e3d26cf6e64b22c71fd6e882db4165a6ed6fd2ad8d550c"], 0x24}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000340)={0xf, 0xe5, 0x1}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="7961ec9036024dcbb6737e0000000c0099006d91000015000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10800) socket(0x2d, 0x2, 0x0) sendfile(r7, r1, 0x0, 0x9) 805.746849ms ago: executing program 5 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x100, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}, 0xfe800000}], 0x1, 0x4008040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x3, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}]}, 0x38}}, 0x0) 708.464603ms ago: executing program 2 (id=2744): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x0, 0xf3, 0x48, &(0x7f0000000080)="7d24ba61f858ab9efcdb20b8a9b17afc653462fda4eec319c6c4e46b323cb45ca0515f6cc97d9cd2fc93ede328eb44f49b770749bdf3f4f8e20f77e4623edd0f824a1b6ea62456587524c0c5756146e2a69f6069f63d61ad6f922046b5a895e564c97328dd1bf29f049036a1accfb2a32c3b907092a9affcc9db938ea41ec557ed937a8d638e53685de8d6c32d20b3da09431e704ddf3fae11ef07f8ab437096e83dd4547fce562d23fdb42b4777b21d1f3943a037f287a557903922500743a73cef97a0b5e91627fa58c24d9d6b67da8f7c2c7c7fba0f9e5770a853d6379f86a5429146ac459a53254188ae41abf8af580b6f", &(0x7f0000000180)=""/72, 0x2, 0x0, 0xf1, 0x1000, &(0x7f0000000200)="1e5760cccde8c05716223021e4694b8351fe01d2a6e94e36123b430fcb649cc80d5fb93a89a6c6c8f84a4052be01bcd565ec20e349846e3fc4df3685839a2b61967a9afc17fdc784900b3099121423ed95cdb6c793a4429484e52b5f830b105432ae61b0ad5e35de5509fcea5d05df059fe7560d2ec35a7f1b803678980eae7006c84e93d32e1fc54bf2e3c456be75d9e8191660832e427f8f6a2f29faebefbed202a3ae9e1af0bbfff6d2fbbaaa23231901ec446d538d9bdd7bbe1226a0efc75442d93b5b3a78e3c1df714521f091e932aafdecf7564d850a1a968979b5dd07ac1b3b702f67acf2a65b6e9c02fceaccd2", &(0x7f00000003c0)="9900f2331ac5a5ab7ed9d49debf7c8593db97f7a8be466d74c44df4a56702b90e9afb0e381ec01aeb90046ac54b6383201648790395b58d8445c5124bdc623b49cfd00815cecf81d689c9c5e3fb4bc4169b5b18dbcc3dc4a75d56510f477d4a6ba5a0cd4ed7482d149f0776075894bdb81f49d9a4022e207803bb4c1ce2f139513aa0324a16ed0c0cfc8371cbafc88a86c9b8dd71bee7cca667b369ab5fb64c59b1cec13ba43d5f23c3b21b3b6f79c607bf1d566d5e8df54eabf615004b5a8430f07102d1dad66641b015fcbb9ff65b6b79530a88e7c7f4e48c84dbe7af76e15cccccd2193bda94cd9af95b0af8a98906784badbd873787f5f3ce3feba87247f8ea0b48b32546d5ea3fba82e3d681613f5ed7fc18947e8a25fa9214b4f0916019ddef07102313cf6106e94e68dfdac1b28896499faa8e75971069db1132e46b55e7de3429fd7b3c881973288c3436c6645e2a9451baf123aa617de4756ef0cc8b1bdbcf9eb04c41c1b5ec783675444a18e7ab122f61e96673b9574c85e765cf2c4cf2aafd68431ad6c1c03c221886a9d3bd973fc6fe2c08ec28b9e9d08dbdfd12ddbdb51b75273ff6492ddcc144ff77bc362a07d1feadde8075f29b7816dbf2f04bd86594c0047625ffa1394ff656656a245e666371998c36afb06ffb3100c947912154c28c5f5185cf6385487c88b4244ec9118147682000b4e897ecac5ea1bbea9034945089c726b4efbb5005e35c2997f5bb482044f2708c71fc12f2aad836682895d3c475a0e424e71758e2845723c15c1b15174775de7a258c7918aeaa472750f6fb49131600f4e0e4acc4f9f751c0a70899e0e74b6c46b6405b6996406663815c40bc05b90147ab4ca3e1e484a81303748de51dc1160faa81df493e52d513e5d330ef8cc4f678141c97e97a85d564b60630b2e5c760abd40c189443c069a3b5acfe967ff292a5eeadd51c51d4986df689714939de8d5c9a2d244e9f5b1d6cf378ef1a1bc27d87ebf9e40cd484124a258c67c2f08c79d13bbe2c413fb7901a56987d507da678ca217c1fc3bb9793006e9303aa58f5b939390ed4feb8e265f31ff4c5be968be3b2c0140756626660d9310d832245c8731cc9f006ba9a145caaaad7861e8696b296893d8c094e06419972a18d9bc96a2d6900deb6dfd3e123e0937546ffac1500c7d5207512a1b51282c50e7e22c10919df24cc8d1f1ce2d15d196a2de0b6c18b16d99a16dccac59f3e6f99e0cf362ba3a35c604d45520e62972a13a7a1a48ed80f5e1361ba1ae0db7b6d858dcf6523e55043354f7c44d07db3a8eff3bbef7de0d3d460405f6aa82e94481767ffba2a54009a540cc5e8dce0643d9549cd9b0b8469d4d0926888a842b87f12dac8709f7bc4d461e149cbf0d114e512e4baedc74e4a1d6dd6b2eb0365374a1d86995969cf32a3f209cdb0ce6550c58a183aea5f3ed7160a53c46675189ffae1e3639d16f1e64e383ad35962b2493ed5cd97a87bb8145619e66d1ff438ab010e492faacd466306746e9cd295a772ee353ddcfd4f3990fe495b4f83f82fed0214bcbf2facc9f95fb1dcd3c46dafa2c7695f07f9e7bdf98a84d2707b468ad718518a72e3374dfd02ec8cc1a5013db7d4336e66602a509abab542d19c75dfbeb24f3aff177308fd8bc73c106452182c6258ce90e56618c634fffa3973a6a124cc42c0daf74bc497242fc9e69fc11bbfe088c37da8cb620f5d3e45f15a90fff3e8cb7a578eb10b3efbb419c0bb6dbc389bb002579d77078fd16c5b6bdfa165971b25c5da824e63225635f21a8344a72ad448a4069bfc0fbdd0791e5b92493c5bda46c3420967abd8f43a58e32f73d20c08ea0c0f360aaeede032450f676bacd7c5a6a8be14225cf3d2825b1614a01e9f338e5ec6c6138767df16382a2475960605f1ef86c2a68862afc3381421f9eb3fe1c7d3533b136f8a1d57183f3a2536e0a04a8ba4c06d0487e9813f6c94c7f125ae9e70010995cdc72a8ef5dac7f6aaa06951df37c09d935179718516b2b0567334093ee704284ade2e00d9edc576e4dd2ae08b8f99ff353d92c20f172c5503ba8eea23879c82529e214b0c94bc2f0f7b59d15809995c6ebe6f9a73980fbd381a17906d2ee656b059526d6e34b186d929be197f677b72c75ab520e8a04c5d551e770ed1a54863224792a6855cc2b1d8ff324c486e20f00caa01dd4ef73882bd79e114045e4d8dd180a996a2d19b623c512ed3a28caea1df734fc18c1100387091eaba518685626c6a51a935362979d758acca27b82095562b69d8e3f8f889c65b801e2cd9d6018dae6d0397ae894a89e621d53b607a3cf9adc2483a61a1ec6e75b67de2242088815a91dfee4f60cd730233f7ce1ace4ff8c44b991bd8606f6998e5973ecc76fa3e81aac4b1190ed2ad5887f0b86e83ce11aa9ffad49e4b7529ac4689e8857757e8bfc275428a6da72c1c1c096d16beea7f558abe0cb195e9e6d3aec847c823f9e71963a26c001ddf7bea59428f84a1ef544c209e8dd296c9b33b827cba54dd94490c4abf6a5c46ed82115147e9d8e10cfa46675c8d251dde61c98805b9f12982ff59d857dea998287696356b7b931f58ccdd34c3676e3f57aad801313b3ff3a631a0dfab3d5bb265cf8bb7b094e3c4e894c2a043c3b87ac094bb9150d0c3b4304326a47834764234e5a0925360264181da71d8b5e6b7226b5682c02de4617b192ad9e00747a1cd5eb4342c5f2c06467d7c53dcece5f2ff7f5ca68082be842e55b7d7da83b3405e06757f8ac51e01630f6cee54e2d8e302fa128f206b43f371f3582f01b83a1ec38255d9f6c23ea8f27bdfd230f1e1d7525edccaaa8c1a66ac8cb1a9e47098c4a8409a40357df01855b75b508af8c92ec06442aff3982983aceccd725d0a7c53497ba6ee2c0e0c445402d1ebde49d686a15aa8110b84cf865b339b2b8173e149541d49bbaad00f534d88416ef44befde56c0429e26a28a51e9cfb22f3aa2f818f5187158e180a8b6a2baf0f6d1b84b79b90774469a9955dd46e730276925a0866a53cfd707e9bf01b3b0da5503f37f6d08ffaed6c4a6b1bdb4130284188b9782295ecc756662aa83134a9c6aab6c2857da4df0aeee8dd5a168b2e7ce0d12230f6cd6d80970b84adf29747111b0be7cbbca1462059da7aef402f0add9e1ec81622d9cd034545bdbbe307ba12a773c19ebfb22080c47d8f65f2173d671a22f4142a4c55100b26896e8b6a540fd330059093411d97fe7643a77029448f6254c01c7f17dccda90abf6bd51ce975d7d31a8c7c87327ed680493839c3cc2945110d4343dcd66b42a689b8e60da9925d98e2587233af0e883e298334d34a1b501605bfdadd2ba9bd0a6272c413e1bd2bdb8758ee2a853f3d59bd5765afbc73bb63c0492574b28d59e747246ea313d9773f65abe54dc2d47ecb1dae884a30aa2acd29d17958f85e4423039c10670f047477fe9d6d9c426cdb6a1a29e2954fb7c15d8c7dacda9c9b85f7361aa99fd758811c0da9dd00192795a517bff1f6cab2599e534cee0bfc504690ddde075ed62869fd8a3a3cd742f906248bd46d75b458131cedde73abf66246b63ef4cccadd7b35e981240c1f17be19370fcc53e6e8d2b70f640a70fa99154450565ad867f729dd8fe2f14c213fced35e4af68a0b9fd9915b7406c4a1e4d1ebfa6bd85ff7c0f039632e826830a98114034df480b12747d967252ddc7cd8b366673fafdfaa8953cadca8f2c61e072ae240a39d4190eb068ed2a0bcf0a99867001d1e039892cd795858cc2b5ed0f5c245a6e0add7a856cbf0b653faedbae97c817ec051870d6020efe9ca0f3d7d81dbc96dc922390b8a02aea4f98deff4b2d184e5f6845592a4bdd24615270e241f05451b550a891ca24eeadb24744f1afd89a5319533fafe9c1af2919523dbe9f9689bb1abb81f388718b02375add0289f996030ccbd09173c5f0ed5a16b8353b6e44a2411547ffa46bd4c571a78f17aa0aec99de502649bf803de9fda21acb71bf3f0be3f9789e2449647a6a504ca1a25851390192efd451d464c53f934b9e521a84f7b5f5ef09c5edb122e7858cebe41b5a89d71d95ed5c1fb77dff7b86ff913d62aaa0fb0d8233aeba78bf92809a3ecb135a2ab79b92a06c3d9a85f1c4322276fe8495658c664bb138b659c1007343b3769ce5ec7ba813ab464d30fc62e9dc871bbaa02f525d129b136f5a9a5ec68263ee52cdf8e361ac9b5de36fde7b87434ef2b423c5b3411056021938f3b9bc0b178ed8c3fc4ae9cf6198e50870ac111ee7b55c2e01e7e2ba9c6e81c620e7cd4483d8c9e4ebb202f3cfc8fafc0e24913957a037a5aae5259cefdbd9a524d461fee3cdc813ebbf45752c7da5a01f8780ba13654e15dd6f92f4d52a231ebc92ca9086183cd9c47f6600aae94d1e1e2dc0c142ba99f6587a3b29d30623a326de0af48685f8d6f2c28ce1894c493528578e57c5aecb76ac4bf46a7790adcea68b2080f57278105e718d04c177a897c46494971bf0f7f9936845803981e4daf24be27f3136a5322b54f8755f576b9e80541b1b54f3ab6c2df79e2c8141b8900eb4207502fd9fb59e19fae24f48edfe76fc4f492097f89c9211e222157887ff3ed9051dc340d4a45d5ed018b5eb9edbeee0b9083f61ecd39176c0467e7d0e24a75c4ab8e6ffa1614672bdf4c99afb32b9f8cfdb011aa56c087c7aa32eba0893db0d7fce41a5ff9ffaf41f717a044d2c2617165253357328bc8d896a63da3fece511276954767e91457d5954a3fe33755c7b22611a3122e86bc7f7d79bbd10a7fb10a7ba5745c755d6f9ee012ab0603a6b5c09694928c70e2ef276f8c64ecde0c44ff199446f8d1b9cf5fb84a8518e5fd971fcefb001566188fca5c6794be208e47606fce855029ad967ba29f50eb18826809dfd0438ecab11352ae636723ef12b7c382665dedac8f21b43add40f412416fe556de7ad9e8ac3205d999cc7f8808f112b0a5c8ab2a02834c25e5faffe79c360fb8c1c47e63a20c39a91416c455fec62346c8ecc57d94f498a7b8ccbadfa879128d1c4a1afd0b39385590828e58581808b33b953d8ae4f6a2906010229d71f6240beb105d9c5533c146573834d30d5d2222dd12bf97f63964ceb0348e2a09906300f2ea09480892837e5b325b4545d19cfb639e4161eaa7ebbc79096a92ecc8c49ff5a9efb624afc96cded0465951edd4aed37114cb2cd7467a3666beeed6844fa14fe82755a8b3ffad0aecb704ae2a40272f7fceb2ad0ff0d50afb669f026a53749a7825b5b1514919d3018b1d85621851482fd1fdf6d9e16a4227fb76748b9c3fdd531558714f685bb3e71dde7af478f5ad05fbded0c40351f11455fcce523a846fb547446187dc4fbd0448ae0b5a5e03cc2b17a119f2948e9f8bd0ac5a3f78d99603a3885c0dd661bbd355bbcbeb8163bcf64574dfabe85d491f6276c81c0d9bbcbb1f06ac0318c3e8e890158a02470140f85aa37142344da51126f3c219eea519fce0f9af633eccb68116d89fcd3bf270ed001eaf3471cf180be687e5d1cf4c0c0ef502e8b1521da71a92a842c4c4a9ba54a3ee6665a6e00d22a308bac352fae22ba39f93046eedb8da658d3fe9fbe4e8b7d23cad7d4849edee230dcb615052ca42ad546e2c8c6990db05e5500de5f9e8f6ed82254f315cc5d90532d245f9ace4d4a0b3ec1e496dcf2f0607bb74a53185d625cf28d108b3e1cccc1a7599c273f5c36b146e9a216ae5b035e4432ec1080abfdef5dbdc2a7ba0a81cca17153a2f46", 0x4, 0x0, 0x6}, 0x50) 654.214106ms ago: executing program 5 (id=2745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc000000180001801400025c6e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 653.890238ms ago: executing program 3 (id=2746): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="29a3f41c0f672ab8dc4410db08ec299836f9e68586bb73e6e2e5de6ec5de9a1e2242160c0df907ff73a0fc261f6b3975697a9a68dce4397aa39bfd3a3db85ca61dcaa47ac04f05c85b023767050b5e34fdacd27ade938604b33fc20548ba", 0x5e}], 0x1}}], 0x1, 0x20000000) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x6, 0xba6, 0x8013, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x8}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400e800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x9, 0x0, 0x2, 0x8, 0xc9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000280)=""/254, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0xffff1a4d, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000600)=[r0, r4, r1, r5, r6], &(0x7f0000000640)=[{0x5, 0x3, 0x9, 0x7}, {0x4, 0x1, 0xb, 0xc}, {0x4, 0x1, 0xe, 0x6}, {0x0, 0x5, 0x6, 0x6}], 0x10, 0x5}, 0x94) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) 630.032145ms ago: executing program 2 (id=2747): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x17c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x158, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070ebd08ccbfb9"}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2}, "1c6d5efe388b"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x9}, {0x1, 0x5, 0x0, "e1d367685e"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x2, 0x1, 0x1, '6'}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x5}, {0x2, 0x6c, 0x7, 0x1, 0x1, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18a7f}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0x10, &(0x7f0000000100)={&(0x7f0000000300)={0x5, 0x84, 0x3, {0x0, 0xea60}, {0x0, 0xea60}, {0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "96b240de068c9d47"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 580.963157ms ago: executing program 0 (id=2748): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001080)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0x1000, "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"}}) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000010c0)={0x1f, 0x0, @fixed}, &(0x7f0000001100)=0xe, 0x1000) connect$bt_l2cap(r2, &(0x7f0000001140)={0x1f, 0x2, @none, 0x4, 0x1}, 0xe) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000001180)={0x6, 0x3ff, 0x4}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000001280)={r2, r4, 0x5, 0x8e, &(0x7f00000011c0)="46bbab10225e456da8db4e209c30992d67225da6bf1c34a5e5434df1b8045a94468211e307bfc95e382173984e8caa892e76686c092aa82a9c11b4484cf244c71671786cc7c0676e56950efe80ccfd47c0bc94c0a1be837808ad479c875534b763c57418422c3fc54b3c75bcc72ca0e493594249f09ba977f3736b55de11788b55f10ae91c6e11ab6c2f4f581cf2", 0xc2, 0x1, 0x9, 0x0, 0x8, 0x5, 0x6, 'syz0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0xd8, 0xd8, 0xffffffff, 0x258, 0x0, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000001340), {[{{@ip={@rand_addr=0x64010101, @empty, 0xff, 0xffffffff, 'veth1\x00', 'ip6gre0\x00', {}, {}, 0x67, 0x2, 0x44}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x3, 0x1, 0xffffff30, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @local, @remote, @port=0x4e24, @icmp_id=0x65}}}}, {{@ip={@local, @empty, 0x0, 0xffffffff, 'pimreg1\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x33, 0x2, 0x10}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @multicast2, @private=0xa010101, @icmp_id=0x68, @gre_key=0x233f}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x400, 0x1, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @empty, @gre_key=0x3, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x2, 0x7], 0x0, 0x2}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x2, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @icmp_id=0x65, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) getsockopt$inet6_mreq(r0, 0x29, 0x2a, &(0x7f0000001880)={@loopback, 0x0}, &(0x7f00000018c0)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000001900)=[@in6={0xa, 0x4e23, 0x80000000, @remote, 0x96}, @in6={0xa, 0x4e20, 0x430a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x1}, @in6={0xa, 0x4e24, 0x1, @remote, 0x3e9}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0xfff}, @in6={0xa, 0x4e20, 0x7ff, @mcast2, 0xc8}, @in={0x2, 0x4e20, @private=0xa010101}], 0xf4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000001a00)={0xf642, {0x4, 0x5, 0x7a6a, 0x1, 0x1}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x604, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x40001) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001bc0)={r0, 0x0, 0x36, 0x0, &(0x7f0000001b40)="a79e53c99e4aba4002ef7ee65c1552d1e54e5d4e97af57a638e35e754c985b6f0be150f7005cc7a31cc3b888888c2d8540dbd8edb46a", 0x0, 0xa9a4, 0x0, 0xb, 0x0, &(0x7f0000001b80)="4dc12670d76ef0bb0e6b03", 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000001c40)={r6, 0x1, 0x6}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001cc0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d00), 0x280000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d80), r10) sendmsg$IPVS_CMD_DEL_DEST(r11, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x70, r12, 0x100, 0x70bd25, 0xca8c, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40a}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20008885) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001f00), r11) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, r13, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x1) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000002000)={0x908, 0x3, 0x80000000}, 0xc) 524.357405ms ago: executing program 2 (id=2749): r0 = socket(0x10, 0x3, 0x0) unshare(0x22070700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r5, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="110000001000010000000000000000000000000a78000000090a010200000000000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000213c0009800b0001007470726f787900002c000280080003400000000c0800034000000001050001400000000208000140000000000800014000000001140000001000010000000000000000000084000a6fa949ef1ae88dcef04a74c008c37390147513e443482ce2a348e8487ab5b61aededb21b6438b543b0966ce8bf31000000000000000000"], 0xa0}}, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d216373656300000c000280050003000e000000", @ANYRES8=r7, @ANYRESOCT=r0, @ANYRES16=r2], 0x3c}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r10, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000600)="f4c8d9603b2078c0bf42b6a979f619aaffd100ba144c6ee05f6f5aebbb3d7179a1ae40d6c4198136149303057a0263600ec0a16b77f3b7d34f46953d10b98156498bbfbddccdbda2a8db481af58aae75fee739b1b0ff89c399", 0x59}, {&(0x7f0000000700)="676a8358a50a10fa38f7091363678168b0a24ddf27be40f6444f1a1b6185473a59b036748a6285e9d78f4f79ae9cac0e48773a4033e94d12c9c1b5290cf76da4566d2d05788eb8bd3b6a7927f639df62aa2c3b9c82868a9e276a3be7aa504d0babdc0301ffd1bc75f9ed6fc930ee833baf3259fd391bbfc01db79f157b8fac", 0x7f}, {&(0x7f0000000780)="e2e55852dde4e9c7f32abad99935723891e89b3ef19a5fecbe42ab0e8b92bc77757402a4e7776b19671d0c054123c0503d1ccfdbaee6a2d3b53d6f68bb8b2fdda9d4a75001937b5b97ae67c6fa5290fc97ef31858c6eaf27b8700e0f626e7af415bb250ab2d4449d8d9f4480a0a2280b19254a", 0x73}, {&(0x7f0000000800)="8f1d38ddd9e5d0b0669d91f7ec1a2624d0be224f652e0d60cee49ffc5e66374f4572b92b6c06231b402b13a401311cfe2fec3ae0403f8b0eb3869801fec0dcbe62495d57f9a3ea58c23a26e7e8cd100d59626a782e3cdd8ed8f0a1e8f83873aceb5dd9534816a4040a52479a4963ed3eb7a5bee8bd457159487689fc12902ffad3291b8dee807e8277ad14e76de331f05127a78febc1cf75b4cffaa16414284a73787dfcc966b69e322aa6f5ac9b933f4fa742684abde17e", 0xb8}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="68e86a35fbe07651234a07c589734300b686bfd2b270a74a947f641683c4eae3818ef0a46c28bcea2d93fe5222c9865f85a2276ce20e2a95dfb7c6905052439bd184d79f2fa1b0abeaaab83ee35846cf08d65e0fcfec6c9dda372a428227ece0f31d4d33804cb3e587927fda90b10a96e7be636c1c8db4e15207fbde12f0b8efd0406120b920df67d5f4124d48e9be20ba3ee32a6c7f915b29101b5803174e63ca148e9bd4b5ea69113d40256d7bed292a74a4e0f73610e852204ca18b223d7c9565580d276ce6e23310cefcd8a809eb17ae8170c67663e8b2d95a19e3ed3a4bc6002e1b7df5ad2897e4c13b7137ea8dbdfe5ba83d2153d99e97da4a6be5d01f2f3f905d08b1cbccdae40f539626c2a49645573f07ea775f428c06f0e2f4be86a5b9fe7e66c28595572b46010f0663693dccb2d0172951d006b6cbda9b7d9503960598f04e5f6d22a2623565644b99ded2cdb340e150d8c517d24b486ec46901bfeedeb4f76085792051076dc49b3c8267bd2019a86988c220bd02deabea8b997db8bd18a1e9703940fa0aa74a8c80d9aa39689bc2c728549fdb0da4702323b7d30aa9b6c153c647b3e55652eef831299a8de8c6c92ac2d8033acb29cdccd999d400f31a96bf28e42a4361962cf3ac3d1ddb08673ab82e9d836e004b253a0e8083f6a265a4133e6f4635127c93dcea166bcd79cf1b2614a2b2c350421890156759a3a732a6a8e24ee3ee102393152fa3530ecc01fcbf97669ecc78f1426b4ce65857045d0b720c47da6071a61224ec36a934b70c0fa205c9aec89102ee28657dce470a8b332c11f465e962e0cd89a1507a09d5449dde8557c2d52379bb273702c73c02ae2157a1fc0f1e98d5bbb2c51f887fc091249fab1af884678b31ae7fbd1157628d426554b5551e1025a7324a103ba425a026cb7f4ff0068b5af98e27525e81d9983d727213fe5719f0fcb7f32b8d321978a32ef1a17fdd28d87adbd92546e8c069137d10496b82145cdad762c057376c10a84aa17aeb25217486e5e27c7e7efcc1881920039196bc4935e35ac8be67210fe5356f687f628d1694e240b52bfa684e84068f26dff2e8bdbd06b93fdbfd849e69b790356e308f9b46d191c408ac1bf46de2a1ca766dc951994b566494dac7cad46e5abf20357955944c6fb336d7503502bcca9cad70040239d8b5227b2af048ad8605af8c4033cec69da9d08f0b66ddf669ab5f3cd228b99f7ecbce481e7b099899b7e489150f7aca7a386ad986fe2754aa3402463f8676919418bc8ac32879b693355a6b20f8aba33c35e116d395730093ee22b1266cefa6936cfa1f11c2bae8153789e64aa088b466b8b3196ce611d929a712f3864bec73b65d40e2670169d39b3f30076e60c0476670e079154f0df91884e175f6cd6c0106bf8db6e619be88b16dbfdf9e3a2c6d589b2ed3681ee362ac7d224dd6b47c0ec50bda4314c0327846df9260ab1bb58996a08e3fcf181a5e919bba78d0c6bc8ff20fafa0101355ad9b7f253977b9ee8ba8ccda5b373f6cdd12dda1f532b10d317f63db80b0a66c5b175f7c5ffdb31d934f400ec6235c97f090d5e99e9c63c7e4f541fcdf5c0c629c8dcf492bb5c36b25ec6423254c7c867ca5e09144fabc219eb7b0e29f91930ec95973e3cad741749ff612e704944e5ba5c8879a44ce01c635458db0eaeb18335185ebb0f7d59f2817de96343621c0e3128a1247a87e1f5c3b79854133d9fe0bb08444a0975b127c9af2746f9845f544ce2751944f189408f29276ac859fb575d9796775e80051c7fa28581d0e8f7f5630fbc56c17f98f37e360842960ede1c111534efcff75ae2e57e7ea51c2047dd3af88904a157508f68cec57f7c5acdfc065ff0c87e09a454ca2726f8d2e9dd29c6fcd9f10bbf5c1eed2e6718b417c4625a24c7a5d03834845ef71358fd5e8fe2b73eb3d3f6f48bb71244d8e1b0c4ac1c54e80c543192d37a99875ba49a8fa5179453e5846b7f4065db77c50f8feed1650f5d66500c7be4f516e0d6ae7baefc695ca93f62154cfda7b4d55198d11f4dcfbe2ab7814db779cc764de161cbb51c90e9cfde42783208f3fa6e3acde53b22b597dca6f9c5db8f8e9d673e45fc7310152b5e5868ae01dd1a311b3affe32c0beacd70482bdb547c3374527738d801a12b509c79b199b54f0f75b6722772fd14a676c6885abb7b882439d9c149e9647febaeab96541834b6222e4b528cdb9c46d506fefb998b876354f5cfdccd10d15bad9d8e9e0817dae06465361ff2574475b5b4edc8d7eaff6212e476d1444f35f60a8d21f6fc833b7ff570afb4c79a3961b7772527e9deb8afd4408c4dbceea24642056e93b3d14dfeac69ba8255b5abc50fe15c46391be70e392058356ac2f3d5af463d3785a3378cc81d0d2e9eb97615b22ad2a10561f07ec6eca8d63dfb06d8bcd8bb79416b03e3e80bda5dbf579c8b4659b6b4610dc468cb42b0a06d22acf38a7fe5d5cb3961ada97a1875683f05b3fcaac29c951622192709a239ab392811c63745f9fc78bb60ef97cd2d85d79984d643bf47892ef3b7c07d5f19c5999efb45cf27fb02e2ad614bdbd23dd47789452af3e2e5afc9c95c8fc145824c012ae083c78c08308b04c7f27e2d3a95270c38b9452405ec882ce76016eab7e0eb4f39e8c561349a5783e2d058ecb967532d42172fc201c6f3ee2e6573ff54c0f7d206aca00039c9412f3818a315fbca17bcae4c91f63701cd8592c8c390a3553f82c59bfccb4d51e867f5eb578770e98297663fc41de307bde7cbebbf20661bfd4968cce0eea697f9eda7810bc59a970297232d94e51fbad44e7e8d7f677ef84efca42f9a4f3b2fd05e3a443307c0204bf41202e7e635d2372e66b49a40b6e1073b7f10a5ea24a1d203d9cdfc5b4b1aba86f7dff0eed737a3e287e72d892ef94ae42a7ea611f1cfbb37e7a22ea81cfef0bc4483126611b0ee623c0ea30a182a57879e60795c4b93a1a6e39daafc4575781d05ae040fb7e39507484c54f5561296c8379945ced5afa1d72c6d1699123aedffe5b0bf5dcbf005dfa82cba1a2692cbc318e0b2b62629fbaa004cb0c67c206d3eb71d9b9b99b550b4843dd88fe30c9b736a3bdb300e5eecbdea07fed3830aa9b5487a79c59338515a7ada5238dbb02f8891e351cb0a76433ddd3c9b73f7f0455ef0dff218c8854099c1f80d5982794948e9389c38a8e108d2eae837f1bd349413fc857be0785706de875aac7872832421a358401f7be919c3e673c1b8ef70671ced99e356ef96a240cac676d29936218343c08b6a30323b87da93c18b487685c63a84356a830f9423f32a62cf153fabe446c478f8215b228c1ba617286257300b84392315e161c5bacdfd3fd4a78e9d89e34cf3fdfc209f05e6e009728b3dac2bae7b489d4804935997a9bc305eabc9d945b4d8aa50ae9d771b73fef7ee9e1c10ee0cd3a855fff35829d19233128d5b4dc27ea9a3dc14ca28a7025b13150a18c42caf5fd12c967bc41e00f2a6c47e49d39e0debbe5feabc443ad3b71b902eed619fb1b56381fe6461a3513be034efc25bfba0e02bd219b488a2650e09139a35e7958b2ed34a6666ab9bae78eb56fcc759afe950c94260befcc9eee21d62051a8a616776232739c0d5afa5a427d4dcb9dfe9de8889eed97449c1d68c0179abdd54b0d8b59b250470ba0559fb3073877329f5c4c3708a635dce68363222ff6133bdf72ebaaeda68798930a5f6de097982af1c3a1357b7b365af88ca588aff52059559d43bcb35a01326fd1469387bc611c69a449d4a5d033c7b0bc651d93f4f681e6c682afa6b3f10d985ce7e17223625ba8167692f4bf796d6e5c4ddd7a88aaa60fbc68e5187712c0264fbf7a125bbc2406d626e3570ce6da831349a04e1a26e3f945d5ba7ae65ba6460e4ededbe6bf1f6525277db8d8d9874be5427b810a22e7969974c79e132ce38b68ae4f115bf0d902360bb2d22271450a38a820bf5f0a20fd429aee3f193bb39c72c17bddd818dbc7dc32270a97a77ae124b199c181a3bbabfebe7511f3f733631df200e7ab2e4b68d5d115e8c2dd76ba24d5bb87507ab7fbf61a53bc78141e52914aeb4b62392d716374e2697e42c600cf26ed65e70867048ff80f2ee6a043065ffacf1b120e55965e54e7c0d7127fdbabe9fa1bef19c5c5acfaf2049e1273fa57e857718eb33aee2d5505c458dbb2c7face6e06e5241b9e3a47d4a8101b264d425a9856646148dbdffc48a82267702e27e7e82dec1e760cba5ffb63a04280551fd64f8b0bb8bb3f47d07bc564becd5d86fecdc8bda8cdff3360addcb70e5c24640973a456bffe0f8034b289eab5b653b119e09fb2e833a3f8341d7c39dfb22619631567a4fd4400dcfe80edebdd7e60d8e37b7ecbaf32d7e2326b47f0ddc1aff4e2b5e8bda76376b9007c96ac3c825ab4fd833a8a0aa8a41bc205bb4f2c9730a2b38a2a53c615b69002af7ac768e0bd41b2200b9c0be044e8c6a656058b9dc15a12a33b31840705ec1897fdc62a3d606e1f1169d8e7596221b8063708e3b3d47a5ff1339222b82111e302993a7bf9f75e79184e84c992addad842ac4cf16fbd2768af059f0f15de4070c350de6a13b3f2ca0a8d76beb6e51e9cb0a2aa54d64274ba6ea48f09871b558e05cb9768f23cbb3c6a44828c9e81c2f6762eb6725629456770f12b1850e376c5546d56257db9724284fc4efccebb78664c2a9baadc06132c2c3c5cd6ee09cadb8b2a621362c570bab12f8e87f789d69678664991248dafb7bf623dea1558fe60ea43217729a6f16f63bf0aa53dfcea809f8fc290c8ea08030ede2a640cdeafcd94272d9537cfd9c272ea3473c458517f42c8b57b05537ebd8ff92477d2bc770fd03efd7f6cc172f4d325deec3005c3612a8bf4fa8e5a526f07bd98244f2f3436a1c9157e9dd8aa35e642ae491eaf3c65a07bad59cd8a4149c57a87b23af621bd41c0ef12f13fe315cd960e0713a5d6509ea9f0217173aec2e61c9bcb54153a055c87b5292f822c6fd55ebe55ce34154893a3de0b62492512adf8f7bc7bccd6c8bacf0a693a51f8b46e561546b78b2b4a6d65887c72bf130a98e85e97d7adb7c10f6f910cd903edfc5a185ad3e2a869c53f2c6ce369819cbf46bce849c73e59515cdd2516eeaa8b7c7f7c0a0bea48b8ac3ca2527d9c8daf6514ba7f09b5be309d0a894579e47a04e9a3c1c65d070412cd4acd07dfbb5032ee2a16e77874a056d16d2da634dbde36fa3b5ba8564eb5eee356c01cbe2e61a428dc91cc4263e90640f8d6c776544358d6a992c740c86bf139f2f1f5acaf3f8c34603908c300afb1ebdf67e48e160f3c6255618568f723bcc813464c8cd34b518750fe1b150c00be6d4d65d42e82df93bf2bbf03f52e76cd403d656a69feaae11da368817676e01818e1cd1fd702c1c33d6132c28a6a56a4187406c07a2661b9a7b90e662b24f8fbee9b4cd09c30648a1d980fa7147df6496763b9c3684e4ebe5ca0ea22e2ee38376f91d6945f1f24be0703c84986cb8a34d080124f7b403412fc6dab955bef600d0d1992c7cf360ed0336262b74dc42d247dc7a6342180f8a63025ff97b467d1e09ef8ade169a52c0be31eb99edf024a37cf38b6bfcac18a95f65d7945bdae4d15d9277737456520d108e8e7370a3e4d6aa5d0bb678f615d4667b5d3f6d31f783886611f862c7c8802fe1e95adcd1b512ef4b495e3e9e195cccc5b79d958246f328c0610c6b94e464025ac2feb4b1bd061e8f8415f6288d44e9a7cc3e353", 0x1000}], 0x6, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"/400], 0x190}}], 0x2, 0x4040040) 430.181911ms ago: executing program 3 (id=2750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) 429.831633ms ago: executing program 5 (id=2751): socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000002c0)=0x8000, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) socket(0x1, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 367.244581ms ago: executing program 0 (id=2752): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x11, 0x6, 0x7, 0x1b, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x9, 0x6, 0x93, 0x0, 0x60000001}, @sadb_ident={0x2, 0xa, 0xfffa, 0x0, 0x7}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@remote, 0x23, 0x14}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0xd24, @private0, 0x1}}]}, 0xd8}}, 0x20000000) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f00000058c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1000, @remote, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000940)="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", 0x54d}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="480000000000000029000000040000002f05000000000000000100000100c2040000000801050000000000c910fc0000000000000000000000000000010502000200000000000000fc81c427ca36f87e0608319239d2c58a62a2efb9b6f683a644aa3b25aeeb136abb60891c569bb706d5eb1e31818f9205744cc688e60fc4048b9c1f76af3b4f91bd55486d71b9f3656654189c7a978412b337934a996a0f71625d7c465f96d8182cd09684876c952aa878ef71986c3d248f4c53c0079f165815f2eb1af55f1c0d091e824e8ba1be3103b24f16ac439127042170ab"], 0x48}}], 0x1, 0x0) 293.490896ms ago: executing program 3 (id=2753): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000203aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002f0000000000040000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) 287.624462ms ago: executing program 5 (id=2754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x59, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) 234.05311ms ago: executing program 2 (id=2755): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3ed, 0x2, 0xd1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000040f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 220.212358ms ago: executing program 0 (id=2756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) 88.717971ms ago: executing program 3 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004d80)={0x0, @initdev}, &(0x7f0000004dc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004cc0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', r5, 0x2f, 0x6, 0x25, 0x5, 0x81, @remote, @mcast2, 0x8, 0x7, 0x1, 0x8}}) sendmsg$nl_route(r4, &(0x7f0000004e40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d00)=@dellink={0x44, 0x11, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa81, 0x41800}, [@IFLA_IFALIAS={0x14, 0x14, 'xfrm0\x00'}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x679}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="18eb000004945cd2143de494094c1a1e99dd010029bd5000"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) r8 = socket(0x1d, 0x2, 0x6) r9 = epoll_create(0x9660) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x3db7}, 0x48) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r11}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000004ec0)={'sit0\x00', &(0x7f0000004e80)={@multicast1, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@remote}, {@broadcast}]}}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000005000)={r10, &(0x7f0000005040)="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", &(0x7f0000004f00)=@buf="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", 0x4}, 0x20) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) (async) close(r8) recvmmsg$unix(r8, &(0x7f0000004c00)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/173, 0xad}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/177, 0xb1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/115, 0x73}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000009c0)=""/79, 0x4f}], 0x3, &(0x7f0000004b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x100, 0x0) 30.086196ms ago: executing program 0 (id=2758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000027c0)="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", 0x179, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 29.911645ms ago: executing program 5 (id=2759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x2c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0x10, &(0x7f0000000100)={&(0x7f0000000300)={0x5, 0x84, 0x3, {0x0, 0xea60}, {0x0, 0xea60}, {0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "96b240de068c9d47"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0xf}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x1cc, 0x30, 0x20, 0x0, 0x0, {}, [{0x1b8, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x164, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x4, 0x8, 0x9}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x10000000, 0x3, 0x7a16}, 0x2}}]}, {0xf5, 0x6, "7c8c4d0dc53348a8de302c669db7fefd7097a155e0205906fb63d017cd0ef54d974d33b695c3b19299b8a951ed59537fa468175e4c05ba0d06fe33fd533117f2e6208b01fd0591f79b7c102fb6ae84a20562974d8fb01eb4ed2fcd9747c1fb576c205d23d00b98aabaf8a3a82e691fb126f71bb56e2499c6654eaa7d3edb6150df1ede3749a2293d92cfb3b14377b88537e5a02aa4ebbf5d1caf1a8d599e20dfcf53922a87e61ce4dab9bee0e37d2b1e38b44413ead213f315d705ec92c799d61957ccab4ad11808947e3648726fcfb676b678e68e5942f44e4ff0e970a3badec4ba2900f1d294edf612f9d5bb0094905b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x440}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): 4 89 01 48 [ 198.906986][T10822] RSP: 002b:00007fbcae9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.907006][T10822] RAX: ffffffffffffffda RBX: 00007fbcaddb5fa0 RCX: 00007fbcadb8e929 [ 198.907019][T10822] RDX: 0000000020004090 RSI: 0000200000000280 RDI: 0000000000000004 [ 198.907031][T10822] RBP: 00007fbcae9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.907043][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.907053][T10822] R13: 0000000000000000 R14: 00007fbcaddb5fa0 R15: 00007ffebe4d4758 [ 198.907085][T10822] [ 199.399108][T10749] lo speed is unknown, defaulting to 1000 [ 199.841270][T10749] lo speed is unknown, defaulting to 1000 [ 200.167874][T10845] team0: Device vti1 is of different type [ 200.273905][T10851] openvswitch: netlink: Unknown key attributes 2 [ 200.342845][T10851] xt_hashlimit: invalid interval [ 200.422569][T10857] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 200.436803][T10857] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 200.497109][T10863] FAULT_INJECTION: forcing a failure. [ 200.497109][T10863] name failslab, interval 1, probability 0, space 0, times 0 [ 200.541702][T10863] CPU: 1 UID: 0 PID: 10863 Comm: syz.2.1843 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 200.541729][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.541740][T10863] Call Trace: [ 200.541747][T10863] [ 200.541755][T10863] dump_stack_lvl+0x189/0x250 [ 200.541780][T10863] ? __pfx____ratelimit+0x10/0x10 [ 200.541806][T10863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.541826][T10863] ? __pfx__printk+0x10/0x10 [ 200.541853][T10863] ? __mutex_trylock_common+0x153/0x260 [ 200.541891][T10863] should_fail_ex+0x414/0x560 [ 200.541922][T10863] should_failslab+0xa8/0x100 [ 200.541945][T10863] __kmalloc_cache_noprof+0x70/0x3d0 [ 200.541966][T10863] ? __hw_addr_add_ex+0x1f4/0x770 [ 200.541993][T10863] __hw_addr_add_ex+0x1f4/0x770 [ 200.542023][T10863] dev_addr_init+0x14f/0x230 [ 200.542050][T10863] ? __pfx_dev_addr_init+0x10/0x10 [ 200.542068][T10863] ? alloc_netdev_mqs+0xa6/0x11e0 [ 200.542108][T10863] alloc_netdev_mqs+0x2f3/0x11e0 [ 200.542129][T10863] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 200.542155][T10863] rtnl_create_link+0x31f/0xd10 [ 200.542186][T10863] rtnl_newlink_create+0x25c/0xb00 [ 200.542215][T10863] ? __pfx_aa_get_newest_label+0x10/0x10 [ 200.542243][T10863] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 200.542261][T10863] ? rtnl_newlink+0x8db/0x1c70 [ 200.542282][T10863] ? __pfx___mutex_lock+0x10/0x10 [ 200.542311][T10863] ? ns_capable+0x8a/0xf0 [ 200.542335][T10863] rtnl_newlink+0x16d6/0x1c70 [ 200.542356][T10863] ? netlink_sendmsg+0x805/0xb30 [ 200.542391][T10863] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.542436][T10863] ? kasan_quarantine_put+0xdd/0x220 [ 200.542454][T10863] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.542485][T10863] ? nlmon_xmit+0xb0/0x100 [ 200.542501][T10863] ? kmem_cache_free+0x18f/0x400 [ 200.542529][T10863] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.542549][T10863] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.542574][T10863] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.542593][T10863] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 200.542617][T10863] ? __dev_queue_xmit+0x27e/0x3a70 [ 200.542654][T10863] ? __lock_acquire+0xab9/0xd20 [ 200.542701][T10863] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.542719][T10863] rtnetlink_rcv_msg+0x7cc/0xb70 [ 200.542742][T10863] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 200.542760][T10863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.542776][T10863] ? ref_tracker_free+0x63a/0x7d0 [ 200.542799][T10863] ? __copy_skb_header+0xa7/0x550 [ 200.542823][T10863] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.542859][T10863] netlink_rcv_skb+0x205/0x470 [ 200.542881][T10863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.542907][T10863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.542942][T10863] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.542962][T10863] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.542988][T10863] netlink_unicast+0x75c/0x8e0 [ 200.543021][T10863] netlink_sendmsg+0x805/0xb30 [ 200.543052][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.543076][T10863] ? aa_sock_msg_perm+0x94/0x160 [ 200.543102][T10863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.543126][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.543148][T10863] __sock_sendmsg+0x219/0x270 [ 200.543169][T10863] ____sys_sendmsg+0x505/0x830 [ 200.543198][T10863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.543229][T10863] ? import_iovec+0x74/0xa0 [ 200.543253][T10863] ___sys_sendmsg+0x21f/0x2a0 [ 200.543276][T10863] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.543338][T10863] ? __fget_files+0x2a/0x420 [ 200.543359][T10863] ? __fget_files+0x3a0/0x420 [ 200.543391][T10863] __x64_sys_sendmsg+0x19b/0x260 [ 200.543415][T10863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.543448][T10863] ? __pfx_ksys_write+0x10/0x10 [ 200.543465][T10863] ? rcu_is_watching+0x15/0xb0 [ 200.543491][T10863] ? do_syscall_64+0xbe/0x3b0 [ 200.543512][T10863] do_syscall_64+0xfa/0x3b0 [ 200.543527][T10863] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.543549][T10863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.543565][T10863] ? clear_bhb_loop+0x60/0xb0 [ 200.543586][T10863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.543603][T10863] RIP: 0033:0x7f165cb8e929 [ 200.543620][T10863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.543633][T10863] RSP: 002b:00007f165d942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.543653][T10863] RAX: ffffffffffffffda RBX: 00007f165cdb5fa0 RCX: 00007f165cb8e929 [ 200.543666][T10863] RDX: 0000000020004090 RSI: 0000200000000280 RDI: 0000000000000004 [ 200.543676][T10863] RBP: 00007f165d942090 R08: 0000000000000000 R09: 0000000000000000 [ 200.543686][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.543695][T10863] R13: 0000000000000000 R14: 00007f165cdb5fa0 R15: 00007fffb31e4008 [ 200.543722][T10863] [ 201.014178][T10867] openvswitch: netlink: Multiple metadata blocks provided [ 201.586533][T10894] netlink: 'syz.2.1855': attribute type 21 has an invalid length. [ 201.594567][T10894] netlink: 'syz.2.1855': attribute type 22 has an invalid length. [ 201.604618][T10894] netlink: 'syz.2.1855': attribute type 23 has an invalid length. [ 201.625459][T10894] netlink: 'syz.2.1855': attribute type 25 has an invalid length. [ 201.643048][T10894] __nla_validate_parse: 2 callbacks suppressed [ 201.643065][T10894] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1855'. [ 201.923518][T10905] netlink: 'syz.2.1860': attribute type 3 has an invalid length. [ 201.949691][T10905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.051103][T10913] x_tables: duplicate underflow at hook 4 [ 202.062028][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 202.227960][T10928] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1866'. [ 202.558407][T10931] lo speed is unknown, defaulting to 1000 [ 203.533130][T10973] x_tables: duplicate underflow at hook 4 [ 203.564280][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 203.805353][T10980] netlink: 'syz.2.1883': attribute type 3 has an invalid length. [ 203.878413][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 203.915657][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 203.959007][T10987] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 203.976281][T10987] nbd: error processing sock list [ 204.358904][T11007] x_tables: duplicate underflow at hook 4 [ 204.366214][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 204.471751][T11012] netlink: 'syz.1.1898': attribute type 10 has an invalid length. [ 204.493370][T11012] bond0: (slave team0): Releasing backup interface [ 204.543163][T11012] bridge0: port 3(team0) entered blocking state [ 204.560099][T11012] bridge0: port 3(team0) entered disabled state [ 204.579624][T11012] team0: entered allmulticast mode [ 204.587406][T11012] team_slave_0: entered allmulticast mode [ 204.593277][T11012] team_slave_1: entered allmulticast mode [ 204.608156][T11012] team0: entered promiscuous mode [ 204.614556][T11012] team_slave_0: entered promiscuous mode [ 204.632697][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 204.644240][T11012] team_slave_1: entered promiscuous mode [ 204.652060][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 204.685888][T11016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1899'. [ 204.707879][T11020] nbd: error processing sock list [ 205.122119][T11045] x_tables: duplicate underflow at hook 4 [ 205.431385][T11063] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 205.573995][T11072] nbd: must specify at least one socket [ 205.725010][T11077] ipt_ECN: cannot use operation on non-tcp rule [ 205.941229][T11090] validate_nla: 2 callbacks suppressed [ 205.941249][T11090] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 205.957410][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.964610][T11090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.979146][T11090] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 206.009178][T11094] x_tables: duplicate underflow at hook 4 [ 206.118470][T11100] xt_nat: multiple ranges no longer supported [ 206.128877][T11102] xt_nat: multiple ranges no longer supported [ 206.302063][T11111] netlink: 'syz.1.1929': attribute type 9 has an invalid length. [ 206.591208][T11132] x_tables: duplicate underflow at hook 4 [ 206.858445][T11147] __nla_validate_parse: 8 callbacks suppressed [ 206.858463][T11147] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1942'. [ 207.189798][T11167] netlink: 'syz.0.1946': attribute type 58 has an invalid length. [ 207.205998][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1946'. [ 207.381890][T11180] netlink: 'syz.3.1948': attribute type 2 has an invalid length. [ 207.414982][T11180] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1948'. [ 207.442350][T11185] netlink: 'syz.3.1948': attribute type 2 has an invalid length. [ 207.466294][T11185] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1948'. [ 207.513011][T11188] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 207.671704][T11145] lo speed is unknown, defaulting to 1000 [ 207.681800][T11194] xt_l2tp: v2 tid > 0xffff: 150994944 [ 208.330789][T11220] veth1_macvtap: entered promiscuous mode [ 208.338370][T11220] veth1_macvtap: left promiscuous mode [ 208.360757][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 208.537003][T11226] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 208.671164][T11229] netlink: 'syz.3.1967': attribute type 10 has an invalid length. [ 208.721004][T11229] syz_tun: entered promiscuous mode [ 208.741347][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 208.754873][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1970'. [ 208.928948][T11240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'. [ 208.942581][T11242] netlink: 'syz.4.1973': attribute type 8 has an invalid length. [ 209.106261][T11247] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1975'. [ 209.262123][T11257] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 209.333011][T11263] FAULT_INJECTION: forcing a failure. [ 209.333011][T11263] name failslab, interval 1, probability 0, space 0, times 0 [ 209.344364][T11265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1983'. [ 209.405081][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.3.1982 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 209.405106][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.405117][T11263] Call Trace: [ 209.405125][T11263] [ 209.405133][T11263] dump_stack_lvl+0x189/0x250 [ 209.405158][T11263] ? __pfx____ratelimit+0x10/0x10 [ 209.405184][T11263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.405200][T11263] ? __pfx__printk+0x10/0x10 [ 209.405220][T11263] ? __pfx___might_resched+0x10/0x10 [ 209.405236][T11263] ? fs_reclaim_acquire+0x7d/0x100 [ 209.405260][T11263] should_fail_ex+0x414/0x560 [ 209.405285][T11263] should_failslab+0xa8/0x100 [ 209.405308][T11263] __kmalloc_noprof+0xcb/0x4f0 [ 209.405327][T11263] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 209.405356][T11263] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 209.405386][T11263] genl_start+0x180/0x6c0 [ 209.405407][T11263] ? netlink_lookup+0x30/0x200 [ 209.405433][T11263] __netlink_dump_start+0x466/0x7e0 [ 209.405460][T11263] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 209.405489][T11263] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 209.405511][T11263] ? genl_get_cmd+0x67f/0x910 [ 209.405541][T11263] ? __pfx_genl_start+0x10/0x10 [ 209.405561][T11263] ? __pfx_genl_dumpit+0x10/0x10 [ 209.405580][T11263] ? __pfx_genl_done+0x10/0x10 [ 209.405618][T11263] genl_rcv_msg+0x5da/0x790 [ 209.405649][T11263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.405672][T11263] ? __pfx_ieee802154_llsec_dump_keys+0x10/0x10 [ 209.405706][T11263] netlink_rcv_skb+0x205/0x470 [ 209.405724][T11263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.405746][T11263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.405778][T11263] ? down_read+0x1ad/0x2e0 [ 209.405798][T11263] genl_rcv+0x28/0x40 [ 209.405815][T11263] netlink_unicast+0x75c/0x8e0 [ 209.405839][T11263] netlink_sendmsg+0x805/0xb30 [ 209.405864][T11263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.405887][T11263] ? aa_sock_msg_perm+0x94/0x160 [ 209.405914][T11263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.405937][T11263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.405958][T11263] __sock_sendmsg+0x219/0x270 [ 209.405988][T11263] ____sys_sendmsg+0x505/0x830 [ 209.406016][T11263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.406049][T11263] ? import_iovec+0x74/0xa0 [ 209.406071][T11263] ___sys_sendmsg+0x21f/0x2a0 [ 209.406090][T11263] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.406146][T11263] ? __fget_files+0x2a/0x420 [ 209.406167][T11263] ? __fget_files+0x3a0/0x420 [ 209.406199][T11263] __x64_sys_sendmsg+0x19b/0x260 [ 209.406222][T11263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.406252][T11263] ? __pfx_ksys_write+0x10/0x10 [ 209.406266][T11263] ? rcu_is_watching+0x15/0xb0 [ 209.406286][T11263] ? do_syscall_64+0xbe/0x3b0 [ 209.406303][T11263] do_syscall_64+0xfa/0x3b0 [ 209.406315][T11263] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.406335][T11263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.406348][T11263] ? clear_bhb_loop+0x60/0xb0 [ 209.406364][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.406377][T11263] RIP: 0033:0x7f5196f8e929 [ 209.406390][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.406402][T11263] RSP: 002b:00007f5197eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.406417][T11263] RAX: ffffffffffffffda RBX: 00007f51971b5fa0 RCX: 00007f5196f8e929 [ 209.406427][T11263] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 209.406436][T11263] RBP: 00007f5197eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 209.406444][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.406452][T11263] R13: 0000000000000000 R14: 00007f51971b5fa0 R15: 00007fffe06b0ca8 [ 209.406474][T11263] [ 210.057400][T11285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.109556][T11285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.142683][T11285] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.174008][T11285] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 210.270635][T11301] veth5: entered promiscuous mode [ 210.293032][T11285] vlan2: entered allmulticast mode [ 210.302047][T11285] bond5: entered allmulticast mode [ 210.356956][T11305] FAULT_INJECTION: forcing a failure. [ 210.356956][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 210.369785][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.2.1999 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 210.369810][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.369821][T11305] Call Trace: [ 210.369829][T11305] [ 210.369837][T11305] dump_stack_lvl+0x189/0x250 [ 210.369862][T11305] ? __pfx____ratelimit+0x10/0x10 [ 210.369888][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.369908][T11305] ? __pfx__printk+0x10/0x10 [ 210.369938][T11305] ? __pfx___might_resched+0x10/0x10 [ 210.369957][T11305] ? fs_reclaim_acquire+0x7d/0x100 [ 210.369986][T11305] should_fail_ex+0x414/0x560 [ 210.370016][T11305] should_failslab+0xa8/0x100 [ 210.370040][T11305] __kmalloc_cache_noprof+0x70/0x3d0 [ 210.370061][T11305] ? genl_start+0x1c9/0x6c0 [ 210.370090][T11305] genl_start+0x1c9/0x6c0 [ 210.370112][T11305] ? netlink_lookup+0x30/0x200 [ 210.370139][T11305] __netlink_dump_start+0x466/0x7e0 [ 210.370170][T11305] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 210.370198][T11305] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 210.370221][T11305] ? genl_get_cmd+0x67f/0x910 [ 210.370250][T11305] ? __pfx_genl_start+0x10/0x10 [ 210.370271][T11305] ? __pfx_genl_dumpit+0x10/0x10 [ 210.370292][T11305] ? __pfx_genl_done+0x10/0x10 [ 210.370331][T11305] genl_rcv_msg+0x5da/0x790 [ 210.370362][T11305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.370385][T11305] ? __pfx_ieee802154_llsec_dump_keys+0x10/0x10 [ 210.370424][T11305] netlink_rcv_skb+0x205/0x470 [ 210.370446][T11305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.370470][T11305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.370511][T11305] ? down_read+0x1ad/0x2e0 [ 210.370533][T11305] genl_rcv+0x28/0x40 [ 210.370555][T11305] netlink_unicast+0x75c/0x8e0 [ 210.370588][T11305] netlink_sendmsg+0x805/0xb30 [ 210.370626][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.370651][T11305] ? aa_sock_msg_perm+0x94/0x160 [ 210.370677][T11305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.370700][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.370722][T11305] __sock_sendmsg+0x219/0x270 [ 210.370744][T11305] ____sys_sendmsg+0x505/0x830 [ 210.370775][T11305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.370809][T11305] ? import_iovec+0x74/0xa0 [ 210.370833][T11305] ___sys_sendmsg+0x21f/0x2a0 [ 210.370857][T11305] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.370923][T11305] ? __fget_files+0x2a/0x420 [ 210.370943][T11305] ? __fget_files+0x3a0/0x420 [ 210.370977][T11305] __x64_sys_sendmsg+0x19b/0x260 [ 210.371001][T11305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.371034][T11305] ? __pfx_ksys_write+0x10/0x10 [ 210.371051][T11305] ? rcu_is_watching+0x15/0xb0 [ 210.371077][T11305] ? do_syscall_64+0xbe/0x3b0 [ 210.371100][T11305] do_syscall_64+0xfa/0x3b0 [ 210.371115][T11305] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.371139][T11305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.371155][T11305] ? clear_bhb_loop+0x60/0xb0 [ 210.371177][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.371194][T11305] RIP: 0033:0x7f165cb8e929 [ 210.371210][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.371225][T11305] RSP: 002b:00007f165d942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.371244][T11305] RAX: ffffffffffffffda RBX: 00007f165cdb5fa0 RCX: 00007f165cb8e929 [ 210.371257][T11305] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 210.371269][T11305] RBP: 00007f165d942090 R08: 0000000000000000 R09: 0000000000000000 [ 210.371280][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.371291][T11305] R13: 0000000000000000 R14: 00007f165cdb5fa0 R15: 00007fffb31e4008 [ 210.371322][T11305] [ 210.790358][T11307] x_tables: duplicate underflow at hook 4 [ 210.982180][T11319] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 211.537469][T11333] lo speed is unknown, defaulting to 1000 [ 211.550106][T11346] tipc: Enabled bearer , priority 0 [ 211.583024][T11346] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 211.600969][T11346] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 211.620842][T11351] pim6reg1: entered promiscuous mode [ 211.629929][T11351] pim6reg1: entered allmulticast mode [ 211.646816][T11346] tipc: Resetting bearer [ 211.868838][T11359] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 211.884390][T11359] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.141796][T11367] __nla_validate_parse: 4 callbacks suppressed [ 212.141809][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 212.198820][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2018'. [ 212.233976][T11379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.493209][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'. [ 212.782122][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'. [ 212.858719][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 212.875596][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 212.890988][T11403] validate_nla: 1 callbacks suppressed [ 212.891004][T11403] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 212.910992][T11403] nbd: error processing sock list [ 213.053972][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 213.372125][T11421] netlink: 'syz.2.2032': attribute type 33 has an invalid length. [ 213.395810][T11421] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2032'. [ 214.505718][T11407] : entered promiscuous mode [ 214.516657][T11381] lo speed is unknown, defaulting to 1000 [ 214.842823][T11441] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 215.207819][T11463] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 215.609290][T11487] lo: entered promiscuous mode [ 215.640686][T11487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.056946][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 216.080412][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 216.121378][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.128029][T11505] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.175396][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.181878][T11505] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.220963][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.227476][T11505] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.253409][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.259895][T11505] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.290379][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 217.697950][T11564] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 217.829629][T11574] __nla_validate_parse: 6 callbacks suppressed [ 217.829646][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 217.834979][T11572] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 217.870406][T11552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.885429][T11552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.899099][T11552] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 217.908283][T11552] batadv0: left allmulticast mode [ 217.916253][T11552] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 217.929317][T11552] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 217.944453][T11552] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 217.953540][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.962926][T11552] bond0 (unregistering): Released all slaves [ 217.984483][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 217.994314][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.019987][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.072682][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.090471][T11578] netlink: 'syz.1.2086': attribute type 4 has an invalid length. [ 218.097592][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.101838][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2086'. [ 218.134095][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.151607][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.166532][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 218.261374][T11589] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 218.500612][T11601] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 218.859901][T11624] tipc: Enabling of bearer rejected, failed to enable media [ 219.088537][T11636] FAULT_INJECTION: forcing a failure. [ 219.088537][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 219.140685][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.4.2103 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 219.140711][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.140721][T11636] Call Trace: [ 219.140728][T11636] [ 219.140736][T11636] dump_stack_lvl+0x189/0x250 [ 219.140761][T11636] ? __pfx____ratelimit+0x10/0x10 [ 219.140796][T11636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.140816][T11636] ? __pfx__printk+0x10/0x10 [ 219.140845][T11636] ? __pfx___might_resched+0x10/0x10 [ 219.140870][T11636] should_fail_ex+0x414/0x560 [ 219.140900][T11636] should_failslab+0xa8/0x100 [ 219.140924][T11636] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 219.140945][T11636] ? __alloc_skb+0x112/0x2d0 [ 219.140970][T11636] __alloc_skb+0x112/0x2d0 [ 219.140994][T11636] netlink_sendmsg+0x5c6/0xb30 [ 219.141025][T11636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.141049][T11636] ? aa_sock_msg_perm+0x94/0x160 [ 219.141075][T11636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.141100][T11636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.141121][T11636] __sock_sendmsg+0x219/0x270 [ 219.141142][T11636] ____sys_sendmsg+0x505/0x830 [ 219.141169][T11636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.141200][T11636] ? import_iovec+0x74/0xa0 [ 219.141223][T11636] ___sys_sendmsg+0x21f/0x2a0 [ 219.141246][T11636] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.141302][T11636] ? __fget_files+0x2a/0x420 [ 219.141323][T11636] ? __fget_files+0x3a0/0x420 [ 219.141356][T11636] __x64_sys_sendmsg+0x19b/0x260 [ 219.141380][T11636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.141413][T11636] ? __pfx_ksys_write+0x10/0x10 [ 219.141430][T11636] ? rcu_is_watching+0x15/0xb0 [ 219.141455][T11636] ? do_syscall_64+0xbe/0x3b0 [ 219.141477][T11636] do_syscall_64+0xfa/0x3b0 [ 219.141492][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.141517][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.141534][T11636] ? clear_bhb_loop+0x60/0xb0 [ 219.141559][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.141576][T11636] RIP: 0033:0x7f441878e929 [ 219.141592][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.141606][T11636] RSP: 002b:00007f44196af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.141626][T11636] RAX: ffffffffffffffda RBX: 00007f44189b5fa0 RCX: 00007f441878e929 [ 219.141639][T11636] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 219.141651][T11636] RBP: 00007f44196af090 R08: 0000000000000000 R09: 0000000000000000 [ 219.141662][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.141672][T11636] R13: 0000000000000000 R14: 00007f44189b5fa0 R15: 00007fffbcff7c68 [ 219.141702][T11636] [ 219.418348][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.513723][ T10] IPVS: starting estimator thread 0... [ 219.564123][T11648] netlink: 'syz.4.2106': attribute type 23 has an invalid length. [ 219.615900][T11650] IPVS: using max 49 ests per chain, 117600 per kthread [ 219.673880][T11660] tipc: Enabling of bearer rejected, already enabled [ 219.953752][ T5867] IPVS: starting estimator thread 0... [ 220.060407][T11682] IPVS: using max 28 ests per chain, 67200 per kthread [ 220.143337][T11694] netlink: 'syz.2.2121': attribute type 33 has an invalid length. [ 220.540580][ T5849] bond0: (slave syz_tun): Releasing backup interface [ 220.664543][T11722] netlink: 'syz.0.2133': attribute type 2 has an invalid length. [ 220.875927][T11726] tipc: Started in network mode [ 220.883437][T11726] tipc: Node identity 46e595ed35b3, cluster identity 4711 [ 220.894259][T11726] tipc: Enabled bearer , priority 0 [ 220.903436][T11726] syzkaller0: entered promiscuous mode [ 220.911521][T11726] syzkaller0: entered allmulticast mode [ 220.940322][T11725] tipc: Resetting bearer [ 220.978171][T11725] tipc: Disabling bearer [ 221.268036][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.276952][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.284661][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.297339][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.315177][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.747665][T11767] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 221.799730][T11769] tipc: Enabled bearer , priority 0 [ 221.810804][T11769] syzkaller0: entered promiscuous mode [ 221.819362][T11769] syzkaller0: entered allmulticast mode [ 221.850908][T11768] tipc: Resetting bearer [ 221.869957][T11768] tipc: Disabling bearer [ 221.881363][T11741] lo speed is unknown, defaulting to 1000 [ 222.350077][T11789] xt_nfacct: accounting object `syz1' does not exists [ 222.423875][T11741] chnl_net:caif_netlink_parms(): no params data found [ 222.687677][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.701701][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.719421][T11741] bridge_slave_0: entered allmulticast mode [ 222.737825][T11741] bridge_slave_0: entered promiscuous mode [ 222.761192][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.774012][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.781912][T11741] bridge_slave_1: entered allmulticast mode [ 222.790307][T11741] bridge_slave_1: entered promiscuous mode [ 222.819321][T11808] tipc: Enabled bearer , priority 0 [ 222.846586][T11808] syzkaller0: entered promiscuous mode [ 222.852180][T11808] syzkaller0: entered allmulticast mode [ 222.861921][T11811] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 222.865102][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.892159][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.967621][T11807] tipc: Resetting bearer [ 222.992113][T11807] tipc: Disabling bearer [ 223.010313][T11741] team0: Port device team_slave_0 added [ 223.027831][T11741] team0: Port device team_slave_1 added [ 223.092640][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.103032][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.139509][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.158380][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.168320][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.195960][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.398402][T11831] __nla_validate_parse: 33 callbacks suppressed [ 223.398420][T11831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2167'. [ 223.420943][ T5852] Bluetooth: hci0: command tx timeout [ 223.421168][T11741] hsr_slave_0: entered promiscuous mode [ 223.444212][T11741] hsr_slave_1: entered promiscuous mode [ 223.456239][T11741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.476358][T11741] Cannot create hsr debugfs directory [ 223.501410][T11835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2168'. [ 223.591684][T11837] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2170'. [ 223.619862][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 223.634895][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 223.652235][T11841] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 223.701454][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 223.711691][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 223.734615][T11844] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2171'. [ 223.938814][T11852] tipc: Enabling of bearer rejected, already enabled [ 224.052249][T11741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.182417][T11741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.373905][T11869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2181'. [ 224.402135][T11741] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 224.417442][T11741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.549059][T11741] bond0: (slave netdevsim0): Releasing backup interface [ 224.563966][T11876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.573103][T11878] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2183'. [ 224.587270][T11741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.608632][T11881] team_slave_0: entered promiscuous mode [ 224.614470][T11881] team_slave_1: entered promiscuous mode [ 224.734505][T11883] netlink: 'syz.3.2186': attribute type 2 has an invalid length. [ 224.779684][T11741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.816107][T11741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.851134][T11741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.880175][T11890] net_ratelimit: 68 callbacks suppressed [ 224.880188][T11890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.901583][T11741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.041218][T11896] tipc: Enabled bearer , priority 0 [ 225.054687][T11896] syzkaller0: entered promiscuous mode [ 225.061911][T11896] syzkaller0: entered allmulticast mode [ 225.087553][T11894] tipc: Resetting bearer [ 225.126694][T11894] tipc: Disabling bearer [ 225.303254][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.370997][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.393066][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.400295][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.443799][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.451025][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.498373][ T5852] Bluetooth: hci0: command tx timeout [ 226.042444][T11741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.096571][T11960] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 226.171542][T11741] veth0_vlan: entered promiscuous mode [ 226.195999][T11741] veth1_vlan: entered promiscuous mode [ 226.272430][T11741] veth0_macvtap: entered promiscuous mode [ 226.280812][T11964] x_tables: ip_tables: udp match: only valid for protocol 17 [ 226.292202][T11741] veth1_macvtap: entered promiscuous mode [ 226.358461][T11741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.370675][T11741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.408431][T11741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.434853][T11741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.443993][T11741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.453506][T11741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.482714][T11972] bridge3: entered promiscuous mode [ 226.489062][T11972] bridge3: entered allmulticast mode [ 226.611682][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.633282][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.674409][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.683192][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.911118][T11984] bond1: entered promiscuous mode [ 226.916436][T11984] bond1: entered allmulticast mode [ 226.922030][T11984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.133219][T12000] netlink: 'syz.2.2224': attribute type 10 has an invalid length. [ 227.183403][T12000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.202111][T12005] xt_nfacct: accounting object `syz1' does not exists [ 227.212724][T12000] team0: Port device bond0 added [ 227.329726][T12010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.512548][ T30] audit: type=1800 audit(1752502089.357:4): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2231" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2194 res=0 errno=0 [ 227.592556][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.121310][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.210208][T12040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.328615][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.346067][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.355711][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.359957][T12045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 228.380259][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.392510][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.462380][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.479668][T12048] netlink: 'syz.2.2238': attribute type 11 has an invalid length. [ 228.491636][T12048] __nla_validate_parse: 11 callbacks suppressed [ 228.491655][T12048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2238'. [ 228.592120][T12052] netlink: 'syz.3.2239': attribute type 10 has an invalid length. [ 228.746575][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.856043][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.967548][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.280143][T12043] lo speed is unknown, defaulting to 1000 [ 229.511234][ T13] bridge_slave_1: left allmulticast mode [ 229.542061][ T13] bridge_slave_1: left promiscuous mode [ 229.568946][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.650345][ T13] bridge_slave_0: left allmulticast mode [ 229.662858][ T13] bridge_slave_0: left promiscuous mode [ 229.681319][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.268209][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.280075][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.291073][ T13] bond0 (unregistering): Released all slaves [ 230.338514][T12077] lo speed is unknown, defaulting to 1000 [ 230.448574][T12107] nbd: must specify at least one socket [ 230.461985][ T5852] Bluetooth: hci0: command tx timeout [ 230.724636][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2260'. [ 230.766051][T12117] tipc: Enabling of bearer rejected, already enabled [ 231.230844][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 231.271929][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2266'. [ 231.556859][T12043] chnl_net:caif_netlink_parms(): no params data found [ 232.535905][ T5852] Bluetooth: hci0: command tx timeout [ 233.116813][ T13] hsr_slave_0: left promiscuous mode [ 233.122760][ T13] hsr_slave_1: left promiscuous mode [ 233.128766][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.137086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.146842][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.154269][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.191684][ T13] veth1_macvtap: left promiscuous mode [ 233.198167][ T13] veth0_macvtap: left promiscuous mode [ 233.203949][ T13] veth1_vlan: left promiscuous mode [ 233.211904][ T13] veth0_vlan: left promiscuous mode [ 233.604647][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.644376][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.989446][T12154] tipc: Enabled bearer , priority 10 [ 234.009355][T12162] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2271'. [ 234.115471][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 234.161917][T12167] wg1: entered promiscuous mode [ 234.176700][T12173] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 234.341700][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.372338][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.395347][T12043] bridge_slave_0: entered allmulticast mode [ 234.413155][T12043] bridge_slave_0: entered promiscuous mode [ 234.463674][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.477400][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.489627][T12043] bridge_slave_1: entered allmulticast mode [ 234.495793][T12182] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2275'. [ 234.517355][T12043] bridge_slave_1: entered promiscuous mode [ 234.615306][ T5852] Bluetooth: hci0: command tx timeout [ 234.688614][T12192] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 234.701676][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.760439][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.847377][T12190] syzkaller0: entered promiscuous mode [ 234.852904][T12190] syzkaller0: entered allmulticast mode [ 234.964508][T12043] team0: Port device team_slave_0 added [ 234.990258][T12043] team0: Port device team_slave_1 added [ 235.149114][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.156336][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.211756][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.272336][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.296371][T12220] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2287'. [ 235.320290][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.358136][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.436005][T12223] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2288'. [ 235.522500][T12043] hsr_slave_0: entered promiscuous mode [ 235.535109][T12043] hsr_slave_1: entered promiscuous mode [ 235.541665][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.544157][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 235.554696][T12043] Cannot create hsr debugfs directory [ 235.565545][T12230] netlink: 'syz.4.2291': attribute type 5 has an invalid length. [ 235.575838][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 235.621254][T12232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.860935][T12243] veth0: entered promiscuous mode [ 235.911514][T12242] veth0: left promiscuous mode [ 236.018614][T12252] IPVS: set_ctl: invalid protocol: 46 172.30.0.3:20003 [ 236.141502][T12260] tipc: Enabling of bearer rejected, already enabled [ 236.160581][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2302'. [ 236.225269][T12262] batadv0: Device is already in use. [ 236.276054][T12269] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 236.290573][T12271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2307'. [ 236.310056][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 236.311867][T12269] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.380398][T12269] netlink: 'syz.0.2306': attribute type 3 has an invalid length. [ 236.417215][T12278] FAULT_INJECTION: forcing a failure. [ 236.417215][T12278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.434147][T12278] CPU: 0 UID: 0 PID: 12278 Comm: syz.3.2308 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 236.434182][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.434194][T12278] Call Trace: [ 236.434202][T12278] [ 236.434210][T12278] dump_stack_lvl+0x189/0x250 [ 236.434237][T12278] ? __pfx____ratelimit+0x10/0x10 [ 236.434262][T12278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.434283][T12278] ? __pfx__printk+0x10/0x10 [ 236.434305][T12278] ? __might_fault+0xb0/0x130 [ 236.434338][T12278] should_fail_ex+0x414/0x560 [ 236.434367][T12278] _copy_from_iter+0x1db/0x16f0 [ 236.434390][T12278] ? rcu_is_watching+0x15/0xb0 [ 236.434412][T12278] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 236.434433][T12278] ? __pfx__copy_from_iter+0x10/0x10 [ 236.434454][T12278] ? __build_skb_around+0x257/0x3e0 [ 236.434478][T12278] ? skb_put+0x11b/0x210 [ 236.434501][T12278] pfkey_sendmsg+0x230/0x1090 [ 236.434522][T12278] ? __pfx___might_resched+0x10/0x10 [ 236.434538][T12278] ? __lock_acquire+0xab9/0xd20 [ 236.434561][T12278] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 236.434586][T12278] ? aa_sk_perm+0x81e/0x950 [ 236.434607][T12278] ? is_bpf_text_address+0x26/0x2b0 [ 236.434626][T12278] ? __pfx_aa_sk_perm+0x10/0x10 [ 236.434642][T12278] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 236.434660][T12278] ? aa_sock_msg_perm+0x94/0x160 [ 236.434681][T12278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.434705][T12278] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 236.434720][T12278] __sock_sendmsg+0x219/0x270 [ 236.434736][T12278] ____sys_sendmsg+0x505/0x830 [ 236.434757][T12278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.434781][T12278] ? import_iovec+0x74/0xa0 [ 236.434799][T12278] ___sys_sendmsg+0x21f/0x2a0 [ 236.434819][T12278] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.434870][T12278] ? __fget_files+0x2a/0x420 [ 236.434887][T12278] ? __fget_files+0x3a0/0x420 [ 236.434912][T12278] __x64_sys_sendmsg+0x19b/0x260 [ 236.434934][T12278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.434971][T12278] ? __pfx_ksys_write+0x10/0x10 [ 236.434986][T12278] ? rcu_is_watching+0x15/0xb0 [ 236.435007][T12278] ? do_syscall_64+0xbe/0x3b0 [ 236.435026][T12278] do_syscall_64+0xfa/0x3b0 [ 236.435039][T12278] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.435062][T12278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.435078][T12278] ? clear_bhb_loop+0x60/0xb0 [ 236.435096][T12278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.435112][T12278] RIP: 0033:0x7f5196f8e929 [ 236.435128][T12278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.435143][T12278] RSP: 002b:00007f5197eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.435162][T12278] RAX: ffffffffffffffda RBX: 00007f51971b5fa0 RCX: 00007f5196f8e929 [ 236.435175][T12278] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 236.435186][T12278] RBP: 00007f5197eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 236.435196][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.435205][T12278] R13: 0000000000000000 R14: 00007f51971b5fa0 R15: 00007fffe06b0ca8 [ 236.435231][T12278] [ 236.750981][ T5856] Bluetooth: hci0: command tx timeout [ 236.786875][T12043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.798887][T12043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.811323][T12043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.878937][T12043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.957651][T12292] openvswitch: netlink: Flow actions attr not present in new flow. [ 237.273568][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.313291][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.323714][T12312] FAULT_INJECTION: forcing a failure. [ 237.323714][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 237.343311][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.2.2321 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 237.343336][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.343348][T12312] Call Trace: [ 237.343355][T12312] [ 237.343363][T12312] dump_stack_lvl+0x189/0x250 [ 237.343389][T12312] ? __pfx____ratelimit+0x10/0x10 [ 237.343415][T12312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.343434][T12312] ? __pfx__printk+0x10/0x10 [ 237.343463][T12312] ? __pfx___might_resched+0x10/0x10 [ 237.343483][T12312] ? fs_reclaim_acquire+0x7d/0x100 [ 237.343510][T12312] should_fail_ex+0x414/0x560 [ 237.343539][T12312] should_failslab+0xa8/0x100 [ 237.343563][T12312] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.343582][T12312] ? skb_clone+0x212/0x3a0 [ 237.343609][T12312] skb_clone+0x212/0x3a0 [ 237.343635][T12312] pfkey_sendmsg+0x44b/0x1090 [ 237.343664][T12312] ? __lock_acquire+0xab9/0xd20 [ 237.343688][T12312] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 237.343736][T12312] ? aa_sock_msg_perm+0x94/0x160 [ 237.343770][T12312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.343802][T12312] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 237.343827][T12312] __sock_sendmsg+0x219/0x270 [ 237.343853][T12312] ____sys_sendmsg+0x505/0x830 [ 237.343885][T12312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.343918][T12312] ? import_iovec+0x74/0xa0 [ 237.343942][T12312] ___sys_sendmsg+0x21f/0x2a0 [ 237.343967][T12312] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.344031][T12312] ? __fget_files+0x2a/0x420 [ 237.344052][T12312] ? __fget_files+0x3a0/0x420 [ 237.344086][T12312] __x64_sys_sendmsg+0x19b/0x260 [ 237.344111][T12312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.344151][T12312] ? __pfx_ksys_write+0x10/0x10 [ 237.344169][T12312] ? rcu_is_watching+0x15/0xb0 [ 237.344194][T12312] ? do_syscall_64+0xbe/0x3b0 [ 237.344216][T12312] do_syscall_64+0xfa/0x3b0 [ 237.344231][T12312] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.344255][T12312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.344271][T12312] ? clear_bhb_loop+0x60/0xb0 [ 237.344293][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.344309][T12312] RIP: 0033:0x7f165cb8e929 [ 237.344326][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.344340][T12312] RSP: 002b:00007f165d942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.344359][T12312] RAX: ffffffffffffffda RBX: 00007f165cdb5fa0 RCX: 00007f165cb8e929 [ 237.344372][T12312] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 237.344384][T12312] RBP: 00007f165d942090 R08: 0000000000000000 R09: 0000000000000000 [ 237.344394][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.344405][T12312] R13: 0000000000000000 R14: 00007f165cdb5fa0 R15: 00007fffb31e4008 [ 237.344435][T12312] [ 237.654219][T12043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.664642][T12043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.666527][T12314] netlink: 'syz.0.2322': attribute type 10 has an invalid length. [ 237.687120][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.694296][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.712493][T12319] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 237.720412][T12319] nbd: error processing sock list [ 237.769605][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.776859][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.822403][T12326] netlink: 'syz.2.2324': attribute type 2 has an invalid length. [ 238.124255][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.226490][T12341] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 238.401447][T12341] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.417590][T12341] bond7: (slave bond8): making interface the new active one [ 238.449936][T12341] bond7: (slave bond8): Enslaving as an active interface with an up link [ 238.513913][T12351] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 238.530125][T12357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.538937][T12360] tipc: Enabling of bearer rejected, failed to enable media [ 238.561039][T12365] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 238.569944][T12365] nbd: error processing sock list [ 238.597669][T12043] veth0_vlan: entered promiscuous mode [ 238.651862][T12043] veth1_vlan: entered promiscuous mode [ 238.788047][T12043] veth0_macvtap: entered promiscuous mode [ 238.828866][T12043] veth1_macvtap: entered promiscuous mode [ 238.968472][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.003502][T12383] tipc: Enabling of bearer rejected, already enabled [ 239.021592][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.070694][T12043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.081582][T12043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.112647][T12043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.122459][T12043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.136324][T12389] __nla_validate_parse: 13 callbacks suppressed [ 239.136367][T12389] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2345'. [ 239.161394][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 239.192436][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 239.202232][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2345'. [ 239.219524][T12394] tipc: Enabling of bearer rejected, already enabled [ 239.404888][T12406] tipc: Failed to remove unknown binding: 66,1,1/0:824344513/824344515 [ 240.198447][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.221138][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.330465][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.337948][T12432] xt_nfacct: accounting object `syz1' does not exists [ 240.355242][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.703489][T12450] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 240.719976][T12450] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 240.950194][T12464] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2363'. [ 241.173726][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.320064][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.414185][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.473990][T12480] x_tables: duplicate underflow at hook 2 [ 241.505316][T12481] validate_nla: 1 callbacks suppressed [ 241.505332][T12481] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 241.605554][T12486] xt_nfacct: accounting object `syz1' does not exists [ 241.618549][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.641185][T12490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2373'. [ 241.733423][T12490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2373'. [ 241.815569][T12493] bond0: (slave gretap2): making interface the new active one [ 241.867330][T12493] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 241.950188][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.960838][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.977583][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.987459][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.997058][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.244562][T12515] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 242.270047][T12515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.281829][ T56] bridge_slave_1: left allmulticast mode [ 242.304853][ T56] bridge_slave_1: left promiscuous mode [ 242.330578][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.400290][ T56] bridge_slave_0: left allmulticast mode [ 242.416819][ T56] bridge_slave_0: left promiscuous mode [ 242.434385][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.463183][T12521] netlink: 'syz.2.2380': attribute type 11 has an invalid length. [ 242.491153][T12521] netlink: 'syz.2.2380': attribute type 11 has an invalid length. [ 242.509824][T12521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2380'. [ 242.657374][T12529] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 242.949457][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.961089][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.973842][ T56] bond0 (unregistering): Released all slaves [ 242.990114][T12502] lo speed is unknown, defaulting to 1000 [ 242.990131][T12531] veth1_vlan: mtu less than device minimum [ 243.251492][T12542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2387'. [ 243.322415][T12549] xt_policy: too many policy elements [ 243.328358][T12550] xt_policy: too many policy elements [ 243.345253][T12542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2387'. [ 243.570018][T12561] sctp: [Deprecated]: syz.3.2393 (pid 12561) Use of int in max_burst socket option. [ 243.570018][T12561] Use struct sctp_assoc_value instead [ 243.584659][T12563] tipc: Enabling of bearer rejected, already enabled [ 243.745312][T12567] xt_TCPMSS: Only works on TCP SYN packets [ 243.784899][T12567] team_slave_0: entered promiscuous mode [ 243.790768][T12567] team_slave_1: entered promiscuous mode [ 243.796630][T12567] bond_slave_0: entered promiscuous mode [ 243.802468][T12567] bond_slave_1: entered promiscuous mode [ 243.808313][T12567] geneve1: entered promiscuous mode [ 244.068828][ T5856] Bluetooth: hci0: command tx timeout [ 244.397097][ T56] hsr_slave_0: left promiscuous mode [ 244.404692][ T56] hsr_slave_1: left promiscuous mode [ 244.436173][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.443737][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.461859][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.469605][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.492213][ T56] veth1_macvtap: left promiscuous mode [ 244.497977][ T56] veth0_macvtap: left promiscuous mode [ 244.503569][ T56] veth1_vlan: left promiscuous mode [ 244.509039][ T56] veth0_vlan: left promiscuous mode [ 244.939673][ T56] team0 (unregistering): Port device team_slave_1 removed [ 244.998777][ T56] team0 (unregistering): Port device team_slave_0 removed [ 245.467807][T12605] tipc: Enabling of bearer rejected, already enabled [ 245.551780][T12502] chnl_net:caif_netlink_parms(): no params data found [ 245.677780][T12614] __nla_validate_parse: 1 callbacks suppressed [ 245.677799][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 245.737875][T12617] netlink: 'syz.2.2412': attribute type 10 has an invalid length. [ 245.838012][T12613] xt_CT: No such helper "netbios-ns" [ 245.998159][T12502] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.030807][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.038744][T12502] bridge_slave_0: entered allmulticast mode [ 246.050785][T12502] bridge_slave_0: entered promiscuous mode [ 246.061088][T12502] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.068775][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.078928][T12502] bridge_slave_1: entered allmulticast mode [ 246.089928][T12502] bridge_slave_1: entered promiscuous mode [ 246.139692][ T5856] Bluetooth: hci0: command tx timeout [ 246.220416][T12502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.244557][T12638] bond0: (slave syz_tun): Releasing backup interface [ 246.244577][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2421'. [ 246.270419][T12638] bridge_slave_0: left allmulticast mode [ 246.342681][T12638] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.376317][T12638] bridge_slave_1: left allmulticast mode [ 246.382027][T12638] bridge_slave_1: left promiscuous mode [ 246.391317][T12638] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.411575][T12638] bond0: (slave bond_slave_0): Releasing backup interface [ 246.433188][T12638] bond0: (slave bond_slave_1): Releasing backup interface [ 246.480156][T12638] team0: Port device team_slave_0 removed [ 246.509262][T12638] team0: Port device team_slave_1 removed [ 246.516173][T12638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.523692][T12638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.541559][T12638] bond0: (slave geneve1): Releasing backup interface [ 246.547463][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 246.562188][T12659] netlink: 'syz.4.2427': attribute type 10 has an invalid length. [ 246.570928][T12638] bond0: (slave netdevsim0): Releasing backup interface [ 246.581024][T12638] bond0: (slave wlan1): Releasing backup interface [ 246.599245][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'. [ 246.624037][T12502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.777874][T12502] team0: Port device team_slave_0 added [ 246.791986][T12502] team0: Port device team_slave_1 added [ 246.857158][T12667] FAULT_INJECTION: forcing a failure. [ 246.857158][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 246.890006][T12667] CPU: 1 UID: 0 PID: 12667 Comm: syz.4.2430 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 246.890034][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.890058][T12667] Call Trace: [ 246.890065][T12667] [ 246.890074][T12667] dump_stack_lvl+0x189/0x250 [ 246.890100][T12667] ? __pfx____ratelimit+0x10/0x10 [ 246.890126][T12667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.890146][T12667] ? __pfx__printk+0x10/0x10 [ 246.890175][T12667] ? __pfx___might_resched+0x10/0x10 [ 246.890201][T12667] should_fail_ex+0x414/0x560 [ 246.890231][T12667] should_failslab+0xa8/0x100 [ 246.890255][T12667] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.890276][T12667] ? __alloc_skb+0x112/0x2d0 [ 246.890301][T12667] __alloc_skb+0x112/0x2d0 [ 246.890325][T12667] netlink_sendmsg+0x5c6/0xb30 [ 246.890356][T12667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.890381][T12667] ? aa_sock_msg_perm+0x94/0x160 [ 246.890407][T12667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.890430][T12667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.890452][T12667] __sock_sendmsg+0x219/0x270 [ 246.890473][T12667] ____sys_sendmsg+0x52d/0x830 [ 246.890500][T12667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.890532][T12667] ? import_iovec+0x74/0xa0 [ 246.890556][T12667] ___sys_sendmsg+0x21f/0x2a0 [ 246.890581][T12667] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.890642][T12667] ? __fget_files+0x2a/0x420 [ 246.890663][T12667] ? __fget_files+0x3a0/0x420 [ 246.890696][T12667] __sys_sendmmsg+0x227/0x430 [ 246.890724][T12667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.890744][T12667] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 246.890791][T12667] ? ksys_write+0x22a/0x250 [ 246.890813][T12667] ? __pfx_ksys_write+0x10/0x10 [ 246.890830][T12667] ? rcu_is_watching+0x15/0xb0 [ 246.890858][T12667] __x64_sys_sendmmsg+0xa0/0xc0 [ 246.890881][T12667] do_syscall_64+0xfa/0x3b0 [ 246.890898][T12667] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.890922][T12667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.890944][T12667] ? clear_bhb_loop+0x60/0xb0 [ 246.890965][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.890982][T12667] RIP: 0033:0x7f441878e929 [ 246.891000][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.891015][T12667] RSP: 002b:00007f44196af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.891036][T12667] RAX: ffffffffffffffda RBX: 00007f44189b5fa0 RCX: 00007f441878e929 [ 246.891049][T12667] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.891062][T12667] RBP: 00007f44196af090 R08: 0000000000000000 R09: 0000000000000000 [ 246.891074][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.891085][T12667] R13: 0000000000000000 R14: 00007f44189b5fa0 R15: 00007fffbcff7c68 [ 246.891115][T12667] [ 247.250466][T12502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.257981][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.285165][T12502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.298883][T12502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.306624][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.333077][T12502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.466575][T12502] hsr_slave_0: entered promiscuous mode [ 247.473137][T12502] hsr_slave_1: entered promiscuous mode [ 247.481209][T12682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2434'. [ 247.488781][T12502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.499494][T12502] Cannot create hsr debugfs directory [ 247.841227][T12678] lo speed is unknown, defaulting to 1000 [ 247.945803][T12700] netlink: 'syz.2.2438': attribute type 10 has an invalid length. [ 247.965518][T12701] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 247.973294][T12701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2437'. [ 248.225144][ T5856] Bluetooth: hci0: command tx timeout [ 248.493813][T12710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.512083][T12692] lo speed is unknown, defaulting to 1000 [ 248.592619][T12709] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 248.602330][T12709] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 248.619309][T12709] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 248.627651][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2440'. [ 248.879259][T12717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.940293][T12502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.968219][T12502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.015075][T12502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.047040][T12502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.324123][T12725] syzkaller1: entered promiscuous mode [ 249.329864][T12725] syzkaller1: entered allmulticast mode [ 249.604100][T12734] netlink: 'syz.2.2447': attribute type 2 has an invalid length. [ 249.737096][T12737] syzkaller1: entered promiscuous mode [ 249.742942][T12737] syzkaller1: entered allmulticast mode [ 249.792945][T12737] xt_SECMARK: invalid mode: 0 [ 250.008831][T12502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.047493][T12749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2452'. [ 250.078777][T12752] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2452'. [ 250.097940][T12749] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2452'. [ 250.189466][T12502] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.231011][T12757] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 250.242423][T12757] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 250.252919][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.260125][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.295282][ T5856] Bluetooth: hci0: command tx timeout [ 250.312958][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.320212][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.418049][T12761] FAULT_INJECTION: forcing a failure. [ 250.418049][T12761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.457961][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.4.2455 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 250.457987][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.457998][T12761] Call Trace: [ 250.458005][T12761] [ 250.458013][T12761] dump_stack_lvl+0x189/0x250 [ 250.458037][T12761] ? __pfx____ratelimit+0x10/0x10 [ 250.458062][T12761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.458080][T12761] ? __pfx__printk+0x10/0x10 [ 250.458102][T12761] ? __might_fault+0xb0/0x130 [ 250.458134][T12761] should_fail_ex+0x414/0x560 [ 250.458167][T12761] _copy_from_iter+0x1db/0x16f0 [ 250.458189][T12761] ? rcu_is_watching+0x15/0xb0 [ 250.458210][T12761] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 250.458233][T12761] ? __pfx__copy_from_iter+0x10/0x10 [ 250.458253][T12761] ? __build_skb_around+0x257/0x3e0 [ 250.458275][T12761] ? netlink_sendmsg+0x642/0xb30 [ 250.458294][T12761] ? skb_put+0x11b/0x210 [ 250.458317][T12761] netlink_sendmsg+0x6b2/0xb30 [ 250.458346][T12761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.458371][T12761] ? aa_sock_msg_perm+0x94/0x160 [ 250.458396][T12761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.458420][T12761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.458440][T12761] __sock_sendmsg+0x219/0x270 [ 250.458460][T12761] ____sys_sendmsg+0x52d/0x830 [ 250.458486][T12761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.458515][T12761] ? import_iovec+0x74/0xa0 [ 250.458538][T12761] ___sys_sendmsg+0x21f/0x2a0 [ 250.458561][T12761] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.458616][T12761] ? __fget_files+0x2a/0x420 [ 250.458637][T12761] ? __fget_files+0x3a0/0x420 [ 250.458669][T12761] __sys_sendmmsg+0x227/0x430 [ 250.458696][T12761] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.458716][T12761] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 250.458763][T12761] ? ksys_write+0x22a/0x250 [ 250.458792][T12761] ? __pfx_ksys_write+0x10/0x10 [ 250.458809][T12761] ? rcu_is_watching+0x15/0xb0 [ 250.458836][T12761] __x64_sys_sendmmsg+0xa0/0xc0 [ 250.458860][T12761] do_syscall_64+0xfa/0x3b0 [ 250.458877][T12761] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.458900][T12761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.458917][T12761] ? clear_bhb_loop+0x60/0xb0 [ 250.458939][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.458955][T12761] RIP: 0033:0x7f441878e929 [ 250.458971][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.458986][T12761] RSP: 002b:00007f44196af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.459006][T12761] RAX: ffffffffffffffda RBX: 00007f44189b5fa0 RCX: 00007f441878e929 [ 250.459019][T12761] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 250.459032][T12761] RBP: 00007f44196af090 R08: 0000000000000000 R09: 0000000000000000 [ 250.459043][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.459053][T12761] R13: 0000000000000000 R14: 00007f44189b5fa0 R15: 00007fffbcff7c68 [ 250.459084][T12761] [ 251.192559][T12787] netlink: 'syz.2.2463': attribute type 23 has an invalid length. [ 251.255000][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.378685][T12800] FAULT_INJECTION: forcing a failure. [ 251.378685][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 251.401347][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.4.2467 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 251.401375][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.401385][T12800] Call Trace: [ 251.401392][T12800] [ 251.401401][T12800] dump_stack_lvl+0x189/0x250 [ 251.401426][T12800] ? __pfx____ratelimit+0x10/0x10 [ 251.401452][T12800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.401470][T12800] ? __pfx__printk+0x10/0x10 [ 251.401501][T12800] ? ref_tracker_alloc+0x318/0x460 [ 251.401528][T12800] should_fail_ex+0x414/0x560 [ 251.401557][T12800] should_failslab+0xa8/0x100 [ 251.401581][T12800] kmem_cache_alloc_noprof+0x73/0x3c0 [ 251.401601][T12800] ? skb_clone+0x212/0x3a0 [ 251.401629][T12800] skb_clone+0x212/0x3a0 [ 251.401652][T12800] __netlink_deliver_tap+0x404/0x850 [ 251.401686][T12800] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.401715][T12800] netlink_deliver_tap+0x19c/0x1b0 [ 251.401738][T12800] netlink_unicast+0x730/0x8e0 [ 251.401769][T12800] netlink_sendmsg+0x805/0xb30 [ 251.401801][T12800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.401826][T12800] ? aa_sock_msg_perm+0x94/0x160 [ 251.401852][T12800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.401876][T12800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.401897][T12800] __sock_sendmsg+0x219/0x270 [ 251.401919][T12800] ____sys_sendmsg+0x52d/0x830 [ 251.401948][T12800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.401981][T12800] ? import_iovec+0x74/0xa0 [ 251.402004][T12800] ___sys_sendmsg+0x21f/0x2a0 [ 251.402029][T12800] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.402092][T12800] ? __fget_files+0x2a/0x420 [ 251.402113][T12800] ? __fget_files+0x3a0/0x420 [ 251.402146][T12800] __sys_sendmmsg+0x227/0x430 [ 251.402174][T12800] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.402192][T12800] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 251.402240][T12800] ? ksys_write+0x22a/0x250 [ 251.402262][T12800] ? __pfx_ksys_write+0x10/0x10 [ 251.402279][T12800] ? rcu_is_watching+0x15/0xb0 [ 251.402306][T12800] __x64_sys_sendmmsg+0xa0/0xc0 [ 251.402330][T12800] do_syscall_64+0xfa/0x3b0 [ 251.402346][T12800] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.402371][T12800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.402388][T12800] ? clear_bhb_loop+0x60/0xb0 [ 251.402408][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.402424][T12800] RIP: 0033:0x7f441878e929 [ 251.402440][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.402455][T12800] RSP: 002b:00007f44196af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 251.402474][T12800] RAX: ffffffffffffffda RBX: 00007f44189b5fa0 RCX: 00007f441878e929 [ 251.402487][T12800] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 251.402500][T12800] RBP: 00007f44196af090 R08: 0000000000000000 R09: 0000000000000000 [ 251.402511][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.402521][T12800] R13: 0000000000000000 R14: 00007f44189b5fa0 R15: 00007fffbcff7c68 [ 251.402553][T12800] [ 251.402590][T12800] __nla_validate_parse: 1 callbacks suppressed [ 251.402600][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2467'. [ 251.745178][T12806] netlink: 'syz.0.2469': attribute type 10 has an invalid length. [ 251.757838][T12806] team0: Device ipvlan1 failed to register rx_handler [ 251.800088][T12502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.902964][T12502] veth0_vlan: entered promiscuous mode [ 251.934685][T12809] netlink: 'syz.4.2471': attribute type 41 has an invalid length. [ 251.944442][T12502] veth1_vlan: entered promiscuous mode [ 252.052373][T12502] veth0_macvtap: entered promiscuous mode [ 252.084191][T12502] veth1_macvtap: entered promiscuous mode [ 252.116837][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2476'. [ 252.154187][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2476'. [ 252.195702][T12502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.204453][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 252.229544][T12502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.311027][T12502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.332855][T12502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.342694][T12502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.368421][T12502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.561704][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.585159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.631675][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.644239][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.693562][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 252.779808][T12846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2485'. [ 253.200287][T12873] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2494'. [ 253.405422][ T30] audit: type=1107 audit(1752502115.247:5): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.686920][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.892586][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.261882][T12894] xt_nfacct: accounting object `syz1' does not exists [ 254.344641][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.400682][T12898] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 254.408712][T12898] netlink: 'syz.3.2502': attribute type 4 has an invalid length. [ 254.417906][T12898] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2502'. [ 254.429346][T12898] NCSI netlink: No device for ifindex 458760 [ 254.675860][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.896699][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.910129][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.918778][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.927659][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.939357][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 254.950025][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.996674][ T56] bridge_slave_1: left allmulticast mode [ 255.003662][ T56] bridge_slave_1: left promiscuous mode [ 255.009788][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.033773][ T56] bridge_slave_0: left allmulticast mode [ 255.044816][ T56] bridge_slave_0: left promiscuous mode [ 255.050683][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.538069][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.550809][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.561902][ T56] bond0 (unregistering): Released all slaves [ 255.644267][T12936] netlink: 'syz.0.2511': attribute type 83 has an invalid length. [ 255.681594][T12938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2512'. [ 256.188287][T12919] lo speed is unknown, defaulting to 1000 [ 256.556279][T12984] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 256.574799][T12984] netlink: 'syz.3.2524': attribute type 3 has an invalid length. [ 256.582576][T12984] __nla_validate_parse: 1 callbacks suppressed [ 256.582591][T12984] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2524'. [ 256.618827][T12982] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 256.625001][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2525'. [ 256.636807][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2523'. [ 256.653633][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2525'. [ 256.663735][T12984] NCSI netlink: No device for ifindex 813332851 [ 256.997399][T13002] xt_nfacct: accounting object `syz1' does not exists [ 257.015118][ T5856] Bluetooth: hci0: command tx timeout [ 257.132411][T13008] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 257.186736][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 257.191182][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2532'. [ 257.439352][T13024] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.2533'. [ 257.464034][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 257.583026][ T56] hsr_slave_0: left promiscuous mode [ 257.633911][ T56] hsr_slave_1: left promiscuous mode [ 257.643414][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.651208][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.662172][T13033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2538'. [ 257.681548][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.690997][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.723796][ T56] veth1_macvtap: left promiscuous mode [ 257.730944][ T56] veth0_macvtap: left promiscuous mode [ 257.737442][ T56] veth1_vlan: left promiscuous mode [ 257.742199][T13038] nbd: must specify an index to disconnect [ 257.742887][ T56] veth0_vlan: left promiscuous mode [ 257.756707][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2541'. [ 258.194276][ T56] team0 (unregistering): Port device team_slave_1 removed [ 258.239025][ T56] team0 (unregistering): Port device team_slave_0 removed [ 258.612986][T12919] chnl_net:caif_netlink_parms(): no params data found [ 258.914441][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.938834][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.955626][T12919] bridge_slave_0: entered allmulticast mode [ 258.970247][T12919] bridge_slave_0: entered promiscuous mode [ 259.008850][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.033064][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.054978][T12919] bridge_slave_1: entered allmulticast mode [ 259.081694][T12919] bridge_slave_1: entered promiscuous mode [ 259.095808][ T5852] Bluetooth: hci0: command tx timeout [ 259.207387][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.243499][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.335229][T13043] lo speed is unknown, defaulting to 1000 [ 259.351080][T12919] team0: Port device team_slave_0 added [ 259.384011][T12919] team0: Port device team_slave_1 added [ 259.513647][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.531376][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.589598][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.618794][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.631500][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.668376][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.804369][T12919] hsr_slave_0: entered promiscuous mode [ 259.812405][T12919] hsr_slave_1: entered promiscuous mode [ 259.823196][T12919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.832988][T12919] Cannot create hsr debugfs directory [ 260.764338][T12919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.777259][T12919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.788852][T12919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.800335][T12919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.929170][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.979043][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.012825][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.020066][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.070224][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.077444][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.160934][ T56] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 261.191316][ T5852] Bluetooth: hci0: command tx timeout [ 261.322798][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.384720][T12919] veth0_vlan: entered promiscuous mode [ 261.414230][T12919] veth1_vlan: entered promiscuous mode [ 261.421611][T13138] netlink: 'syz.2.2570': attribute type 10 has an invalid length. [ 261.458293][T12919] veth0_macvtap: entered promiscuous mode [ 261.483596][T12919] veth1_macvtap: entered promiscuous mode [ 261.517627][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.532026][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.549359][T12919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.565435][T12919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.574172][T12919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.615826][T12919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.698550][T13140] __nla_validate_parse: 4 callbacks suppressed [ 261.698580][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2571'. [ 261.718509][T13140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2571'. [ 261.728050][T13140] bond_slave_0: left promiscuous mode [ 261.733732][T13140] bond_slave_1: left promiscuous mode [ 261.740063][T13140] geneve1: left promiscuous mode [ 261.913450][T13140] team0: Port device bond0 removed [ 261.922852][T13140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.940514][T13140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.957685][T13140] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 261.968196][T13140] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 261.983393][T13140] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 261.992610][T13140] bond0 (unregistering): Released all slaves [ 262.074403][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.117568][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.133241][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 262.192241][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.208873][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.306160][T13153] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 262.662286][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 262.933687][T13177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2583'. [ 263.171045][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.297318][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.941749][T13193] x_tables: duplicate underflow at hook 4 [ 264.008652][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 264.255017][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 264.295891][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 264.314868][T13205] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 264.331291][T13205] nbd: error processing sock list [ 264.453936][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.466339][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.475431][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.486178][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.493865][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.596583][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.732694][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.889645][ T13] bridge_slave_1: left allmulticast mode [ 264.898525][ T13] bridge_slave_1: left promiscuous mode [ 264.904313][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.917655][ T13] bridge_slave_0: left allmulticast mode [ 264.923332][ T13] bridge_slave_0: left promiscuous mode [ 264.931719][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.120660][T13232] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.388862][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.399722][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.410794][ T13] bond0 (unregistering): Released all slaves [ 265.425240][T13210] lo speed is unknown, defaulting to 1000 [ 266.116010][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'. [ 266.175904][T13264] xt_nfacct: accounting object `syz1' does not exists [ 266.536032][ T5856] Bluetooth: hci0: command tx timeout [ 266.599642][T13274] tipc: Enabling of bearer rejected, already enabled [ 266.662575][ T13] hsr_slave_0: left promiscuous mode [ 266.673748][ T13] hsr_slave_1: left promiscuous mode [ 266.700933][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.721032][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.740261][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.750648][T13278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2616'. [ 266.759964][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.864088][ T13] veth1_macvtap: left promiscuous mode [ 266.872364][ T13] veth0_macvtap: left promiscuous mode [ 266.881505][ T13] veth1_vlan: left promiscuous mode [ 266.886990][ T13] veth0_vlan: left promiscuous mode [ 267.286938][ T13] team0 (unregistering): Port device team_slave_1 removed [ 267.325556][ T13] team0 (unregistering): Port device team_slave_0 removed [ 267.905409][T13288] netlink: zone id is out of range [ 267.911114][T13288] netlink: zone id is out of range [ 267.921170][T13288] netlink: zone id is out of range [ 267.926892][T13288] netlink: zone id is out of range [ 267.934298][T13288] netlink: zone id is out of range [ 267.943609][T13288] netlink: zone id is out of range [ 267.949808][T13288] netlink: zone id is out of range [ 267.956046][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.970665][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.977818][T13288] netlink: zone id is out of range [ 267.977833][T13288] netlink: zone id is out of range [ 267.993989][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.006876][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.014840][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.091144][T13210] chnl_net:caif_netlink_parms(): no params data found [ 268.335412][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.342599][T13210] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.358500][T13210] bridge_slave_0: entered allmulticast mode [ 268.376402][T13210] bridge_slave_0: entered promiscuous mode [ 268.396229][T13210] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.403619][T13210] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.415092][T13210] bridge_slave_1: entered allmulticast mode [ 268.422893][T13210] bridge_slave_1: entered promiscuous mode [ 268.592543][T13309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.611574][T13210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.635242][ T5856] Bluetooth: hci0: command tx timeout [ 268.668225][T13210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.759933][T13291] lo speed is unknown, defaulting to 1000 [ 268.859277][T13210] team0: Port device team_slave_0 added [ 268.879420][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2628'. [ 268.885407][T13210] team0: Port device team_slave_1 added [ 268.891004][T13316] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2628'. [ 269.009325][T13210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.021913][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.053606][T13210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.092133][T13210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.141584][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.174442][T13210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.397861][T13210] hsr_slave_0: entered promiscuous mode [ 269.417023][T13210] hsr_slave_1: entered promiscuous mode [ 269.430765][T13210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.439811][T13210] Cannot create hsr debugfs directory [ 269.644359][T13343] xt_nfacct: accounting object `syz1' does not exists [ 269.953439][T13291] chnl_net:caif_netlink_parms(): no params data found [ 270.055214][ T5856] Bluetooth: hci5: command tx timeout [ 270.125784][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2644'. [ 270.164547][T13363] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2644'. [ 270.240819][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.264885][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.272127][T13291] bridge_slave_0: entered allmulticast mode [ 270.293641][T13291] bridge_slave_0: entered promiscuous mode [ 270.335930][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.343195][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.360883][T13291] bridge_slave_1: entered allmulticast mode [ 270.378439][T13291] bridge_slave_1: entered promiscuous mode [ 270.432283][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.457469][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.546829][T13291] team0: Port device team_slave_0 added [ 270.557450][T13291] team0: Port device team_slave_1 added [ 270.625897][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.636853][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.669300][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.681273][T13210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.698093][ T5856] Bluetooth: hci0: command tx timeout [ 270.708213][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.717607][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.752914][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.799114][T13210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.841368][T13210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.861170][T13210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.951892][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 270.967108][T13291] hsr_slave_0: entered promiscuous mode [ 270.973467][T13291] hsr_slave_1: entered promiscuous mode [ 270.995504][T13291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.008602][T13291] Cannot create hsr debugfs directory [ 271.222324][T13404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2655'. [ 271.258763][T13404] unsupported nlmsg_type 40 [ 271.571654][T13210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.611267][T13291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.630575][T13291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.650911][T13395] lo speed is unknown, defaulting to 1000 [ 271.650958][T13291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.692315][T13291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.745937][T13210] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.814226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.821457][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.843350][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.850586][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.099949][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.135031][ T5856] Bluetooth: hci5: command tx timeout [ 272.213100][T13428] FAULT_INJECTION: forcing a failure. [ 272.213100][T13428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.227293][T13428] CPU: 1 UID: 0 PID: 13428 Comm: syz.0.2661 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 272.227319][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.227330][T13428] Call Trace: [ 272.227336][T13428] [ 272.227343][T13428] dump_stack_lvl+0x189/0x250 [ 272.227378][T13428] ? __pfx____ratelimit+0x10/0x10 [ 272.227405][T13428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.227426][T13428] ? __pfx__printk+0x10/0x10 [ 272.227461][T13428] should_fail_ex+0x414/0x560 [ 272.227492][T13428] _copy_to_user+0x31/0xb0 [ 272.227519][T13428] simple_read_from_buffer+0xe1/0x170 [ 272.227545][T13428] proc_fail_nth_read+0x1df/0x250 [ 272.227572][T13428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.227599][T13428] ? rw_verify_area+0x258/0x650 [ 272.227617][T13428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.227643][T13428] vfs_read+0x200/0x980 [ 272.227668][T13428] ? __pfx___mutex_lock+0x10/0x10 [ 272.227686][T13428] ? __pfx_vfs_read+0x10/0x10 [ 272.227707][T13428] ? __fget_files+0x2a/0x420 [ 272.227732][T13428] ? __fget_files+0x3a0/0x420 [ 272.227750][T13428] ? __fget_files+0x2a/0x420 [ 272.227780][T13428] ksys_read+0x145/0x250 [ 272.227803][T13428] ? __pfx_ksys_read+0x10/0x10 [ 272.227819][T13428] ? rcu_is_watching+0x15/0xb0 [ 272.227845][T13428] ? do_syscall_64+0xbe/0x3b0 [ 272.227867][T13428] do_syscall_64+0xfa/0x3b0 [ 272.227882][T13428] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.227906][T13428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.227923][T13428] ? clear_bhb_loop+0x60/0xb0 [ 272.227944][T13428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.227961][T13428] RIP: 0033:0x7fbcadb8d33c [ 272.227979][T13428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.227994][T13428] RSP: 002b:00007fbcae9bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.228013][T13428] RAX: ffffffffffffffda RBX: 00007fbcaddb5fa0 RCX: 00007fbcadb8d33c [ 272.228027][T13428] RDX: 000000000000000f RSI: 00007fbcae9bf0a0 RDI: 0000000000000005 [ 272.228038][T13428] RBP: 00007fbcae9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 272.228049][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.228060][T13428] R13: 0000000000000000 R14: 00007fbcaddb5fa0 R15: 00007ffebe4d4758 [ 272.228092][T13428] [ 272.231020][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.510245][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.517431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.608698][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.615929][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.638492][T13210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.775005][ T5856] Bluetooth: hci0: command tx timeout [ 272.867685][T13210] veth0_vlan: entered promiscuous mode [ 272.932309][T13443] FAULT_INJECTION: forcing a failure. [ 272.932309][T13443] name failslab, interval 1, probability 0, space 0, times 0 [ 272.962534][T13443] CPU: 1 UID: 0 PID: 13443 Comm: syz.3.2664 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 272.962573][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.962584][T13443] Call Trace: [ 272.962592][T13443] [ 272.962599][T13443] dump_stack_lvl+0x189/0x250 [ 272.962625][T13443] ? __pfx____ratelimit+0x10/0x10 [ 272.962652][T13443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.962673][T13443] ? __pfx__printk+0x10/0x10 [ 272.962699][T13443] ? __pfx___might_resched+0x10/0x10 [ 272.962719][T13443] ? fs_reclaim_acquire+0x7d/0x100 [ 272.962746][T13443] should_fail_ex+0x414/0x560 [ 272.962776][T13443] should_failslab+0xa8/0x100 [ 272.962801][T13443] __kmalloc_noprof+0xcb/0x4f0 [ 272.962821][T13443] ? tomoyo_encode+0x28b/0x550 [ 272.962843][T13443] tomoyo_encode+0x28b/0x550 [ 272.962868][T13443] tomoyo_realpath_from_path+0x58d/0x5d0 [ 272.962888][T13443] ? tomoyo_domain+0xd9/0x130 [ 272.962912][T13443] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 272.962934][T13443] tomoyo_path_number_perm+0x1e8/0x5a0 [ 272.962960][T13443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.962997][T13443] ? __lock_acquire+0xab9/0xd20 [ 272.963034][T13443] ? __fget_files+0x2a/0x420 [ 272.963060][T13443] ? __fget_files+0x2a/0x420 [ 272.963080][T13443] ? __fget_files+0x3a0/0x420 [ 272.963100][T13443] ? __fget_files+0x2a/0x420 [ 272.963126][T13443] security_file_ioctl+0xcb/0x2d0 [ 272.963151][T13443] __se_sys_ioctl+0x47/0x170 [ 272.963173][T13443] do_syscall_64+0xfa/0x3b0 [ 272.963189][T13443] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.963214][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.963232][T13443] ? clear_bhb_loop+0x60/0xb0 [ 272.963252][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.963267][T13443] RIP: 0033:0x7f5196f8e929 [ 272.963284][T13443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.963298][T13443] RSP: 002b:00007f5197eb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.963315][T13443] RAX: ffffffffffffffda RBX: 00007f51971b5fa0 RCX: 00007f5196f8e929 [ 272.963327][T13443] RDX: 0000200000000440 RSI: 000000000000541b RDI: 0000000000000003 [ 272.963338][T13443] RBP: 00007f5197eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 272.963349][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.963359][T13443] R13: 0000000000000000 R14: 00007f51971b5fa0 R15: 00007fffe06b0ca8 [ 272.963385][T13443] [ 272.963966][T13210] veth1_vlan: entered promiscuous mode [ 273.024984][T13443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.086150][T13210] veth0_macvtap: entered promiscuous mode [ 273.262646][T13210] veth1_macvtap: entered promiscuous mode [ 273.359375][T13210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.400822][T13210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.443969][T13210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.470698][T13210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.483322][T13210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.493737][T13210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.880308][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.901423][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.925469][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.001506][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.040148][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.215017][ T5856] Bluetooth: hci5: command tx timeout [ 274.463449][T13487] FAULT_INJECTION: forcing a failure. [ 274.463449][T13487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.494842][T13487] CPU: 0 UID: 0 PID: 13487 Comm: syz.2.2674 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 274.494867][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.494878][T13487] Call Trace: [ 274.494885][T13487] [ 274.494893][T13487] dump_stack_lvl+0x189/0x250 [ 274.494918][T13487] ? __pfx____ratelimit+0x10/0x10 [ 274.494944][T13487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.494963][T13487] ? __pfx__printk+0x10/0x10 [ 274.494986][T13487] ? __might_fault+0xb0/0x130 [ 274.495019][T13487] should_fail_ex+0x414/0x560 [ 274.495048][T13487] _copy_from_user+0x2d/0xb0 [ 274.495082][T13487] kstrtouint_from_user+0xc4/0x170 [ 274.495102][T13487] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 274.495146][T13487] proc_fail_nth_write+0x88/0x240 [ 274.495170][T13487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.495196][T13487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.495217][T13487] vfs_write+0x27e/0xa90 [ 274.495242][T13487] ? __pfx_vfs_write+0x10/0x10 [ 274.495262][T13487] ? __fget_files+0x2a/0x420 [ 274.495288][T13487] ? __fget_files+0x3a0/0x420 [ 274.495308][T13487] ? __fget_files+0x2a/0x420 [ 274.495338][T13487] ksys_write+0x145/0x250 [ 274.495355][T13487] ? __fget_files+0x3a0/0x420 [ 274.495373][T13487] ? __pfx_ksys_write+0x10/0x10 [ 274.495392][T13487] ? do_syscall_64+0xbe/0x3b0 [ 274.495409][T13487] do_syscall_64+0xfa/0x3b0 [ 274.495424][T13487] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.495447][T13487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.495464][T13487] ? clear_bhb_loop+0x60/0xb0 [ 274.495485][T13487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.495500][T13487] RIP: 0033:0x7f165cb8d3df [ 274.495515][T13487] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 274.495529][T13487] RSP: 002b:00007f165d921030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 274.495548][T13487] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f165cb8d3df [ 274.495561][T13487] RDX: 0000000000000001 RSI: 00007f165d9210a0 RDI: 0000000000000004 [ 274.495572][T13487] RBP: 00007f165d921090 R08: 0000000000000000 R09: 0000000000000000 [ 274.495583][T13487] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 274.495594][T13487] R13: 0000000000000001 R14: 00007f165cdb6080 R15: 00007fffb31e4008 [ 274.495624][T13487] [ 274.539296][T13291] veth0_vlan: entered promiscuous mode [ 274.804624][T13291] veth1_vlan: entered promiscuous mode [ 274.980297][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.037128][T13498] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2676'. [ 275.053933][T13498] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2676'. [ 275.082713][T13291] veth0_macvtap: entered promiscuous mode [ 275.099463][T13291] veth1_macvtap: entered promiscuous mode [ 275.123930][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.153180][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.174003][T13291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.191769][T13291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.203338][T13291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.213875][T13291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.279980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.293073][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.320843][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.330036][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.355835][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.502764][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.661614][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.746338][ T3576] bridge_slave_1: left allmulticast mode [ 275.752028][ T3576] bridge_slave_1: left promiscuous mode [ 275.762419][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.771776][ T3576] bridge_slave_0: left allmulticast mode [ 275.777723][ T3576] bridge_slave_0: left promiscuous mode [ 275.783402][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.291468][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.299902][ T5852] Bluetooth: hci5: command tx timeout [ 276.311936][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.326424][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.342133][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.352874][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2682'. [ 276.358143][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.369428][T13524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2682'. [ 276.420536][T13525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2682'. [ 276.438257][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.451589][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.463623][ T3576] bond0 (unregistering): Released all slaves [ 276.772267][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 276.788830][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2684'. [ 276.808835][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 276.835290][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2684'. [ 276.858432][T13538] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 276.875437][T13538] nbd: error processing sock list [ 276.917951][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2684'. [ 277.030230][T13514] lo speed is unknown, defaulting to 1000 [ 277.501933][T13520] lo speed is unknown, defaulting to 1000 [ 278.444062][T13578] netlink: 'syz.5.2698': attribute type 1 has an invalid length. [ 278.455649][ T5852] Bluetooth: hci0: command tx timeout [ 278.467852][T13578] nbd: error processing sock list [ 278.952916][ T3576] hsr_slave_0: left promiscuous mode [ 279.024917][ T3576] hsr_slave_1: left promiscuous mode [ 279.074001][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.090393][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.103679][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.119904][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.133853][T13603] Cannot find add_set index 1 as target [ 279.160401][ T3576] veth1_macvtap: left promiscuous mode [ 279.166409][ T3576] veth0_macvtap: left promiscuous mode [ 279.173982][ T3576] veth1_vlan: left promiscuous mode [ 279.181132][ T3576] veth0_vlan: left promiscuous mode [ 279.759591][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 279.800628][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 280.200948][T13617] FAULT_INJECTION: forcing a failure. [ 280.200948][T13617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.225040][T13617] CPU: 1 UID: 0 PID: 13617 Comm: syz.3.2710 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 280.225067][T13617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.225078][T13617] Call Trace: [ 280.225085][T13617] [ 280.225093][T13617] dump_stack_lvl+0x189/0x250 [ 280.225118][T13617] ? __pfx____ratelimit+0x10/0x10 [ 280.225143][T13617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.225163][T13617] ? __pfx__printk+0x10/0x10 [ 280.225186][T13617] ? __might_fault+0xb0/0x130 [ 280.225218][T13617] should_fail_ex+0x414/0x560 [ 280.225247][T13617] _copy_to_iter+0x575/0x16f0 [ 280.225278][T13617] ? __pfx__copy_to_iter+0x10/0x10 [ 280.225293][T13617] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 280.225323][T13617] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 280.225352][T13617] __skb_datagram_iter+0xf8/0x990 [ 280.225377][T13617] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 280.225407][T13617] skb_copy_datagram_iter+0xc5/0x230 [ 280.225435][T13617] netlink_recvmsg+0x2ab/0xa30 [ 280.225467][T13617] ? __pfx_netlink_recvmsg+0x10/0x10 [ 280.225492][T13617] ? __lock_acquire+0xab9/0xd20 [ 280.225517][T13617] ? aa_sock_msg_perm+0x94/0x160 [ 280.225543][T13617] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 280.225566][T13617] ? security_socket_recvmsg+0x7e/0x2e0 [ 280.225586][T13617] ? __pfx_netlink_recvmsg+0x10/0x10 [ 280.225607][T13617] sock_recvmsg+0x229/0x270 [ 280.225629][T13617] ____sys_recvmsg+0x1c9/0x460 [ 280.225660][T13617] ? __pfx_____sys_recvmsg+0x10/0x10 [ 280.225699][T13617] ? import_iovec+0x74/0xa0 [ 280.225723][T13617] ___sys_recvmsg+0x1b5/0x510 [ 280.225749][T13617] ? __pfx____sys_recvmsg+0x10/0x10 [ 280.225799][T13617] ? __fget_files+0x3a0/0x420 [ 280.225833][T13617] do_recvmmsg+0x307/0x770 [ 280.225865][T13617] ? __pfx_do_recvmmsg+0x10/0x10 [ 280.225900][T13617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.225937][T13617] __x64_sys_recvmmsg+0x190/0x240 [ 280.225962][T13617] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 280.225991][T13617] ? do_syscall_64+0xbe/0x3b0 [ 280.226012][T13617] do_syscall_64+0xfa/0x3b0 [ 280.226031][T13617] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.226055][T13617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.226073][T13617] ? clear_bhb_loop+0x60/0xb0 [ 280.226094][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.226110][T13617] RIP: 0033:0x7f5196f8e929 [ 280.226127][T13617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.226142][T13617] RSP: 002b:00007f5197e93038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 280.226162][T13617] RAX: ffffffffffffffda RBX: 00007f51971b6080 RCX: 00007f5196f8e929 [ 280.226174][T13617] RDX: 04000000000000a0 RSI: 0000200000000e40 RDI: 0000000000000003 [ 280.226187][T13617] RBP: 00007f5197e93090 R08: 0000000000000000 R09: 0000000000000000 [ 280.226198][T13617] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000001 [ 280.226209][T13617] R13: 0000000000000001 R14: 00007f51971b6080 R15: 00007fffe06b0ca8 [ 280.226239][T13617] [ 280.231020][T13520] chnl_net:caif_netlink_parms(): no params data found [ 280.333109][T13620] __nla_validate_parse: 6 callbacks suppressed [ 280.333127][T13620] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2711'. [ 280.545325][ T5852] Bluetooth: hci0: command tx timeout [ 280.608818][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 280.685194][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 280.770295][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 280.798156][T13625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.830341][T13625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 280.920305][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.928407][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.936428][T13520] bridge_slave_0: entered allmulticast mode [ 280.943691][T13520] bridge_slave_0: entered promiscuous mode [ 280.952508][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 280.953303][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.967781][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.981487][T13520] bridge_slave_1: entered allmulticast mode [ 280.989111][T13520] bridge_slave_1: entered promiscuous mode [ 281.039622][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.043452][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.088879][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.113061][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.132801][T13645] xt_nfacct: accounting object `syz1' does not exists [ 281.209812][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.244524][T13520] team0: Port device team_slave_0 added [ 281.268829][T13520] team0: Port device team_slave_1 added [ 281.275503][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.283859][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.370730][T13625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.378999][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.390748][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.442493][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.464224][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.472509][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.506785][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.618555][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'. [ 281.631679][T13664] net_ratelimit: 16 callbacks suppressed [ 281.631695][T13664] openvswitch: netlink: Unknown nsh attribute 0 [ 281.663551][T13520] hsr_slave_0: entered promiscuous mode [ 281.669332][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.690586][T13520] hsr_slave_1: entered promiscuous mode [ 281.699842][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.718548][T13520] Cannot create hsr debugfs directory [ 281.814215][T13675] Cannot find add_set index 1 as target [ 282.107473][T13689] netlink: 'syz.5.2736': attribute type 1 has an invalid length. [ 282.204000][T13694] tipc: Enabled bearer , priority 0 [ 282.214057][T13694] syzkaller0: entered promiscuous mode [ 282.225839][T13694] syzkaller0: entered allmulticast mode [ 282.363464][T13700] tipc: Resetting bearer [ 282.406622][T13693] tipc: Resetting bearer [ 282.462086][T13693] tipc: Disabling bearer [ 282.615082][ T5852] Bluetooth: hci0: command tx timeout [ 282.714266][T13715] ªªªªªª†³?ÂHº: renamed from lo [ 282.741651][T13520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.784018][T13720] x_tables: duplicate underflow at hook 1 [ 282.791495][T13520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.830648][T13520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.872859][T13520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.873756][T13722] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 282.905780][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 282.915314][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 283.178962][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.233454][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.264896][ T3556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.293400][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.300633][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.319234][ T3556] ------------[ cut here ]------------ [ 283.333650][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.340867][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.348352][ T3556] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 283.351286][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 283.372811][ T3556] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 283.401048][ T3556] CPU: 0 UID: 0 PID: 3556 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 283.401074][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.401086][ T3556] Workqueue: events_unbound cfg80211_wiphy_work [ 283.401111][ T3556] Call Trace: [ 283.401118][ T3556] [ 283.401126][ T3556] dump_stack_lvl+0x189/0x250 [ 283.401152][ T3556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.401172][ T3556] ? __pfx__printk+0x10/0x10 [ 283.401210][ T3556] ubsan_epilogue+0xa/0x40 [ 283.401232][ T3556] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 283.401261][ T3556] ieee80211_request_ibss_scan+0x600/0x8b0 [ 283.401303][ T3556] ieee80211_ibss_work+0xd85/0x1060 [ 283.401327][ T3556] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.401354][ T3556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.401377][ T3556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.401402][ T3556] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 283.401439][ T3556] ? skb_dequeue+0x10e/0x150 [ 283.401455][ T3556] ? ieee80211_iface_work+0xcdb/0xfe0 [ 283.401475][ T3556] ? ieee80211_iface_work+0xf39/0xfe0 [ 283.401495][ T3556] ? rcu_is_watching+0x15/0xb0 [ 283.401521][ T3556] cfg80211_wiphy_work+0x2dc/0x460 [ 283.401542][ T3556] ? process_scheduled_works+0x9ef/0x17b0 [ 283.401565][ T3556] process_scheduled_works+0xae1/0x17b0 [ 283.401618][ T3556] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.401659][ T3556] worker_thread+0x8a0/0xda0 [ 283.401708][ T3556] kthread+0x70e/0x8a0 [ 283.401735][ T3556] ? __pfx_worker_thread+0x10/0x10 [ 283.401755][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.401779][ T3556] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.401801][ T3556] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.401823][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.401848][ T3556] ret_from_fork+0x3fc/0x770 [ 283.401870][ T3556] ? __pfx_ret_from_fork+0x10/0x10 [ 283.401896][ T3556] ? __switch_to_asm+0x39/0x70 [ 283.401916][ T3556] ? __switch_to_asm+0x33/0x70 [ 283.401935][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.401959][ T3556] ret_from_fork_asm+0x1a/0x30 [ 283.401999][ T3556] [ 283.402005][ T3556] ---[ end trace ]--- [ 283.670910][ T3556] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 283.678163][ T3556] CPU: 0 UID: 0 PID: 3556 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 283.690414][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.700473][ T3556] Workqueue: events_unbound cfg80211_wiphy_work [ 283.706729][ T3556] Call Trace: [ 283.709998][ T3556] [ 283.712920][ T3556] dump_stack_lvl+0x99/0x250 [ 283.717505][ T3556] ? __asan_memcpy+0x40/0x70 [ 283.722089][ T3556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.727282][ T3556] ? __pfx__printk+0x10/0x10 [ 283.731876][ T3556] panic+0x2db/0x790 [ 283.735767][ T3556] ? __pfx_panic+0x10/0x10 [ 283.740173][ T3556] ? _printk+0xcf/0x120 [ 283.744327][ T3556] ? __pfx__printk+0x10/0x10 [ 283.748927][ T3556] check_panic_on_warn+0x89/0xb0 [ 283.753860][ T3556] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 283.759586][ T3556] ieee80211_request_ibss_scan+0x600/0x8b0 [ 283.765407][ T3556] ieee80211_ibss_work+0xd85/0x1060 [ 283.770602][ T3556] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.775804][ T3556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.781696][ T3556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.788025][ T3556] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 283.793658][ T3556] ? skb_dequeue+0x10e/0x150 [ 283.798239][ T3556] ? ieee80211_iface_work+0xcdb/0xfe0 [ 283.803603][ T3556] ? ieee80211_iface_work+0xf39/0xfe0 [ 283.808963][ T3556] ? rcu_is_watching+0x15/0xb0 [ 283.813723][ T3556] cfg80211_wiphy_work+0x2dc/0x460 [ 283.818826][ T3556] ? process_scheduled_works+0x9ef/0x17b0 [ 283.824542][ T3556] process_scheduled_works+0xae1/0x17b0 [ 283.830105][ T3556] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.836095][ T3556] worker_thread+0x8a0/0xda0 [ 283.840701][ T3556] kthread+0x70e/0x8a0 [ 283.844771][ T3556] ? __pfx_worker_thread+0x10/0x10 [ 283.849872][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.854455][ T3556] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.859649][ T3556] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.864842][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.869427][ T3556] ret_from_fork+0x3fc/0x770 [ 283.874011][ T3556] ? __pfx_ret_from_fork+0x10/0x10 [ 283.879118][ T3556] ? __switch_to_asm+0x39/0x70 [ 283.883879][ T3556] ? __switch_to_asm+0x33/0x70 [ 283.888637][ T3556] ? __pfx_kthread+0x10/0x10 [ 283.893249][ T3556] ret_from_fork_asm+0x1a/0x30 [ 283.898027][ T3556] [ 283.901291][ T3556] Kernel Offset: disabled [ 283.905650][ T3556] Rebooting in 86400 seconds..