last executing test programs: 4.619969882s ago: executing program 2 (id=3539): socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70000000f9ff1300000018000180140002006e6574646576730008000f0005000000080008"], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000100011"], 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$inet6(0xa, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) 4.539318367s ago: executing program 4 (id=3540): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2014, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x50, 0x2, [@TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0xffff, 0x2, 0x1, {0x8, 0x0, 0x81, 0x8, 0x8, 0x6}, {0x4, 0x2, 0x7a1, 0x6, 0xaf13, 0xfffffff8}, 0x100, 0x3, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @filter_kind_options=@f_basic={{0xa}, {0x1f78, 0x2, [@TCA_BASIC_ACT={0x484, 0x3, [@m_csum={0x1e4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x7, 0x0, 0x5}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0xffffffffffffffff, 0x200, 0x4}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x0, 0x1, 0x0, 0x4}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9bb, 0xdb, 0x7, 0x1, 0x81}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffbff, 0x5, 0xfff, 0x4318e399}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xf, 0x20000000, 0x14, 0x4}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xa0, 0x6, 0x3ff, 0x101}, 0x1}}]}, {0xf1, 0x6, "aa5ffc1b977142c63c27997daa9b4b700a06cdb09578aa7ec2bb8ff92adce9c1937d888dd54d6472d4f9346a9f39c0e0edc4be118c3d80735a3b1e1a974516c6568ea9f56a49ae2c6f53cdd0638aec07dbde9b062c3f4a075c91d11820c1a9bed889af968209cce6f77fd2e885961a0b1b49766266b7615e6c9df2b14bb07c74dabc9109bfc491ceed115a931761280073586d8bd1fe645f6921fa9061e6f1370be9a81f1a793e833168cd4f13b8d950e99561c1c9ddb8b78c70cfb8e0055f1dc9cd895ae79f3b8e4fadb9524fc8bb2ab96a8efd228c49a1ed892e4e63df75fb7e7076b9c31aba7c8574c225ff"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0xec, 0x5, 0x0, 0x0, {{0x7}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbe, 0x6, {0x0, 'security\x00', 0x11, 0x8, "d4bf8212c3b3c9fd5186b4164531352b9cb404bc0dbbd97f2de781404d37ffcf853def70b3ff99b1aaad937686ef0a6a531324042862bda5abc985c19d56161d242e8faa5e59a00add6586aa004354a92b1108e7431bcf5927733b317ef88a224c3254f2f4cf670c0d174fdeaabe5eaa735d8323f55a3da80ef72127b39f2317174e28e0dd67daa256681b9a52a04043645b501d"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x150, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xedf}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xf4, 0x6, "1d63f5a5c41ffd44e185d4024e877947562f5e5d24aa2e825986e2f5c6d5d8432a3d12d25f157120c4ba7dd3e17f613bc3b09d8617a99badbc65f8c2cb740411cf26e4c124416dea239425c38f2a95458dd37795bfe1b0f527be3ca2fcd660dae7b26896c63a880f64af634062993ae01041e95d5dfba1c6e4aae9a94ed1222950a0316cac5b8cdbbdb7d4792de36be5547bb16e31e6d3b6b1c755e191472f3d722aea04f237cb8d3d2401e3c2df40ceb2a75cdcd55e37bc95c5b08fd9ba20bbd84dbfdb66869217b1ba66b25f395b3729c8ab1de698f5cb9e3995cb120e9a7835381448e1d911d592c5fe0706c5997d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x60, 0xa, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x1f, 0x6, "ed25967adbf4da12887e433f3f2124e5eb34219a66e7382c3c1bec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x15b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x5}, {0x0, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xa, 0x7, 0x200}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x7a}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc8, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x78, 0x5, "544bc43ffcecba27b8cb14064359e736909791fe81ad0024fc53e57daf32995d0d181c1dba1c39e905d7f87a339e86bc046846e4392f2194c6782648d185ab2cebaf3164400288723a11689060f39f474926703f34afaa152fe6956a05cffeb83c06d0b81208c783c29029e8c461ce689ae47a8e"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xbc, 0x1, 0x0, 0x0, {{0x800, 0x9, 0xef}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x6a, 0x5, "a99a8750d4a87a45ed6413060e7d3278445bf98a727987d51a7771ca17606243fa45d3536026515018d474c1a01aefbb520d2606d20265d8c32d47b20e1bba98f261808dff19455c46e51a03a5de5257fa2593f545ce83c6ff66ad62790adebe5f9190064fc7"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x7fff}, {0x80000000, 0xffffffff, 0x1684, 0xafdc}}}, @TCF_EM_CONTAINER={0xe0, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x1}, "0d0fd0a693fe2dc4c00cad73c74069a16cae170c17934e037b251b34b62e69965b6ebd2e96984f7dc035c483a7d53ffb091880bd2cc79f00cecfc89527a589d6409140ae54b39a87e889914469b84f41fba798b23ecf3261590b9531914d75c371b08a10dc68531e51e08d03f03d9c3e702734f6a277e65853a90e4b14a99c65be7cfc67d503c6bca6f688d0487e64cbae8c61cdfbc907d4d0bfaa14455f4b2063fbd026697a548af13ecaced1818a153e36346b7072cd1f8630a7e6fd93c66279a663caa5d13f2fe04a7c749867196d16e1c722"}}]}, @TCA_EMATCH_TREE_LIST={0x116c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1168, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "f5d6812702e34d1ae703d3a13a60f794cae98954568b5b90dadd0e88e39acee5d7c9d3313657695266ce7c80a6fb0ddc"}, @TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "144fdeef010ba8ddcad5316fb9fcf9a2d4536eebef477014697fc4724b5d49b9af0ff3bbed9508c890211e83e43ceb09525885b26784e96ed61beb10a89cf28312269200e7a3433d3f40346ef21493b8c675325c7c9a9f3cff362cfb24533878bca3733cae74ac31fc512e1f7e5eeabff02ee20fefa4c8419d5b35f711fa2d19d40cc17eea8b7876a15b5cf4a3a391ffc83d235af1cc5ed2f25a1f9f75032de3adc90757f9bbc5ca643575aecd4274ff147ce620c085818ba293d19d532f081aef089342a9f92724197809daea26384dde4c57e3468dd10650b71eb41b49d95e199a967c170e4f6bc094101a859d8846f20abe9fc907"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x16c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x551d, 0xfffffffb, 0x485}}}, @TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="0b2a1859f0b6b065a9", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="0df6fbccef9520720c68", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="08e7"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="a01333df46", @TCF_META_TYPE_VAR="f6f82d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bb98579f30229b85", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x7, 0x2}, {0xff, 0x5}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="a6df08df5c9efc8e", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x3}, {0x7ff, 0x3, 0x1, "0443b0"}}}, @TCF_EM_META={0x84, 0x2, 0x0, 0x0, {{0xf, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7}, {0x4, 0xd, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="163a30df12a2a9d910", @TCF_META_TYPE_VAR="ac", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b01a8451fe9e0c3e686d", @TCF_META_TYPE_VAR="8e3c4f5fa1e5", @TCF_META_TYPE_VAR="f9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="90521d24ea6481"]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="c9e586", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="15c218", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="12bb", @TCF_META_TYPE_VAR="f250ed810d1632"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0xa}, {0x400, 0xab, 0x9, 0x6019}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6b1, 0x8, 0xb}, {0x4, 0x5, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1a1, 0x8, 0x9}, {0x0, 0x2, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}, @TCA_BASIC_EMATCHES={0x538, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2f59}}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff, 0x8, 0x3}, {0x3, 0x5, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3be, 0x8, 0x9}, {0x4, 0x5, 0x6}}}, @TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_CONTAINER={0xa4, 0x1, 0x0, 0x0, {{0xa4b, 0x0, 0x8}, "76573bc733ec112f80a88bbb2e16830147ef493de8f783c076948bc9415a2e177d83f8755a0630a12aa0cbdaffdfc996b4e00e04f1b20484e9b37d06b2ff021c7b0de6bf3e56d93177bc182b543bdc3d9919b602a1a02d41c94c6ac83b771a1c43e8fe130041934d7308ebaf0b82fb6ad17648d7e738699607906d62ff19e78c5e1d7638b75e373aabc96728bc23779a77679863a3f55137"}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x8, 0x4, 0xfa}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="2b8aa67a7e77742150", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='l~\t-']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x18, 0x7, 0x2}, {0x4, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5, 0x2}, {0x0, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7bfb066620c004bdcb"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x7fff}, {0x1, 0x4, 0x6}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x10, 0x7, 0x3}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x5, 0x1, 0xdcf, 0xffffffff}}}, @TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x100, 0x0, 0x7}, "b6e665ede90a67a16c2685478b7af3e75d7746ba264515b2c427208106c652b4d8d13858b397e69226859cc3884d0e4d3e312124783a3b09f1113c8ed6abb47ebdc9ea39dea5ecdffbeb55db1343772a1b4be6c342dd3adc48a5c9492ec9e4f777b70258a74acd2885fa410502da43b69ac5743dc0e04afe242a91"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x1ff}, {0x7f, 0x6, 0x0, "92653aa33614"}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x7}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xd0a}, {0x9, 0x9, 0x0, "a434df3e2fd3a4f750"}}}]}, @TCA_EMATCH_TREE_LIST={0x290, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1ff, 0x1, 0x40}, {0x1000, 0x3, 0x4, 0x2, 0x7, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xa6, 0x3, 0x3}, {0x200, 0x5, 0xff, 0x2d30}}}, @TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x9}, "d698f413ef713ffb5b4b787c7794f6bbac00ea36f9f7ce717c051adbf6d0dec079c493a9d23c83a2c90a326ba3029640ee1529f29b538263846bc5aeb466e210e5b979ea7ba9af627655e9d288101ea52d60a56770f7747d75dccac580f6533b5ca44becafa2f55aa41bd40a6766d3b6d54d711c47bd1d1a13ca6cb82f232990f838a2f049a76cdbf45d8d133401bab5acb26059f8c00b45448ceddac1990c1979c58cc62093e8e9d3cef2385d5b1bd8bff742e4e27c6508fc342afb7fd987907c02763fbbc8c12fcd0e006af228246972922b8f642b265d9927febde5741068d8"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7fff, 0x8, 0x23}, {0xffffffffffffffff, 0x0, 0x2}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="cbcbacd3f056", @TCF_META_TYPE_VAR="365656ba", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x401, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='J', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="03c6241be6128a017daf", @TCF_META_TYPE_VAR="44d3ce", @TCF_META_TYPE_VAR="85ab36357d16be8b31", @TCF_META_TYPE_VAR="6af3f7ecd8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6, 0x1}, {0x80, 0x2, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x1ff}, {0x5, 0x8, 0x7, 0x1, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x30, 0x1, 0x0, 0x0, {{0xe5, 0x0, 0x29c2}, "3e177b39239e9a349b1f64cb2a11e8528d3e8c89477254c7c68f3297d0d23af8c5"}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0x40}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a9fa8b9b55f70c3f", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1ae9fc56c72394d9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x3, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3}, {0x5, 0x40}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x1, 0x2}, {0xffff, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xb, 0x2}, {0x2, 0x49, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8, 0x2}, {0xffff, 0xc}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="597ae135a26c989f40", @TCF_META_TYPE_VAR="8646fe", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x800}, {0x1, 0x8000, 0xfffff800, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x59}}]}]}}]}, 0x2014}}, 0x20040054) 4.465421147s ago: executing program 2 (id=3541): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x980, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0xfff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[r5, r0, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x5, 0xd, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x4, 0x2, 0x4, 0x7}, {0x5, 0x1, 0x10, 0x7}, {0x2, 0x5, 0x1, 0x3}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 4.393618312s ago: executing program 4 (id=3542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0xff, 0x6, 0x1, 0x3a90}, {0x1, 0x10, 0x7f, 0xfffffff2}, {0x8, 0x80, 0x9, 0x2}]}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x300}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) listen(r0, 0x3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r7, 0x0, 0x20000000}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000001ac0)={@mcast2}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4.061136347s ago: executing program 4 (id=3545): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0xa, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xbb, 0xd5, &(0x7f0000000140)="e88c76363666cf51d0ad8ea38255b6aba61ef22945d190aa0c9a9dcc5bd6d256b4d2efe9ad1dca53e22c9c82119c5e75ed8c4979017236a89125b1c9b39b727158e3876d88a57c307affc5045d40bb7dcda6625d3cad225a639706df8eef30838ff245d8bdb0da2c027ea9baa0a282724133f05883065b3b11fcd794651844295cd3d5c8e95ce90a0b58c3217435075de2fee300c0df981d6a71fdbb735e5e16b8c0f503d1a9c5c3cf83b68feda1be5117a9c31d8e18f29ba66c79", &(0x7f0000000300)=""/213, 0x8, 0x0, 0x80, 0xcb, &(0x7f0000000240)="dd8fda663d752243c440baed10327a25f1a38412a130c1959dc3a72375515e6281a17220bc00a36a5e1a95c91959099e55e290be6efedcbfc5726deb740fe6acedb86b362c04903a335be483e4c62fb141fbf9dbd680cee9a811bc88d422575e077882110c1dba44a5ae96f39b87f0922ddfe794ec0037b9adbb8714805c620f", &(0x7f0000000400)="5373483d1b643cd44c23ed567cdf6e665616ede7c4a4e6454b3b68eb31b067323d78c41d3b48fc8afc7e06405f110be82a054308ffc9a2597e91c312b340789f4516667ca375b24aee9f95f0bb185fccd8cefb100baaac873a324d5f9c138c677a60dd756d6326d06c31514e336f15725310d64f3d4764ebbb49db840f8136cfbe69a7df6a9e0c2c586ccefe0985895302328ddd003acc6df0323aca23cfb7ed0d511ceb6216c2dadd67a82bbe4382a88308a73044b40f208aec2cde6a7a94e312058d02ef9731717fc7cc", 0x2, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xbb, 0xd5, &(0x7f0000000140)="e88c76363666cf51d0ad8ea38255b6aba61ef22945d190aa0c9a9dcc5bd6d256b4d2efe9ad1dca53e22c9c82119c5e75ed8c4979017236a89125b1c9b39b727158e3876d88a57c307affc5045d40bb7dcda6625d3cad225a639706df8eef30838ff245d8bdb0da2c027ea9baa0a282724133f05883065b3b11fcd794651844295cd3d5c8e95ce90a0b58c3217435075de2fee300c0df981d6a71fdbb735e5e16b8c0f503d1a9c5c3cf83b68feda1be5117a9c31d8e18f29ba66c79", &(0x7f0000000300)=""/213, 0x8, 0x0, 0x80, 0xcb, &(0x7f0000000240)="dd8fda663d752243c440baed10327a25f1a38412a130c1959dc3a72375515e6281a17220bc00a36a5e1a95c91959099e55e290be6efedcbfc5726deb740fe6acedb86b362c04903a335be483e4c62fb141fbf9dbd680cee9a811bc88d422575e077882110c1dba44a5ae96f39b87f0922ddfe794ec0037b9adbb8714805c620f", &(0x7f0000000400)="5373483d1b643cd44c23ed567cdf6e665616ede7c4a4e6454b3b68eb31b067323d78c41d3b48fc8afc7e06405f110be82a054308ffc9a2597e91c312b340789f4516667ca375b24aee9f95f0bb185fccd8cefb100baaac873a324d5f9c138c677a60dd756d6326d06c31514e336f15725310d64f3d4764ebbb49db840f8136cfbe69a7df6a9e0c2c586ccefe0985895302328ddd003acc6df0323aca23cfb7ed0d511ceb6216c2dadd67a82bbe4382a88308a73044b40f208aec2cde6a7a94e312058d02ef9731717fc7cc", 0x2, 0x0, 0x5}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.358101422s ago: executing program 4 (id=3551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000016080c29bd153a5ade7caf7000fedbdf7b1e00000000"], 0x14}}, 0xc080) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) 2.767380905s ago: executing program 2 (id=3560): socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70000000f9ff1300000018000180140002006e6574646576730008000f0005000000080008"], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000100011"], 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$inet6(0xa, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) 2.625186205s ago: executing program 2 (id=3562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000005ff69d7700"/24], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32=r0], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000480)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"2daf79c4e8b551d9a72f67633ba80a9f05bd3275a7f752fa1469660cc22dbf1748565cad4083732c330039e7e12c1b3e189b275196894996a9a61620eb6e1050ccaf80b3aa11d88f38fb503aed0aff69cfc76ca889da80974c3d216a5960445078596a2c8aeb8155e6a90290af2dd7562bad355f5e229467978e48e932e172023ab11c65b312f99f49e03b"}}}}}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=ANY=[]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x24}, 0xc) mmap(&(0x7f0000cad000/0x14000)=nil, 0x14000, 0x3000005, 0x20000000ec071, r2, 0x634fd000) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x34008015) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x1, 0xffffffff}]}) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 2.539858158s ago: executing program 4 (id=3564): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000280)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 2.378665592s ago: executing program 4 (id=3565): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000041010102000000000000000000000000000001802c00038006000200badd6fb506000100060002004e240000060002004e000000000049a000"/76], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r3, 0x0, 0x4804) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(0x0, r3) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x4, 0x40, 0x0, 0x1, 0x10000000000002], 0x0, 0x0}, 0x78) write(r3, &(0x7f0000000000)='\"', 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) unshare(0x68040200) socket$alg(0x26, 0x5, 0x0) 2.328581091s ago: executing program 0 (id=3566): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) shutdown(r3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r5, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40000000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) unshare(0x6a040000) 2.205996365s ago: executing program 1 (id=3567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x1, 0x1, 0xfffe, 0xfc00}, 0x20) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d3ff", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.99618022s ago: executing program 1 (id=3568): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000780)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="fa66eb015f40", 0x6}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r4}, 0x38) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000000)=0xec1, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) r7 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff57fb57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b185f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c760b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab7c3fa4d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926eb29bd482b1e0b6d61ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd800"], &(0x7f0000000100)='GPL\x00'}, 0x41) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200)=0x10001, 0x12) sendfile(r9, 0xffffffffffffffff, 0x0, 0xf03a0005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7ff, 0x0}, 0x8) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000680)='./file0\x00'}, 0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200000003d2a30000000000000000000000000000000000f5caabfd69c089515a0eb2ca1e6ee7ba7d35e74032a0477d2e6fc7fd71a49d5ae1ad20b284366ee09fa657911c3b8a5bbbc64ddf58df8619f1baec4d6245be21c9f056b291a0a9763c55b5"], 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1a, 0x25, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, r9, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x8}, 0x10, r10, r8, 0x2, &(0x7f00000025c0)=[r11, r12, r13], &(0x7f0000002600)=[{0x2, 0x5, 0x3, 0x3}, {0x5, 0x3, 0x1, 0x3}], 0x10, 0x9670}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="f0558f8adbd4c0295f414aa91a43cf8e86acfe6ea89bf8f61ad0a984efebfc53a5766ca8e317de38b5e3861f1d6c228ae6d0892210fcbb337e411a79045350680de9864bfde24826650b937b6d94094c940b06bd250cbc51060c6191be1eaef4603c43b2a3f0ededeb7cda6032fd268d414ed31ae4a5e72dfe10a26e8e64e285bc689f191691a854057a31474c091aa970495212547323df3f8df1c795a152256cd71113aab6e8a008801ff833604b5dcccfe71e98c1f545206546092312336e950158c3b723d3a13240e9d98d867e23", @ANYRESOCT=r6, @ANYRES8=r7, @ANYRES8=r7, @ANYRESDEC=r5, @ANYRESHEX=r5, @ANYBLOB="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"], 0x44}}, 0x44004) 1.991150094s ago: executing program 3 (id=3569): socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff47"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e21, 0xa, @mcast1, 0x9}}, [0x6, 0x7fffffffffffffff, 0x10, 0x8000, 0x0, 0x2, 0x8, 0x1, 0xfb2, 0x1, 0xd11e, 0x5, 0xffffffffffff426b, 0x2, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) 1.673742864s ago: executing program 0 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="6f9e11088ff130037c09504dadee3b84b0ca3154fad5e5a96ece1179a4aeaa2fbbd87912d87f57f2203b0226096e6a503a1252a4d7babfed2d1d55157b20a1ebdf8b682c93d826e08678067b0fbb3a34411bd54a37448fa3f279429989c5701904323e95a59e5d12f677bbfca355ac34e64135c5beeed796ae6896cf1fb5567bf69ca93e1db05439f7710406229f800f55a23694951ffc23cfe08d5ed4754e43a3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) 1.621797454s ago: executing program 1 (id=3571): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) unshare(0x20000400) unshare(0x68040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x61e2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x4000014) 1.621064149s ago: executing program 3 (id=3572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9b9c828657df9fb016"], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x0) 1.417250973s ago: executing program 0 (id=3573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.345920113s ago: executing program 3 (id=3574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.235238208s ago: executing program 2 (id=3575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00faffffff63614e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x5, 0x8004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0xca5, 0xd9, 0x8002, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x0, 0x4, 0x2, 0xd}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000007a0500000300000002000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) 1.21501481s ago: executing program 0 (id=3576): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff7c93bb56c2e252da103afffe800000000000000000000000000000ff020000000000000000000000001f9738df78000186009078ff04000000d9004e87873cc26107bc125106dc3bb1b386b2722803a1928f30eb0956bae0767b997ccd450d09d444cb408eeaaa6236c90cb92ab4120d"], 0x0) r1 = socket(0x40000000015, 0x6, 0x8) bind$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x3000c085) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040045}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r2, 0x0, 0x52cc) 968.631229ms ago: executing program 3 (id=3577): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 913.66594ms ago: executing program 1 (id=3578): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000001900)=""/4093, 0xffd}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000001800)=""/203, 0xcb}], 0x8}, 0x24d9}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 850.233695ms ago: executing program 0 (id=3579): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (fail_nth: 10) 771.10811ms ago: executing program 3 (id=3580): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x2) (fail_nth: 4) 727.062102ms ago: executing program 0 (id=3581): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x237, 0x0, 0xffff, 0x0, 0x1, 0x4000, @private=0xa010101, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socket$kcm(0x29, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) 74.21428ms ago: executing program 1 (id=3582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 51.136183ms ago: executing program 2 (id=3583): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c000c0002800800140000000000000000160000000000"], 0x3c}}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004010}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2c3197db9f1b0a, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r5, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000d0}, 0x5001) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r11, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x300200}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0x60, r9, 0x200, 0x70bd26, 0xe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000810) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r16, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async, rerun: 32) ioctl$PPPIOCSDEBUG(r16, 0x40047440, &(0x7f0000000680)=0x9) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r13, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080028bd7000fddbdf251b0000000c000600010000000100000010002e800c0004000203aaaaaaaaaaaa08000300", @ANYRES32=r10, @ANYBLOB="c708003645", @ANYRES32=r14, @ANYBLOB="10002e800c00040000000000000000000c0006000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000014}, 0x24004801) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x32}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xff}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffff}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) 50.625016ms ago: executing program 3 (id=3584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9b9c828657df9fb016"], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=3585): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x840000000002, 0x3, 0xfa) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="cd77996baaf73b97e83538e6205893e21a0b352a2be58f320fa8aa950e9b3350b3c4d484a86bccacc58b26e211224f8067d04dd2d92820681de979da1a0ac53ed9f1d4c46d919b48ffac8763c7b3bcf5cecacc0a4f1e00ac2a44a56fac4276eb9860c9076b6020d5bb60d0", 0x6b}], 0x1, 0x6, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="cbb2", 0x2}], 0x1}, 0x4000001) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000740)=""/236, 0xec}], 0x2, 0x0, 0xff99}, 0x40000002) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x800, 0x0, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1b, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x7c}}, 0x0) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x61e2, 0x0) kernel console output (not intermixed with test programs): 786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.236234][T13792] vlan2: entered promiscuous mode [ 346.245005][T13794] FAULT_INJECTION: forcing a failure. [ 346.245005][T13794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.245043][T13794] CPU: 0 UID: 0 PID: 13794 Comm: syz.3.2723 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 346.245076][T13794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.245091][T13794] Call Trace: [ 346.245100][T13794] [ 346.245110][T13794] dump_stack_lvl+0x189/0x250 [ 346.245139][T13794] ? __pfx____ratelimit+0x10/0x10 [ 346.245171][T13794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.245195][T13794] ? __pfx__printk+0x10/0x10 [ 346.245224][T13794] ? __might_fault+0xb0/0x130 [ 346.245278][T13794] should_fail_ex+0x414/0x560 [ 346.245320][T13794] _copy_from_user+0x2d/0xb0 [ 346.245352][T13794] ___sys_sendmsg+0x158/0x2a0 [ 346.245378][T13794] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.245441][T13794] ? __fget_files+0x2a/0x420 [ 346.245470][T13794] ? __fget_files+0x3a0/0x420 [ 346.245503][T13794] __x64_sys_sendmsg+0x19b/0x260 [ 346.245530][T13794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.245564][T13794] ? __pfx_ksys_write+0x10/0x10 [ 346.245593][T13794] ? rcu_is_watching+0x15/0xb0 [ 346.245634][T13794] ? do_syscall_64+0xbe/0x3b0 [ 346.245671][T13794] do_syscall_64+0xfa/0x3b0 [ 346.245702][T13794] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.245733][T13794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.245756][T13794] ? clear_bhb_loop+0x60/0xb0 [ 346.245783][T13794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.245805][T13794] RIP: 0033:0x7f0c1658ebe9 [ 346.245824][T13794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.245844][T13794] RSP: 002b:00007f0c1735d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.245870][T13794] RAX: ffffffffffffffda RBX: 00007f0c167b5fa0 RCX: 00007f0c1658ebe9 [ 346.245887][T13794] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 346.245902][T13794] RBP: 00007f0c1735d090 R08: 0000000000000000 R09: 0000000000000000 [ 346.245914][T13794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.245927][T13794] R13: 00007f0c167b6038 R14: 00007f0c167b5fa0 R15: 00007fffdccabf88 [ 346.245963][T13794] [ 346.497152][T13792] vlan2: entered allmulticast mode [ 346.502690][T13792] hsr_slave_1: entered allmulticast mode [ 346.731734][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'. [ 348.411307][T13860] netlink: 'syz.0.2748': attribute type 8 has an invalid length. [ 348.476006][T13858] netlink: 'syz.2.2746': attribute type 4 has an invalid length. [ 348.853078][T13876] syzkaller0: entered promiscuous mode [ 348.865620][T13876] syzkaller0: entered allmulticast mode [ 349.446963][T13892] FAULT_INJECTION: forcing a failure. [ 349.446963][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.493046][T13892] CPU: 1 UID: 0 PID: 13892 Comm: syz.2.2759 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 349.493082][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.493098][T13892] Call Trace: [ 349.493108][T13892] [ 349.493119][T13892] dump_stack_lvl+0x189/0x250 [ 349.493150][T13892] ? __pfx____ratelimit+0x10/0x10 [ 349.493183][T13892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.493206][T13892] ? __pfx__printk+0x10/0x10 [ 349.493235][T13892] ? __might_fault+0xb0/0x130 [ 349.493280][T13892] should_fail_ex+0x414/0x560 [ 349.493322][T13892] _copy_from_user+0x2d/0xb0 [ 349.493354][T13892] __sys_bpf+0x1ed/0x870 [ 349.493389][T13892] ? __pfx___sys_bpf+0x10/0x10 [ 349.493434][T13892] ? ksys_write+0x22a/0x250 [ 349.493478][T13892] ? __pfx_ksys_write+0x10/0x10 [ 349.493507][T13892] ? rcu_is_watching+0x15/0xb0 [ 349.493550][T13892] __x64_sys_bpf+0x7c/0x90 [ 349.493579][T13892] do_syscall_64+0xfa/0x3b0 [ 349.493612][T13892] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.493643][T13892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.493665][T13892] ? clear_bhb_loop+0x60/0xb0 [ 349.493692][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.493714][T13892] RIP: 0033:0x7fe67a18ebe9 [ 349.493735][T13892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.493756][T13892] RSP: 002b:00007fe67af31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.493783][T13892] RAX: ffffffffffffffda RBX: 00007fe67a3b5fa0 RCX: 00007fe67a18ebe9 [ 349.493800][T13892] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 349.493815][T13892] RBP: 00007fe67af31090 R08: 0000000000000000 R09: 0000000000000000 [ 349.493830][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.493844][T13892] R13: 00007fe67a3b6038 R14: 00007fe67a3b5fa0 R15: 00007fffcb5175f8 [ 349.493879][T13892] [ 350.087499][T13904] dvmrp0: entered allmulticast mode [ 350.243530][T13910] netlink: 'syz.1.2764': attribute type 4 has an invalid length. [ 350.402595][T13914] syzkaller0: entered promiscuous mode [ 350.424575][T13914] syzkaller0: entered allmulticast mode [ 350.841623][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.852402][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.863580][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.878734][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.892392][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.095173][T13930] vlan4: entered promiscuous mode [ 351.101669][T13930] vlan4: entered allmulticast mode [ 351.107294][T13930] hsr_slave_1: entered allmulticast mode [ 351.202897][ T133] bridge_slave_1: left allmulticast mode [ 351.213585][ T133] bridge_slave_1: left promiscuous mode [ 351.229888][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.272123][ T133] bridge_slave_0: left allmulticast mode [ 351.283703][ T133] bridge_slave_0: left promiscuous mode [ 351.293341][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.391769][T13938] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2776'. [ 351.409241][T13938] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2776'. [ 351.421677][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2776'. [ 352.065227][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.078959][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.096271][ T133] bond0 (unregistering): Released all slaves [ 352.164140][T13942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2777'. [ 352.306366][ T133] tipc: Left network mode [ 352.515350][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'. [ 352.889416][T13925] chnl_net:caif_netlink_parms(): no params data found [ 353.197929][ T133] hsr_slave_0: left promiscuous mode [ 353.213972][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.237311][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.770093][ T133] team0 (unregistering): Port device team_slave_1 removed [ 353.817129][ T133] team0 (unregistering): Port device team_slave_0 removed [ 354.467919][T13993] unknown channel width for channel at 909000KHz? [ 354.532046][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2791'. [ 354.545525][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2791'. [ 354.587418][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 354.608563][T13925] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.623617][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.631830][T13925] bridge_slave_0: entered allmulticast mode [ 354.649837][T13925] bridge_slave_0: entered promiscuous mode [ 354.654928][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 354.667550][T13925] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.675527][T13925] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.713227][T13925] bridge_slave_1: entered allmulticast mode [ 354.734165][T13925] bridge_slave_1: entered promiscuous mode [ 354.882983][T13925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.921884][T13925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.985494][ T133] IPVS: stop unused estimator thread 0... [ 355.069739][T13925] team0: Port device team_slave_0 added [ 355.099609][T13925] team0: Port device team_slave_1 added [ 355.209631][T13925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.222760][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.257470][T13925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.275309][T13925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.284302][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.320607][T13925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.333303][T14022] batadv_slave_1: entered promiscuous mode [ 355.374528][T14021] batadv_slave_1: left promiscuous mode [ 355.452500][T13925] hsr_slave_0: entered promiscuous mode [ 355.463200][T13925] hsr_slave_1: entered promiscuous mode [ 355.474296][T13925] debugfs: 'hsr0' already exists in 'hsr' [ 355.483682][T13925] Cannot create hsr debugfs directory [ 355.580641][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2802'. [ 355.815608][T14038] syzkaller0: entered promiscuous mode [ 355.832202][T14038] syzkaller0: entered allmulticast mode [ 356.565819][T14056] tipc: Enabled bearer , priority 0 [ 356.587654][T14056] syzkaller0: entered promiscuous mode [ 356.593926][T14056] syzkaller0: entered allmulticast mode [ 356.629946][T13925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.652429][T13925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.691952][T13925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.719111][T14058] tipc: Resetting bearer [ 356.726129][T13925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.890129][T13925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.935254][T13925] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.944098][T14066] __nla_validate_parse: 1 callbacks suppressed [ 356.944121][T14066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2813'. [ 356.975556][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.983273][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.035798][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.043681][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.295183][T14055] tipc: Resetting bearer [ 357.333950][T14055] tipc: Disabling bearer [ 357.353452][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'. [ 357.563847][T14086] syzkaller0: entered promiscuous mode [ 357.577200][T14086] syzkaller0: entered allmulticast mode [ 357.605331][T13925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.749516][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2822'. [ 357.907254][T13925] veth0_vlan: entered promiscuous mode [ 357.934845][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 357.955765][T14098] tipc: Enabled bearer , priority 0 [ 358.003347][T14098] syzkaller0: entered promiscuous mode [ 358.013360][T14098] syzkaller0: entered allmulticast mode [ 358.055703][T13925] veth1_vlan: entered promiscuous mode [ 358.082958][T14098] tipc: Resetting bearer [ 358.121912][T14096] tipc: Resetting bearer [ 358.157529][T14096] tipc: Disabling bearer [ 358.378231][T14113] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2829'. [ 358.428002][T14115] tipc: Enabled bearer , priority 0 [ 358.470240][T14115] syzkaller0: entered promiscuous mode [ 358.477162][T14115] syzkaller0: entered allmulticast mode [ 358.485858][T13925] veth0_macvtap: entered promiscuous mode [ 358.545106][T13925] veth1_macvtap: entered promiscuous mode [ 358.570147][T14114] tipc: Resetting bearer [ 358.611712][T14114] tipc: Disabling bearer [ 358.720497][T13925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.771093][T13925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.788498][ T8559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.827585][ T8559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.891755][ T8559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.027358][ T8559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.046048][T14132] syzkaller0: entered promiscuous mode [ 359.052225][T14132] syzkaller0: entered allmulticast mode [ 359.060822][T14133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2836'. [ 359.347877][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.355761][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.477487][ T8559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.487922][ T8559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.639393][T14154] netlink: 'syz.0.2763': attribute type 8 has an invalid length. [ 359.676172][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 359.749263][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 360.141540][T14174] netlink: 'syz.4.2847': attribute type 3 has an invalid length. [ 360.563968][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.590343][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.011209][T14216] netlink: 'syz.4.2860': attribute type 8 has an invalid length. [ 361.670667][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 362.482319][T14276] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2875'. [ 362.608325][T14292] netlink: 'syz.3.2879': attribute type 8 has an invalid length. [ 362.999615][T14278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.248192][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 363.267760][T14319] FAULT_INJECTION: forcing a failure. [ 363.267760][T14319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.284230][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.1.2886 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 363.284265][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.284284][T14319] Call Trace: [ 363.284293][T14319] [ 363.284307][T14319] dump_stack_lvl+0x189/0x250 [ 363.284336][T14319] ? __pfx____ratelimit+0x10/0x10 [ 363.284368][T14319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.284391][T14319] ? __pfx__printk+0x10/0x10 [ 363.284418][T14319] ? __might_fault+0xb0/0x130 [ 363.284464][T14319] should_fail_ex+0x414/0x560 [ 363.284503][T14319] _copy_from_user+0x2d/0xb0 [ 363.284536][T14319] __sys_bpf+0x1ed/0x870 [ 363.284570][T14319] ? __pfx___sys_bpf+0x10/0x10 [ 363.284616][T14319] ? ksys_write+0x22a/0x250 [ 363.284650][T14319] ? __pfx_ksys_write+0x10/0x10 [ 363.284690][T14319] __x64_sys_bpf+0x7c/0x90 [ 363.284718][T14319] do_syscall_64+0xfa/0x3b0 [ 363.284751][T14319] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.284781][T14319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.284803][T14319] ? clear_bhb_loop+0x60/0xb0 [ 363.284830][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.284852][T14319] RIP: 0033:0x7fdf6478ebe9 [ 363.284871][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.284891][T14319] RSP: 002b:00007fdf629f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.284916][T14319] RAX: ffffffffffffffda RBX: 00007fdf649b5fa0 RCX: 00007fdf6478ebe9 [ 363.284932][T14319] RDX: 0000000000000048 RSI: 00002000000001c0 RDI: 0000000000000000 [ 363.284946][T14319] RBP: 00007fdf629f6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.284960][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.284974][T14319] R13: 00007fdf649b6038 R14: 00007fdf649b5fa0 R15: 00007ffc4e8c3be8 [ 363.285007][T14319] [ 363.491990][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 363.665381][T14335] FAULT_INJECTION: forcing a failure. [ 363.665381][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.732607][T14335] CPU: 0 UID: 0 PID: 14335 Comm: syz.3.2889 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 363.732659][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.732674][T14335] Call Trace: [ 363.732683][T14335] [ 363.732693][T14335] dump_stack_lvl+0x189/0x250 [ 363.732721][T14335] ? __pfx____ratelimit+0x10/0x10 [ 363.732754][T14335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.732777][T14335] ? __pfx__printk+0x10/0x10 [ 363.732805][T14335] ? __might_fault+0xb0/0x130 [ 363.732851][T14335] should_fail_ex+0x414/0x560 [ 363.732893][T14335] _copy_from_user+0x2d/0xb0 [ 363.732925][T14335] ___sys_recvmsg+0x12e/0x510 [ 363.732965][T14335] ? __pfx____sys_recvmsg+0x10/0x10 [ 363.733015][T14335] ? __fget_files+0x3a0/0x420 [ 363.733058][T14335] do_recvmmsg+0x307/0x770 [ 363.733089][T14335] ? __pfx_do_recvmmsg+0x10/0x10 [ 363.733128][T14335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.733186][T14335] __x64_sys_recvmmsg+0x190/0x240 [ 363.733214][T14335] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 363.733238][T14335] ? rcu_is_watching+0x15/0xb0 [ 363.733278][T14335] ? do_syscall_64+0xbe/0x3b0 [ 363.733311][T14335] do_syscall_64+0xfa/0x3b0 [ 363.733337][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.733364][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.733386][T14335] ? clear_bhb_loop+0x60/0xb0 [ 363.733414][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.733435][T14335] RIP: 0033:0x7f0c1658ebe9 [ 363.733455][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.733472][T14335] RSP: 002b:00007f0c1735d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 363.733497][T14335] RAX: ffffffffffffffda RBX: 00007f0c167b5fa0 RCX: 00007f0c1658ebe9 [ 363.733513][T14335] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 363.733527][T14335] RBP: 00007f0c1735d090 R08: 0000000000000000 R09: 0000000000000000 [ 363.733541][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.733554][T14335] R13: 00007f0c167b6038 R14: 00007f0c167b5fa0 R15: 00007fffdccabf88 [ 363.733589][T14335] [ 364.142850][T14345] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 364.155077][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 364.189048][T14338] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2890'. [ 364.424059][T14361] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2899'. [ 364.443742][T14361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2899'. [ 364.454013][T14361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2899'. [ 364.500763][T14361] tipc: Enabling of bearer rejected, failed to enable media [ 365.105299][T14395] netlink: 'syz.2.2907': attribute type 4 has an invalid length. [ 365.272777][T14401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2911'. [ 365.312184][T14401] openvswitch: netlink: IPv4 tun info is not correct [ 365.814781][T14412] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 365.914123][T14417] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2915'. [ 366.363847][T14426] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 366.534574][T14446] netlink: 'syz.0.2927': attribute type 13 has an invalid length. [ 366.594012][T14446] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 366.683327][T14447] netlink: 'syz.3.2925': attribute type 4 has an invalid length. [ 367.294807][T14479] tipc: Enabled bearer , priority 0 [ 367.382540][T14479] syzkaller0: entered promiscuous mode [ 367.390304][T14479] syzkaller0: entered allmulticast mode [ 367.397027][T14479] tipc: Resetting bearer [ 367.439080][T14478] tipc: Resetting bearer [ 368.296542][T10285] tipc: Node number set to 3985271120 [ 369.127277][T14478] tipc: Disabling bearer [ 369.325843][T14498] syzkaller0: entered promiscuous mode [ 369.340182][T14498] syzkaller0: entered allmulticast mode [ 369.654821][T14508] netlink: 'syz.0.2951': attribute type 4 has an invalid length. [ 370.072597][T14528] __nla_validate_parse: 11 callbacks suppressed [ 370.072618][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 370.114181][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 370.152712][T14537] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2961'. [ 370.164467][T14537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2961'. [ 370.176069][T14537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2961'. [ 370.701717][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 370.795836][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 370.863040][T14543] netlink: 'syz.4.2964': attribute type 12 has an invalid length. [ 371.138216][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.152023][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.170726][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.181389][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.197656][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.240806][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 371.354102][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 371.705683][ T5847] syz_tun (unregistering): left promiscuous mode [ 372.044725][T14549] chnl_net:caif_netlink_parms(): no params data found [ 372.454846][T14549] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.486953][T14549] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.494878][T14549] bridge_slave_0: entered allmulticast mode [ 372.522345][T14549] bridge_slave_0: entered promiscuous mode [ 372.624410][T14549] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.642128][T14549] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.670887][T14549] bridge_slave_1: entered allmulticast mode [ 372.711728][T14549] bridge_slave_1: entered promiscuous mode [ 372.825103][T14549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.850242][T14549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.070692][T14549] team0: Port device team_slave_0 added [ 373.119237][T14549] team0: Port device team_slave_1 added [ 373.253641][T14602] FAULT_INJECTION: forcing a failure. [ 373.253641][T14602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.256678][ T5840] Bluetooth: hci5: command tx timeout [ 373.330779][T14602] CPU: 1 UID: 0 PID: 14602 Comm: syz.3.2983 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 373.330814][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.330828][T14602] Call Trace: [ 373.330838][T14602] [ 373.330848][T14602] dump_stack_lvl+0x189/0x250 [ 373.330877][T14602] ? __pfx____ratelimit+0x10/0x10 [ 373.330910][T14602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.330934][T14602] ? __pfx__printk+0x10/0x10 [ 373.330962][T14602] ? __might_fault+0xb0/0x130 [ 373.331015][T14602] should_fail_ex+0x414/0x560 [ 373.331056][T14602] _copy_from_user+0x2d/0xb0 [ 373.331090][T14602] ___sys_sendmsg+0x158/0x2a0 [ 373.331117][T14602] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.331178][T14602] ? __fget_files+0x2a/0x420 [ 373.331200][T14602] ? __fget_files+0x3a0/0x420 [ 373.331234][T14602] __sys_sendmmsg+0x227/0x430 [ 373.331265][T14602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 373.331286][T14602] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 373.331350][T14602] ? ksys_write+0x22a/0x250 [ 373.331385][T14602] ? __pfx_ksys_write+0x10/0x10 [ 373.331414][T14602] ? rcu_is_watching+0x15/0xb0 [ 373.331456][T14602] __x64_sys_sendmmsg+0xa0/0xc0 [ 373.331483][T14602] do_syscall_64+0xfa/0x3b0 [ 373.331523][T14602] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.331554][T14602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.331577][T14602] ? clear_bhb_loop+0x60/0xb0 [ 373.331614][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.331635][T14602] RIP: 0033:0x7f0c1658ebe9 [ 373.331656][T14602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.331677][T14602] RSP: 002b:00007f0c1735d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.331702][T14602] RAX: ffffffffffffffda RBX: 00007f0c167b5fa0 RCX: 00007f0c1658ebe9 [ 373.331720][T14602] RDX: 0000000000000001 RSI: 0000200000004b80 RDI: 0000000000000003 [ 373.331735][T14602] RBP: 00007f0c1735d090 R08: 0000000000000000 R09: 0000000000000000 [ 373.331749][T14602] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 373.331762][T14602] R13: 00007f0c167b6038 R14: 00007f0c167b5fa0 R15: 00007fffdccabf88 [ 373.331797][T14602] [ 373.616956][T14608] netlink: 'syz.1.2986': attribute type 8 has an invalid length. [ 373.629196][T14549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.665097][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.708471][T14549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.783699][T14549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.813143][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.842074][T14549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.038836][T14549] hsr_slave_0: entered promiscuous mode [ 374.070330][T14549] hsr_slave_1: entered promiscuous mode [ 374.088719][T14549] debugfs: 'hsr0' already exists in 'hsr' [ 374.106875][T14549] Cannot create hsr debugfs directory [ 374.120834][T14624] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2990'. [ 375.220042][T14655] __nla_validate_parse: 3 callbacks suppressed [ 375.220063][T14655] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3002'. [ 375.337013][ T5840] Bluetooth: hci5: command tx timeout [ 375.433437][T14549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.460416][T14549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.500797][T14549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.524113][T14549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.575441][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3004'. [ 375.646112][T14669] netlink: 'syz.3.3006': attribute type 12 has an invalid length. [ 375.969733][T14682] tipc: Started in network mode [ 375.987576][T14682] tipc: Node identity 363599f9988, cluster identity 4711 [ 375.995821][T14682] tipc: Enabled bearer , priority 0 [ 376.010726][T14682] syzkaller0: entered promiscuous mode [ 376.016686][T14682] syzkaller0: entered allmulticast mode [ 376.067098][T14682] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3010'. [ 376.110103][T14682] syzkaller0: mtu less than device minimum [ 376.134483][T14549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.160613][T14680] tipc: Resetting bearer [ 376.214942][T14680] tipc: Disabling bearer [ 376.351843][T14549] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.404090][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.411907][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.457940][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.465376][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.652981][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3020'. [ 376.657490][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'. [ 376.830288][T14708] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3020'. [ 377.417009][ T5840] Bluetooth: hci5: command tx timeout [ 377.496970][T14549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.829742][T14549] veth0_vlan: entered promiscuous mode [ 377.913417][T14549] veth1_vlan: entered promiscuous mode [ 378.109094][T14549] veth0_macvtap: entered promiscuous mode [ 378.199548][T14549] veth1_macvtap: entered promiscuous mode [ 378.250392][T14549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.289876][T14549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.374581][ T3465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.400895][ T3465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.480254][ T6303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.556098][ T6303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.702854][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.742496][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.900640][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.917621][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.291955][T14767] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 379.502276][ T5840] Bluetooth: hci5: command tx timeout [ 379.859210][T14778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.980610][T14778] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.535579][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.556889][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.578250][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.607583][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.624200][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.726053][ T3465] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.751384][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3051'. [ 380.924580][ T3465] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.033149][ T3465] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.120870][ T3465] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.210172][T14810] netlink: 'syz.3.3054': attribute type 4 has an invalid length. [ 381.782984][ T3465] bridge_slave_1: left allmulticast mode [ 381.804691][ T3465] bridge_slave_1: left promiscuous mode [ 381.826713][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.898484][ T3465] bridge_slave_0: left allmulticast mode [ 381.906501][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.994262][T14837] netlink: 'syz.3.3063': attribute type 8 has an invalid length. [ 382.399900][ T3465] dvmrp0 (unregistering): left allmulticast mode [ 382.708954][ T5850] Bluetooth: hci2: command tx timeout [ 382.804461][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.824759][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.837808][ T3465] bond0 (unregistering): Released all slaves [ 382.984514][ T3465] bond1 (unregistering): (slave veth3): Releasing active interface [ 382.993383][ T3465] batadv1: entered promiscuous mode [ 383.005868][ T3465] bond1 (unregistering): (slave batadv1): Releasing active interface [ 383.019319][ T3465] bond1 (unregistering): Released all slaves [ 383.039273][ T3465] bond2 (unregistering): Released all slaves [ 383.092810][T14849] netlink: 'syz.0.3065': attribute type 13 has an invalid length. [ 383.120263][T14797] chnl_net:caif_netlink_parms(): no params data found [ 383.340127][ T3465] tipc: Disabling bearer [ 383.356637][ T3465] tipc: Left network mode [ 383.422775][T14861] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 383.447990][T14867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 383.633469][T14797] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.656909][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.667518][T14797] bridge_slave_0: entered allmulticast mode [ 383.688311][T14797] bridge_slave_0: entered promiscuous mode [ 384.185521][T14797] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.223147][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.230250][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.242196][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.253122][T14797] bridge_slave_1: entered allmulticast mode [ 384.265860][T14797] bridge_slave_1: entered promiscuous mode [ 384.388772][T14797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.449315][T14797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.466780][T14886] netlink: 'syz.1.3074': attribute type 21 has an invalid length. [ 384.625328][ T3465] hsr_slave_0: left promiscuous mode [ 384.635580][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.655008][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.672799][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.685976][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.751709][ T3465] veth1_vlan: left promiscuous mode [ 384.759447][ T3465] veth0_vlan: left promiscuous mode [ 384.776655][ T5850] Bluetooth: hci2: command tx timeout [ 385.513544][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 385.582740][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 386.208238][T14885] ipvlan2: entered promiscuous mode [ 386.215817][T14885] bridge0: port 1(ipvlan2) entered blocking state [ 386.238449][T14885] bridge0: port 1(ipvlan2) entered disabled state [ 386.246142][T14885] ipvlan2: entered allmulticast mode [ 386.259325][T14885] gretap0: entered allmulticast mode [ 386.272816][T14885] ipvlan2: left allmulticast mode [ 386.282080][T14885] gretap0: left allmulticast mode [ 386.344487][T14797] team0: Port device team_slave_0 added [ 386.422013][T14797] team0: Port device team_slave_1 added [ 386.789905][T14797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.813047][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.845226][T14797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.858469][ T5850] Bluetooth: hci2: command tx timeout [ 386.888685][T14797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.904221][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.938052][T14797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.954469][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3080'. [ 387.075608][T14907] netem: change failed [ 387.086889][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3082'. [ 387.107749][T14797] hsr_slave_0: entered promiscuous mode [ 387.114722][T14797] hsr_slave_1: entered promiscuous mode [ 387.124658][T14797] debugfs: 'hsr0' already exists in 'hsr' [ 387.131200][T14797] Cannot create hsr debugfs directory [ 387.160511][ T3465] IPVS: stop unused estimator thread 0... [ 387.556022][T14915] netlink: 'syz.1.3083': attribute type 4 has an invalid length. [ 387.620065][T14920] tipc: Enabled bearer , priority 0 [ 387.630607][T14920] syzkaller0: entered promiscuous mode [ 387.633296][T14924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.640481][T14920] syzkaller0: entered allmulticast mode [ 387.673313][T14919] tipc: Resetting bearer [ 387.700994][T14919] tipc: Disabling bearer [ 387.885663][T14927] netlink: 'syz.3.3088': attribute type 16 has an invalid length. [ 387.894332][T14927] netlink: 'syz.3.3088': attribute type 17 has an invalid length. [ 387.938653][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'. [ 388.015228][T14797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.035790][T14797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.052759][T14797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.065554][T14930] syzkaller0: entered promiscuous mode [ 388.072190][T14930] syzkaller0: entered allmulticast mode [ 388.080209][T14797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.233262][T14797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.298070][T14797] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.339056][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.346651][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.387181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.395652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.541284][T14945] netlink: 'syz.1.3093': attribute type 1 has an invalid length. [ 388.602487][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 388.633175][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 388.936663][ T5850] Bluetooth: hci2: command tx timeout [ 388.983557][T14797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.045645][T14969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.802703][T14797] veth0_vlan: entered promiscuous mode [ 389.874700][T14797] veth1_vlan: entered promiscuous mode [ 390.117820][T14797] veth0_macvtap: entered promiscuous mode [ 390.141203][T15010] netlink: 'syz.3.3110': attribute type 8 has an invalid length. [ 390.153197][T14797] veth1_macvtap: entered promiscuous mode [ 390.209382][T15006] bridge: RTM_NEWNEIGH with invalid ether address [ 390.324557][T14797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.403044][T14797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.462381][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.609433][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.705623][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.727153][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.782528][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.311282][T15034] FAULT_INJECTION: forcing a failure. [ 391.311282][T15034] name failslab, interval 1, probability 0, space 0, times 0 [ 391.325192][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.2.3116 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 391.325227][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.325241][T15034] Call Trace: [ 391.325252][T15034] [ 391.325263][T15034] dump_stack_lvl+0x189/0x250 [ 391.325292][T15034] ? __pfx____ratelimit+0x10/0x10 [ 391.325325][T15034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.325349][T15034] ? __pfx__printk+0x10/0x10 [ 391.325382][T15034] ? trace_fib_table_lookup+0x85/0x200 [ 391.325408][T15034] ? fib_table_lookup+0x11ba/0x16e0 [ 391.325433][T15034] should_fail_ex+0x414/0x560 [ 391.325475][T15034] should_failslab+0xa8/0x100 [ 391.325499][T15034] kmem_cache_alloc_noprof+0x73/0x3c0 [ 391.325531][T15034] ? dst_alloc+0x105/0x170 [ 391.325554][T15034] ? fib_lookup+0x76/0x440 [ 391.325581][T15034] dst_alloc+0x105/0x170 [ 391.325612][T15034] ip_route_input_rcu+0x1ed5/0x2ff0 [ 391.325654][T15034] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 391.325712][T15034] ? sock_def_readable+0xbe/0x550 [ 391.325744][T15034] ? ip_route_input_noref+0x98/0x250 [ 391.325772][T15034] ip_route_input_noref+0x167/0x250 [ 391.325802][T15034] ? __pfx_ip_route_input_noref+0x10/0x10 [ 391.325835][T15034] ? __lock_acquire+0xab9/0xd20 [ 391.325875][T15034] ip_rcv_finish_core+0x5af/0x1c00 [ 391.325930][T15034] ip_rcv_finish+0x14c/0x2f0 [ 391.325970][T15034] NF_HOOK+0x309/0x3a0 [ 391.326003][T15034] ? __pfx_ip_rcv_finish+0x10/0x10 [ 391.326034][T15034] ? NF_HOOK+0x9a/0x3a0 [ 391.326064][T15034] ? __pfx_NF_HOOK+0x10/0x10 [ 391.326093][T15034] ? ip_rcv_core+0x7f7/0xd00 [ 391.326134][T15034] ? __pfx_ip_rcv_finish+0x10/0x10 [ 391.326176][T15034] ? __pfx_ip_rcv+0x10/0x10 [ 391.326206][T15034] __netif_receive_skb+0x143/0x380 [ 391.326244][T15034] ? netif_receive_skb+0x115/0x790 [ 391.326276][T15034] netif_receive_skb+0x1cb/0x790 [ 391.326304][T15034] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 391.326339][T15034] ? __pfx_netif_receive_skb+0x10/0x10 [ 391.326375][T15034] ? tun_rx_batched+0x160/0x730 [ 391.326402][T15034] tun_rx_batched+0x1b9/0x730 [ 391.326426][T15034] ? __lock_acquire+0xab9/0xd20 [ 391.326462][T15034] ? __pfx_tun_rx_batched+0x10/0x10 [ 391.326490][T15034] ? tun_get_user+0x266c/0x3e20 [ 391.326531][T15034] tun_get_user+0x2aa2/0x3e20 [ 391.326564][T15034] ? tun_get_user+0x6f6/0x3e20 [ 391.326590][T15034] ? tun_get_user+0x266c/0x3e20 [ 391.326622][T15034] ? __pfx_tun_get_user+0x10/0x10 [ 391.326651][T15034] ? aa_file_perm+0x40c/0xe70 [ 391.326688][T15034] ? aa_file_perm+0x122/0xe70 [ 391.326728][T15034] ? ref_tracker_alloc+0x318/0x460 [ 391.326749][T15034] ? __lock_acquire+0xab9/0xd20 [ 391.326782][T15034] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.326812][T15034] ? tun_get+0x1c/0x2f0 [ 391.326842][T15034] ? tun_get+0x1c/0x2f0 [ 391.326865][T15034] ? tun_get+0x1c/0x2f0 [ 391.326894][T15034] tun_chr_write_iter+0x113/0x200 [ 391.326922][T15034] vfs_write+0x54b/0xa90 [ 391.326960][T15034] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 391.326985][T15034] ? __pfx_vfs_write+0x10/0x10 [ 391.327030][T15034] ? __fget_files+0x2a/0x420 [ 391.327063][T15034] ksys_write+0x145/0x250 [ 391.327098][T15034] ? __pfx_ksys_write+0x10/0x10 [ 391.327137][T15034] ? rcu_is_watching+0x15/0xb0 [ 391.327178][T15034] ? do_syscall_64+0xbe/0x3b0 [ 391.327216][T15034] do_syscall_64+0xfa/0x3b0 [ 391.327247][T15034] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.327278][T15034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.327300][T15034] ? clear_bhb_loop+0x60/0xb0 [ 391.327327][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.327349][T15034] RIP: 0033:0x7ff9a818d69f [ 391.327371][T15034] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 391.327391][T15034] RSP: 002b:00007ff9a63f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 391.327417][T15034] RAX: ffffffffffffffda RBX: 00007ff9a83b5fa0 RCX: 00007ff9a818d69f [ 391.327434][T15034] RDX: 000000000000003a RSI: 0000200000000100 RDI: 00000000000000c8 [ 391.327448][T15034] RBP: 00007ff9a63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.327462][T15034] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 391.327474][T15034] R13: 00007ff9a83b6038 R14: 00007ff9a83b5fa0 R15: 00007ffecd4cf1b8 [ 391.327510][T15034] [ 392.331621][T15043] sctp: [Deprecated]: syz.1.3120 (pid 15043) Use of int in maxseg socket option. [ 392.331621][T15043] Use struct sctp_assoc_value instead [ 392.408186][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.445101][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.490288][ T8559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.503887][ T8559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.519954][T15050] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3123'. [ 395.353159][T15062] netlink: 'syz.2.3126': attribute type 9 has an invalid length. [ 395.396799][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 395.589579][T15062] hsr0: entered promiscuous mode [ 395.623570][T15062] macvlan2: entered promiscuous mode [ 395.671156][T15062] macvlan2: entered allmulticast mode [ 395.700021][T15062] hsr0: entered allmulticast mode [ 395.712104][T15062] hsr_slave_0: entered allmulticast mode [ 395.733002][T15062] hsr_slave_1: entered allmulticast mode [ 395.994845][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.009315][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.020882][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.032769][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.043684][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.110746][T15074] FAULT_INJECTION: forcing a failure. [ 396.110746][T15074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.163163][T15074] CPU: 1 UID: 0 PID: 15074 Comm: syz.2.3131 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 396.163197][T15074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.163210][T15074] Call Trace: [ 396.163219][T15074] [ 396.163229][T15074] dump_stack_lvl+0x189/0x250 [ 396.163257][T15074] ? __pfx____ratelimit+0x10/0x10 [ 396.163288][T15074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.163310][T15074] ? __pfx__printk+0x10/0x10 [ 396.163337][T15074] ? __might_fault+0xb0/0x130 [ 396.163396][T15074] should_fail_ex+0x414/0x560 [ 396.163629][T15074] _copy_from_iter+0x1db/0x16f0 [ 396.163658][T15074] ? rcu_is_watching+0x15/0xb0 [ 396.163691][T15074] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 396.163720][T15074] ? __pfx__copy_from_iter+0x10/0x10 [ 396.163744][T15074] ? __build_skb_around+0x257/0x3e0 [ 396.163775][T15074] ? netlink_sendmsg+0x642/0xb30 [ 396.163801][T15074] ? skb_put+0x11b/0x210 [ 396.163820][T15074] netlink_sendmsg+0x6b2/0xb30 [ 396.163858][T15074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.163888][T15074] ? aa_sock_msg_perm+0x94/0x160 [ 396.163916][T15074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.163938][T15074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.163968][T15074] __sock_sendmsg+0x219/0x270 [ 396.163998][T15074] ____sys_sendmsg+0x505/0x830 [ 396.164023][T15074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.164052][T15074] ? import_iovec+0x74/0xa0 [ 396.164082][T15074] ___sys_sendmsg+0x21f/0x2a0 [ 396.164103][T15074] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.164159][T15074] ? __fget_files+0x2a/0x420 [ 396.164180][T15074] ? __fget_files+0x3a0/0x420 [ 396.164212][T15074] __x64_sys_sendmsg+0x19b/0x260 [ 396.164238][T15074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.164272][T15074] ? __pfx_ksys_write+0x10/0x10 [ 396.164302][T15074] ? rcu_is_watching+0x15/0xb0 [ 396.164340][T15074] ? do_syscall_64+0xbe/0x3b0 [ 396.164377][T15074] do_syscall_64+0xfa/0x3b0 [ 396.164408][T15074] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.164450][T15074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.164473][T15074] ? clear_bhb_loop+0x60/0xb0 [ 396.164499][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.164520][T15074] RIP: 0033:0x7ff9a818ebe9 [ 396.164541][T15074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.164561][T15074] RSP: 002b:00007ff9a63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.164587][T15074] RAX: ffffffffffffffda RBX: 00007ff9a83b5fa0 RCX: 00007ff9a818ebe9 [ 396.164603][T15074] RDX: 00000000000040c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 396.164616][T15074] RBP: 00007ff9a63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.164630][T15074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.164643][T15074] R13: 00007ff9a83b6038 R14: 00007ff9a83b5fa0 R15: 00007ffecd4cf1b8 [ 396.164677][T15074] [ 396.593355][T15075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3130'. [ 396.693156][T15070] chnl_net:caif_netlink_parms(): no params data found [ 396.761833][T15084] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3133'. [ 396.978422][T15094] unknown channel width for channel at 909000KHz? [ 396.997429][T15070] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.005244][T15070] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.036754][T15070] bridge_slave_0: entered allmulticast mode [ 397.058061][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 397.068348][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 397.082596][T15092] netlink: 'syz.4.3137': attribute type 4 has an invalid length. [ 397.089275][T15070] bridge_slave_0: entered promiscuous mode [ 397.109788][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.125936][T15070] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.144972][T15070] bridge_slave_1: entered allmulticast mode [ 397.169317][T15070] bridge_slave_1: entered promiscuous mode [ 397.445889][T15070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.525210][T15111] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3140'. [ 397.574876][T15070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.606968][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 397.805969][T15070] team0: Port device team_slave_0 added [ 397.839796][T15070] team0: Port device team_slave_1 added [ 397.999288][T15070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.014017][T15070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.018486][T15125] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3143'. [ 398.092469][T15070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.092918][T15125] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3143'. [ 398.132158][T15070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.138169][T15125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3143'. [ 398.140417][T15070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.179534][ T5840] Bluetooth: hci3: command tx timeout [ 398.188033][T15070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.389671][T15070] hsr_slave_0: entered promiscuous mode [ 398.402099][T15070] hsr_slave_1: entered promiscuous mode [ 398.414466][T15070] debugfs: 'hsr0' already exists in 'hsr' [ 398.424492][T15070] Cannot create hsr debugfs directory [ 398.443839][T15137] smc: net device bond0 erased user defined pnetid SY [ 398.636871][T15137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.651005][T15137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.663824][T15137] bond0 (unregistering): Released all slaves [ 399.072608][T15151] syzkaller0: entered promiscuous mode [ 399.086677][T15151] syzkaller0: entered allmulticast mode [ 399.196254][T15156] tipc: Enabled bearer , priority 0 [ 399.275332][T15156] syzkaller0: entered promiscuous mode [ 399.285923][T15156] syzkaller0: entered allmulticast mode [ 399.424937][T15161] tipc: Resetting bearer [ 399.460912][T15155] tipc: Resetting bearer [ 399.561444][T15155] tipc: Disabling bearer [ 399.599529][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 399.680250][T15171] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3157'. [ 399.722991][T15173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3158'. [ 399.775932][T15070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.827642][T15070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.882376][T15070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 399.914506][T15070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.217084][ T5840] Bluetooth: hci3: command tx timeout [ 400.377096][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 400.387218][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 400.416622][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 400.674433][T15070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.140719][T15070] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.165280][T15209] syzkaller0: entered promiscuous mode [ 401.183787][T15209] syzkaller0: entered allmulticast mode [ 401.443214][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.451084][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.552267][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.560200][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.302697][ T5840] Bluetooth: hci3: command tx timeout [ 402.431946][T15255] tipc: Enabling of bearer rejected, failed to enable media [ 402.470819][T15070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.601390][T15070] veth0_vlan: entered promiscuous mode [ 402.676184][T15070] veth1_vlan: entered promiscuous mode [ 402.958557][T15070] veth0_macvtap: entered promiscuous mode [ 403.008067][T15070] veth1_macvtap: entered promiscuous mode [ 403.073836][T15070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.119170][T15070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.163655][ T133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.181290][ T133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.198970][T15265] __nla_validate_parse: 7 callbacks suppressed [ 403.198991][T15265] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3181'. [ 403.284301][ T133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.303982][ T133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.650438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.686465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.773553][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.799649][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.994197][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 404.024262][T15287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3189'. [ 404.049650][T15287] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 404.376813][ T5840] Bluetooth: hci3: command tx timeout [ 404.702528][T15298] syzkaller0: entered promiscuous mode [ 404.735856][T15298] syzkaller0: entered allmulticast mode [ 405.274192][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.296796][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.315465][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.324164][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.347394][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.416811][ T5850] Bluetooth: hci1: command tx timeout [ 407.493648][T15334] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.734298][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 407.770231][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 407.802838][T15348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3203'. [ 407.869489][T15305] chnl_net:caif_netlink_parms(): no params data found [ 407.871297][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3204'. [ 408.092959][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 408.153387][T15358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.250699][T15358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.471382][T15305] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.498302][T15305] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.522298][T15305] bridge_slave_0: entered allmulticast mode [ 408.533942][T15305] bridge_slave_0: entered promiscuous mode [ 408.564365][T15378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3210'. [ 408.571825][T15375] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 408.582533][T15375] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3209'. [ 408.587045][T15305] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.611066][T15305] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.625850][T15305] bridge_slave_1: entered allmulticast mode [ 408.673406][T15305] bridge_slave_1: entered promiscuous mode [ 408.761651][T15380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 408.794815][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.838455][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.979386][T15305] team0: Port device team_slave_0 added [ 408.999527][T15305] team0: Port device team_slave_1 added [ 409.131981][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.139927][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.190532][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.212605][T15396] veth0_to_bond: entered allmulticast mode [ 409.224483][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.232083][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.263016][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.279495][T15403] netlink: 'syz.3.3219': attribute type 7 has an invalid length. [ 409.371551][T15403] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3219'. [ 409.500552][ T5850] Bluetooth: hci1: command tx timeout [ 409.545829][T15305] hsr_slave_0: entered promiscuous mode [ 409.562396][T15305] hsr_slave_1: entered promiscuous mode [ 409.572070][T15305] debugfs: 'hsr0' already exists in 'hsr' [ 409.581082][T15305] Cannot create hsr debugfs directory [ 410.267051][T15438] netlink: 'syz.2.3230': attribute type 3 has an invalid length. [ 410.654970][T15452] FAULT_INJECTION: forcing a failure. [ 410.654970][T15452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.691495][T15452] CPU: 1 UID: 0 PID: 15452 Comm: syz.4.3233 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 410.691542][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.691559][T15452] Call Trace: [ 410.691570][T15452] [ 410.691581][T15452] dump_stack_lvl+0x189/0x250 [ 410.691613][T15452] ? __pfx____ratelimit+0x10/0x10 [ 410.691650][T15452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.691676][T15452] ? __pfx__printk+0x10/0x10 [ 410.691707][T15452] ? __might_fault+0xb0/0x130 [ 410.691757][T15452] should_fail_ex+0x414/0x560 [ 410.691803][T15452] _copy_from_user+0x2d/0xb0 [ 410.691841][T15452] ___sys_sendmsg+0x158/0x2a0 [ 410.691872][T15452] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.691946][T15452] ? __fget_files+0x2a/0x420 [ 410.691970][T15452] ? __fget_files+0x3a0/0x420 [ 410.692008][T15452] __x64_sys_sendmsg+0x19b/0x260 [ 410.692040][T15452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.692079][T15452] ? __pfx_ksys_write+0x10/0x10 [ 410.692112][T15452] ? rcu_is_watching+0x15/0xb0 [ 410.692156][T15452] ? do_syscall_64+0xbe/0x3b0 [ 410.692197][T15452] do_syscall_64+0xfa/0x3b0 [ 410.692232][T15452] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.692266][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.692292][T15452] ? clear_bhb_loop+0x60/0xb0 [ 410.692323][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.692347][T15452] RIP: 0033:0x7fd4fc18ebe9 [ 410.692370][T15452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.692393][T15452] RSP: 002b:00007fd4fd072038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.692421][T15452] RAX: ffffffffffffffda RBX: 00007fd4fc3b5fa0 RCX: 00007fd4fc18ebe9 [ 410.692439][T15452] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 410.692455][T15452] RBP: 00007fd4fd072090 R08: 0000000000000000 R09: 0000000000000000 [ 410.692476][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.692491][T15452] R13: 00007fd4fc3b6038 R14: 00007fd4fc3b5fa0 R15: 00007fffb1b23a28 [ 410.692538][T15452] [ 411.013478][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3234'. [ 411.340134][ T1144] wlan1: Trigger new scan to find an IBSS to join [ 411.399280][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 411.576741][ T5850] Bluetooth: hci1: command tx timeout [ 411.598252][T15305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.634751][T15305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.670846][T15305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.697563][T15305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.062851][T15489] syzkaller0: entered promiscuous mode [ 412.076067][T15489] syzkaller0: entered allmulticast mode [ 412.342829][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 412.368921][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 412.400639][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 412.561949][T15305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.680788][T15305] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.726564][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 412.739018][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.746518][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.776459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.784019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.806823][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 412.934562][T15305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.620272][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.662395][ T5850] Bluetooth: hci1: command tx timeout [ 413.816895][T15305] veth0_vlan: entered promiscuous mode [ 413.930617][T15305] veth1_vlan: entered promiscuous mode [ 414.070961][T15305] veth0_macvtap: entered promiscuous mode [ 414.114047][T15305] veth1_macvtap: entered promiscuous mode [ 414.212074][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.258745][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.317599][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.347344][ T3465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.395920][ T3465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.427313][ T3465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.658750][T15542] __nla_validate_parse: 3 callbacks suppressed [ 414.658775][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3264'. [ 414.697283][ T8559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.706762][ T8559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.872970][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.904648][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.187462][T15551] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3267'. [ 415.511367][T15562] netlink: 'syz.1.3271': attribute type 72 has an invalid length. [ 415.690483][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.728915][T15566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.758343][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.786744][T15566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.017258][T15576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3279'. [ 416.050907][T15576] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3279'. [ 416.255707][T15587] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 416.286676][T15587] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3281'. [ 416.378561][ T12] wlan1: Trigger new scan to find an IBSS to join [ 416.568928][T15601] netlink: 'syz.1.3286': attribute type 72 has an invalid length. [ 416.601648][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 416.705685][T15604] tipc: Started in network mode [ 416.714163][T15604] tipc: Node identity ea12c76bbc67, cluster identity 4711 [ 416.749296][T15604] tipc: Enabled bearer , priority 0 [ 416.787816][T15599] syzkaller0: entered promiscuous mode [ 416.794460][T15599] syzkaller0: entered allmulticast mode [ 416.967650][T15604] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3288'. [ 417.013974][T15608] syzkaller0: MTU too low for tipc bearer [ 417.042230][T15608] tipc: Disabling bearer [ 417.231526][T15619] tipc: Enabled bearer , priority 0 [ 417.260949][T15619] syzkaller0: entered promiscuous mode [ 417.296664][T15619] syzkaller0: entered allmulticast mode [ 417.329302][T15619] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.358058][ T13] wlan1: Creating new IBSS network, BSSID 32:40:eb:0b:30:be [ 417.426011][T15619] tipc: Resetting bearer [ 417.459000][T15618] tipc: Resetting bearer [ 417.509700][T15618] tipc: Disabling bearer [ 417.677415][T15633] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3299'. [ 417.798080][T15635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3300'. [ 418.169311][T15650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3306'. [ 419.637238][T15699] netlink: 'syz.4.3326': attribute type 5 has an invalid length. [ 420.225547][T15718] FAULT_INJECTION: forcing a failure. [ 420.225547][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.241593][T15710] IPVS: persistence engine module ip_vs_pe_ not found [ 420.256707][T15717] syzkaller0: entered promiscuous mode [ 420.262430][T15717] syzkaller0: entered allmulticast mode [ 420.277908][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.2.3330 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 420.277944][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.277959][T15718] Call Trace: [ 420.277968][T15718] [ 420.277980][T15718] dump_stack_lvl+0x189/0x250 [ 420.278008][T15718] ? __pfx____ratelimit+0x10/0x10 [ 420.278052][T15718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.278075][T15718] ? __pfx__printk+0x10/0x10 [ 420.278103][T15718] ? __might_fault+0xb0/0x130 [ 420.278148][T15718] should_fail_ex+0x414/0x560 [ 420.278189][T15718] _copy_from_user+0x2d/0xb0 [ 420.278228][T15718] ___sys_sendmsg+0x158/0x2a0 [ 420.278255][T15718] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.278319][T15718] ? __fget_files+0x2a/0x420 [ 420.278340][T15718] ? __fget_files+0x3a0/0x420 [ 420.278373][T15718] __x64_sys_sendmsg+0x19b/0x260 [ 420.278400][T15718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.278435][T15718] ? __pfx_ksys_write+0x10/0x10 [ 420.278464][T15718] ? rcu_is_watching+0x15/0xb0 [ 420.278503][T15718] ? do_syscall_64+0xbe/0x3b0 [ 420.278539][T15718] do_syscall_64+0xfa/0x3b0 [ 420.278571][T15718] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.278602][T15718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.278623][T15718] ? clear_bhb_loop+0x60/0xb0 [ 420.278648][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.278669][T15718] RIP: 0033:0x7ff9a818ebe9 [ 420.278689][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.278709][T15718] RSP: 002b:00007ff9a63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.278733][T15718] RAX: ffffffffffffffda RBX: 00007ff9a83b6090 RCX: 00007ff9a818ebe9 [ 420.278749][T15718] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 420.278763][T15718] RBP: 00007ff9a63d5090 R08: 0000000000000000 R09: 0000000000000000 [ 420.278776][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.278796][T15718] R13: 00007ff9a83b6128 R14: 00007ff9a83b6090 R15: 00007ffecd4cf1b8 [ 420.278827][T15718] [ 420.718905][T15720] FAULT_INJECTION: forcing a failure. [ 420.718905][T15720] name failslab, interval 1, probability 0, space 0, times 0 [ 420.732873][T15720] CPU: 0 UID: 0 PID: 15720 Comm: syz.4.3331 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 420.732906][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.732921][T15720] Call Trace: [ 420.732931][T15720] [ 420.732943][T15720] dump_stack_lvl+0x189/0x250 [ 420.732972][T15720] ? __pfx____ratelimit+0x10/0x10 [ 420.733006][T15720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.733030][T15720] ? __pfx__printk+0x10/0x10 [ 420.733075][T15720] should_fail_ex+0x414/0x560 [ 420.733117][T15720] should_failslab+0xa8/0x100 [ 420.733142][T15720] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 420.733178][T15720] ? __alloc_skb+0x112/0x2d0 [ 420.733217][T15720] __alloc_skb+0x112/0x2d0 [ 420.733255][T15720] ? inet6_rt_notify+0xaf/0x470 [ 420.733285][T15720] inet6_rt_notify+0x170/0x470 [ 420.733340][T15720] fib6_del+0x1094/0x1550 [ 420.733394][T15720] ? __pfx_fib6_del+0x10/0x10 [ 420.733422][T15720] ? is_bpf_text_address+0x26/0x2b0 [ 420.733461][T15720] ? kernel_text_address+0xa5/0xe0 [ 420.733505][T15720] fib6_clean_node+0x29f/0x590 [ 420.733538][T15720] ? __pfx_fib6_clean_node+0x10/0x10 [ 420.733575][T15720] ? __lock_acquire+0xab9/0xd20 [ 420.733615][T15720] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.733655][T15720] fib6_walk_continue+0x678/0x910 [ 420.733701][T15720] fib6_walk+0x149/0x290 [ 420.733733][T15720] __fib6_clean_all+0x234/0x380 [ 420.733760][T15720] ? __fib6_clean_all+0x9b/0x380 [ 420.733789][T15720] ? __pfx_fib6_ifdown+0x10/0x10 [ 420.733827][T15720] ? __pfx___fib6_clean_all+0x10/0x10 [ 420.733861][T15720] ? __pfx_fib6_clean_node+0x10/0x10 [ 420.733890][T15720] ? __pfx_fib6_ifdown+0x10/0x10 [ 420.733926][T15720] ? __mutex_trylock_common+0x153/0x260 [ 420.733955][T15720] rt6_disable_ip+0x120/0x720 [ 420.733995][T15720] ? rcu_is_watching+0x15/0xb0 [ 420.734031][T15720] ? trace_contention_end+0x39/0x120 [ 420.734054][T15720] ? __pfx_rt6_disable_ip+0x10/0x10 [ 420.734097][T15720] addrconf_ifdown+0x15d/0x1880 [ 420.734124][T15720] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 420.734167][T15720] ? tls_dev_event+0x717/0xec0 [ 420.734190][T15720] ? __pfx_addrconf_ifdown+0x10/0x10 [ 420.734233][T15720] addrconf_notify+0x1bc/0x1010 [ 420.734270][T15720] notifier_call_chain+0x1b3/0x3e0 [ 420.734303][T15720] netif_set_mtu_ext+0x594/0x7d0 [ 420.734334][T15720] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 420.734355][T15720] ? __mutex_trylock_common+0x153/0x260 [ 420.734382][T15720] ? __pfx___mutex_trylock_common+0x10/0x10 [ 420.734411][T15720] ? rcu_is_watching+0x15/0xb0 [ 420.734447][T15720] ? trace_contention_end+0x39/0x120 [ 420.734478][T15720] netif_set_mtu+0xa4/0x150 [ 420.734501][T15720] ? __pfx_netif_set_mtu+0x10/0x10 [ 420.734521][T15720] ? __lock_acquire+0xab9/0xd20 [ 420.734605][T15720] ? netdev_name_node_lookup+0xdf/0x120 [ 420.734644][T15720] dev_set_mtu+0x126/0x260 [ 420.734671][T15720] dev_ioctl+0x7b4/0x1150 [ 420.734706][T15720] sock_do_ioctl+0x22c/0x300 [ 420.734739][T15720] ? __pfx_sock_do_ioctl+0x10/0x10 [ 420.734766][T15720] ? __lock_acquire+0xab9/0xd20 [ 420.734816][T15720] sock_ioctl+0x576/0x790 [ 420.734848][T15720] ? __pfx_sock_ioctl+0x10/0x10 [ 420.734877][T15720] ? __fget_files+0x2a/0x420 [ 420.734898][T15720] ? __fget_files+0x3a0/0x420 [ 420.734919][T15720] ? __fget_files+0x2a/0x420 [ 420.734957][T15720] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.734988][T15720] ? __pfx_sock_ioctl+0x10/0x10 [ 420.735016][T15720] __se_sys_ioctl+0xf9/0x170 [ 420.735049][T15720] do_syscall_64+0xfa/0x3b0 [ 420.735082][T15720] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.735113][T15720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.735136][T15720] ? clear_bhb_loop+0x60/0xb0 [ 420.735164][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.735187][T15720] RIP: 0033:0x7fd4fc18ebe9 [ 420.735208][T15720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.735229][T15720] RSP: 002b:00007fd4fd030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.735255][T15720] RAX: ffffffffffffffda RBX: 00007fd4fc3b6180 RCX: 00007fd4fc18ebe9 [ 420.735272][T15720] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 420.735287][T15720] RBP: 00007fd4fd030090 R08: 0000000000000000 R09: 0000000000000000 [ 420.735301][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.735314][T15720] R13: 00007fd4fc3b6218 R14: 00007fd4fc3b6180 R15: 00007fffb1b23a28 [ 420.735350][T15720] [ 421.379158][T15707] netlink: 'syz.0.3328': attribute type 13 has an invalid length. [ 421.388069][T15707] netlink: 'syz.0.3328': attribute type 17 has an invalid length. [ 421.463828][T15707] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 421.497244][T15722] tipc: Started in network mode [ 421.503027][T15722] tipc: Node identity 868dfce6b41b, cluster identity 4711 [ 421.517754][T15722] tipc: Enabled bearer , priority 0 [ 421.580011][T15723] syzkaller0: entered promiscuous mode [ 421.622065][T15723] syzkaller0: entered allmulticast mode [ 421.719650][T15722] tipc: Resetting bearer [ 421.918900][T15721] tipc: Resetting bearer [ 421.993035][T15721] tipc: Disabling bearer [ 422.206102][T15744] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 422.336135][T15744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.400812][T15751] bond1: (slave bridge2): making interface the new active one [ 422.414836][T15751] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 422.532878][T15744] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 422.871243][T15766] lo speed is unknown, defaulting to 1000 [ 422.884909][T15766] lo speed is unknown, defaulting to 1000 [ 422.904465][T15766] lo speed is unknown, defaulting to 1000 [ 422.920846][T15766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 422.961882][T15766] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 423.032822][T15766] lo speed is unknown, defaulting to 1000 [ 423.051815][T15766] lo speed is unknown, defaulting to 1000 [ 423.068818][T15766] lo speed is unknown, defaulting to 1000 [ 423.094051][T15766] lo speed is unknown, defaulting to 1000 [ 423.109119][T15766] lo speed is unknown, defaulting to 1000 [ 423.118477][T15766] lo speed is unknown, defaulting to 1000 [ 423.127468][T15766] lo speed is unknown, defaulting to 1000 [ 423.137004][T15766] lo speed is unknown, defaulting to 1000 [ 423.273612][T15777] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 423.385660][T15781] __nla_validate_parse: 5 callbacks suppressed [ 423.385683][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3351'. [ 423.981540][T15802] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3356'. [ 424.005166][T15802] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3356'. [ 424.032248][T15802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3356'. [ 424.982168][T15814] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3361'. [ 425.006568][T15806] FAULT_INJECTION: forcing a failure. [ 425.006568][T15806] name failslab, interval 1, probability 0, space 0, times 0 [ 425.033507][T15806] CPU: 0 UID: 0 PID: 15806 Comm: syz.1.3357 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 425.033542][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.033557][T15806] Call Trace: [ 425.033566][T15806] [ 425.033577][T15806] dump_stack_lvl+0x189/0x250 [ 425.033606][T15806] ? __pfx____ratelimit+0x10/0x10 [ 425.033638][T15806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.033661][T15806] ? __pfx__printk+0x10/0x10 [ 425.033696][T15806] ? __pfx___might_resched+0x10/0x10 [ 425.033728][T15806] ? fs_reclaim_acquire+0x7d/0x100 [ 425.033758][T15806] should_fail_ex+0x414/0x560 [ 425.033799][T15806] should_failslab+0xa8/0x100 [ 425.033822][T15806] __kmalloc_cache_noprof+0x70/0x3d0 [ 425.033855][T15806] ? kobject_uevent_env+0x27c/0x8c0 [ 425.033876][T15806] ? devres_release_all+0x1ca/0x230 [ 425.033911][T15806] ? __pfx_dev_uevent_name+0x10/0x10 [ 425.033931][T15806] kobject_uevent_env+0x27c/0x8c0 [ 425.033966][T15806] device_del+0x73a/0x8e0 [ 425.034004][T15806] ? __pfx_device_del+0x10/0x10 [ 425.034031][T15806] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.034061][T15806] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 425.034092][T15806] device_unregister+0x20/0xc0 [ 425.034120][T15806] wakeup_source_unregister+0x179/0x3f0 [ 425.034151][T15806] ep_clear_and_put+0x2d4/0x380 [ 425.034172][T15806] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 425.034202][T15806] ep_eventpoll_release+0x45/0x60 [ 425.034222][T15806] __fput+0x449/0xa70 [ 425.034266][T15806] task_work_run+0x1d4/0x260 [ 425.034296][T15806] ? __pfx_task_work_run+0x10/0x10 [ 425.034337][T15806] get_signal+0x11ed/0x1340 [ 425.034375][T15806] ? __pfx_do_epoll_wait+0x10/0x10 [ 425.034403][T15806] ? __pfx_vfs_write+0x10/0x10 [ 425.034437][T15806] ? set_user_sigmask+0xc7/0x1b0 [ 425.034480][T15806] arch_do_signal_or_restart+0x9a/0x750 [ 425.034520][T15806] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 425.034570][T15806] ? exit_to_user_mode_loop+0x40/0x110 [ 425.034605][T15806] exit_to_user_mode_loop+0x75/0x110 [ 425.034636][T15806] do_syscall_64+0x2bd/0x3b0 [ 425.034668][T15806] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.034698][T15806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.034719][T15806] ? clear_bhb_loop+0x60/0xb0 [ 425.034747][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.034769][T15806] RIP: 0033:0x7f9b5618ebe9 [ 425.034789][T15806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.034810][T15806] RSP: 002b:00007f9b543d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 425.034836][T15806] RAX: fffffffffffffffc RBX: 00007f9b563b6090 RCX: 00007f9b5618ebe9 [ 425.034853][T15806] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 425.034868][T15806] RBP: 00007f9b543d5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.034882][T15806] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.034897][T15806] R13: 00007f9b563b6128 R14: 00007f9b563b6090 R15: 00007ffeb1449af8 [ 425.034932][T15806] [ 426.483317][T15851] lo speed is unknown, defaulting to 1000 [ 427.444221][T15874] pim6reg: entered allmulticast mode [ 427.473490][T15879] pim6reg: left allmulticast mode [ 428.254947][T15901] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3392'. [ 428.418991][T15909] FAULT_INJECTION: forcing a failure. [ 428.418991][T15909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.466637][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.1.3395 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 428.466680][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.466695][T15909] Call Trace: [ 428.466703][T15909] [ 428.466713][T15909] dump_stack_lvl+0x189/0x250 [ 428.466742][T15909] ? __pfx____ratelimit+0x10/0x10 [ 428.466779][T15909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.466803][T15909] ? __pfx__printk+0x10/0x10 [ 428.466833][T15909] ? fs_reclaim_acquire+0x7d/0x100 [ 428.466867][T15909] should_fail_ex+0x414/0x560 [ 428.466909][T15909] prepare_alloc_pages+0x213/0x610 [ 428.466952][T15909] __alloc_frozen_pages_noprof+0x123/0x370 [ 428.466983][T15909] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.467021][T15909] ? __lock_acquire+0xab9/0xd20 [ 428.467059][T15909] __alloc_pages_noprof+0xa/0x30 [ 428.467083][T15909] ___kmalloc_large_node+0x85/0x210 [ 428.467123][T15909] __kmalloc_large_node_noprof+0x18/0x90 [ 428.467160][T15909] __kmalloc_noprof+0x36f/0x4f0 [ 428.467192][T15909] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 428.467213][T15909] ? rcu_is_watching+0x15/0xb0 [ 428.467252][T15909] ioctl_standard_iw_point+0x4d5/0xd40 [ 428.467290][T15909] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 428.467320][T15909] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 428.467344][T15909] ? __pfx___mutex_lock+0x10/0x10 [ 428.467385][T15909] ? full_name_hash+0x92/0xe0 [ 428.467412][T15909] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 428.467441][T15909] ioctl_standard_call+0xaf/0x1b0 [ 428.467481][T15909] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 428.467507][T15909] wext_ioctl_dispatch+0xee/0x410 [ 428.467539][T15909] ? __pfx_ioctl_standard_call+0x10/0x10 [ 428.467578][T15909] wext_handle_ioctl+0x100/0x1c0 [ 428.467617][T15909] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 428.467649][T15909] ? __lock_acquire+0xab9/0xd20 [ 428.467700][T15909] sock_ioctl+0x15f/0x790 [ 428.467732][T15909] ? __pfx_sock_ioctl+0x10/0x10 [ 428.467760][T15909] ? __fget_files+0x2a/0x420 [ 428.467781][T15909] ? __fget_files+0x3a0/0x420 [ 428.467801][T15909] ? __fget_files+0x2a/0x420 [ 428.467826][T15909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 428.467856][T15909] ? __pfx_sock_ioctl+0x10/0x10 [ 428.467883][T15909] __se_sys_ioctl+0xf9/0x170 [ 428.467921][T15909] do_syscall_64+0xfa/0x3b0 [ 428.467953][T15909] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.467984][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.468007][T15909] ? clear_bhb_loop+0x60/0xb0 [ 428.468033][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.468056][T15909] RIP: 0033:0x7f9b5618ebe9 [ 428.468075][T15909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.468096][T15909] RSP: 002b:00007f9b543f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.468121][T15909] RAX: ffffffffffffffda RBX: 00007f9b563b5fa0 RCX: 00007f9b5618ebe9 [ 428.468138][T15909] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000007 [ 428.468153][T15909] RBP: 00007f9b543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.468168][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.468182][T15909] R13: 00007f9b563b6038 R14: 00007f9b563b5fa0 R15: 00007ffeb1449af8 [ 428.468218][T15909] [ 429.047639][T15900] FAULT_INJECTION: forcing a failure. [ 429.047639][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.051761][T15916] FAULT_INJECTION: forcing a failure. [ 429.051761][T15916] name failslab, interval 1, probability 0, space 0, times 0 [ 429.096477][T15916] CPU: 0 UID: 0 PID: 15916 Comm: syz.1.3398 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 429.096513][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.096527][T15916] Call Trace: [ 429.096537][T15916] [ 429.096547][T15916] dump_stack_lvl+0x189/0x250 [ 429.096575][T15916] ? __pfx____ratelimit+0x10/0x10 [ 429.096606][T15916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.096628][T15916] ? __pfx__printk+0x10/0x10 [ 429.096650][T15916] ? trace_contention_end+0x39/0x120 [ 429.096686][T15916] should_fail_ex+0x414/0x560 [ 429.096740][T15916] should_failslab+0xa8/0x100 [ 429.096762][T15916] kmem_cache_alloc_noprof+0x73/0x3c0 [ 429.096813][T15916] ? skb_clone+0x212/0x3a0 [ 429.096841][T15916] skb_clone+0x212/0x3a0 [ 429.096868][T15916] __netlink_deliver_tap+0x404/0x850 [ 429.096912][T15916] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.096947][T15916] netlink_deliver_tap+0x19c/0x1b0 [ 429.096984][T15916] netlink_dump+0x92b/0xe90 [ 429.097025][T15916] ? __pfx_netlink_dump+0x10/0x10 [ 429.097072][T15916] ? kmem_cache_free+0x18f/0x400 [ 429.097107][T15916] netlink_recvmsg+0x676/0xa30 [ 429.097156][T15916] ? __pfx_netlink_recvmsg+0x10/0x10 [ 429.097190][T15916] ? __lock_acquire+0xab9/0xd20 [ 429.097217][T15916] ? aa_sock_msg_perm+0x94/0x160 [ 429.097246][T15916] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 429.097271][T15916] ? __pfx_netlink_recvmsg+0x10/0x10 [ 429.097302][T15916] sock_recvmsg_nosec+0x186/0x1c0 [ 429.097334][T15916] ____sys_recvmsg+0x3aa/0x460 [ 429.097366][T15916] ? __pfx_____sys_recvmsg+0x10/0x10 [ 429.097404][T15916] ? import_iovec+0x74/0xa0 [ 429.097436][T15916] ___sys_recvmsg+0x1b5/0x510 [ 429.097464][T15916] ? __pfx____sys_recvmsg+0x10/0x10 [ 429.097519][T15916] ? __might_fault+0xb0/0x130 [ 429.097553][T15916] do_recvmmsg+0x307/0x770 [ 429.097585][T15916] ? __pfx_do_recvmmsg+0x10/0x10 [ 429.097620][T15916] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.097670][T15916] __x64_sys_recvmmsg+0x190/0x240 [ 429.097695][T15916] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 429.097716][T15916] ? rcu_is_watching+0x15/0xb0 [ 429.097752][T15916] ? do_syscall_64+0xbe/0x3b0 [ 429.097785][T15916] do_syscall_64+0xfa/0x3b0 [ 429.097813][T15916] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.097840][T15916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.097860][T15916] ? clear_bhb_loop+0x60/0xb0 [ 429.097886][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.097906][T15916] RIP: 0033:0x7f9b5618ebe9 [ 429.097926][T15916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.097945][T15916] RSP: 002b:00007f9b543f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.097969][T15916] RAX: ffffffffffffffda RBX: 00007f9b563b5fa0 RCX: 00007f9b5618ebe9 [ 429.097985][T15916] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 429.097999][T15916] RBP: 00007f9b543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.098012][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.098025][T15916] R13: 00007f9b563b6038 R14: 00007f9b563b5fa0 R15: 00007ffeb1449af8 [ 429.098057][T15916] [ 429.123774][T15900] CPU: 1 UID: 0 PID: 15900 Comm: syz.2.3389 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 429.123815][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.123831][T15900] Call Trace: [ 429.123842][T15900] [ 429.123855][T15900] dump_stack_lvl+0x189/0x250 [ 429.123889][T15900] ? __pfx____ratelimit+0x10/0x10 [ 429.123927][T15900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.123954][T15900] ? __pfx__printk+0x10/0x10 [ 429.124000][T15900] should_fail_ex+0x414/0x560 [ 429.124047][T15900] _copy_to_user+0x31/0xb0 [ 429.124094][T15900] simple_read_from_buffer+0xe1/0x170 [ 429.124140][T15900] proc_fail_nth_read+0x1b3/0x220 [ 429.124176][T15900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.124209][T15900] ? rw_verify_area+0x258/0x650 [ 429.124244][T15900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.124277][T15900] vfs_read+0x1fd/0x980 [ 429.124311][T15900] ? fdget_pos+0x247/0x320 [ 429.124341][T15900] ? __pfx___mutex_lock+0x10/0x10 [ 429.124379][T15900] ? __pfx_vfs_read+0x10/0x10 [ 429.124417][T15900] ? __fget_files+0x2a/0x420 [ 429.124446][T15900] ? __fget_files+0x3a0/0x420 [ 429.124470][T15900] ? __fget_files+0x2a/0x420 [ 429.124505][T15900] ksys_read+0x145/0x250 [ 429.124544][T15900] ? __pfx_ksys_read+0x10/0x10 [ 429.124589][T15900] ? do_syscall_64+0xbe/0x3b0 [ 429.124632][T15900] do_syscall_64+0xfa/0x3b0 [ 429.124674][T15900] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.124709][T15900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.124734][T15900] ? clear_bhb_loop+0x60/0xb0 [ 429.124765][T15900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.124790][T15900] RIP: 0033:0x7ff9a818d5fc [ 429.124811][T15900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 429.124834][T15900] RSP: 002b:00007ff9a63f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.124863][T15900] RAX: ffffffffffffffda RBX: 00007ff9a83b5fa0 RCX: 00007ff9a818d5fc [ 429.124882][T15900] RDX: 000000000000000f RSI: 00007ff9a63f60a0 RDI: 000000000000000a [ 429.124897][T15900] RBP: 00007ff9a63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.124913][T15900] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 429.124930][T15900] R13: 00007ff9a83b6038 R14: 00007ff9a83b5fa0 R15: 00007ffecd4cf1b8 [ 429.124970][T15900] [ 429.875994][T15922] FAULT_INJECTION: forcing a failure. [ 429.875994][T15922] name failslab, interval 1, probability 0, space 0, times 0 [ 429.902569][T10285] IPVS: starting estimator thread 0... [ 429.936408][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.2.3400 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 429.936441][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.936455][T15922] Call Trace: [ 429.936464][T15922] [ 429.936475][T15922] dump_stack_lvl+0x189/0x250 [ 429.936505][T15922] ? __pfx____ratelimit+0x10/0x10 [ 429.936538][T15922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.936561][T15922] ? __pfx__printk+0x10/0x10 [ 429.936597][T15922] ? __pfx___might_resched+0x10/0x10 [ 429.936636][T15922] should_fail_ex+0x414/0x560 [ 429.936677][T15922] should_failslab+0xa8/0x100 [ 429.936701][T15922] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 429.936757][T15922] ? __alloc_skb+0x112/0x2d0 [ 429.936797][T15922] __alloc_skb+0x112/0x2d0 [ 429.936836][T15922] netlink_sendmsg+0x5c6/0xb30 [ 429.936882][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.936920][T15922] ? aa_sock_msg_perm+0x94/0x160 [ 429.936951][T15922] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.936976][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.937011][T15922] __sock_sendmsg+0x219/0x270 [ 429.937044][T15922] ____sys_sendmsg+0x505/0x830 [ 429.937082][T15922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.937117][T15922] ? import_iovec+0x74/0xa0 [ 429.937158][T15922] ___sys_sendmsg+0x21f/0x2a0 [ 429.937185][T15922] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.937250][T15922] ? __fget_files+0x2a/0x420 [ 429.937271][T15922] ? __fget_files+0x3a0/0x420 [ 429.937305][T15922] __x64_sys_sendmsg+0x19b/0x260 [ 429.937333][T15922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.937369][T15922] ? __pfx_ksys_write+0x10/0x10 [ 429.937398][T15922] ? rcu_is_watching+0x15/0xb0 [ 429.937438][T15922] ? do_syscall_64+0xbe/0x3b0 [ 429.937476][T15922] do_syscall_64+0xfa/0x3b0 [ 429.937507][T15922] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.937538][T15922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.937560][T15922] ? clear_bhb_loop+0x60/0xb0 [ 429.937588][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.937609][T15922] RIP: 0033:0x7ff9a818ebe9 [ 429.937631][T15922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.937651][T15922] RSP: 002b:00007ff9a63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.937677][T15922] RAX: ffffffffffffffda RBX: 00007ff9a83b5fa0 RCX: 00007ff9a818ebe9 [ 429.937693][T15922] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000016 [ 429.937708][T15922] RBP: 00007ff9a63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.937721][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.937735][T15922] R13: 00007ff9a83b6038 R14: 00007ff9a83b5fa0 R15: 00007ffecd4cf1b8 [ 429.937771][T15922] [ 430.267825][T15927] IPVS: using max 26 ests per chain, 62400 per kthread [ 430.380652][T15919] can: request_module (can-proto-3) failed. [ 430.388373][T15937] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3405'. [ 430.406794][T15932] lo speed is unknown, defaulting to 1000 [ 430.660286][T15946] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3408'. [ 430.701804][T15947] tipc: Enabled bearer , priority 0 [ 430.751856][T15947] syzkaller0: entered promiscuous mode [ 430.786553][T15947] syzkaller0: entered allmulticast mode [ 430.864865][T15948] lo speed is unknown, defaulting to 1000 [ 430.983837][T15947] Bluetooth: MGMT ver 1.23 [ 431.002255][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'. [ 431.497890][T15961] FAULT_INJECTION: forcing a failure. [ 431.497890][T15961] name failslab, interval 1, probability 0, space 0, times 0 [ 431.528392][T15961] CPU: 0 UID: 0 PID: 15961 Comm: syz.0.3412 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 431.528429][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.528444][T15961] Call Trace: [ 431.528453][T15961] [ 431.528463][T15961] dump_stack_lvl+0x189/0x250 [ 431.528493][T15961] ? __pfx____ratelimit+0x10/0x10 [ 431.528526][T15961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.528550][T15961] ? __pfx__printk+0x10/0x10 [ 431.528574][T15961] ? trace_contention_end+0x39/0x120 [ 431.528613][T15961] should_fail_ex+0x414/0x560 [ 431.528653][T15961] should_failslab+0xa8/0x100 [ 431.528678][T15961] kmem_cache_alloc_noprof+0x73/0x3c0 [ 431.528711][T15961] ? skb_clone+0x212/0x3a0 [ 431.528741][T15961] skb_clone+0x212/0x3a0 [ 431.528771][T15961] __netlink_deliver_tap+0x404/0x850 [ 431.528820][T15961] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.528854][T15961] netlink_deliver_tap+0x19c/0x1b0 [ 431.528889][T15961] netlink_dump+0x92b/0xe90 [ 431.528946][T15961] ? __pfx_netlink_dump+0x10/0x10 [ 431.528999][T15961] ? kmem_cache_free+0x18f/0x400 [ 431.529037][T15961] netlink_recvmsg+0x676/0xa30 [ 431.529083][T15961] ? __pfx_netlink_recvmsg+0x10/0x10 [ 431.529122][T15961] ? __lock_acquire+0xab9/0xd20 [ 431.529150][T15961] ? aa_sock_msg_perm+0x94/0x160 [ 431.529183][T15961] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 431.529211][T15961] ? __pfx_netlink_recvmsg+0x10/0x10 [ 431.529245][T15961] sock_recvmsg_nosec+0x186/0x1c0 [ 431.529282][T15961] ____sys_recvmsg+0x3aa/0x460 [ 431.529317][T15961] ? __pfx_____sys_recvmsg+0x10/0x10 [ 431.529360][T15961] ? import_iovec+0x74/0xa0 [ 431.529395][T15961] ___sys_recvmsg+0x1b5/0x510 [ 431.529426][T15961] ? __pfx____sys_recvmsg+0x10/0x10 [ 431.529487][T15961] ? __might_fault+0xb0/0x130 [ 431.529526][T15961] do_recvmmsg+0x307/0x770 [ 431.529562][T15961] ? __pfx_do_recvmmsg+0x10/0x10 [ 431.529602][T15961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.529656][T15961] __x64_sys_recvmmsg+0x190/0x240 [ 431.529686][T15961] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 431.529709][T15961] ? rcu_is_watching+0x15/0xb0 [ 431.529750][T15961] ? do_syscall_64+0xbe/0x3b0 [ 431.529788][T15961] do_syscall_64+0xfa/0x3b0 [ 431.529819][T15961] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.529850][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.529873][T15961] ? clear_bhb_loop+0x60/0xb0 [ 431.529901][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.529929][T15961] RIP: 0033:0x7f9d4938ebe9 [ 431.529950][T15961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.529971][T15961] RSP: 002b:00007f9d4a2ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 431.529996][T15961] RAX: ffffffffffffffda RBX: 00007f9d495b5fa0 RCX: 00007f9d4938ebe9 [ 431.530013][T15961] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 431.530027][T15961] RBP: 00007f9d4a2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 431.530042][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.530056][T15961] R13: 00007f9d495b6038 R14: 00007f9d495b5fa0 R15: 00007ffd479ab6f8 [ 431.530092][T15961] [ 431.875889][ T24] tipc: Node number set to 848755942 [ 431.942277][T15944] tipc: Resetting bearer [ 432.052638][T15944] tipc: Disabling bearer [ 432.339691][T15964] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 432.377736][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 432.405460][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 432.447018][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 432.533075][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3415'. [ 432.575088][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3415'. [ 432.632487][T15966] bond0: entered promiscuous mode [ 432.670819][T15966] bond_slave_0: entered promiscuous mode [ 432.721383][T15966] bond_slave_1: entered promiscuous mode [ 432.737705][T15966] bond0: left promiscuous mode [ 432.781690][T15966] bond_slave_0: left promiscuous mode [ 432.807142][T15979] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3418'. [ 432.836894][T15966] bond_slave_1: left promiscuous mode [ 432.875688][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3419'. [ 432.918927][T15967] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 433.063798][T15985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.162008][T15989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.221230][T15989] batadv_slave_0: entered promiscuous mode [ 433.252940][T15989] batadv_slave_0: entered allmulticast mode [ 433.439940][T15998] netlink: 'syz.4.3423': attribute type 16 has an invalid length. [ 433.448735][T15998] netlink: 'syz.4.3423': attribute type 17 has an invalid length. [ 433.566078][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.574330][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.005998][T10285] lo speed is unknown, defaulting to 1000 [ 434.024219][T10285] syz2: Port: 1 Link DOWN [ 434.050464][T16006] veth1_macvtap: left promiscuous mode [ 434.066375][T16006] macsec0: entered allmulticast mode [ 434.107002][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.140075][T16010] FAULT_INJECTION: forcing a failure. [ 434.140075][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 434.153426][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.0.3427 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 434.153458][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.153472][T16010] Call Trace: [ 434.153480][T16010] [ 434.153489][T16010] dump_stack_lvl+0x189/0x250 [ 434.153514][T16010] ? __pfx____ratelimit+0x10/0x10 [ 434.153541][T16010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.153560][T16010] ? __pfx__printk+0x10/0x10 [ 434.153589][T16010] ? __lock_acquire+0xab9/0xd20 [ 434.153620][T16010] should_fail_ex+0x414/0x560 [ 434.153654][T16010] should_failslab+0xa8/0x100 [ 434.153674][T16010] kmem_cache_alloc_noprof+0x73/0x3c0 [ 434.153701][T16010] ? dst_alloc+0x105/0x170 [ 434.153727][T16010] dst_alloc+0x105/0x170 [ 434.153758][T16010] ip_route_input_rcu+0x1ed5/0x2ff0 [ 434.153789][T16010] ? __pfx_get_l4proto+0x10/0x10 [ 434.153807][T16010] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 434.153857][T16010] ? ip_route_input_noref+0x98/0x250 [ 434.153880][T16010] ip_route_input_noref+0x167/0x250 [ 434.153904][T16010] ? __pfx_ip_route_input_noref+0x10/0x10 [ 434.153931][T16010] ? __lock_acquire+0xab9/0xd20 [ 434.153964][T16010] ip_rcv_finish_core+0x5af/0x1c00 [ 434.154003][T16010] ip_rcv_finish+0x14c/0x2f0 [ 434.154033][T16010] NF_HOOK+0x309/0x3a0 [ 434.154062][T16010] ? __pfx_ip_rcv_finish+0x10/0x10 [ 434.154088][T16010] ? NF_HOOK+0x9a/0x3a0 [ 434.154113][T16010] ? __pfx_NF_HOOK+0x10/0x10 [ 434.154137][T16010] ? ip_rcv_core+0x7f7/0xd00 [ 434.154166][T16010] ? __pfx_ip_rcv_finish+0x10/0x10 [ 434.154201][T16010] ? __pfx_ip_rcv+0x10/0x10 [ 434.154226][T16010] __netif_receive_skb+0x143/0x380 [ 434.154257][T16010] ? netif_receive_skb+0x115/0x790 [ 434.154280][T16010] netif_receive_skb+0x1cb/0x790 [ 434.154303][T16010] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 434.154353][T16010] ? __pfx_netif_receive_skb+0x10/0x10 [ 434.154382][T16010] ? tun_rx_batched+0x160/0x730 [ 434.154405][T16010] tun_rx_batched+0x1b9/0x730 [ 434.154429][T16010] ? __lock_acquire+0xab9/0xd20 [ 434.154458][T16010] ? __pfx_tun_rx_batched+0x10/0x10 [ 434.154481][T16010] ? tun_get_user+0x266c/0x3e20 [ 434.154514][T16010] tun_get_user+0x2aa2/0x3e20 [ 434.154542][T16010] ? tun_get_user+0x6f6/0x3e20 [ 434.154563][T16010] ? tun_get_user+0x266c/0x3e20 [ 434.154588][T16010] ? __pfx_tun_get_user+0x10/0x10 [ 434.154612][T16010] ? aa_file_perm+0x40c/0xe70 [ 434.154641][T16010] ? aa_file_perm+0x122/0xe70 [ 434.154674][T16010] ? ref_tracker_alloc+0x318/0x460 [ 434.154691][T16010] ? __lock_acquire+0xab9/0xd20 [ 434.154717][T16010] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.154746][T16010] ? tun_get+0x1c/0x2f0 [ 434.154771][T16010] ? tun_get+0x1c/0x2f0 [ 434.154790][T16010] ? tun_get+0x1c/0x2f0 [ 434.154814][T16010] tun_chr_write_iter+0x113/0x200 [ 434.154836][T16010] vfs_write+0x54b/0xa90 [ 434.154873][T16010] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 434.154893][T16010] ? __pfx_vfs_write+0x10/0x10 [ 434.154930][T16010] ? __fget_files+0x2a/0x420 [ 434.154956][T16010] ksys_write+0x145/0x250 [ 434.154985][T16010] ? __pfx_ksys_write+0x10/0x10 [ 434.155019][T16010] ? rcu_is_watching+0x15/0xb0 [ 434.155057][T16010] ? do_syscall_64+0xbe/0x3b0 [ 434.155089][T16010] do_syscall_64+0xfa/0x3b0 [ 434.155115][T16010] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.155140][T16010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.155159][T16010] ? clear_bhb_loop+0x60/0xb0 [ 434.155181][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.155198][T16010] RIP: 0033:0x7f9d4938d69f [ 434.155216][T16010] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 434.155232][T16010] RSP: 002b:00007f9d4a2ba000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 434.155254][T16010] RAX: ffffffffffffffda RBX: 00007f9d495b5fa0 RCX: 00007f9d4938d69f [ 434.155268][T16010] RDX: 000000000000003e RSI: 00002000000010c0 RDI: 00000000000000c8 [ 434.155280][T16010] RBP: 00007f9d4a2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 434.155292][T16010] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 434.155303][T16010] R13: 00007f9d495b6038 R14: 00007f9d495b5fa0 R15: 00007ffd479ab6f8 [ 434.155332][T16010] [ 434.591901][ T6303] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.604856][ T3465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.619589][ T3465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.465503][T16040] tipc: Enabled bearer , priority 0 [ 435.489999][T16040] syzkaller0: entered promiscuous mode [ 435.512335][T16040] syzkaller0: entered allmulticast mode [ 435.567509][T16039] tipc: Resetting bearer [ 435.667408][T16039] tipc: Disabling bearer [ 436.273234][T16053] __nla_validate_parse: 6 callbacks suppressed [ 436.273258][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3441'. [ 436.301564][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3441'. [ 436.328920][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3441'. [ 436.352926][T16053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'. [ 436.396932][T16053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'. [ 436.494563][T16055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.616021][T16065] v: renamed from ip6_vti0 (while UP) [ 436.790219][T16072] vlan2: entered promiscuous mode [ 436.800865][T16072] vlan2: entered allmulticast mode [ 436.813454][T16072] hsr_slave_1: entered allmulticast mode [ 436.930552][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3447'. [ 436.940541][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3447'. [ 436.974130][T16057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.983822][T16082] lo speed is unknown, defaulting to 1000 [ 437.362611][T16094] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 437.401200][T16092] lo speed is unknown, defaulting to 1000 [ 437.784098][T16105] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3453'. [ 437.829666][T16094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.838640][T16105] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3453'. [ 437.848412][T16105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3453'. [ 437.997507][T16098] veth3: entered promiscuous mode [ 438.007935][T16098] bond1: (slave veth3): Enslaving as an active interface with a down link [ 438.026954][T16101] erspan0: entered allmulticast mode [ 438.065457][T16101] bond1: (slave erspan0): making interface the new active one [ 438.076164][T16101] erspan0: entered promiscuous mode [ 438.087170][T16101] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 438.311569][T16117] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 438.478217][T16122] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 438.843735][T16144] lo speed is unknown, defaulting to 1000 [ 439.565314][T16166] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 439.597719][T16169] FAULT_INJECTION: forcing a failure. [ 439.597719][T16169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.617272][T16168] FAULT_INJECTION: forcing a failure. [ 439.617272][T16168] name failslab, interval 1, probability 0, space 0, times 0 [ 439.642734][T16169] CPU: 0 UID: 0 PID: 16169 Comm: syz.0.3474 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 439.642769][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.642783][T16169] Call Trace: [ 439.642793][T16169] [ 439.642803][T16169] dump_stack_lvl+0x189/0x250 [ 439.642831][T16169] ? __pfx____ratelimit+0x10/0x10 [ 439.642864][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.642886][T16169] ? __pfx__printk+0x10/0x10 [ 439.642914][T16169] ? __might_fault+0xb0/0x130 [ 439.642959][T16169] should_fail_ex+0x414/0x560 [ 439.643001][T16169] _copy_from_user+0x2d/0xb0 [ 439.643033][T16169] ___sys_sendmsg+0x158/0x2a0 [ 439.643061][T16169] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.643125][T16169] ? __fget_files+0x2a/0x420 [ 439.643146][T16169] ? __fget_files+0x3a0/0x420 [ 439.643196][T16169] __x64_sys_sendmsg+0x19b/0x260 [ 439.643223][T16169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.643265][T16169] ? __pfx_ksys_write+0x10/0x10 [ 439.643295][T16169] ? rcu_is_watching+0x15/0xb0 [ 439.643334][T16169] ? do_syscall_64+0xbe/0x3b0 [ 439.643370][T16169] do_syscall_64+0xfa/0x3b0 [ 439.643402][T16169] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.643433][T16169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.643454][T16169] ? clear_bhb_loop+0x60/0xb0 [ 439.643481][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.643502][T16169] RIP: 0033:0x7f9d4938ebe9 [ 439.643523][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.643544][T16169] RSP: 002b:00007f9d4a2ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.643570][T16169] RAX: ffffffffffffffda RBX: 00007f9d495b5fa0 RCX: 00007f9d4938ebe9 [ 439.643587][T16169] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a [ 439.643601][T16169] RBP: 00007f9d4a2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 439.643615][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.643629][T16169] R13: 00007f9d495b6038 R14: 00007f9d495b5fa0 R15: 00007ffd479ab6f8 [ 439.643664][T16169] [ 439.695583][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.1.3472 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 439.695624][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.695641][T16168] Call Trace: [ 439.695655][T16168] [ 439.695668][T16168] dump_stack_lvl+0x189/0x250 [ 439.695702][T16168] ? __pfx____ratelimit+0x10/0x10 [ 439.695741][T16168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.695768][T16168] ? __pfx__printk+0x10/0x10 [ 439.695803][T16168] ? __lock_acquire+0xab9/0xd20 [ 439.695851][T16168] should_fail_ex+0x414/0x560 [ 439.695897][T16168] should_failslab+0xa8/0x100 [ 439.695925][T16168] kmem_cache_alloc_noprof+0x73/0x3c0 [ 439.695985][T16168] ? skb_clone+0x212/0x3a0 [ 439.696020][T16168] skb_clone+0x212/0x3a0 [ 439.696052][T16168] __netlink_deliver_tap+0x404/0x850 [ 439.696108][T16168] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.696149][T16168] netlink_deliver_tap+0x19c/0x1b0 [ 439.696189][T16168] netlink_unicast+0x7fa/0x9e0 [ 439.696234][T16168] ? __pfx_netlink_unicast+0x10/0x10 [ 439.696276][T16168] ? netlink_sendmsg+0x642/0xb30 [ 439.696310][T16168] ? skb_put+0x11b/0x210 [ 439.696345][T16168] netlink_sendmsg+0x805/0xb30 [ 439.696405][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.696450][T16168] ? aa_sock_msg_perm+0x94/0x160 [ 439.696487][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.696516][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.696566][T16168] __sock_sendmsg+0x219/0x270 [ 439.696604][T16168] ____sys_sendmsg+0x505/0x830 [ 439.696639][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.696677][T16168] ? import_iovec+0x74/0xa0 [ 439.696718][T16168] ___sys_sendmsg+0x21f/0x2a0 [ 439.696748][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.696821][T16168] ? __fget_files+0x2a/0x420 [ 439.696846][T16168] ? __fget_files+0x3a0/0x420 [ 439.696884][T16168] __x64_sys_sendmsg+0x19b/0x260 [ 439.696914][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.696961][T16168] ? __pfx_ksys_write+0x10/0x10 [ 439.696996][T16168] ? rcu_is_watching+0x15/0xb0 [ 439.697041][T16168] ? do_syscall_64+0xbe/0x3b0 [ 439.697085][T16168] do_syscall_64+0xfa/0x3b0 [ 439.697119][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.697155][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.697181][T16168] ? clear_bhb_loop+0x60/0xb0 [ 439.697296][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.697333][T16168] RIP: 0033:0x7f9b5618ebe9 [ 439.697358][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.697382][T16168] RSP: 002b:00007f9b543f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.697412][T16168] RAX: ffffffffffffffda RBX: 00007f9b563b5fa0 RCX: 00007f9b5618ebe9 [ 439.697432][T16168] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 439.697449][T16168] RBP: 00007f9b543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.697466][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.697481][T16168] R13: 00007f9b563b6038 R14: 00007f9b563b5fa0 R15: 00007ffeb1449af8 [ 439.697524][T16168] [ 440.609255][T16181] IPVS: Scheduler module ip_vs_ not found [ 440.936821][ T5850] Bluetooth: hci1: command tx timeout [ 440.953166][T16200] lo speed is unknown, defaulting to 1000 [ 441.272874][T16215] netlink: 'syz.2.3493': attribute type 13 has an invalid length. [ 441.308421][T16215] netlink: 'syz.2.3493': attribute type 17 has an invalid length. [ 441.446548][T16215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.693191][T16230] __nla_validate_parse: 1 callbacks suppressed [ 441.693215][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'. [ 441.814504][T16233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.906466][T16226] IPVS: Scheduler module ip_vs_ not found [ 442.672408][T16252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3505'. [ 443.191314][T16262] lo speed is unknown, defaulting to 1000 [ 443.285301][T16271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.432340][T16267] lo speed is unknown, defaulting to 1000 [ 443.682986][T16279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3511'. [ 443.698259][T16279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3511'. [ 443.787000][T16281] syzkaller0: entered promiscuous mode [ 443.792746][T16281] syzkaller0: entered allmulticast mode [ 444.074942][T16289] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3515'. [ 444.566478][T16295] lo speed is unknown, defaulting to 1000 [ 444.596145][T10281] IPVS: starting estimator thread 0... [ 444.634462][T16301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.716421][T16304] IPVS: using max 28 ests per chain, 67200 per kthread [ 444.733153][T16301] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3519'. [ 444.759491][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'. [ 445.624477][T16364] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3526'. [ 445.652030][T16367] tipc: Enabling of bearer rejected, failed to enable media [ 445.667019][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.667116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.699809][T16365] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3527'. [ 445.714571][T16361] lo speed is unknown, defaulting to 1000 [ 445.994629][T16378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.082035][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3530'. [ 446.445375][T16389] lo speed is unknown, defaulting to 1000 [ 446.897425][T16405] __nla_validate_parse: 3 callbacks suppressed [ 446.897446][T16405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3538'. [ 447.090842][T16413] netlink: 'syz.2.3541': attribute type 13 has an invalid length. [ 447.135699][T16413] netlink: 'syz.2.3541': attribute type 17 has an invalid length. [ 447.175776][T16413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.395677][T16412] lo speed is unknown, defaulting to 1000 [ 447.469430][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3545'. [ 447.480720][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3545'. [ 447.512100][T16426] Unsupported ieee802154 address type: 0 [ 447.540610][T16424] bond0: entered promiscuous mode [ 447.561892][T16424] bond0: left promiscuous mode [ 447.562554][T16427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3545'. [ 447.610564][T16429] FAULT_INJECTION: forcing a failure. [ 447.610564][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.628014][T16429] CPU: 0 UID: 0 PID: 16429 Comm: syz.0.3547 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 447.628049][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.628064][T16429] Call Trace: [ 447.628073][T16429] [ 447.628084][T16429] dump_stack_lvl+0x189/0x250 [ 447.628112][T16429] ? __pfx____ratelimit+0x10/0x10 [ 447.628145][T16429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.628168][T16429] ? __pfx__printk+0x10/0x10 [ 447.628200][T16429] ? __might_fault+0xb0/0x130 [ 447.628246][T16429] should_fail_ex+0x414/0x560 [ 447.628287][T16429] _copy_from_user+0x2d/0xb0 [ 447.628319][T16429] bpf_ctx_init+0x13a/0x1d0 [ 447.628356][T16429] bpf_prog_test_run_skb+0x20b/0x1560 [ 447.628396][T16429] ? __fget_files+0x2a/0x420 [ 447.628422][T16429] ? __fget_files+0x2a/0x420 [ 447.628454][T16429] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 447.628487][T16429] bpf_prog_test_run+0x2c4/0x340 [ 447.628525][T16429] __sys_bpf+0x581/0x870 [ 447.628559][T16429] ? __pfx___sys_bpf+0x10/0x10 [ 447.628606][T16429] ? ksys_write+0x22a/0x250 [ 447.628641][T16429] ? __pfx_ksys_write+0x10/0x10 [ 447.628670][T16429] ? rcu_is_watching+0x15/0xb0 [ 447.628713][T16429] __x64_sys_bpf+0x7c/0x90 [ 447.628742][T16429] do_syscall_64+0xfa/0x3b0 [ 447.628775][T16429] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.628806][T16429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.628828][T16429] ? clear_bhb_loop+0x60/0xb0 [ 447.628855][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.628877][T16429] RIP: 0033:0x7f9d4938ebe9 [ 447.628898][T16429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.628918][T16429] RSP: 002b:00007f9d4a2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.628943][T16429] RAX: ffffffffffffffda RBX: 00007f9d495b5fa0 RCX: 00007f9d4938ebe9 [ 447.628959][T16429] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 447.628974][T16429] RBP: 00007f9d4a2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 447.628989][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.629003][T16429] R13: 00007f9d495b6038 R14: 00007f9d495b5fa0 R15: 00007ffd479ab6f8 [ 447.629039][T16429] [ 447.631949][T16425] bond0: entered promiscuous mode [ 447.894796][T16425] bond0: left promiscuous mode [ 447.933546][T16427] bond0: entered promiscuous mode [ 447.944893][T16427] bond0: left promiscuous mode [ 448.710956][T16461] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3559'. [ 448.994368][T16471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3562'. [ 449.182597][T16483] netlink: 'syz.0.3566': attribute type 29 has an invalid length. [ 449.192668][T16483] netlink: 'syz.0.3566': attribute type 29 has an invalid length. [ 449.257108][T16483] lo speed is unknown, defaulting to 1000 [ 449.475203][T16487] lo speed is unknown, defaulting to 1000 [ 449.996566][T16500] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3572'. [ 450.086860][T16502] lo speed is unknown, defaulting to 1000 [ 450.372966][T16512] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 450.429749][ T78] erspan0: left promiscuous mode [ 450.621499][T16512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.741592][T16517] veth3: entered promiscuous mode [ 450.861355][T16517] bond1: (slave veth3): Enslaving as an active interface with a down link [ 450.862936][T16531] FAULT_INJECTION: forcing a failure. [ 450.862936][T16531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.907245][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.3.3580 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 450.907281][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.907295][T16531] Call Trace: [ 450.907305][T16531] [ 450.907317][T16531] dump_stack_lvl+0x189/0x250 [ 450.907347][T16531] ? __pfx____ratelimit+0x10/0x10 [ 450.907379][T16531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.907402][T16531] ? __pfx__printk+0x10/0x10 [ 450.907430][T16531] ? __might_fault+0xb0/0x130 [ 450.907476][T16531] should_fail_ex+0x414/0x560 [ 450.907517][T16531] _copy_from_iter+0x1db/0x16f0 [ 450.907550][T16531] ? rcu_is_watching+0x15/0xb0 [ 450.907586][T16531] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 450.907622][T16531] ? __pfx__copy_from_iter+0x10/0x10 [ 450.907652][T16531] ? __build_skb_around+0x257/0x3e0 [ 450.907691][T16531] ? netlink_sendmsg+0x642/0xb30 [ 450.907723][T16531] ? skb_put+0x11b/0x210 [ 450.907748][T16531] netlink_sendmsg+0x6b2/0xb30 [ 450.907793][T16531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.907830][T16531] ? aa_sock_msg_perm+0x94/0x160 [ 450.907861][T16531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.907887][T16531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.907922][T16531] __sock_sendmsg+0x219/0x270 [ 450.907954][T16531] ____sys_sendmsg+0x505/0x830 [ 450.907984][T16531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.908018][T16531] ? import_iovec+0x74/0xa0 [ 450.908052][T16531] ___sys_sendmsg+0x21f/0x2a0 [ 450.908078][T16531] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.908346][T16531] ? __fget_files+0x2a/0x420 [ 450.908367][T16531] ? __fget_files+0x3a0/0x420 [ 450.908400][T16531] __x64_sys_sendmsg+0x19b/0x260 [ 450.908428][T16531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.908462][T16531] ? __pfx_ksys_write+0x10/0x10 [ 450.908491][T16531] ? rcu_is_watching+0x15/0xb0 [ 450.908531][T16531] ? do_syscall_64+0xbe/0x3b0 [ 450.908567][T16531] do_syscall_64+0xfa/0x3b0 [ 450.908599][T16531] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.908629][T16531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.908651][T16531] ? clear_bhb_loop+0x60/0xb0 [ 450.908678][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.908699][T16531] RIP: 0033:0x7f775698ebe9 [ 450.908719][T16531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.908739][T16531] RSP: 002b:00007f775774f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.908765][T16531] RAX: ffffffffffffffda RBX: 00007f7756bb6090 RCX: 00007f775698ebe9 [ 450.908782][T16531] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000008 [ 450.908796][T16531] RBP: 00007f775774f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.908810][T16531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.908823][T16531] R13: 00007f7756bb6128 R14: 00007f7756bb6090 R15: 00007fff30731338 [ 450.908858][T16531] [ 451.550205][ T8559] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 451.562351][ T8559] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 451.572909][ T8559] CPU: 0 UID: 0 PID: 8559 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 451.585447][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.596066][ T8559] Workqueue: netns cleanup_net [ 451.601158][ T8559] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 451.607582][ T8559] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 451.628010][ T8559] RSP: 0018:ffffc9001b69f1b8 EFLAGS: 00010206 [ 451.634727][ T8559] RAX: 000000001fffe000 RBX: 1ffff1100f14fe82 RCX: ffff888069d7da00 [ 451.642919][ T8559] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 451.651873][ T8559] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 451.659880][ T8559] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 451.668598][ T8559] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888078a7f410 [ 451.676850][ T8559] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 451.686309][ T8559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.693093][ T8559] CR2: 000020000067e030 CR3: 0000000057d92000 CR4: 00000000003526f0 [ 451.701431][ T8559] Call Trace: [ 451.704901][ T8559] [ 451.708037][ T8559] __ipv6_dev_mc_dec+0x2e4/0x330 [ 451.713263][ T8559] __ipv6_ifa_notify+0x43d/0xac0 [ 451.718747][ T8559] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 451.724312][ T8559] ? __lock_acquire+0xab9/0xd20 [ 451.730072][ T8559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 451.735927][ T8559] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.741356][ T8559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 451.746947][ T8559] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 451.752991][ T8559] addrconf_ifdown+0xe69/0x1880 [ 451.758317][ T8559] ? tls_dev_event+0x717/0xec0 [ 451.763543][ T8559] ? __pfx_addrconf_ifdown+0x10/0x10 [ 451.769233][ T8559] addrconf_notify+0x1bc/0x1010 [ 451.774742][ T8559] notifier_call_chain+0x1b3/0x3e0 [ 451.780478][ T8559] netif_close_many+0x29c/0x410 [ 451.785615][ T8559] ? blocking_notifier_chain_unregister+0x69/0xb0 [ 451.792415][ T8559] ? __pfx_netif_close_many+0x10/0x10 [ 451.798115][ T8559] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 451.804727][ T8559] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 451.811853][ T8559] ? net_generic+0x1e/0x240 [ 451.816729][ T8559] ? net_generic+0x1e/0x240 [ 451.821520][ T8559] ? net_generic+0x1e/0x240 [ 451.826403][ T8559] ops_undo_list+0x3dc/0x990 [ 451.831289][ T8559] ? __pfx_ops_undo_list+0x10/0x10 [ 451.837309][ T8559] ? do_raw_spin_unlock+0x122/0x240 [ 451.842705][ T8559] cleanup_net+0x4c5/0x800 [ 451.847237][ T8559] ? __pfx_cleanup_net+0x10/0x10 [ 451.853080][ T8559] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.858386][ T8559] ? process_scheduled_works+0x9ef/0x17b0 [ 451.864476][ T8559] ? process_scheduled_works+0x9ef/0x17b0 [ 451.870473][ T8559] process_scheduled_works+0xae1/0x17b0 [ 451.876151][ T8559] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.882617][ T8559] worker_thread+0x8a0/0xda0 [ 451.887591][ T8559] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 451.893959][ T8559] ? __kthread_parkme+0x7b/0x200 [ 451.899010][ T8559] kthread+0x70e/0x8a0 [ 451.903472][ T8559] ? __pfx_worker_thread+0x10/0x10 [ 451.908879][ T8559] ? __pfx_kthread+0x10/0x10 [ 451.914111][ T8559] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.920123][ T8559] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.925454][ T8559] ? __pfx_kthread+0x10/0x10 [ 451.930238][ T8559] ret_from_fork+0x3fc/0x770 [ 451.935180][ T8559] ? __pfx_ret_from_fork+0x10/0x10 [ 451.941232][ T8559] ? __switch_to_asm+0x39/0x70 [ 451.946189][ T8559] ? __switch_to_asm+0x33/0x70 [ 451.951519][ T8559] ? __pfx_kthread+0x10/0x10 [ 451.957393][ T8559] ret_from_fork_asm+0x1a/0x30 [ 451.964206][ T8559] [ 451.967529][ T8559] Modules linked in: [ 451.972676][ T8559] ---[ end trace 0000000000000000 ]--- [ 452.000354][ T8559] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 452.010388][ T8559] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 452.031967][T16537] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3584'. [ 452.031961][ T8559] RSP: 0018:ffffc9001b69f1b8 EFLAGS: 00010206 [ 452.065406][ T8559] RAX: 000000001fffe000 RBX: 1ffff1100f14fe82 RCX: ffff888069d7da00 [ 452.073870][ T8559] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 452.083022][ T8559] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 452.091611][ T8559] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 452.100945][ T8559] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888078a7f410 [ 452.109292][ T8559] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 452.119513][ T8559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.126772][ T8559] CR2: 00007f9b543b3f98 CR3: 000000007449a000 CR4: 00000000003526f0 [ 452.135970][ T8559] Kernel panic - not syncing: Fatal exception [ 452.143634][ T8559] Kernel Offset: disabled [ 452.148339][ T8559] Rebooting in 86400 seconds..