last executing test programs: 2.345647002s ago: executing program 1 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@fwd={0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0xa, 0x5}, {0x6, 0x5}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @volatile={0x10}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x2}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x5}, {0x0, 0x6a}]}]}, {0x0, [0x0, 0x30, 0x30, 0x2e, 0x3e]}}, &(0x7f0000000200)=""/192, 0xaf, 0xc0, 0x1, 0x5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x10000, 0x8, 0x6, 0x20, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x1, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) 2.254493386s ago: executing program 1 (id=2247): r0 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xba, "64df7401f2c8ecfa1cfcea3b727d8b6f195f04a873dbe57f77aec9b8711a6434a501e91c5ce58d28b8dec05486935f524fdc3ab5b5fcbb0396a912d5d0b6be86fcb75295a6a18a58d797650ca5f6e5b6ec63cc7d0c7f79445642f6d92b6f93f79a52dcb75b8e1257333cdac15f9990c3d4736fb3c90d6642b31e1e80a94511c6b05d5cf0c018ddcb41fd0fb3e60f0d6cbb880c458adbb6ed02617722b50b333635351a00ea462e52a157d219e258cac12b299dc1ea928dfbafae"}, &(0x7f0000000100)=0xc2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xffff1b07}, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x7af9c377, 0x8}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x90}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffff4, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0x6b, &(0x7f0000000280)=""/107, 0x40f00, 0x70, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r3, r4, r5, r6], &(0x7f0000000580)=[{0x5, 0x3, 0xf}, {0x5, 0x4, 0xa, 0xa}, {0x5, 0x2, 0x9, 0x8}, {0x4, 0x2, 0x4}, {0x2, 0x3, 0x9, 0x9}, {0x4, 0x1, 0x7, 0xc}], 0x10, 0xffffffff}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r7, 0x820, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000800) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000800)={r1, 0x9, 0x10}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl1\x00', r2, 0x0, 0x20, 0x2, 0x2, {{0x16, 0x4, 0x2, 0xd, 0x58, 0x67, 0x0, 0x20, 0x29, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x44, 0xdd, 0x1, 0xb, [{@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010101, 0x9}, {@local, 0x6}, {@private=0xa010101, 0x7}, {@local, 0x8}, {@remote, 0xfffffff4}, {@empty, 0x80000001}, {@local, 0xfffff801}]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@ipv6_deladdr={0x20, 0x15, 0x200, 0x70bd2c, 0x25dfdbfd, {0xa, 0x18, 0x68, 0xc8, r9}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'nicvf0\x00'}) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000a80)={0xffffffffffffffff, 0x7f, "63d09f", 0x8, 0x4}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000ac0)=0x4, 0x4) r10 = openat$cgroup_procs(r6, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b40)={'ip6tnl0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000001) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@newtclass={0x48, 0x28, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x6, 0x4}, {0x5, 0x4}, {0xc, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x7}}, @tclass_kind_options=@c_cake={0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000f00)=0x5, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000f40)={'security\x00', 0xc8, "113408831abf9a7643930c8111ca2fdbd6597d4711e584d3de471863c81b80f6978d0cae9eea2e8be957012128cde8cc77e69b2a07eef60303815b68bce2e0744541866307a2c7fc5395c1403753b3f0c8fe41f2c6e0056d45e1c2e47378e9d63a2cabaa96bb51cb2cdb137b6fe777a721de0de34d1d9b855b289d635a427595720b349764e3179a21541edd49e62aac0b9b5b7c1becd8b82fce7fe537c68bc8314f02205354f28b4268ab5c78821389c331aaa89bff2e653bff7c87666e400588234a22188a8cf0"}, &(0x7f0000001040)=0xec) r12 = openat$cgroup_ro(r6, &(0x7f0000001080)='memory.current\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r12, 0x6628) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f00000010c0)={0x0, @aes128, 0x0, @desc2}) 2.16726549s ago: executing program 0 (id=2250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 2.100439315s ago: executing program 0 (id=2252): r0 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000c8587f0b7058ede10000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r2}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r2}, 0x38) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8995, &(0x7f0000000000)={'bond0\x00', @random="01054a0100ff"}) sendmmsg$inet(r4, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvfrom$llc(r7, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r6, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB="489e562364"], 0x3c}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={r10, 0x9}, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000014000780080012400000000005001500060000000500010007000000050005000a00000005000400000000000900020073797a30000000004d32ff7b6f54d6ad40668e3cb478b311000300686173683a6e65742c6e6574000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000091}, 0x200040c0) 1.999648199s ago: executing program 1 (id=2253): r0 = socket(0x2c, 0x803, 0xfffffffe) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002940)=@delchain={0x2c, 0x66, 0x1, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0xb, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r7 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x8}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1500000000000000000000000000007d0000000000000000000000000000e0d89be4e3050607baab22a4f1752c2921a3ea5983d36947ea1bf2e0479ebd6382458c560c9a3032b55d0b01af5c0726b5d3cd713612fb845dd89b09543b9c89cbc98c0000000000665af6c1bc773d7135bd129171654f6dbc545016b73939bd"], 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r9, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xe, 0x2f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x20000005) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000020000000500000000000000000002000000000000000000c4b74f6ff94eae1748d81a7166646fce274a16e1d4c56d3ea0e7420efa4ce78627b2b116c19f685c8a32bbc5e1d4175900f418b3297a92670a8e74abe64c30678b29cec06ac28e13bfad68327c10b3bd7b4cca96daa442efd5a274281533425f98bdd7f7376ef4ac8353d8e4f4c17f95be2545208acd727032feb1e18317a8cdcee7addf8a7af256c0114bd0160d8f471b02b01a487e6ea2e94fb817a2a3840d70a7c042a24833a30131ac03"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000020000000500000000000000000002000000000000000000c4b74f6ff94eae1748d81a7166646fce274a16e1d4c56d3ea0e7420efa4ce78627b2b116c19f685c8a32bbc5e1d4175900f418b3297a92670a8e74abe64c30678b29cec06ac28e13bfad68327c10b3bd7b4cca96daa442efd5a274281533425f98bdd7f7376ef4ac8353d8e4f4c17f95be2545208acd727032feb1e18317a8cdcee7addf8a7af256c0114bd0160d8f471b02b01a487e6ea2e94fb817a2a3840d70a7c042a24833a30131ac03"], 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000540)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000540)) 1.815158507s ago: executing program 1 (id=2254): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000010000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010400000000009500000000000000587cef8e11908f87e4a058"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x6, 0x9, 0x10000, 0x9]}, &(0x7f0000000080)=0x54) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000540)="29b0", 0x2a4, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r6, 0x40049409, r6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x60000000) write(0xffffffffffffffff, &(0x7f0000000000)="2e000400010002", 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x5, 0x0, 0x46, @mcast2, @mcast2, 0x20, 0x40, 0xa94, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24006da73fe5a4a5000008fcdbdf251c0800010000", @ANYRES16=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f00000002c0)}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b0000000c02004f0cc1060010b85624a8000000", @ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="062aea33e78428d9ba58aafa1fc2d9ab0f3ea2606f5e1070b5f5786bbf12022fc9f2257f50ed59edf562496ad62cd4edf5ec3bdba8290b4972ec69d4131cb0f324652985c05857575cd9ea1eab71338215254b2c0eec13a8c174f2f0cf95b03154ac6430b2c5e04181c7333c2e4332b5db44ed42e63f90fdd872d716b087950019cf8a5462f6a35045439886b9a7df470c2e18420f8927baf7afa0fd370b159c8f29b010cf7327ae4471c3582bd85f1d449cdf226b", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r9}, 0x38) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000059c0), &(0x7f0000005a00)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000019c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001a00)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) sendmmsg$inet6(r6, 0x0, 0x0, 0x4011) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x4006, 0x20}]}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x2c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 1.572006632s ago: executing program 4 (id=2257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00009600aaaaaaaaaa0c00000600050001000000"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7a07fc564df4d25f510b20859fa0548773"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) 1.361404814s ago: executing program 4 (id=2261): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.344466168s ago: executing program 1 (id=2262): socket(0x14, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26020480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fbffffffacb10000080000000200ffff00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x54}}, 0x4080) 1.183806248s ago: executing program 4 (id=2265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000f00f00004000000060ec97000fc83c00fe8000ffffff840000000000000000aaff02000000000000000000000000000184"], 0xffe) 1.154982998s ago: executing program 0 (id=2266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x92e132d6, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x100, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {0xfffffffd}, {0x0, 0x3}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0700001e0000001400040073797a6b616c6c647230000000000000c52c212c027c8949cdfe180003030303030300000000cc000000530000000000000005000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7ffffffc, 0xffffffff, 0x2000008, 0x3, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xf}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x8}, 0x8) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="a4000000070a010100000000000000000a00000408000b40000000040900010073797a30000000000900020073797a32000000000900010073797a310000000008b4056d24fb09403000010073797a3000000000440005800800014000000000080001400000000c08000140000088ca08000140000000670800014000006005080001400000002b080001400000008908000140000000840c0003400000000000000005"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10000893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@initdev, @remote}, &(0x7f0000000200)=0xc) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 990.685625ms ago: executing program 3 (id=2267): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f00000013c0)=""/239, 0xef, 0x0, &(0x7f00000014c0)=""/130, 0x82}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x6c3, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000015c0), 0x10, r0}, 0x94) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000003c0)={{r1}, "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"}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r1, 0x26, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40) 757.887752ms ago: executing program 2 (id=2269): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702001108000000b703000000000000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) 749.129588ms ago: executing program 3 (id=2270): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 655.247344ms ago: executing program 2 (id=2271): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xc7, 0x1000, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x40, 0xf883}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0xe}, {0x8}, {0xb, 0x8}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x24008800) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) r6 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000b80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000cc0)=0x0) r13 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001180)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000001280)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) r16 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r17 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000013c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) r21 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001480)=0x0) r23 = socket$inet_smc(0x2b, 0x1, 0x0) r24 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001b80)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0}, &(0x7f0000003f00)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f40)={0x0, 0x0, 0x0}, &(0x7f0000003f80)=0xc) sendmmsg$unix(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="1f328c1d750bb347c6f98df717dde76fa8d593f614cb0eb450a8801c1acbd10290b579b640139c1f2209f256947f20b4df9e9e", 0x33}, {&(0x7f0000000300)="c7e2d13ecb8feb03b61324359833df661bf9fdda992e7f7850a3571e7f844c9c94f9a849d74f5529fc7c6cfb059bd0a8418e2efa25789e3e94956945e40fa7ad69032feea60b745eecb709df9dd3978de1103835f3fdfe8514ecc5c317", 0x5d}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x24008000}}, {{&(0x7f0000000580)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)="e8598f7e9d9f5305d33ead80377254677bace653c71918a24196095f79ddcfecd72c627f24", 0x25}, {&(0x7f0000000640)="4f96c7dd1de16bea921cff28d2f6e1bdad6f169888c48af177", 0x19}, {&(0x7f0000000680)="3c85f9e84cf6e3c0e25e21215217c9175002a647a93b0308ff34ff8588945b1ab5651f73ff8afc32c0e8e9dccd0e27adcc73e72b055d4f88d6cad5284cda89b24008029d3d1b02c1f308c19cc4fb95d620165458e1c6854dcdd8182090d57bdbe45033386b3dd808a54ef833002ff03d6f933cb7a395f618d3d3fd14af576c1104aacde5e0954988b544c9e65ab36f6125801024e84f643561184119c31741735a8310c1172357df1c57fe4a1a90853ae8bd56101dee76b8e3d394f5910516c8975cd7e48ec0", 0xc6}, {&(0x7f0000000780)="b15b7ab2d2548f11bbc43c1d11625f07b87c5235f7562908097d43b09876e491c923c51a0e4ae535d3f60a008e385cbe5eab22233ae56eba0403e89583533b0f7af0a81361ee9d48b29c2a1e2cdbbd125f37da27ace4b08976593db3a9eabbcb3496d4b9a7c7e7382a71d3bac6838a29d8c5d0", 0x73}, {&(0x7f0000000800)="bba4e03ef5df5605d0a4f195a62bdd8f0269811c9fbd5f25f4178788e250a39a349334731c3ab30450ddb8dcce34b50a140ec3b74e316818723624c649d7574d70c2bb30d1b14cdfce6728fdfa911c5272add5520e740f8f6e0153835d7cc4f95371cd2d7927183d0b40d6762ed0cdf6de46f111f2d250584adc1adc1336df539ce731b29e9c698a2daf8a2302eebd3dc18f330751b18d031afe22825eefc27692b370e95ddee4d720ec9b4c16daed99fba46b12050b5bbda8370e526627c5dd60d1dcff6c4147451e78e4dcb36de8a60ee3fb0076e04732542bc29fd902a2df8b3c9c", 0xe3}, {&(0x7f0000000900)="ccad133066c7b3860effacc9a1189bd3bc0964999b216d001b26ec8cb244c16982a3a16b95c258ed4b9eb6b1869eec64f5ee8d942fe30ce6b4a3cb88636a6895a01f085239a9dafa1abbea36397c1c573ebc0484dd3d65638fcfbf792e36b6d82e9bd95a20019358", 0x68}, {&(0x7f0000000980)="e3a9e7352e00d5b6983c5049d41bce937aaf72902a76d08277", 0x19}], 0x7, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, 0xee01}}}], 0x78, 0x840}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e00)="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", 0xfd}, {&(0x7f0000000f00)="1423e9e561305fb6b959ec194f18c394eb44d8dc73c84cef24f1f2d8a8802288005aacd239beeffe8c95c057", 0x2c}, {&(0x7f0000000f40)="25ce39e19d54bb2b4f7ba20c5cc0a75fd9994d5f8f883595f65542838e99303e9ade868b94e67a2b4aecd0a793235a88b212341603ba2eac6a7320fe235a7378de98a8f26b2f990d04bd7ac065a98a3ac930ca2fa69a7fffe3d10f57be21b4da9f5ba6de7c67cafa3a9e7f49811f00268bba8ccdd9e5d59da18a802177af23f377243aaa7b896695239b78caf925d6477c4cbd3f482b894f9503c7f9e1dafd2980963b251c5c8f517d694ff533b305b65fd0850029210f0ed6aad47f46ed43ba8bb7680d780ae128fb1c", 0xca}, {&(0x7f0000001040)="5c52e86924f937b19d8b59f38d33f4b2d6d165f88b38bffca9f6010cfad39225480328f1af4b385890a1f3755260cbf20e00ed19350020cbf926da4bb68bbdb263204a83a97f774c57354a6289894812e3fdfa0b30cb3ea691600b16c182f64f3a522de977168e41dcca435f948d6ad54f849604fe1391d5867773fc0c5282ff3a12590bb05201ad1f9dcd7dbcee78c8eb8081a99e82b7aecb280894543042c0483584617e26eb400cdef9c17d9807829cd1f733b53194b7c5e7c719fe4245d296a071fdb3dee3a59d282d21566cf2712809526de06af554df7aba3ee46faf03e07f3e1474", 0xe5}], 0x4, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r0, r16, r1, r0, r0, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee00, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0xee00, 0xee01}}}], 0xd0, 0x20000010}}, {{&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001640)="d2ba3828e591252b2bdd25830a68cb354fe672523a3afc669f450f7f09a5a64a123eab2dea9c17d29bfc63d38338101190d3de5d8c4e3c2dd1b7bb1e99bb5359d13df47a8e940ce8b2b91b67ebfe3b0a2275ac8bf574403e13c598848e29c6cbd1f36e231745d977159f2a81d095563ba2d8bf9d1c1862d825febd7cec422a592bb88f641c3bed7ce1a68b04588c16d2142df80e4c42764565038ae347a371f6f2f9c5bccb68748197c3b1dc0e6fb0a05c741857549b92906de200", 0xbb}, {&(0x7f0000001700)="ee165a96d8fc129801d2e34991ef966467a983a3fc9e0cc81c7a7413448b42987f76dff06ec12c8b4f800de92788e0a6bcde488bb3ad76d268db2e3769578ae735a5a3a1ef77e0", 0x47}, {&(0x7f0000001780)="fa2d1d704779774a989dfe97bd72fcfb7bb07429811ef9a1bbc65a6f5e8cbcfca1b29f1a305ca753", 0x28}, {&(0x7f00000017c0)="28e9d914dfbe1c7e0c7106", 0xb}, {&(0x7f0000001800)="b9dc72b2bc90fd75063c1d9dc0a79366af37b6f8269c8e8483b14e1c1d93f3cf093cc68937ba12d5b43796386c0c6b68fa20907984374b9f1ef298613a8bab1a1c92fe828bc866b9a53dd2f1c9ac9e536aa8a32682cda571bdd7fe7288c9b6e2fe98ec2d13a618eb726d7aff96ebfdcff27691cb49583d649c4688f200e6fe11658d69c04be793256a3807c5f21618544149c4f45bc6a2a788d197053f578593bb456b950c40dc4acba47fefc07f9813a0a0cff2c7c6c04880d39d01cf66a59cac521b4b54697976f7617886a498d57b93b9b4e78d7c1290f814369e98", 0xdd}, {&(0x7f0000001900)="c15766e744d80f52edbd0b892c03c334323c59012c3585d8a6e9c65fc24dfebcb49d5348b3244d4e09769a036f182fa33ed739498a7b6bedfcd79f06a67c794e9ed81c481d52c76ca907bcb6e852e2da415b7600", 0x54}, {&(0x7f0000001980)="58e433413cdeb61fa913270b2c9056d34802f175d0724c1b7ff97a1e4cbfb9991e74c4d68d44237ddb48e53638336a7f5f8c25c2fdae92eb2b8e898d616d52bade83f7fba4c561bcf03e158dd6a5c06edc8e1d161e493b88d7d1", 0x5a}], 0x7, &(0x7f0000001a80), 0x0, 0x40800}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="ffe1d8a849328d29231c126cb38bc991ae0c52a6e0d5aeeb2260b77292d85c6b3766485d83fa5de10db170c31ab503a6b7dde5d75b77b917bf74baf26c5490cb4de9605f5b21e7aa9a0541f01e5160642f04be4d239779ffa408a2e3b4a3f368e551ac436f00", 0x66}], 0x1, &(0x7f0000001bc0)=[@rights={{0x18, 0x1, 0x1, [r23, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r24, r1, r0]}}], 0x38, 0x4}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001c80)="9de33220cfb53b11e4416f14f0c60e637cc03129d55b6c2cdbddbc2fa05b91619735d88a2c12fedd5dd4c1ef0311db41df90a162f5675512c51b80286e151a2f68b131cab711cf8e120ef0608ccf267e51a9f456a469cf85354a8adcb2cfb5d8eff58e", 0x63}, {&(0x7f0000001d00)="87cce9cc874966203100b2ecd2f46a4b78f7a554243d194d4fae820d5d8764086a27b48fa3adf9ca8350e1f3b08228a71ec4f19e710a41947e7f09d68d0e34b6188427148c07e82cb9eceaf28bd4ac63bcf67070e00918c71668c024a1b5835472e630ab11f5c3429d2f9ad3c23e42db8cae698f2a054ae630", 0x79}, {&(0x7f0000001d80)="0e904f8a479e459628436dad420bb786f746d66eb21dda6854", 0x19}, {&(0x7f0000001dc0)="ec5cb5dd73be40e58eb2e739435ae5f5be5f25eae1efd56d0883c4088fbe1e676112d294f0d467ac94b5b75648aa2b78fb970813", 0x34}, {&(0x7f0000001e00)="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", 0x1000}], 0x5, 0x0, 0x0, 0x40800}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002e80)="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", 0x1000}], 0x1, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r25, r26}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000004200)="217570cb918d2e665945f0ea089abf424c04440179a543362da74a337101842b0b86e7ed777e535c92a33fa0a0be8e37be2c4a480671aa", 0x37}, {&(0x7f0000004240)="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", 0x1000}, {&(0x7f0000005240)="1b8850fae05dd30ece8e7a75bee38c10d77fdd377a471d957dce208c1013f0ed8b595503550f05f21e9cb7463206d19bcc3e0c96dfda09100a6ed9d6d4f856ad91", 0x41}, {&(0x7f00000052c0)="f174702647139b7ecf941e7f663b353cce191d10010924c12e72f18d937792c77acd626ef65b9e8f7ab5b0709a9e4bb79d081d20d05f3aaf74942d786ef447855079c022e5555d5e237354b212ef03f20557bca81758adf465e77149977bf6adbeebc6f1c124bb1aee40dd914a7a560971f542f3fecba956647e3d75dd56bfecdceb52e441205929554e200c96adf2d071d30f4d7487bb2721d030aaa8cc053856e1431d3c04f0fd9eacbb47845982916aba2baa055ac9a44755f80b7835a0658640e555c87ea548b75f", 0xca}, {&(0x7f00000053c0)="c5786552bdc782be79170cadf1c01708605eb5cc97c15778b88f06608dd12661b55efe4e5ba3e5f485ff296039a8e2285f0769da089be2f91b2875a5ea3ba84231b8c87a50f3a744242d3fc0c40109e7c6b3466324ba1280e8c620d260911eca53d92f4f1391388c794f92445440af73031ee8dfcfabbcfabf6788efe86b3af1112e794fe24164e54ebec38a2992feedaa10caa64eae336f6be83649049587f61e18eb2a649bc9677e60c050c243828bfd7d9b5b2e1bc76e111e435aff936e18c88924e344de173c66eb13ea2b98ceeb82089c53a7c81f2c9aa2dfab6cdab8b5d6ebf1b62a077b9eb1032a8678ac36e623ff76", 0xf3}, {&(0x7f00000054c0)="959fca77f6ea3d18bc85ac9d8f753c0b2c14496baaa9b54738d946c1660591f06014ee0592047cbf033b4f6881ec0e0fb589dd13327a86399cc94a4921f52d1be7cdd0b3fc637ae857519e64087865e23610ef67fa0ecd2c5731922c99254e5fc135be9aeb234cd5d988c4fd2e8e80ba38e0a175d733c24e1c7720", 0x7b}], 0x6, &(0x7f0000005800)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}], 0xf8, 0x4}}, {{&(0x7f0000005900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005980)="e364dd3ae77acac64fd832f070a8d56405e9afd1d61ea68ae23afa35d46e20bb41f8186df5e974075ecbdad052493b26bcedd82e0a705671e0674dada5c08d5259b290bfed6a4a039ed7e09903b4ff773a5a5c7cd7b836a64ac5600b7498522fb5afa6e03fbf94ea503449ab8d31af7c43c2691491d99cbcdf084c132b5d4f39183dcc55cfb91b5ca343bf4b6010d80c5ba4ad904c97ae0e7846834800191bb3afe695f42ed8889f88825c8b7f8c7bdb0896cbbe9c697dbf59e05db239815dec9198ad60ee696ada01340bff8baec1933deedb3ebb313de96aabcafd", 0xdc}, {&(0x7f0000005a80)="298b6cb3e1f5c255ae58b776ebb98c60386a180c0d2a827927538acff4205fe1d3a2960166de0ffd10474ee40b3fe0cec39ce79f2ca26966d8d605611003a2235c9ea2b2fa1bf814d3a5ca07cae9d0d19ba49949b6d1fd62dae994dbc9374d570952", 0x62}, {&(0x7f0000005b00)="5ba395a4d0a19d0b4790e3da27323b55bc1bf8cbbdd6b8820edae8c2c556d17cd306f88bacfb9ba4ccf631681fc39d257a3e817dca055e1c41c9b2f412411411f0b2c65cc56880cde0b9b5f8e21177ef3cae9de0bb5380547876b9149e84a33676df503be10a6b8956da", 0x6a}, {&(0x7f0000005b80)="8c076ba9497d00ee74a9054c136303540bf92b0b750621261d4df77748079bca3c579cd4fc5d7a2ae1abe48e9375de49af2287c2650eba05344b24c8ae11c633821df00e662e109cd218bf0c950188ea602b50a7a4fd4147a0d73d66e159ab95807cce7d114912efac36b321664304ea04b7dfb461cb970422bfdcecb582582a5b98fed6cfd435abc60d9e40e4232d2105253cb9bb45c0959449900156a8b5317131c862d9fb8275eddbebd58e6dc73f056d22cf86e248a3f0c7282ae33fedab7528a89b7a91dbc6a6316f12ecb173603730930fef45e048a4d6b1667df06fe2ea701e8147", 0xe5}], 0x4, &(0x7f0000005ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r0, r1, r0]}}, @cred={{0x1c}}], 0x50, 0xc0}}], 0x9, 0x8010) 605.364484ms ago: executing program 2 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0xffffffc5}, 0x3, 0xf0, 0x8e9, 0x2, 0x2, 'syz1\x00', "3c8f4bde2686b05582efdf0258df963e05f83258b46aff696a084ff4b789df3f", "6e1120d815cbcb09b28f907c2005f20c64e5ad15b226d480fc4f228f48b550bf", [{0x6, 0x8, {0x2, 0x3}}, {0x2, 0x5, {0x3, 0x3}}, {0x0, 0x7, {0x2, 0x4}}, {0x1, 0x2, {0x2, 0x2}}, {0x7, 0x8, {0x0, 0x4}}, {0x2, 0x8, {0x3, 0x1}}, {0x4, 0xff78, {0x1, 0x2}}, {0x4, 0x6bf, {0x0, 0xffff}}, {0x500, 0xc555, {0x0, 0x1}}, {0x3ff, 0x3, {0x0, 0x5}}, {0x9, 0x1, {0x2, 0x2}}, {0x9, 0xc64, {0x0, 0x7}}, {0x8, 0x1000, {0x2, 0x3}}, {0x1ff, 0x8, {0x1, 0x3}}, {0x9b7b, 0x3ff, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x1}}, {0x7fff, 0x5, {0x1, 0x5}}, {0x1f18, 0x2, {0x2, 0x688a}}, {0x4, 0x2, {0x3, 0xffffffff}}, {0x1, 0x9, {0x3, 0x8}}, {0x1, 0x5, {0x2, 0x8}}, {0xce, 0x4, {0x3, 0xe1}}, {0x40, 0x7, {0x1, 0x8}}, {0xbe, 0x81, {0x2, 0x40}}, {0x583, 0x3, {0x2, 0x3}}, {0x2, 0x640, {0x2, 0x100}}, {0x16, 0xff, {0x0, 0xcab}}, {0x4, 0xd, {0x1, 0xffff}}, {0x7, 0x0, {0x3, 0x80000000}}, {0xfff9, 0x800, {0x2, 0x800}}, {0x9, 0x4, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0x1}}, {0x1, 0x0, {0x3, 0x7fff}}, {0xfff, 0x1, {0x2, 0x4}}, {0x1000, 0x9, {0x1, 0x3ff}}, {0x6, 0x6, {0x0, 0xa}}, {0xdcc, 0x2, {0x3, 0x7}}, {0x6, 0x4, {0x1, 0x6}}, {0x0, 0x6, {0x2, 0x3}}, {0x9, 0x4, {0x1, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x2000010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 599.882752ms ago: executing program 3 (id=2273): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="324a339bc9f5f6ba6b5bbd201994c4e19bbcc07a70965b2254051e9716fedc331d6d81117076"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x40080c0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000c9b000000000000100000101800000000ffffffff00000002000000d043000010000000c9b1e0ff0c0000008520000002000000c2810200ffffffff183b00000500000000000000000000009500000000000000e95e46336c9648d97e69e5e68e532618477dd80cad1b91b4dc42b6160ff3c4332173be62c45f4a39b276ea8c7cbe45624da23c61412a002dd6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x25, &(0x7f0000000580)=""/37, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x2, 0xfffff450, 0xffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x1, 0xe, 0x7}], 0x10, 0x810}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000002c0)='rpcgss_svc_authenticate\x00', r3, 0x0, 0x6c}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="20000035a86d8e00840000000800000000000000000000000000000000000001180000435a872f0084000000070000000a010101"], 0x38}], 0x1, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 498.825721ms ago: executing program 4 (id=2274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000029869a9f5aad1892eaa7010000000000000000", @ANYRES32=0x0, @ANYBLOB="80420000000000001400128009000100626f6e64000000000400028008003a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020025bd7000ffdbdf250f1b000008002b00050000000500350002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 496.712064ms ago: executing program 2 (id=2275): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 408.394645ms ago: executing program 3 (id=2276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000130001002bbd7000f9ffffff00000000", @ANYRES32, @ANYBLOB="4000000030480000080013"], 0x90}, 0x1, 0xd}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/15, 0xf}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1ffffd}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002a40)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/130, 0x82}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000004e40)=""/4116, 0x1014}, {&(0x7f0000006080)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/98, 0x62}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000222, 0x0) 396.477394ms ago: executing program 1 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000780)="6daed6f993", 0x5}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 334.901238ms ago: executing program 0 (id=2278): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa164000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, 0x0, 0x0, 0x1}, 0x94) 284.131516ms ago: executing program 2 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000090000800000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"/26], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 281.900812ms ago: executing program 3 (id=2280): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000080) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10044015}, 0x24040814) 273.525615ms ago: executing program 4 (id=2281): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="324a339bc9f5f6ba6b5bbd201994c4e19bbcc07a70965b2254051e9716fedc331d6d81117076"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x40080c0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000c9b000000000000100000101800000000ffffffff00000002000000d043000010000000c9b1e0ff0c0000008520000002000000c2810200ffffffff183b00000500000000000000000000009500000000000000e95e46336c9648d97e69e5e68e532618477dd80cad1b91b4dc42b6160ff3c4332173be62c45f4a39b276ea8c7cbe45624da23c61412a002dd6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x25, &(0x7f0000000580)=""/37, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x2, 0xfffff450, 0xffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x1, 0xe, 0x7}], 0x10, 0x810}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000002c0)='rpcgss_svc_authenticate\x00', r3, 0x0, 0x6c}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="20000035a86d8e00840000000800000000000000000000000000000000000001180000435a872f0084000000070000000a010101"], 0x38}], 0x1, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 226.209809ms ago: executing program 2 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) accept4(r5, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f00000002c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r12}, 0x38) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 160.144462ms ago: executing program 0 (id=2283): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff0000000a000500000000000a"], 0x70}}, 0x0) 143.977808ms ago: executing program 3 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r1, 0x605, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) recvmmsg(r0, &(0x7f000000b580)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000280)=""/187, 0xbb}], 0x3, &(0x7f00000003c0)=""/170, 0xaa}, 0xfff}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001880)=""/98, 0x62}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001940)=""/10, 0xa}], 0x4}, 0x7}, {{&(0x7f00000019c0)=@ax25={{0x3, @bcast}, [@netrom, @rose, @remote, @rose, @netrom, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/13, 0xd}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/83, 0x53}, {&(0x7f0000002c00)=""/45, 0x2d}, {&(0x7f0000002c40)=""/204, 0xcc}], 0x6, &(0x7f0000002dc0)=""/227, 0xe3}, 0x4000}, {{&(0x7f0000002ec0)=@ll, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f40)=""/92, 0x5c}], 0x1, &(0x7f0000003000)=""/93, 0x5d}, 0x4e}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003080)=""/90, 0x5a}], 0x1, &(0x7f0000003140)=""/225, 0xe1}, 0x4}, {{&(0x7f0000003240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003440)=""/184, 0xb8}, {&(0x7f0000003380)=""/141, 0x8d}, {&(0x7f000000b800)=""/195, 0xc3}, {&(0x7f00000035c0)=""/172, 0xac}, {&(0x7f0000003540)=""/76, 0x4c}], 0x5}, 0xfffeffff}, {{&(0x7f0000003700)=@generic, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003780)=""/225, 0xe1}, {&(0x7f0000003880)=""/18, 0x12}, {&(0x7f00000038c0)=""/124, 0x7c}, {&(0x7f0000003940)=""/60, 0x3c}, {&(0x7f0000003980)=""/135, 0x87}, {&(0x7f0000003a40)=""/168, 0xa8}, {&(0x7f0000003b00)=""/195, 0xc3}, {&(0x7f0000003c00)=""/63, 0x3f}, {&(0x7f0000003c40)=""/7, 0x7}], 0x9, &(0x7f0000003d40)=""/240, 0xf0}, 0xbba}, {{&(0x7f0000003e40)=@nl=@proc, 0x80, &(0x7f0000005f00)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/53, 0x35}], 0x3, &(0x7f0000005f40)=""/192, 0xc0}, 0x9}, {{&(0x7f0000006000)=@can, 0x80, &(0x7f000000b3c0)=[{&(0x7f0000006080)=""/250, 0xfa}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/140, 0x8c}, {&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/248, 0xf8}, {&(0x7f0000008340)=""/104, 0x68}, {&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/4096, 0x1000}, {&(0x7f000000a3c0)=""/4096, 0x1000}], 0x9, &(0x7f000000b480)=""/216, 0xd8}, 0x2}], 0x9, 0x40002040, &(0x7f000000b7c0)={0x77359400}) r2 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, &(0x7f0000000840)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 106.16569ms ago: executing program 0 (id=2285): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYRES8=r1], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x8, 0x2, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "68c76dee16687b11"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (rerun: 32) 0s ago: executing program 4 (id=2286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newsa={0x13c, 0x10, 0x713, 0x2000000, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x1, 0x200000000000000, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0xa7}, {0x4, 0x8000000000000002}, {}, 0x0, 0x3500, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) kernel console output (not intermixed with test programs): rxe_newlink: failed to add lo [ 148.426450][ T8359] sctp: [Deprecated]: syz.3.707 (pid 8359) Use of int in max_burst socket option deprecated. [ 148.426450][ T8359] Use struct sctp_assoc_value instead [ 148.620396][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.707'. [ 148.640993][ T8359] netlink: 260 bytes leftover after parsing attributes in process `syz.3.707'. [ 149.016139][ T8397] bridge0: port 3(erspan0) entered blocking state [ 149.033889][ T8397] bridge0: port 3(erspan0) entered disabled state [ 149.045856][ T8397] erspan0: entered allmulticast mode [ 149.054512][ T8397] erspan0: entered promiscuous mode [ 149.060979][ T8397] bridge0: port 3(erspan0) entered blocking state [ 149.067597][ T8397] bridge0: port 3(erspan0) entered forwarding state [ 149.077171][ T8401] erspan0: left allmulticast mode [ 149.082621][ T8401] erspan0: left promiscuous mode [ 149.088539][ T8401] bridge0: port 3(erspan0) entered disabled state [ 149.178106][ T8405] netlink: 1 bytes leftover after parsing attributes in process `syz.4.722'. [ 149.667695][ T8440] dvmrp8: entered allmulticast mode [ 149.716400][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 149.738139][ T8429] dvmrp8: left allmulticast mode [ 149.770455][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 149.824631][ T8445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'. [ 150.107134][ T8465] FAULT_INJECTION: forcing a failure. [ 150.107134][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 150.125390][ T8455] syzkaller1: entered promiscuous mode [ 150.131964][ T8465] CPU: 0 UID: 0 PID: 8465 Comm: syz.2.740 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 150.131990][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.132001][ T8465] Call Trace: [ 150.132009][ T8465] [ 150.132016][ T8465] dump_stack_lvl+0x189/0x250 [ 150.132045][ T8465] ? __pfx____ratelimit+0x10/0x10 [ 150.132065][ T8465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.132088][ T8465] ? __pfx__printk+0x10/0x10 [ 150.132113][ T8465] ? __pfx___might_resched+0x10/0x10 [ 150.132141][ T8465] should_fail_ex+0x414/0x560 [ 150.132167][ T8465] should_failslab+0xa8/0x100 [ 150.132187][ T8465] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 150.132205][ T8465] ? __alloc_skb+0x112/0x2d0 [ 150.132230][ T8465] __alloc_skb+0x112/0x2d0 [ 150.132254][ T8465] netlink_sendmsg+0x5c6/0xb30 [ 150.132285][ T8465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.132320][ T8465] ? aa_sock_msg_perm+0x94/0x160 [ 150.132341][ T8465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.132361][ T8465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.132383][ T8465] __sock_sendmsg+0x219/0x270 [ 150.132403][ T8465] ____sys_sendmsg+0x505/0x830 [ 150.132431][ T8465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.132462][ T8465] ? import_iovec+0x74/0xa0 [ 150.132483][ T8465] ___sys_sendmsg+0x21f/0x2a0 [ 150.132509][ T8465] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.132567][ T8465] ? __fget_files+0x2a/0x420 [ 150.132585][ T8465] ? __fget_files+0x3a0/0x420 [ 150.132613][ T8465] __x64_sys_sendmsg+0x19b/0x260 [ 150.132639][ T8465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.132671][ T8465] ? __pfx_ksys_write+0x10/0x10 [ 150.132685][ T8465] ? rcu_is_watching+0x15/0xb0 [ 150.132713][ T8465] ? do_syscall_64+0xbe/0x3b0 [ 150.132736][ T8465] do_syscall_64+0xfa/0x3b0 [ 150.132754][ T8465] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.132773][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.132789][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 150.132820][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.132836][ T8465] RIP: 0033:0x7fbee6d8e929 [ 150.132852][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.132866][ T8465] RSP: 002b:00007fbee7c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.132885][ T8465] RAX: ffffffffffffffda RBX: 00007fbee6fb5fa0 RCX: 00007fbee6d8e929 [ 150.132898][ T8465] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 150.132909][ T8465] RBP: 00007fbee7c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.132920][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.132931][ T8465] R13: 0000000000000000 R14: 00007fbee6fb5fa0 R15: 00007ffe520c33f8 [ 150.132959][ T8465] [ 150.142552][ T8455] syzkaller1: entered allmulticast mode [ 150.664797][ T8480] bridge0: port 3(syz_tun) entered disabled state [ 150.717564][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.725287][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.933175][ T8499] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.014615][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.040172][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.298158][ T1112] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.327454][ T1112] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.368367][ T1112] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.376825][ T1112] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.444335][ T1112] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.487666][ T1112] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.511595][ T1112] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.538061][ T1112] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.650503][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 151.752936][ T8518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.756'. [ 152.208698][ T8542] netlink: 'syz.1.765': attribute type 12 has an invalid length. [ 152.404122][ T8545] lo speed is unknown, defaulting to 1000 [ 152.533141][ T8552] can: request_module (can-proto-3) failed. [ 152.712872][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 152.968361][ T8570] bridge_slave_1: left allmulticast mode [ 152.994382][ T8570] bridge_slave_1: left promiscuous mode [ 153.041319][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.061924][ T8570] bridge_slave_0: left allmulticast mode [ 153.070296][ T8570] bridge_slave_0: left promiscuous mode [ 153.076201][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.851665][ T8607] sctp: [Deprecated]: syz.3.781 (pid 8607) Use of int in max_burst socket option deprecated. [ 153.851665][ T8607] Use struct sctp_assoc_value instead [ 153.984574][ T8612] netlink: 'syz.2.782': attribute type 12 has an invalid length. [ 154.319284][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 154.472577][ T8631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.506733][ T8637] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.790'. [ 155.057806][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 155.069054][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 155.194414][ T8668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'. [ 155.202351][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 155.301839][ T8681] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 155.327397][ T8681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.397159][ T8687] sctp: [Deprecated]: syz.2.806 (pid 8687) Use of int in max_burst socket option deprecated. [ 155.397159][ T8687] Use struct sctp_assoc_value instead [ 155.418758][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 155.443685][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 155.737000][ T8707] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 155.767547][ T8707] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.400670][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 156.896629][ T8737] __nla_validate_parse: 2 callbacks suppressed [ 156.896648][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 156.933659][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 156.952986][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 157.007438][ T8741] x_tables: duplicate underflow at hook 2 [ 157.165003][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 157.291653][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 157.293956][ T8762] sctp: [Deprecated]: syz.2.824 (pid 8762) Use of int in max_burst socket option deprecated. [ 157.293956][ T8762] Use struct sctp_assoc_value instead [ 157.360931][ T8753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.821'. [ 158.110476][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.831'. [ 158.295289][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 158.410928][ T8803] netlink: 'syz.1.837': attribute type 6 has an invalid length. [ 159.367516][ T8862] bridge0: port 4(erspan0) entered blocking state [ 159.374048][ T8862] bridge0: port 4(erspan0) entered disabled state [ 159.389415][ T8862] erspan0: entered allmulticast mode [ 159.396484][ T8862] erspan0: entered promiscuous mode [ 159.413227][ T8862] erspan0: left allmulticast mode [ 159.420254][ T8862] erspan0: left promiscuous mode [ 159.425589][ T8862] bridge0: port 4(erspan0) entered disabled state [ 159.672160][ T8873] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.857'. [ 159.879168][ T8880] lo speed is unknown, defaulting to 1000 [ 159.947007][ T8885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.861'. [ 160.120536][ T8890] pimreg: entered allmulticast mode [ 161.419164][ T8948] xt_hashlimit: invalid rate [ 161.423250][ T8956] netlink: 'syz.3.884': attribute type 3 has an invalid length. [ 161.445403][ T8948] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 161.484935][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.514722][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.526098][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.540189][ T8960] sctp: [Deprecated]: syz.1.885 (pid 8960) Use of int in max_burst socket option deprecated. [ 161.540189][ T8960] Use struct sctp_assoc_value instead [ 161.565410][ T8956] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 161.766818][ T8975] tipc: Can't bind to reserved service type 0 [ 162.118618][ T8990] __nla_validate_parse: 8 callbacks suppressed [ 162.118636][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 162.142897][ T8990] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.291691][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 162.305784][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 162.317029][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'. [ 162.822033][ T9012] netlink: 'syz.4.902': attribute type 39 has an invalid length. [ 162.851891][ T9015] x_tables: ip_tables: CT target: only valid in raw table, not @ [ 162.989979][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 163.129622][ T9033] sctp: [Deprecated]: syz.0.907 (pid 9033) Use of int in max_burst socket option deprecated. [ 163.129622][ T9033] Use struct sctp_assoc_value instead [ 163.223950][ T9041] lo speed is unknown, defaulting to 1000 [ 163.253416][ T9041] lo speed is unknown, defaulting to 1000 [ 163.262971][ T9041] lo speed is unknown, defaulting to 1000 [ 163.295406][ T9041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.303348][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 163.360497][ T9041] lo speed is unknown, defaulting to 1000 [ 163.390553][ T9041] lo speed is unknown, defaulting to 1000 [ 163.392268][ T9044] netlink: 14 bytes leftover after parsing attributes in process `syz.4.910'. [ 163.399331][ T9041] lo speed is unknown, defaulting to 1000 [ 163.583564][ T9044] bond0 (unregistering): Released all slaves [ 163.602948][ T9041] lo speed is unknown, defaulting to 1000 [ 163.619787][ T9041] lo speed is unknown, defaulting to 1000 [ 164.301847][ T9085] netlink: 108 bytes leftover after parsing attributes in process `syz.2.925'. [ 164.335648][ T9085] netlink: 108 bytes leftover after parsing attributes in process `syz.2.925'. [ 164.355963][ T9085] netlink: 84 bytes leftover after parsing attributes in process `syz.2.925'. [ 164.569856][ T9102] netlink: 'syz.4.929': attribute type 11 has an invalid length. [ 164.593740][ T9104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.614712][ T9104] siw: device registration error -23 [ 164.632564][ T9107] sctp: [Deprecated]: syz.2.931 (pid 9107) Use of int in max_burst socket option deprecated. [ 164.632564][ T9107] Use struct sctp_assoc_value instead [ 164.752820][ T9112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.798362][ T9184] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 165.890173][ T9190] sctp: [Deprecated]: syz.4.960 (pid 9190) Use of int in max_burst socket option deprecated. [ 165.890173][ T9190] Use struct sctp_assoc_value instead [ 165.903845][ T9183] lo speed is unknown, defaulting to 1000 [ 166.372228][ T9183] lo speed is unknown, defaulting to 1000 [ 166.687195][ T9226] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 167.024766][ T9243] netlink: 'syz.0.980': attribute type 21 has an invalid length. [ 167.051197][ T9243] netlink: 'syz.0.980': attribute type 5 has an invalid length. [ 167.063416][ T9243] netlink: 'syz.0.980': attribute type 6 has an invalid length. [ 167.084809][ T9243] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 167.228959][ T9250] veth3: entered promiscuous mode [ 167.286041][ T9256] sctp: [Deprecated]: syz.1.987 (pid 9256) Use of int in max_burst socket option deprecated. [ 167.286041][ T9256] Use struct sctp_assoc_value instead [ 167.638292][ T30] audit: type=1800 audit(1750896364.106:2): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.985" name="memory.events" dev="tmpfs" ino=1015 res=0 errno=0 [ 167.678624][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 167.771152][ T9274] __nla_validate_parse: 11 callbacks suppressed [ 167.771170][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 168.036793][ T9290] lo speed is unknown, defaulting to 1000 [ 168.050223][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 168.220049][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.997'. [ 168.420666][ T9290] lo speed is unknown, defaulting to 1000 [ 168.483441][ T9305] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1000'. [ 168.529496][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 168.592265][ T9308] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 168.827491][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 168.841181][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 168.877575][ T1103] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.932625][ T1103] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.970421][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.982705][ T9326] sctp: [Deprecated]: syz.3.1008 (pid 9326) Use of int in max_burst socket option deprecated. [ 168.982705][ T9326] Use struct sctp_assoc_value instead [ 169.010459][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.083991][ T1103] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.122632][ T1103] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.366388][ T9339] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 169.455379][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.479090][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.490879][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.500030][ T9342] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 169.605941][ T9344] lo speed is unknown, defaulting to 1000 [ 169.633235][ T9349] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 170.360299][ T9372] lo speed is unknown, defaulting to 1000 [ 170.361977][ T9344] lo speed is unknown, defaulting to 1000 [ 170.938822][ T9372] lo speed is unknown, defaulting to 1000 [ 171.096340][ T9407] sctp: [Deprecated]: syz.1.1032 (pid 9407) Use of int in max_burst socket option deprecated. [ 171.096340][ T9407] Use struct sctp_assoc_value instead [ 171.951511][ T9425] _Z`Ԁ@: entered promiscuous mode [ 172.249900][ T7028] IPVS: starting estimator thread 0... [ 172.347541][ T9438] IPVS: using max 31 ests per chain, 74400 per kthread [ 172.590422][ T9443] lo speed is unknown, defaulting to 1000 [ 172.730595][ T9455] sctp: [Deprecated]: syz.2.1050 (pid 9455) Use of int in max_burst socket option deprecated. [ 172.730595][ T9455] Use struct sctp_assoc_value instead [ 173.248824][ T9443] lo speed is unknown, defaulting to 1000 [ 173.711481][ T9482] TCP: TCP_TX_DELAY enabled [ 173.747108][ T9479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.780202][ T9479] __nla_validate_parse: 9 callbacks suppressed [ 173.780220][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 173.813155][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 173.873299][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 174.074150][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 174.325632][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 174.810784][ T9542] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 174.820507][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 174.827819][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 175.000113][ T9551] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 175.010833][ T9551] netlink: 'syz.0.1078': attribute type 4 has an invalid length. [ 175.019679][ T9551] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1078'. [ 175.221833][ T9558] lo speed is unknown, defaulting to 1000 [ 175.475646][ T9579] lo speed is unknown, defaulting to 1000 [ 175.481733][ T9558] lo speed is unknown, defaulting to 1000 [ 175.638658][ T9583] FAULT_INJECTION: forcing a failure. [ 175.638658][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 175.706023][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.1.1084 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 175.706050][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.706060][ T9583] Call Trace: [ 175.706067][ T9583] [ 175.706075][ T9583] dump_stack_lvl+0x189/0x250 [ 175.706103][ T9583] ? __pfx____ratelimit+0x10/0x10 [ 175.706124][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.706147][ T9583] ? __pfx__printk+0x10/0x10 [ 175.706168][ T9583] ? __pfx___might_resched+0x10/0x10 [ 175.706192][ T9583] ? fs_reclaim_acquire+0x7d/0x100 [ 175.706216][ T9583] should_fail_ex+0x414/0x560 [ 175.706243][ T9583] should_failslab+0xa8/0x100 [ 175.706263][ T9583] __kmalloc_noprof+0xcb/0x4f0 [ 175.706278][ T9583] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.706302][ T9583] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.706328][ T9583] genl_family_rcv_msg_doit+0xb8/0x300 [ 175.706351][ T9583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 175.706371][ T9583] ? rcu_is_watching+0x15/0xb0 [ 175.706397][ T9583] ? apparmor_capable+0x137/0x1b0 [ 175.706417][ T9583] ? bpf_lsm_capable+0x9/0x20 [ 175.706431][ T9583] ? security_capable+0x7e/0x2e0 [ 175.706459][ T9583] genl_rcv_msg+0x60e/0x790 [ 175.706483][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.706498][ T9583] ? __pfx_ethnl_default_doit+0x10/0x10 [ 175.706542][ T9583] netlink_rcv_skb+0x205/0x470 [ 175.706564][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.706582][ T9583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.706621][ T9583] ? down_read+0x1ad/0x2e0 [ 175.706645][ T9583] genl_rcv+0x28/0x40 [ 175.706666][ T9583] netlink_unicast+0x758/0x8d0 [ 175.706698][ T9583] netlink_sendmsg+0x805/0xb30 [ 175.706728][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.706752][ T9583] ? aa_sock_msg_perm+0x94/0x160 [ 175.706774][ T9583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.706794][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.706815][ T9583] __sock_sendmsg+0x219/0x270 [ 175.706838][ T9583] ____sys_sendmsg+0x505/0x830 [ 175.706867][ T9583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.706901][ T9583] ? import_iovec+0x74/0xa0 [ 175.706922][ T9583] ___sys_sendmsg+0x21f/0x2a0 [ 175.706948][ T9583] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.707011][ T9583] ? __fget_files+0x2a/0x420 [ 175.707028][ T9583] ? __fget_files+0x3a0/0x420 [ 175.707061][ T9583] __x64_sys_sendmsg+0x19b/0x260 [ 175.707086][ T9583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.707120][ T9583] ? __pfx_ksys_write+0x10/0x10 [ 175.707133][ T9583] ? rcu_is_watching+0x15/0xb0 [ 175.707162][ T9583] ? do_syscall_64+0xbe/0x3b0 [ 175.707185][ T9583] do_syscall_64+0xfa/0x3b0 [ 175.707203][ T9583] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.707222][ T9583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.707238][ T9583] ? clear_bhb_loop+0x60/0xb0 [ 175.707259][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.707273][ T9583] RIP: 0033:0x7f134958e929 [ 175.707289][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.707302][ T9583] RSP: 002b:00007f134a383038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.707319][ T9583] RAX: ffffffffffffffda RBX: 00007f13497b5fa0 RCX: 00007f134958e929 [ 175.707331][ T9583] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 175.707342][ T9583] RBP: 00007f134a383090 R08: 0000000000000000 R09: 0000000000000000 [ 175.707352][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.707362][ T9583] R13: 0000000000000000 R14: 00007f13497b5fa0 R15: 00007ffcb259cd08 [ 175.707392][ T9583] [ 176.065296][ T9579] lo speed is unknown, defaulting to 1000 [ 176.296740][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 176.430566][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 176.674969][ T9612] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 176.724193][ T9616] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 176.780165][ T9616] tc_dump_action: action bad kind [ 177.105340][ T9627] FAULT_INJECTION: forcing a failure. [ 177.105340][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 177.147411][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.1.1099 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 177.147447][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.147457][ T9627] Call Trace: [ 177.147465][ T9627] [ 177.147472][ T9627] dump_stack_lvl+0x189/0x250 [ 177.147500][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 177.147521][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.147542][ T9627] ? __pfx__printk+0x10/0x10 [ 177.147563][ T9627] ? __pfx___might_resched+0x10/0x10 [ 177.147585][ T9627] ? fs_reclaim_acquire+0x7d/0x100 [ 177.147607][ T9627] should_fail_ex+0x414/0x560 [ 177.147632][ T9627] should_failslab+0xa8/0x100 [ 177.147652][ T9627] __kmalloc_noprof+0xcb/0x4f0 [ 177.147667][ T9627] ? ethnl_default_doit+0x1b9/0xe90 [ 177.147693][ T9627] ethnl_default_doit+0x1b9/0xe90 [ 177.147719][ T9627] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 177.147736][ T9627] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 177.147760][ T9627] genl_family_rcv_msg_doit+0x215/0x300 [ 177.147782][ T9627] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.147810][ T9627] ? bpf_lsm_capable+0x9/0x20 [ 177.147825][ T9627] ? security_capable+0x7e/0x2e0 [ 177.147851][ T9627] genl_rcv_msg+0x60e/0x790 [ 177.147874][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.147890][ T9627] ? __pfx_ethnl_default_doit+0x10/0x10 [ 177.147927][ T9627] netlink_rcv_skb+0x205/0x470 [ 177.147948][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.147966][ T9627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.148005][ T9627] ? down_read+0x1ad/0x2e0 [ 177.148029][ T9627] genl_rcv+0x28/0x40 [ 177.148050][ T9627] netlink_unicast+0x758/0x8d0 [ 177.148081][ T9627] netlink_sendmsg+0x805/0xb30 [ 177.148112][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.148137][ T9627] ? aa_sock_msg_perm+0x94/0x160 [ 177.148159][ T9627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.148179][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.148200][ T9627] __sock_sendmsg+0x219/0x270 [ 177.148223][ T9627] ____sys_sendmsg+0x505/0x830 [ 177.148252][ T9627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.148285][ T9627] ? import_iovec+0x74/0xa0 [ 177.148307][ T9627] ___sys_sendmsg+0x21f/0x2a0 [ 177.148332][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.148398][ T9627] ? __fget_files+0x2a/0x420 [ 177.148415][ T9627] ? __fget_files+0x3a0/0x420 [ 177.148453][ T9627] __x64_sys_sendmsg+0x19b/0x260 [ 177.148490][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.148524][ T9627] ? __pfx_ksys_write+0x10/0x10 [ 177.148537][ T9627] ? rcu_is_watching+0x15/0xb0 [ 177.148565][ T9627] ? do_syscall_64+0xbe/0x3b0 [ 177.148589][ T9627] do_syscall_64+0xfa/0x3b0 [ 177.148607][ T9627] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.148625][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.148642][ T9627] ? clear_bhb_loop+0x60/0xb0 [ 177.148663][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.148679][ T9627] RIP: 0033:0x7f134958e929 [ 177.148695][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.148709][ T9627] RSP: 002b:00007f134a383038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.148727][ T9627] RAX: ffffffffffffffda RBX: 00007f13497b5fa0 RCX: 00007f134958e929 [ 177.148740][ T9627] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 177.148752][ T9627] RBP: 00007f134a383090 R08: 0000000000000000 R09: 0000000000000000 [ 177.148762][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.148772][ T9627] R13: 0000000000000000 R14: 00007f13497b5fa0 R15: 00007ffcb259cd08 [ 177.148802][ T9627] [ 177.606367][ T9630] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 177.615570][ T9630] openvswitch: netlink: Duplicate key (type 0). [ 177.818195][ T9638] netlink: 'syz.2.1103': attribute type 5 has an invalid length. [ 177.875731][ T9646] netlink: 'syz.3.1106': attribute type 11 has an invalid length. [ 177.906772][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.839829][ T9706] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 178.890553][ T9706] __nla_validate_parse: 11 callbacks suppressed [ 178.890570][ T9706] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1129'. [ 178.910897][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 178.974122][ T9710] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 178.988442][ T9710] gretap1: left promiscuous mode [ 178.993877][ T9710] gretap1: left allmulticast mode [ 178.999815][ T9710] ip6gre1: left promiscuous mode [ 179.453413][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1142'. [ 179.719020][ T9747] veth2: entered allmulticast mode [ 180.072920][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 180.085220][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 180.123970][ T9776] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1155'. [ 180.254183][ T9779] vti0: entered promiscuous mode [ 180.365489][ T9785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.729972][ T9799] rdma_rxe: rxe_newlink: failed to add lo [ 180.823323][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 180.885806][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 181.070521][ T9815] netlink: 'syz.1.1172': attribute type 10 has an invalid length. [ 181.104130][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1172'. [ 181.146767][ T9815] team0: Port device geneve0 added [ 181.155023][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1172'. [ 181.173671][ T6490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.199975][ T6490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.246348][ T6490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.278203][ T6490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.052651][ T9858] vlan2: entered promiscuous mode [ 182.060781][ T9858] vlan2: entered allmulticast mode [ 182.066136][ T9858] hsr_slave_1: entered allmulticast mode [ 182.615599][ T9900] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 183.232096][ T9925] syz.1.1204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.248044][ T9925] CPU: 1 UID: 0 PID: 9925 Comm: syz.1.1204 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 183.248071][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.248082][ T9925] Call Trace: [ 183.248090][ T9925] [ 183.248098][ T9925] dump_stack_lvl+0x189/0x250 [ 183.248142][ T9925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.248168][ T9925] ? __pfx__printk+0x10/0x10 [ 183.248188][ T9925] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.248208][ T9925] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.248229][ T9925] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 183.248252][ T9925] warn_alloc+0x214/0x310 [ 183.248272][ T9925] ? stack_depot_save_flags+0x40/0x900 [ 183.248297][ T9925] ? __pfx_warn_alloc+0x10/0x10 [ 183.248318][ T9925] ? kasan_save_track+0x4f/0x80 [ 183.248343][ T9925] ? xskq_create+0x56/0x170 [ 183.248362][ T9925] ? xsk_init_queue+0xb0/0x110 [ 183.248377][ T9925] ? xsk_setsockopt+0x43f/0x710 [ 183.248392][ T9925] ? do_sock_setsockopt+0x25a/0x3e0 [ 183.248414][ T9925] ? __x64_sys_setsockopt+0x18b/0x220 [ 183.248434][ T9925] ? do_syscall_64+0xfa/0x3b0 [ 183.248452][ T9925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.248478][ T9925] __vmalloc_node_range_noprof+0x125/0x12f0 [ 183.248530][ T9925] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.248556][ T9925] ? __kasan_kmalloc+0x93/0xb0 [ 183.248575][ T9925] vmalloc_user_noprof+0xad/0xf0 [ 183.248595][ T9925] ? xskq_create+0xbf/0x170 [ 183.248615][ T9925] xskq_create+0xbf/0x170 [ 183.248638][ T9925] xsk_init_queue+0xb0/0x110 [ 183.248660][ T9925] xsk_setsockopt+0x43f/0x710 [ 183.248681][ T9925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.248698][ T9925] ? __lock_acquire+0xab9/0xd20 [ 183.248732][ T9925] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.248752][ T9925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.248772][ T9925] do_sock_setsockopt+0x25a/0x3e0 [ 183.248799][ T9925] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.248827][ T9925] ? __fget_files+0x2a/0x420 [ 183.248856][ T9925] __x64_sys_setsockopt+0x18b/0x220 [ 183.248886][ T9925] do_syscall_64+0xfa/0x3b0 [ 183.248905][ T9925] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.248924][ T9925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.248962][ T9925] ? clear_bhb_loop+0x60/0xb0 [ 183.248985][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.249002][ T9925] RIP: 0033:0x7f134958e929 [ 183.249024][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.249039][ T9925] RSP: 002b:00007f134a383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.249058][ T9925] RAX: ffffffffffffffda RBX: 00007f13497b5fa0 RCX: 00007f134958e929 [ 183.249071][ T9925] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 183.249082][ T9925] RBP: 00007f1349610b39 R08: 0000000000000004 R09: 0000000000000000 [ 183.249093][ T9925] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.249105][ T9925] R13: 0000000000000000 R14: 00007f13497b5fa0 R15: 00007ffcb259cd08 [ 183.249136][ T9925] [ 183.249143][ T9925] Mem-Info: [ 183.556706][ T9925] active_anon:3733 inactive_anon:0 isolated_anon:0 [ 183.556706][ T9925] active_file:1725 inactive_file:39870 isolated_file:0 [ 183.556706][ T9925] unevictable:768 dirty:272 writeback:0 [ 183.556706][ T9925] slab_reclaimable:11407 slab_unreclaimable:114947 [ 183.556706][ T9925] mapped:30301 shmem:1367 pagetables:1010 [ 183.556706][ T9925] sec_pagetables:0 bounce:0 [ 183.556706][ T9925] kernel_misc_reclaimable:0 [ 183.556706][ T9925] free:1308186 free_pcp:20691 free_cma:0 [ 183.684039][ T9925] Node 0 active_anon:14732kB inactive_anon:0kB active_file:6900kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:1088kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12240kB pagetables:3696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.731350][ T9925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.899641][ T9946] __nla_validate_parse: 3 callbacks suppressed [ 183.899657][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 183.919419][ T9925] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.021785][ T9925] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 184.058306][ T9925] Node 0 DMA32 free:1321264kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14824kB inactive_anon:0kB active_file:6900kB inactive_file:157440kB unevictable:1536kB writepending:1136kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:61792kB local_pcp:36832kB free_cma:0kB [ 184.122592][ T9925] lowmem_reserve[]: 0 0 1 1 1 [ 184.127874][ T9925] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 184.196053][ T9925] lowmem_reserve[]: 0 0 0 0 0 [ 184.201391][ T9925] Node 1 Normal free:3899272kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:11232kB free_cma:0kB [ 184.233448][ T9925] lowmem_reserve[]: 0 0 0 0 0 [ 184.239073][ T9925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.242534][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 184.253499][ T9925] Node 0 DMA32: 1651*4kB (UME) 716*8kB (UME) 189*16kB (UM) 281*32kB (UME) 209*64kB (UME) 118*128kB (UME) 102*256kB (UME) 63*512kB (UM) 37*1024kB (UME) 1*2048kB (U) 287*4096kB (M) = 1326684kB [ 184.284005][ T9925] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 184.284384][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 184.296686][ T9925] Node 1 Normal: 190*4kB (UE) 56*8kB (UME) 43*16kB (UME) 75*32kB (UME) 25*64kB (UME) 5*128kB (UME) 4*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899272kB [ 184.327682][ T9925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.338279][ T9925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.348437][ T9925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.360638][ T9925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.370224][ T9925] 42959 total pagecache pages [ 184.375639][ T9925] 0 pages in swap cache [ 184.382370][ T9925] Free swap = 124996kB [ 184.386720][ T9925] Total swap = 124996kB [ 184.391084][ T9925] 2097051 pages RAM [ 184.395075][ T9925] 0 pages HighMem/MovableOnly [ 184.402314][ T9925] 424708 pages reserved [ 184.406659][ T9925] 0 pages cma reserved [ 184.456874][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 184.477204][ T9963] vlan2: entered promiscuous mode [ 184.483169][ T9963] gretap0: entered promiscuous mode [ 184.754740][ T9984] sctp: [Deprecated]: syz.3.1222 (pid 9984) Use of int in max_burst socket option deprecated. [ 184.754740][ T9984] Use struct sctp_assoc_value instead [ 185.051454][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 185.298918][T10020] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 185.314136][T10020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1232'. [ 185.371112][T10028] FAULT_INJECTION: forcing a failure. [ 185.371112][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 185.398044][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.0.1234 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 185.398067][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.398077][T10028] Call Trace: [ 185.398083][T10028] [ 185.398090][T10028] dump_stack_lvl+0x189/0x250 [ 185.398128][T10028] ? __pfx____ratelimit+0x10/0x10 [ 185.398146][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.398169][T10028] ? __pfx__printk+0x10/0x10 [ 185.398203][T10028] should_fail_ex+0x414/0x560 [ 185.398227][T10028] should_failslab+0xa8/0x100 [ 185.398245][T10028] kmem_cache_alloc_noprof+0x73/0x3c0 [ 185.398268][T10028] ? skb_clone+0x212/0x3a0 [ 185.398290][T10028] skb_clone+0x212/0x3a0 [ 185.398311][T10028] __netlink_deliver_tap+0x404/0x850 [ 185.398344][T10028] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.398366][T10028] netlink_deliver_tap+0x19c/0x1b0 [ 185.398388][T10028] netlink_sendskb+0x68/0x140 [ 185.398409][T10028] netlink_rcv_skb+0x28c/0x470 [ 185.398430][T10028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.398449][T10028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.398488][T10028] ? down_read+0x1ad/0x2e0 [ 185.398515][T10028] genl_rcv+0x28/0x40 [ 185.398536][T10028] netlink_unicast+0x758/0x8d0 [ 185.398568][T10028] netlink_sendmsg+0x805/0xb30 [ 185.398599][T10028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.398624][T10028] ? aa_sock_msg_perm+0x94/0x160 [ 185.398646][T10028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.398666][T10028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.398688][T10028] __sock_sendmsg+0x219/0x270 [ 185.398711][T10028] ____sys_sendmsg+0x505/0x830 [ 185.398740][T10028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.398773][T10028] ? import_iovec+0x74/0xa0 [ 185.398794][T10028] ___sys_sendmsg+0x21f/0x2a0 [ 185.398819][T10028] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.398875][T10028] ? __fget_files+0x2a/0x420 [ 185.398896][T10028] ? __fget_files+0x3a0/0x420 [ 185.398922][T10028] __x64_sys_sendmsg+0x19b/0x260 [ 185.398948][T10028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.398980][T10028] ? __pfx_ksys_write+0x10/0x10 [ 185.398994][T10028] ? rcu_is_watching+0x15/0xb0 [ 185.399021][T10028] ? do_syscall_64+0xbe/0x3b0 [ 185.399043][T10028] do_syscall_64+0xfa/0x3b0 [ 185.399060][T10028] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.399077][T10028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.399102][T10028] ? clear_bhb_loop+0x60/0xb0 [ 185.399122][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.399138][T10028] RIP: 0033:0x7f8d4f98e929 [ 185.399153][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.399167][T10028] RSP: 002b:00007f8d507d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.399185][T10028] RAX: ffffffffffffffda RBX: 00007f8d4fbb6080 RCX: 00007f8d4f98e929 [ 185.399197][T10028] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 185.399208][T10028] RBP: 00007f8d507d0090 R08: 0000000000000000 R09: 0000000000000000 [ 185.399218][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.399229][T10028] R13: 0000000000000001 R14: 00007f8d4fbb6080 R15: 00007fffe6bf9778 [ 185.399259][T10028] [ 186.036247][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 186.382381][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 186.413103][T10063] lo speed is unknown, defaulting to 1000 [ 186.650518][T10063] lo speed is unknown, defaulting to 1000 [ 186.878490][ T1084] wlan0: Trigger new scan to find an IBSS to join [ 186.887641][T10085] FAULT_INJECTION: forcing a failure. [ 186.887641][T10085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.953335][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.0.1250 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 186.953362][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.953372][T10085] Call Trace: [ 186.953379][T10085] [ 186.953387][T10085] dump_stack_lvl+0x189/0x250 [ 186.953416][T10085] ? __pfx____ratelimit+0x10/0x10 [ 186.953436][T10085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.953456][T10085] ? __pfx__printk+0x10/0x10 [ 186.953482][T10085] should_fail_ex+0x414/0x560 [ 186.953508][T10085] _copy_to_user+0x31/0xb0 [ 186.953528][T10085] simple_read_from_buffer+0xe1/0x170 [ 186.953549][T10085] proc_fail_nth_read+0x1df/0x250 [ 186.953571][T10085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.953593][T10085] ? rw_verify_area+0x258/0x650 [ 186.953614][T10085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.953634][T10085] vfs_read+0x1fd/0x980 [ 186.953660][T10085] ? __pfx___mutex_lock+0x10/0x10 [ 186.953681][T10085] ? __pfx_vfs_read+0x10/0x10 [ 186.953717][T10085] ? __fget_files+0x2a/0x420 [ 186.953741][T10085] ? __fget_files+0x3a0/0x420 [ 186.953756][T10085] ? __fget_files+0x2a/0x420 [ 186.953782][T10085] ksys_read+0x145/0x250 [ 186.953801][T10085] ? __pfx_ksys_read+0x10/0x10 [ 186.953829][T10085] ? do_syscall_64+0xbe/0x3b0 [ 186.953853][T10085] do_syscall_64+0xfa/0x3b0 [ 186.953871][T10085] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.953889][T10085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.953906][T10085] ? clear_bhb_loop+0x60/0xb0 [ 186.953926][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.953939][T10085] RIP: 0033:0x7f8d4f98d33c [ 186.953953][T10085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.953965][T10085] RSP: 002b:00007f8d507d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.953984][T10085] RAX: ffffffffffffffda RBX: 00007f8d4fbb6080 RCX: 00007f8d4f98d33c [ 186.953996][T10085] RDX: 000000000000000f RSI: 00007f8d507d00a0 RDI: 0000000000000005 [ 186.954007][T10085] RBP: 00007f8d507d0090 R08: 0000000000000000 R09: 0000000000000000 [ 186.954018][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.954026][T10085] R13: 0000000000000001 R14: 00007f8d4fbb6080 R15: 00007fffe6bf9778 [ 186.954055][T10085] [ 187.483531][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 187.894624][T10110] netlink: 'syz.0.1258': attribute type 12 has an invalid length. [ 188.021180][ T5849] Bluetooth: hci4: link tx timeout [ 188.026758][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.036041][ T5849] Bluetooth: hci4: link tx timeout [ 188.042359][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.055943][ T5849] Bluetooth: hci4: link tx timeout [ 188.061146][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.071124][ T5849] Bluetooth: hci4: link tx timeout [ 188.076256][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.170721][T10109] lo speed is unknown, defaulting to 1000 [ 188.925934][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 188.962517][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 189.053118][T10109] lo speed is unknown, defaulting to 1000 [ 189.143511][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1271'. [ 189.700559][T10151] lo speed is unknown, defaulting to 1000 [ 190.077810][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 190.150208][T10167] bond1: entered promiscuous mode [ 190.155429][T10167] bond1: entered allmulticast mode [ 190.163589][T10167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.228302][T10151] lo speed is unknown, defaulting to 1000 [ 190.513914][T10175] bridge0: port 3(erspan0) entered blocking state [ 190.537451][T10175] bridge0: port 3(erspan0) entered disabled state [ 190.555053][T10175] erspan0: entered allmulticast mode [ 190.584546][T10175] erspan0: entered promiscuous mode [ 190.606206][T10175] bridge0: port 3(erspan0) entered blocking state [ 190.612982][T10175] bridge0: port 3(erspan0) entered forwarding state [ 190.641345][T10181] erspan0: left allmulticast mode [ 190.646853][T10181] erspan0: left promiscuous mode [ 190.647737][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 190.659637][T10181] bridge0: port 3(erspan0) entered disabled state [ 190.769273][T10183] vlan2: entered promiscuous mode [ 190.774414][T10183] bridge0: entered promiscuous mode [ 190.802056][T10183] vlan2: entered allmulticast mode [ 190.808473][T10183] bridge0: entered allmulticast mode [ 191.059500][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 191.077217][T10191] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.097848][T10191] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.101437][T10197] netlink: 'syz.3.1283': attribute type 12 has an invalid length. [ 191.529081][T10215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.615789][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 191.687259][T10223] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 191.720359][T10223] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 191.751506][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 191.920942][ T1103] wlan0: Trigger new scan to find an IBSS to join [ 192.272235][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'. [ 192.272913][T10259] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1304'. [ 192.282639][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'. [ 192.301214][T10261] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 192.364880][T10264] rdma_rxe: rxe_newlink: failed to add lo [ 192.503220][T10267] gretap2: entered promiscuous mode [ 192.557225][T10277] macvlan0: entered allmulticast mode [ 192.625755][T10277] veth1_vlan: entered allmulticast mode [ 192.830477][T10302] xt_socket: unknown flags 0xd0 [ 192.880767][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.460120][T10337] delete_channel: no stack [ 193.614011][T10337] delete_channel: no stack [ 194.113783][T10363] syzkaller0: entered promiscuous mode [ 194.123911][T10363] syzkaller0: entered allmulticast mode [ 194.321986][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333939][T10373] bond1: entered promiscuous mode [ 194.341018][T10373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.527852][T10389] __nla_validate_parse: 5 callbacks suppressed [ 194.527871][T10389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1335'. [ 195.756119][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 195.848628][T10397] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 196.107908][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 196.396890][T10439] netlink: 'syz.4.1352': attribute type 5 has an invalid length. [ 196.405085][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.412069][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 196.416203][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 196.722055][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 197.147429][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1366'. [ 197.329563][T10492] block nbd0: server does not support multiple connections per device. [ 197.338618][T10492] block nbd0: shutting down sockets [ 197.474877][T10516] rdma_rxe: rxe_newlink: failed to add lo [ 197.842670][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 197.871712][T10534] pim6reg: entered allmulticast mode [ 197.901616][T10534] pim6reg: left allmulticast mode [ 197.955271][T10545] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 198.004307][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1383'. [ 198.295515][T10555] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1385'. [ 198.632889][T10563] rdma_rxe: rxe_newlink: failed to add lo [ 198.706697][T10565] netlink: 'syz.3.1389': attribute type 12 has an invalid length. [ 199.346835][T10590] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1396'. [ 199.643961][T10604] rdma_rxe: rxe_newlink: failed to add lo [ 199.832359][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 199.877132][T10622] syz_tun: left allmulticast mode [ 199.882793][T10622] syz_tun: left promiscuous mode [ 199.890482][T10622] bridge0: port 3(syz_tun) entered disabled state [ 199.898888][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 199.911788][T10622] bridge_slave_0: left allmulticast mode [ 199.938518][T10622] bridge_slave_0: left promiscuous mode [ 199.964360][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.984471][T10629] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 200.004909][T10622] bridge_slave_1: left allmulticast mode [ 200.018767][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 200.030686][T10622] bridge_slave_1: left promiscuous mode [ 200.041845][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.072168][T10622] team0: Port device team_slave_0 removed [ 200.093206][T10622] team0: Port device team_slave_1 removed [ 200.108428][T10622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.129133][T10622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.151149][T10622] bond0: (slave ip6gretap1): Releasing active interface [ 200.171704][T10622] ip6gretap1: left promiscuous mode [ 200.184934][T10622] ip6gretap1: left allmulticast mode [ 200.217002][T10629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 200.270335][T10634] netlink: 'syz.0.1410': attribute type 12 has an invalid length. [ 200.650909][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 200.672148][T10650] rdma_rxe: rxe_newlink: failed to add lo [ 201.195492][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 201.369787][T10682] rdma_rxe: rxe_newlink: failed to add lo [ 201.558790][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 201.605630][T10691] netlink: 'syz.0.1432': attribute type 12 has an invalid length. [ 201.861056][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1439'. [ 202.200111][T10737] rdma_rxe: rxe_newlink: failed to add lo [ 202.226161][T10739] rdma_rxe: rxe_newlink: failed to add lo [ 202.466477][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1450'. [ 202.494137][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 202.510503][T10752] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 202.679581][T10761] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 202.747555][T10762] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 202.817825][T10762] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 203.038715][T10779] rdma_rxe: rxe_newlink: failed to add lo [ 203.076697][T10783] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1462'. [ 203.772633][T10824] ip6erspan0: entered allmulticast mode [ 205.016463][T10851] __nla_validate_parse: 3 callbacks suppressed [ 205.016483][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 205.057483][T10851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1483'. [ 205.077465][T10854] rdma_rxe: rxe_newlink: failed to add lo [ 205.161358][T10855] netlink: 'syz.2.1483': attribute type 21 has an invalid length. [ 205.191208][T10855] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1483'. [ 205.207608][T10855] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 205.231924][T10855] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 205.240125][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'. [ 205.277570][T10855] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1483'. [ 205.349085][T10855] Unsupported ieee802154 address type: 0 [ 205.381829][T10874] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1489'. [ 205.432991][T10876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'. [ 205.760287][T10891] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.044905][T10903] pim6reg1: entered allmulticast mode [ 206.081744][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 206.126872][T10903] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 206.145386][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1500'. [ 206.168334][T10914] openvswitch: netlink: IP tunnel dst address not specified [ 206.181178][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.208251][T10907] veth2: entered allmulticast mode [ 206.271922][T10907] veth3: entered promiscuous mode [ 206.616796][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 206.651418][T10937] lo speed is unknown, defaulting to 1000 [ 206.843192][ T5838] block nbd0: Receive control failed (result -32) [ 207.129131][T10937] lo speed is unknown, defaulting to 1000 [ 207.256866][T10981] : entered promiscuous mode [ 207.290628][T10984] x_tables: duplicate underflow at hook 2 [ 207.337059][T10984] veth0: entered promiscuous mode [ 207.463016][T10984] veth0 (unregistering): left promiscuous mode [ 207.518867][T10995] Cannot find set identified by id 1 to match [ 207.571717][T10997] Cannot find set identified by id 1 to match [ 207.878125][T11009] syz0: rxe_newlink: already configured on lo [ 208.214610][T11023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.223017][T11023] bridge0: port 3(bond3) entered blocking state [ 208.230603][T11023] bridge0: port 3(bond3) entered disabled state [ 208.237212][T11023] bond3: entered allmulticast mode [ 208.253831][T11023] bond3: entered promiscuous mode [ 208.286766][T11023] bridge0: port 3(bond3) entered blocking state [ 208.294248][T11023] bridge0: port 3(bond3) entered forwarding state [ 208.430082][T11044] xt_nat: multiple ranges no longer supported [ 208.454565][T11041] lo speed is unknown, defaulting to 1000 [ 208.750987][ T6497] bridge0: port 3(bond3) entered disabled state [ 209.215176][T11041] lo speed is unknown, defaulting to 1000 [ 209.806949][T11124] lo speed is unknown, defaulting to 1000 [ 210.246607][ T7100] IPVS: starting estimator thread 0... [ 210.337606][T11150] IPVS: using max 28 ests per chain, 67200 per kthread [ 210.396969][T11152] __nla_validate_parse: 14 callbacks suppressed [ 210.396985][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 210.558443][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 210.666914][T11124] lo speed is unknown, defaulting to 1000 [ 210.698830][T11138] siw: device registration error -23 [ 210.868299][T11172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1566'. [ 210.903367][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1568'. [ 211.194041][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 211.401170][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 211.543386][T11203] netlink: 'syz.1.1576': attribute type 21 has an invalid length. [ 211.737830][T11213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1579'. [ 211.746993][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 211.805011][T11215] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 211.822693][T11215] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 211.853239][T11218] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1581'. [ 211.935727][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1580'. [ 211.962826][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1580'. [ 212.190540][T11230] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 212.199608][T11230] bridge3: entered allmulticast mode [ 212.221616][T11204] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 212.290756][T11238] siw: device registration error -23 [ 212.582771][T11259] Bluetooth: MGMT ver 1.23 [ 212.903943][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 212.948575][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 212.987778][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.008305][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.030455][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.077538][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.109059][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.117177][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.153188][T11267] netlink: 'syz.3.1601': attribute type 5 has an invalid length. [ 213.921939][T11341] macvtap1: entered promiscuous mode [ 213.936044][T11341] vlan0: entered promiscuous mode [ 213.956114][T11341] macvtap1: entered allmulticast mode [ 213.965750][T11341] vlan0: entered allmulticast mode [ 213.975892][T11341] veth0_vlan: entered allmulticast mode [ 214.298691][T11369] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 214.755868][T11395] netlink: 'syz.1.1644': attribute type 11 has an invalid length. [ 214.818841][T11394] ip6erspan0: entered allmulticast mode [ 215.476421][T11414] __nla_validate_parse: 114 callbacks suppressed [ 215.476441][T11414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1650'. [ 215.515375][T11414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1650'. [ 216.304396][T11433] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 216.320502][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 216.337985][T11433] macsec0: entered promiscuous mode [ 216.347722][T11433] macsec0: entered allmulticast mode [ 216.353267][T11433] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 216.839731][ T30] audit: type=1800 audit(1750896413.316:3): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1658" name="memory.events" dev="tmpfs" ino=1548 res=0 errno=0 [ 217.452718][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'. [ 217.506192][T11456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1663'. [ 217.606730][T11461] netlink: del zone limit has 4 unknown bytes [ 217.665660][T11461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1664'. [ 217.874796][T11476] lo speed is unknown, defaulting to 1000 [ 217.951062][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 217.980826][T11485] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1667'. [ 217.999585][ T1084] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 218.500772][T11476] lo speed is unknown, defaulting to 1000 [ 218.793981][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1673'. [ 219.500314][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 220.068146][T11543] lo speed is unknown, defaulting to 1000 [ 220.103754][T11549] validate_nla: 26 callbacks suppressed [ 220.103772][T11549] netlink: 'syz.3.1685': attribute type 39 has an invalid length. [ 220.822220][T11547] bridge3: entered promiscuous mode [ 220.859706][T11543] lo speed is unknown, defaulting to 1000 [ 220.950163][T11556] lo speed is unknown, defaulting to 1000 [ 221.042666][T11578] __nla_validate_parse: 2 callbacks suppressed [ 221.042684][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 221.244131][T11590] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 221.258035][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 221.259168][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 221.273771][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 221.454069][T11556] lo speed is unknown, defaulting to 1000 [ 221.460670][T11557] lo speed is unknown, defaulting to 1000 [ 221.813807][T11612] macsec1: entered promiscuous mode [ 221.829487][T11612] macsec1: entered allmulticast mode [ 221.916822][T11557] lo speed is unknown, defaulting to 1000 [ 221.933638][T11585] lo speed is unknown, defaulting to 1000 [ 221.960558][T11622] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1707'. [ 221.999157][T11622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1707'. [ 222.258342][T11585] lo speed is unknown, defaulting to 1000 [ 222.265293][T11583] rdma_rxe: rxe_newlink: failed to add lo [ 222.270197][T11623] lo speed is unknown, defaulting to 1000 [ 222.516919][T11635] gretap1: entered promiscuous mode [ 222.547417][T11635] gretap1: entered allmulticast mode [ 222.697121][T11623] lo speed is unknown, defaulting to 1000 [ 222.782343][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 223.118567][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 223.551319][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 223.826602][T11671] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1725'. [ 224.005588][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 224.077630][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.093395][ T6501] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.112805][ T6501] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.136524][ T6501] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.794058][T11717] lo speed is unknown, defaulting to 1000 [ 225.042765][ T6501] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.197567][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 225.562361][T11754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.793493][T11717] lo speed is unknown, defaulting to 1000 [ 225.806999][T11753] lo speed is unknown, defaulting to 1000 [ 226.261878][T11776] __nla_validate_parse: 3 callbacks suppressed [ 226.261896][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 226.316508][T11753] lo speed is unknown, defaulting to 1000 [ 226.587155][T11786] netlink: 'syz.4.1761': attribute type 83 has an invalid length. [ 226.955660][T11800] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 227.547381][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 227.658348][T11818] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1770'. [ 227.669937][T11821] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1771'. [ 227.880881][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 228.386906][T11847] lo speed is unknown, defaulting to 1000 [ 228.410076][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 228.514000][T11865] x_tables: duplicate underflow at hook 2 [ 228.563942][T11867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.613153][T11867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.650889][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1787'. [ 228.832508][T11867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.856829][T11867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.909501][T11847] lo speed is unknown, defaulting to 1000 [ 229.053774][T11867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.094400][T11867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.140329][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 229.313792][T11867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.325058][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 229.331862][T11867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.348935][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 229.386504][T11916] Bluetooth: MGMT ver 1.23 [ 229.421136][T11904] syzkaller1: entered promiscuous mode [ 229.460105][T11904] syzkaller1: entered allmulticast mode [ 229.685847][T11927] netlink: 'syz.2.1801': attribute type 21 has an invalid length. [ 229.711534][ T1084] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.726149][ T1084] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.868158][ T1084] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.876574][ T1084] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.908909][T11937] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.929901][ T1084] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.948468][ T1084] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.987570][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.013430][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.097687][T11937] lo speed is unknown, defaulting to 1000 [ 230.213424][T11952] xt_l2tp: unknown flags: 10 [ 230.491170][T11964] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.552328][T11937] lo speed is unknown, defaulting to 1000 [ 230.594146][T11969] x_tables: ip_tables: udp match: only valid for protocol 17 [ 230.703832][T11976] gretap1: entered promiscuous mode [ 230.966742][T11978] vxcan3: entered allmulticast mode [ 231.271827][T11983] lo speed is unknown, defaulting to 1000 [ 232.039038][T11983] lo speed is unknown, defaulting to 1000 [ 232.052387][T12003] lo speed is unknown, defaulting to 1000 [ 232.300669][T12003] lo speed is unknown, defaulting to 1000 [ 232.300780][T12004] lo speed is unknown, defaulting to 1000 [ 232.451328][T12004] lo speed is unknown, defaulting to 1000 [ 232.458023][T12001] rdma_rxe: rxe_newlink: failed to add lo [ 232.540779][T12041] __nla_validate_parse: 11 callbacks suppressed [ 232.540797][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 232.563348][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 232.708809][T12045] C: renamed from team_slave_0 [ 232.742507][T12045] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 232.760234][T12045] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1839'. [ 233.196981][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 233.453253][T12067] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 233.956865][T12098] vlan0: entered promiscuous mode [ 233.977771][T12098] vlan0: entered allmulticast mode [ 234.020654][T12097] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1853'. [ 234.206489][T12111] lo speed is unknown, defaulting to 1000 [ 234.228824][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 234.339174][T12122] netlink: 'syz.4.1859': attribute type 64 has an invalid length. [ 234.382175][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 234.405011][T12124] netlink: 'syz.3.1860': attribute type 21 has an invalid length. [ 234.413330][T12124] netlink: 'syz.3.1860': attribute type 22 has an invalid length. [ 234.449081][T12124] netlink: 'syz.3.1860': attribute type 23 has an invalid length. [ 234.470899][T12124] netlink: 'syz.3.1860': attribute type 25 has an invalid length. [ 234.498420][T12124] netlink: 'syz.3.1860': attribute type 26 has an invalid length. [ 234.514398][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 234.871722][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 235.356423][T12129] pimreg: left allmulticast mode [ 235.382527][T12111] lo speed is unknown, defaulting to 1000 [ 235.547971][T12141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1864'. [ 235.564627][T12145] sctp: [Deprecated]: syz.4.1865 (pid 12145) Use of int in max_burst socket option deprecated. [ 235.564627][T12145] Use struct sctp_assoc_value instead [ 235.667222][T12150] xt_bpf: check failed: parse error [ 235.673575][T12150] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 235.697442][T12150] netlink: 'syz.3.1868': attribute type 2 has an invalid length. [ 235.965731][T12163] netlink: 'syz.1.1870': attribute type 16 has an invalid length. [ 236.016070][T12163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.040674][T12163] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.053702][T12163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.551572][ T30] audit: type=1800 audit(1750896433.026:4): pid=12189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1876" name="bpf-map" dev="anon_inodefs" ino=1071 res=0 errno=0 [ 236.931387][T12216] xt_bpf: check failed: parse error [ 238.457156][T12282] __nla_validate_parse: 9 callbacks suppressed [ 238.457174][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 238.476238][T12279] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.728581][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 239.358449][T12327] x_tables: duplicate underflow at hook 2 [ 239.378071][T12333] x_tables: duplicate underflow at hook 2 [ 239.402303][T12331] SET target dimension over the limit! [ 239.426191][T12331] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 239.632486][T12350] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 239.689690][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1921'. [ 239.701401][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 239.729157][T12356] FAULT_INJECTION: forcing a failure. [ 239.729157][T12356] name failslab, interval 1, probability 0, space 0, times 0 [ 239.763405][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.3.1922 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 239.763433][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.763444][T12356] Call Trace: [ 239.763452][T12356] [ 239.763461][T12356] dump_stack_lvl+0x189/0x250 [ 239.763492][T12356] ? __pfx____ratelimit+0x10/0x10 [ 239.763514][T12356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.763539][T12356] ? __pfx__printk+0x10/0x10 [ 239.763564][T12356] ? __pfx___might_resched+0x10/0x10 [ 239.763592][T12356] should_fail_ex+0x414/0x560 [ 239.763618][T12356] should_failslab+0xa8/0x100 [ 239.763640][T12356] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 239.763658][T12356] ? __alloc_skb+0x112/0x2d0 [ 239.763684][T12356] __alloc_skb+0x112/0x2d0 [ 239.763709][T12356] netlink_sendmsg+0x5c6/0xb30 [ 239.763742][T12356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.763768][T12356] ? aa_sock_msg_perm+0x94/0x160 [ 239.763791][T12356] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.763812][T12356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.763835][T12356] __sock_sendmsg+0x219/0x270 [ 239.763858][T12356] ____sys_sendmsg+0x505/0x830 [ 239.763887][T12356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.763919][T12356] ? import_iovec+0x74/0xa0 [ 239.763949][T12356] ___sys_sendmsg+0x21f/0x2a0 [ 239.763976][T12356] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.764036][T12356] ? __fget_files+0x2a/0x420 [ 239.764054][T12356] ? __fget_files+0x3a0/0x420 [ 239.764084][T12356] __x64_sys_sendmsg+0x19b/0x260 [ 239.764111][T12356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.764146][T12356] ? __pfx_ksys_write+0x10/0x10 [ 239.764161][T12356] ? rcu_is_watching+0x15/0xb0 [ 239.764191][T12356] ? do_syscall_64+0xbe/0x3b0 [ 239.764216][T12356] do_syscall_64+0xfa/0x3b0 [ 239.764236][T12356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.764253][T12356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.764270][T12356] ? clear_bhb_loop+0x60/0xb0 [ 239.764291][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.764308][T12356] RIP: 0033:0x7f00ef38e929 [ 239.764325][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.764341][T12356] RSP: 002b:00007f00f029e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.764361][T12356] RAX: ffffffffffffffda RBX: 00007f00ef5b6080 RCX: 00007f00ef38e929 [ 239.764374][T12356] RDX: 00000000000000c0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 239.764386][T12356] RBP: 00007f00f029e090 R08: 0000000000000000 R09: 0000000000000000 [ 239.764398][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.764409][T12356] R13: 0000000000000000 R14: 00007f00ef5b6080 R15: 00007ffc1356a268 [ 239.764444][T12356] [ 240.333742][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 240.751555][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 240.762308][T12399] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1932'. [ 240.823823][T12387] syzkaller0: entered promiscuous mode [ 240.844318][T12387] syzkaller0: entered allmulticast mode [ 240.845094][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 241.164285][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 242.997178][T12451] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1946'. [ 243.007877][T12444] lo speed is unknown, defaulting to 1000 [ 243.252506][T12444] lo speed is unknown, defaulting to 1000 [ 243.461356][T12473] __nla_validate_parse: 1 callbacks suppressed [ 243.461373][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 243.515708][T12476] FAULT_INJECTION: forcing a failure. [ 243.515708][T12476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.567550][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.1.1951 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 243.567578][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.567598][T12476] Call Trace: [ 243.567609][T12476] [ 243.567617][T12476] dump_stack_lvl+0x189/0x250 [ 243.567644][T12476] ? __pfx____ratelimit+0x10/0x10 [ 243.567665][T12476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.567687][T12476] ? __pfx__printk+0x10/0x10 [ 243.567703][T12476] ? __might_fault+0xb0/0x130 [ 243.567728][T12476] should_fail_ex+0x414/0x560 [ 243.567756][T12476] _copy_from_iter+0x1db/0x16f0 [ 243.567783][T12476] ? rcu_is_watching+0x15/0xb0 [ 243.567806][T12476] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 243.567823][T12476] ? __pfx__copy_from_iter+0x10/0x10 [ 243.567845][T12476] ? __build_skb_around+0x257/0x3e0 [ 243.567867][T12476] ? netlink_sendmsg+0x642/0xb30 [ 243.567885][T12476] ? skb_put+0x11b/0x210 [ 243.567909][T12476] netlink_sendmsg+0x6b2/0xb30 [ 243.567938][T12476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.567961][T12476] ? aa_sock_msg_perm+0x94/0x160 [ 243.567983][T12476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.568001][T12476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.568021][T12476] __sock_sendmsg+0x219/0x270 [ 243.568044][T12476] ____sys_sendmsg+0x505/0x830 [ 243.568072][T12476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.568104][T12476] ? import_iovec+0x74/0xa0 [ 243.568125][T12476] ___sys_sendmsg+0x21f/0x2a0 [ 243.568150][T12476] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.568210][T12476] ? __fget_files+0x2a/0x420 [ 243.568227][T12476] ? __fget_files+0x3a0/0x420 [ 243.568255][T12476] __x64_sys_sendmsg+0x19b/0x260 [ 243.568281][T12476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.568314][T12476] ? __pfx_ksys_write+0x10/0x10 [ 243.568327][T12476] ? rcu_is_watching+0x15/0xb0 [ 243.568354][T12476] ? do_syscall_64+0xbe/0x3b0 [ 243.568378][T12476] do_syscall_64+0xfa/0x3b0 [ 243.568396][T12476] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.568414][T12476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.568430][T12476] ? clear_bhb_loop+0x60/0xb0 [ 243.568451][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.568476][T12476] RIP: 0033:0x7f134958e929 [ 243.568492][T12476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.568507][T12476] RSP: 002b:00007f134a341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.568525][T12476] RAX: ffffffffffffffda RBX: 00007f13497b6160 RCX: 00007f134958e929 [ 243.568538][T12476] RDX: 00000000000000c0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 243.568549][T12476] RBP: 00007f134a341090 R08: 0000000000000000 R09: 0000000000000000 [ 243.568560][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.568570][T12476] R13: 0000000000000000 R14: 00007f13497b6160 R15: 00007ffcb259cd08 [ 243.568598][T12476] [ 243.875623][T12483] validate_nla: 2 callbacks suppressed [ 243.875640][T12483] netlink: 'syz.4.1953': attribute type 9 has an invalid length. [ 243.892087][T12483] netlink: 'syz.4.1953': attribute type 6 has an invalid length. [ 244.338479][T12504] pim6reg1: entered promiscuous mode [ 244.343826][T12504] pim6reg1: entered allmulticast mode [ 244.351136][T12491] lo speed is unknown, defaulting to 1000 [ 244.460608][T12509] sctp: [Deprecated]: syz.4.1960 (pid 12509) Use of int in max_burst socket option deprecated. [ 244.460608][T12509] Use struct sctp_assoc_value instead [ 244.536743][T12511] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1960'. [ 244.602276][T12514] atomic_op ffff88806f564998 conn xmit_atomic 0000000000000000 [ 244.632638][T12514] netlink: 'syz.2.1961': attribute type 10 has an invalid length. [ 244.638637][T12491] lo speed is unknown, defaulting to 1000 [ 244.654663][T12514] team0: Port device wlan1 added [ 244.935325][T12521] lo speed is unknown, defaulting to 1000 [ 245.146151][T12521] lo speed is unknown, defaulting to 1000 [ 245.350930][T12531] netlink: 'syz.4.1964': attribute type 39 has an invalid length. [ 245.419185][T12532] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 245.772552][T12537] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 245.791946][T12537] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 245.902569][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 246.168333][T12558] siw: device registration error -23 [ 246.541956][T12586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1976'. [ 246.850818][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 247.078520][T12594] lo speed is unknown, defaulting to 1000 [ 247.124676][T12600] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1978'. [ 247.455447][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 247.631183][T12594] lo speed is unknown, defaulting to 1000 [ 247.660088][T12602] lo speed is unknown, defaulting to 1000 [ 247.662168][T12626] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 247.958339][T12630] netlink: 'syz.4.1988': attribute type 1 has an invalid length. [ 247.966466][T12630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1988'. [ 248.033380][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 248.130591][T12602] lo speed is unknown, defaulting to 1000 [ 248.441152][T12646] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 248.561797][T12646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.581419][T12655] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 248.621730][T12659] x_tables: duplicate underflow at hook 1 [ 248.973096][T12676] netlink: 'syz.0.2001': attribute type 29 has an invalid length. [ 249.025484][T12678] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 249.052909][T12679] netlink: 'syz.4.2002': attribute type 15 has an invalid length. [ 250.125128][T12709] netlink: 'syz.4.2010': attribute type 9 has an invalid length. [ 250.157854][T12709] netlink: 'syz.4.2010': attribute type 6 has an invalid length. [ 250.225102][T12712] bridge_slave_0: entered promiscuous mode [ 250.231545][T12712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.259054][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 250.364275][T12725] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 250.495702][T12725] tipc: Invalid UDP bearer configuration [ 250.495757][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 250.543177][T12707] lo speed is unknown, defaulting to 1000 [ 250.678227][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2019'. [ 250.966530][T12733] netlink: 'syz.0.2017': attribute type 14 has an invalid length. [ 250.984966][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2017'. [ 251.217823][T12730] lo speed is unknown, defaulting to 1000 [ 251.223836][T12707] lo speed is unknown, defaulting to 1000 [ 251.484142][T12762] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 251.650125][T12771] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2026'. [ 251.742180][T12741] lo speed is unknown, defaulting to 1000 [ 251.927932][T12767] lo speed is unknown, defaulting to 1000 [ 252.098315][T12767] lo speed is unknown, defaulting to 1000 [ 252.117239][T12741] lo speed is unknown, defaulting to 1000 [ 252.135204][T12730] lo speed is unknown, defaulting to 1000 [ 253.319266][T12816] lo speed is unknown, defaulting to 1000 [ 253.335989][ T30] audit: type=1107 audit(1750896449.806:5): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1d]:xJP@cd$JnyO^D#z' [ 253.438781][T12824] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2035'. [ 253.820384][T12816] lo speed is unknown, defaulting to 1000 [ 253.913423][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 253.963079][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2043'. [ 253.977066][T12858] FAULT_INJECTION: forcing a failure. [ 253.977066][T12858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.007773][T12858] CPU: 0 UID: 0 PID: 12858 Comm: syz.0.2045 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 254.007802][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.007813][T12858] Call Trace: [ 254.007820][T12858] [ 254.007828][T12858] dump_stack_lvl+0x189/0x250 [ 254.007856][T12858] ? __pfx____ratelimit+0x10/0x10 [ 254.007876][T12858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.007899][T12858] ? __pfx__printk+0x10/0x10 [ 254.007931][T12858] should_fail_ex+0x414/0x560 [ 254.007958][T12858] _copy_to_user+0x31/0xb0 [ 254.007976][T12858] simple_read_from_buffer+0xe1/0x170 [ 254.007998][T12858] proc_fail_nth_read+0x1df/0x250 [ 254.008020][T12858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.008042][T12858] ? rw_verify_area+0x258/0x650 [ 254.008061][T12858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.008079][T12858] vfs_read+0x1fd/0x980 [ 254.008107][T12858] ? __pfx___mutex_lock+0x10/0x10 [ 254.008127][T12858] ? __pfx_vfs_read+0x10/0x10 [ 254.008149][T12858] ? __fget_files+0x2a/0x420 [ 254.008172][T12858] ? __fget_files+0x3a0/0x420 [ 254.008188][T12858] ? __fget_files+0x2a/0x420 [ 254.008214][T12858] ksys_read+0x145/0x250 [ 254.008233][T12858] ? __pfx_ksys_read+0x10/0x10 [ 254.008252][T12858] ? rcu_is_watching+0x15/0xb0 [ 254.008281][T12858] ? do_syscall_64+0xbe/0x3b0 [ 254.008305][T12858] do_syscall_64+0xfa/0x3b0 [ 254.008325][T12858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.008341][T12858] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.008357][T12858] ? clear_bhb_loop+0x60/0xb0 [ 254.008378][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.008392][T12858] RIP: 0033:0x7f8d4f98d33c [ 254.008409][T12858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.008422][T12858] RSP: 002b:00007f8d507af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.008440][T12858] RAX: ffffffffffffffda RBX: 00007f8d4fbb6160 RCX: 00007f8d4f98d33c [ 254.008452][T12858] RDX: 000000000000000f RSI: 00007f8d507af0a0 RDI: 0000000000000005 [ 254.008463][T12858] RBP: 00007f8d507af090 R08: 0000000000000000 R09: 0000000000000000 [ 254.008472][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.008481][T12858] R13: 0000000000000000 R14: 00007f8d4fbb6160 R15: 00007fffe6bf9778 [ 254.008508][T12858] [ 254.065983][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 254.334398][T12868] netlink: 'syz.2.2047': attribute type 11 has an invalid length. [ 254.403964][T12873] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 254.496180][T12873] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 254.507894][T12879] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2049'. [ 254.629085][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 255.077460][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.085245][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.192130][T12887] veth1_vlan: left allmulticast mode [ 255.252852][T12887] bond1: left promiscuous mode [ 255.260929][T12887] bond1: left allmulticast mode [ 255.268791][T12887] vlan0: left allmulticast mode [ 255.273799][T12887] veth0_vlan: left allmulticast mode [ 255.280448][T12887] vlan0: left promiscuous mode [ 255.285661][T12887] macvtap1: left promiscuous mode [ 255.291028][T12887] macvtap1: left allmulticast mode [ 255.299224][T12887] ip6erspan0: left allmulticast mode [ 255.307016][T12887] gretap1: left promiscuous mode [ 255.323389][ T7019] lo speed is unknown, defaulting to 1000 [ 255.323434][T12895] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 255.329389][ T7019] syz0: Port: 1 Link DOWN [ 255.371562][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.391880][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.402792][ T7018] lo speed is unknown, defaulting to 1000 [ 255.402872][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.510878][T12912] FAULT_INJECTION: forcing a failure. [ 255.510878][T12912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.549353][T12912] CPU: 1 UID: 0 PID: 12912 Comm: syz.1.2060 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 255.549380][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.549390][T12912] Call Trace: [ 255.549397][T12912] [ 255.549405][T12912] dump_stack_lvl+0x189/0x250 [ 255.549433][T12912] ? __pfx____ratelimit+0x10/0x10 [ 255.549452][T12912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.549475][T12912] ? __pfx__printk+0x10/0x10 [ 255.549492][T12912] ? __might_fault+0xb0/0x130 [ 255.549521][T12912] should_fail_ex+0x414/0x560 [ 255.549548][T12912] _copy_from_user+0x2d/0xb0 [ 255.549565][T12912] ___sys_sendmsg+0x158/0x2a0 [ 255.549592][T12912] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.549651][T12912] ? __fget_files+0x2a/0x420 [ 255.549669][T12912] ? __fget_files+0x3a0/0x420 [ 255.549698][T12912] __x64_sys_sendmsg+0x19b/0x260 [ 255.549724][T12912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.549764][T12912] ? __pfx_ksys_write+0x10/0x10 [ 255.549786][T12912] ? do_syscall_64+0xbe/0x3b0 [ 255.549809][T12912] do_syscall_64+0xfa/0x3b0 [ 255.549827][T12912] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.549846][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.549862][T12912] ? clear_bhb_loop+0x60/0xb0 [ 255.549883][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.549899][T12912] RIP: 0033:0x7f134958e929 [ 255.549915][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.549929][T12912] RSP: 002b:00007f134a383038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.549951][T12912] RAX: ffffffffffffffda RBX: 00007f13497b5fa0 RCX: 00007f134958e929 [ 255.549962][T12912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.549973][T12912] RBP: 00007f134a383090 R08: 0000000000000000 R09: 0000000000000000 [ 255.549983][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.549993][T12912] R13: 0000000000000000 R14: 00007f13497b5fa0 R15: 00007ffcb259cd08 [ 255.550023][T12912] [ 255.791600][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.809450][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.988176][T12930] __nla_validate_parse: 1 callbacks suppressed [ 255.988194][T12930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 256.043541][ T30] audit: type=1800 audit(1750896452.516:6): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2065" name="memory.events" dev="tmpfs" ino=2191 res=0 errno=0 [ 256.072176][T12934] Bluetooth: MGMT ver 1.23 [ 256.086092][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2068'. [ 256.095754][T12936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2068'. [ 256.105041][T12936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2068'. [ 256.289134][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2072'. [ 256.323788][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 256.753623][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 256.783760][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 256.878350][T12987] sctp: [Deprecated]: syz.2.2082 (pid 12987) Use of int in max_burst socket option. [ 256.878350][T12987] Use struct sctp_assoc_value instead [ 257.040480][ T60] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.541004][T13016] lo: entered promiscuous mode [ 257.567925][T13016] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 257.594602][T13016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.820770][T13028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2097'. [ 257.857540][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2097'. [ 258.808976][T13097] netlink: 'syz.3.2119': attribute type 4 has an invalid length. [ 258.825704][T13105] xt_hashlimit: size too large, truncated to 1048576 [ 258.963493][T13110] xt_TCPMSS: Only works on TCP SYN packets [ 258.995716][T13112] sctp: [Deprecated]: syz.3.2122 (pid 13112) Use of int in max_burst socket option deprecated. [ 258.995716][T13112] Use struct sctp_assoc_value instead [ 259.314603][T13130] syzkaller1: entered promiscuous mode [ 259.340117][T13130] syzkaller1: entered allmulticast mode [ 259.532529][T13144] xt_TCPMSS: Only works on TCP SYN packets [ 259.533282][T13147] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 259.725508][T13156] sctp: [Deprecated]: syz.0.2137 (pid 13156) Use of int in max_burst socket option deprecated. [ 259.725508][T13156] Use struct sctp_assoc_value instead [ 259.744363][T13158] FAULT_INJECTION: forcing a failure. [ 259.744363][T13158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.777896][T13158] CPU: 0 UID: 0 PID: 13158 Comm: syz.4.2136 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 259.777923][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.777933][T13158] Call Trace: [ 259.777940][T13158] [ 259.777948][T13158] dump_stack_lvl+0x189/0x250 [ 259.777976][T13158] ? __pfx____ratelimit+0x10/0x10 [ 259.777997][T13158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.778019][T13158] ? __pfx__printk+0x10/0x10 [ 259.778038][T13158] ? __might_fault+0xb0/0x130 [ 259.778066][T13158] should_fail_ex+0x414/0x560 [ 259.778093][T13158] _copy_from_iter+0x1db/0x16f0 [ 259.778119][T13158] ? rcu_is_watching+0x15/0xb0 [ 259.778142][T13158] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 259.778162][T13158] ? __pfx__copy_from_iter+0x10/0x10 [ 259.778186][T13158] ? __build_skb_around+0x257/0x3e0 [ 259.778212][T13158] ? netlink_sendmsg+0x642/0xb30 [ 259.778231][T13158] ? skb_put+0x11b/0x210 [ 259.778256][T13158] netlink_sendmsg+0x6b2/0xb30 [ 259.778286][T13158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.778310][T13158] ? aa_sock_msg_perm+0x94/0x160 [ 259.778332][T13158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.778351][T13158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.778373][T13158] __sock_sendmsg+0x219/0x270 [ 259.778400][T13158] ____sys_sendmsg+0x505/0x830 [ 259.778430][T13158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.778461][T13158] ? import_iovec+0x74/0xa0 [ 259.778482][T13158] ___sys_sendmsg+0x21f/0x2a0 [ 259.778507][T13158] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.778568][T13158] ? __fget_files+0x2a/0x420 [ 259.778585][T13158] ? __fget_files+0x3a0/0x420 [ 259.778614][T13158] __x64_sys_sendmsg+0x19b/0x260 [ 259.778640][T13158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.778672][T13158] ? __pfx_ksys_write+0x10/0x10 [ 259.778686][T13158] ? rcu_is_watching+0x15/0xb0 [ 259.778713][T13158] ? do_syscall_64+0xbe/0x3b0 [ 259.778736][T13158] do_syscall_64+0xfa/0x3b0 [ 259.778752][T13158] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.778769][T13158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.778785][T13158] ? clear_bhb_loop+0x60/0xb0 [ 259.778805][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.778821][T13158] RIP: 0033:0x7f72d0f8e929 [ 259.778837][T13158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.778851][T13158] RSP: 002b:00007f72d1e58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.778868][T13158] RAX: ffffffffffffffda RBX: 00007f72d11b5fa0 RCX: 00007f72d0f8e929 [ 259.778880][T13158] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 0000000000000004 [ 259.778891][T13158] RBP: 00007f72d1e58090 R08: 0000000000000000 R09: 0000000000000000 [ 259.778901][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.778911][T13158] R13: 0000000000000000 R14: 00007f72d11b5fa0 R15: 00007fff958ad318 [ 259.778940][T13158] [ 260.219232][T13174] batadv_slave_0: entered promiscuous mode [ 260.394261][T13182] x_tables: duplicate underflow at hook 2 [ 260.625010][T13196] netlink: 'syz.3.2150': attribute type 15 has an invalid length. [ 260.640560][T13196] Cannot find add_set index 2 as target [ 260.728162][T13202] FAULT_INJECTION: forcing a failure. [ 260.728162][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 260.744040][T13202] CPU: 1 UID: 0 PID: 13202 Comm: syz.0.2152 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 260.744068][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.744078][T13202] Call Trace: [ 260.744085][T13202] [ 260.744092][T13202] dump_stack_lvl+0x189/0x250 [ 260.744129][T13202] ? __pfx____ratelimit+0x10/0x10 [ 260.744150][T13202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.744173][T13202] ? __pfx__printk+0x10/0x10 [ 260.744196][T13202] ? __nla_validate_parse+0x2400/0x2d40 [ 260.744228][T13202] should_fail_ex+0x414/0x560 [ 260.744254][T13202] should_failslab+0xa8/0x100 [ 260.744272][T13202] kmem_cache_alloc_noprof+0x73/0x3c0 [ 260.744295][T13202] ? xfrm_state_alloc+0x24/0x2f0 [ 260.744317][T13202] xfrm_state_alloc+0x24/0x2f0 [ 260.744336][T13202] xfrm_add_sa+0x17d1/0x4050 [ 260.744364][T13202] ? __pfx_xfrm_add_sa+0x10/0x10 [ 260.744382][T13202] ? apparmor_capable+0x137/0x1b0 [ 260.744403][T13202] ? __nla_parse+0x40/0x60 [ 260.744426][T13202] xfrm_user_rcv_msg+0x7a0/0xab0 [ 260.744450][T13202] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 260.744506][T13202] ? __mutex_trylock_common+0x153/0x260 [ 260.744528][T13202] ? __pfx___mutex_trylock_common+0x10/0x10 [ 260.744551][T13202] ? rcu_is_watching+0x15/0xb0 [ 260.744574][T13202] ? trace_contention_end+0x39/0x120 [ 260.744599][T13202] netlink_rcv_skb+0x205/0x470 [ 260.744622][T13202] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 260.744644][T13202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.744684][T13202] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.744702][T13202] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.744725][T13202] xfrm_netlink_rcv+0x79/0x90 [ 260.744746][T13202] netlink_unicast+0x758/0x8d0 [ 260.744782][T13202] netlink_sendmsg+0x805/0xb30 [ 260.744813][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.744837][T13202] ? aa_sock_msg_perm+0x94/0x160 [ 260.744860][T13202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.744880][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.744901][T13202] __sock_sendmsg+0x219/0x270 [ 260.744925][T13202] ____sys_sendmsg+0x505/0x830 [ 260.744955][T13202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.744989][T13202] ? import_iovec+0x74/0xa0 [ 260.745010][T13202] ___sys_sendmsg+0x21f/0x2a0 [ 260.745036][T13202] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.745106][T13202] ? __fget_files+0x2a/0x420 [ 260.745123][T13202] ? __fget_files+0x3a0/0x420 [ 260.745153][T13202] __x64_sys_sendmsg+0x19b/0x260 [ 260.745180][T13202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.745213][T13202] ? __pfx_ksys_write+0x10/0x10 [ 260.745228][T13202] ? rcu_is_watching+0x15/0xb0 [ 260.745256][T13202] ? do_syscall_64+0xbe/0x3b0 [ 260.745280][T13202] do_syscall_64+0xfa/0x3b0 [ 260.745298][T13202] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.745317][T13202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.745333][T13202] ? clear_bhb_loop+0x60/0xb0 [ 260.745353][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.745368][T13202] RIP: 0033:0x7f8d4f98e929 [ 260.745384][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.745398][T13202] RSP: 002b:00007f8d507f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.745416][T13202] RAX: ffffffffffffffda RBX: 00007f8d4fbb5fa0 RCX: 00007f8d4f98e929 [ 260.745429][T13202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.745441][T13202] RBP: 00007f8d507f1090 R08: 0000000000000000 R09: 0000000000000000 [ 260.745452][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.745462][T13202] R13: 0000000000000000 R14: 00007f8d4fbb5fa0 R15: 00007fffe6bf9778 [ 260.745492][T13202] [ 261.311220][T13223] __nla_validate_parse: 7 callbacks suppressed [ 261.311238][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 261.337755][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 261.363704][T13211] sctp: [Deprecated]: syz.3.2155 (pid 13211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.363704][T13211] Use struct sctp_sack_info instead [ 261.552460][T13229] lo speed is unknown, defaulting to 1000 [ 261.560608][T13236] netlink: 'syz.3.2163': attribute type 72 has an invalid length. [ 261.925913][T13253] FAULT_INJECTION: forcing a failure. [ 261.925913][T13253] name failslab, interval 1, probability 0, space 0, times 0 [ 261.942021][T13253] CPU: 1 UID: 0 PID: 13253 Comm: syz.0.2166 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 261.942048][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.942058][T13253] Call Trace: [ 261.942065][T13253] [ 261.942073][T13253] dump_stack_lvl+0x189/0x250 [ 261.942102][T13253] ? __pfx____ratelimit+0x10/0x10 [ 261.942121][T13253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.942142][T13253] ? __pfx__printk+0x10/0x10 [ 261.942165][T13253] ? __pfx___might_resched+0x10/0x10 [ 261.942192][T13253] should_fail_ex+0x414/0x560 [ 261.942217][T13253] should_failslab+0xa8/0x100 [ 261.942235][T13253] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 261.942252][T13253] ? xfrm_add_sa+0x1eb9/0x4050 [ 261.942278][T13253] kmemdup_noprof+0x2b/0x70 [ 261.942299][T13253] xfrm_add_sa+0x1eb9/0x4050 [ 261.942327][T13253] ? __pfx_xfrm_add_sa+0x10/0x10 [ 261.942344][T13253] ? apparmor_capable+0x137/0x1b0 [ 261.942365][T13253] ? __nla_parse+0x40/0x60 [ 261.942390][T13253] xfrm_user_rcv_msg+0x7a0/0xab0 [ 261.942416][T13253] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 261.942470][T13253] ? __mutex_trylock_common+0x153/0x260 [ 261.942490][T13253] ? __pfx___mutex_trylock_common+0x10/0x10 [ 261.942511][T13253] ? rcu_is_watching+0x15/0xb0 [ 261.942532][T13253] ? trace_contention_end+0x39/0x120 [ 261.942555][T13253] netlink_rcv_skb+0x205/0x470 [ 261.942576][T13253] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 261.942597][T13253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.942633][T13253] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.942651][T13253] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.942671][T13253] xfrm_netlink_rcv+0x79/0x90 [ 261.942690][T13253] netlink_unicast+0x758/0x8d0 [ 261.942720][T13253] netlink_sendmsg+0x805/0xb30 [ 261.942749][T13253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.942771][T13253] ? aa_sock_msg_perm+0x94/0x160 [ 261.942792][T13253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.942811][T13253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.942831][T13253] __sock_sendmsg+0x219/0x270 [ 261.942852][T13253] ____sys_sendmsg+0x505/0x830 [ 261.942880][T13253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.942910][T13253] ? import_iovec+0x74/0xa0 [ 261.942931][T13253] ___sys_sendmsg+0x21f/0x2a0 [ 261.942973][T13253] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.943040][T13253] ? __fget_files+0x2a/0x420 [ 261.943056][T13253] ? __fget_files+0x3a0/0x420 [ 261.943084][T13253] __x64_sys_sendmsg+0x19b/0x260 [ 261.943108][T13253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.943139][T13253] ? __pfx_ksys_write+0x10/0x10 [ 261.943152][T13253] ? rcu_is_watching+0x15/0xb0 [ 261.943178][T13253] ? do_syscall_64+0xbe/0x3b0 [ 261.943202][T13253] do_syscall_64+0xfa/0x3b0 [ 261.943218][T13253] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.943235][T13253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.943251][T13253] ? clear_bhb_loop+0x60/0xb0 [ 261.943270][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.943285][T13253] RIP: 0033:0x7f8d4f98e929 [ 261.943301][T13253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.943315][T13253] RSP: 002b:00007f8d507f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.943333][T13253] RAX: ffffffffffffffda RBX: 00007f8d4fbb5fa0 RCX: 00007f8d4f98e929 [ 261.943344][T13253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 261.943354][T13253] RBP: 00007f8d507f1090 R08: 0000000000000000 R09: 0000000000000000 [ 261.943364][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.943374][T13253] R13: 0000000000000000 R14: 00007f8d4fbb5fa0 R15: 00007fffe6bf9778 [ 261.943402][T13253] [ 262.350182][T13229] lo speed is unknown, defaulting to 1000 [ 262.444330][T13264] netlink: 'syz.0.2170': attribute type 6 has an invalid length. [ 262.643896][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 262.675536][T13277] netlink: 'syz.2.2174': attribute type 72 has an invalid length. [ 262.787823][T13287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 262.851399][T13292] FAULT_INJECTION: forcing a failure. [ 262.851399][T13292] name failslab, interval 1, probability 0, space 0, times 0 [ 262.907481][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.2.2180 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 262.907508][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.907518][T13292] Call Trace: [ 262.907526][T13292] [ 262.907533][T13292] dump_stack_lvl+0x189/0x250 [ 262.907562][T13292] ? __pfx____ratelimit+0x10/0x10 [ 262.907580][T13292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.907602][T13292] ? __pfx__printk+0x10/0x10 [ 262.907626][T13292] ? __pfx___might_resched+0x10/0x10 [ 262.907647][T13292] ? fs_reclaim_acquire+0x7d/0x100 [ 262.907671][T13292] should_fail_ex+0x414/0x560 [ 262.907694][T13292] should_failslab+0xa8/0x100 [ 262.907714][T13292] __kmalloc_cache_noprof+0x70/0x3d0 [ 262.907739][T13292] ? __request_module+0x2b5/0x5e0 [ 262.907763][T13292] __request_module+0x2b5/0x5e0 [ 262.907789][T13292] ? __pfx___request_module+0x10/0x10 [ 262.907805][T13292] ? __up_read+0x280/0x680 [ 262.907825][T13292] ? __pfx___up_read+0x10/0x10 [ 262.907864][T13292] crypto_alg_mod_lookup+0xa5/0x5f0 [ 262.907885][T13292] crypto_alloc_tfm_node+0x13e/0x3f0 [ 262.907913][T13292] esp_init_state+0x36b/0x1140 [ 262.907933][T13292] ? __sock_sendmsg+0x219/0x270 [ 262.907948][T13292] ? ____sys_sendmsg+0x505/0x830 [ 262.907967][T13292] ? ___sys_sendmsg+0x21f/0x2a0 [ 262.907988][T13292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.908014][T13292] ? __pfx_esp_init_state+0x10/0x10 [ 262.908045][T13292] ? __lock_acquire+0xab9/0xd20 [ 262.908089][T13292] ? __xfrm_init_state+0x7ef/0x13f0 [ 262.908115][T13292] __xfrm_init_state+0xa76/0x13f0 [ 262.908142][T13292] ? __xfrm_init_state+0x7ef/0x13f0 [ 262.908169][T13292] xfrm_add_sa+0x2f5d/0x4050 [ 262.908200][T13292] ? __pfx_xfrm_add_sa+0x10/0x10 [ 262.908218][T13292] ? apparmor_capable+0x137/0x1b0 [ 262.908240][T13292] ? __nla_parse+0x40/0x60 [ 262.908267][T13292] xfrm_user_rcv_msg+0x7a0/0xab0 [ 262.908295][T13292] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 262.908353][T13292] ? __mutex_trylock_common+0x153/0x260 [ 262.908371][T13292] ? __pfx___mutex_trylock_common+0x10/0x10 [ 262.908393][T13292] ? rcu_is_watching+0x15/0xb0 [ 262.908416][T13292] ? trace_contention_end+0x39/0x120 [ 262.908440][T13292] netlink_rcv_skb+0x205/0x470 [ 262.908462][T13292] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 262.908485][T13292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.908520][T13292] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.908537][T13292] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.908558][T13292] xfrm_netlink_rcv+0x79/0x90 [ 262.908578][T13292] netlink_unicast+0x758/0x8d0 [ 262.908611][T13292] netlink_sendmsg+0x805/0xb30 [ 262.908641][T13292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.908665][T13292] ? aa_sock_msg_perm+0x94/0x160 [ 262.908687][T13292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.908707][T13292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.908728][T13292] __sock_sendmsg+0x219/0x270 [ 262.908747][T13292] ____sys_sendmsg+0x505/0x830 [ 262.908772][T13292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.908803][T13292] ? import_iovec+0x74/0xa0 [ 262.908821][T13292] ___sys_sendmsg+0x21f/0x2a0 [ 262.908843][T13292] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.908902][T13292] ? __fget_files+0x2a/0x420 [ 262.908918][T13292] ? __fget_files+0x3a0/0x420 [ 262.908943][T13292] __x64_sys_sendmsg+0x19b/0x260 [ 262.908967][T13292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.908997][T13292] ? __pfx_ksys_write+0x10/0x10 [ 262.909010][T13292] ? rcu_is_watching+0x15/0xb0 [ 262.909037][T13292] ? do_syscall_64+0xbe/0x3b0 [ 262.909062][T13292] do_syscall_64+0xfa/0x3b0 [ 262.909080][T13292] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.909100][T13292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.909116][T13292] ? clear_bhb_loop+0x60/0xb0 [ 262.909144][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.909161][T13292] RIP: 0033:0x7fbee6d8e929 [ 262.909178][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.909192][T13292] RSP: 002b:00007fbee7c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.909212][T13292] RAX: ffffffffffffffda RBX: 00007fbee6fb5fa0 RCX: 00007fbee6d8e929 [ 262.909225][T13292] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.909236][T13292] RBP: 00007fbee7c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.909247][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.909257][T13292] R13: 0000000000000000 R14: 00007fbee6fb5fa0 R15: 00007ffe520c33f8 [ 262.909288][T13292] [ 263.615670][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.662388][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.676039][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.685809][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.695539][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.710484][T13308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.720242][T13307] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2183'. [ 263.755503][T13311] netlink: 'syz.2.2186': attribute type 29 has an invalid length. [ 263.778954][T13320] netlink: 'syz.2.2186': attribute type 29 has an invalid length. [ 263.890162][T13331] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 264.046514][T13344] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 264.055278][T13344] bridge0: port 1(team0) entered blocking state [ 264.063687][T13344] bridge0: port 1(team0) entered disabled state [ 264.073112][T13344] team0: entered allmulticast mode [ 264.079441][T13344] geneve1: entered allmulticast mode [ 264.085425][T13344] geneve0: entered allmulticast mode [ 264.095012][T13344] geneve0: entered promiscuous mode [ 264.103549][T13344] bridge0: port 1(team0) entered blocking state [ 264.110754][T13344] bridge0: port 1(team0) entered forwarding state [ 264.116281][T13350] FAULT_INJECTION: forcing a failure. [ 264.116281][T13350] name failslab, interval 1, probability 0, space 0, times 0 [ 264.150269][T13350] CPU: 1 UID: 0 PID: 13350 Comm: syz.4.2196 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 264.150294][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.150306][T13350] Call Trace: [ 264.150313][T13350] [ 264.150321][T13350] dump_stack_lvl+0x189/0x250 [ 264.150349][T13350] ? __pfx____ratelimit+0x10/0x10 [ 264.150369][T13350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.150393][T13350] ? __pfx__printk+0x10/0x10 [ 264.150418][T13350] ? __pfx___might_resched+0x10/0x10 [ 264.150440][T13350] ? fs_reclaim_acquire+0x7d/0x100 [ 264.150464][T13350] should_fail_ex+0x414/0x560 [ 264.150491][T13350] should_failslab+0xa8/0x100 [ 264.150510][T13350] __kmalloc_cache_noprof+0x70/0x3d0 [ 264.150526][T13350] ? __request_module+0x2b5/0x5e0 [ 264.150553][T13350] __request_module+0x2b5/0x5e0 [ 264.150580][T13350] ? __pfx___request_module+0x10/0x10 [ 264.150599][T13350] ? __up_read+0x280/0x680 [ 264.150620][T13350] ? __pfx___up_read+0x10/0x10 [ 264.150656][T13350] crypto_alg_mod_lookup+0xa5/0x5f0 [ 264.150679][T13350] crypto_alloc_tfm_node+0x13e/0x3f0 [ 264.150707][T13350] esp_init_state+0x36b/0x1140 [ 264.150729][T13350] ? __sock_sendmsg+0x219/0x270 [ 264.150745][T13350] ? ____sys_sendmsg+0x505/0x830 [ 264.150765][T13350] ? ___sys_sendmsg+0x21f/0x2a0 [ 264.150786][T13350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.150826][T13350] ? __pfx_esp_init_state+0x10/0x10 [ 264.150857][T13350] ? __lock_acquire+0xab9/0xd20 [ 264.150904][T13350] ? __xfrm_init_state+0x7ef/0x13f0 [ 264.150931][T13350] __xfrm_init_state+0xa76/0x13f0 [ 264.150950][T13350] ? __xfrm_init_state+0x7ef/0x13f0 [ 264.150975][T13350] xfrm_add_sa+0x2f5d/0x4050 [ 264.151007][T13350] ? __pfx_xfrm_add_sa+0x10/0x10 [ 264.151025][T13350] ? apparmor_capable+0x137/0x1b0 [ 264.151047][T13350] ? __nla_parse+0x40/0x60 [ 264.151074][T13350] xfrm_user_rcv_msg+0x7a0/0xab0 [ 264.151101][T13350] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 264.151159][T13350] ? __mutex_trylock_common+0x153/0x260 [ 264.151180][T13350] ? __pfx___mutex_trylock_common+0x10/0x10 [ 264.151203][T13350] ? rcu_is_watching+0x15/0xb0 [ 264.151226][T13350] ? trace_contention_end+0x39/0x120 [ 264.151251][T13350] netlink_rcv_skb+0x205/0x470 [ 264.151274][T13350] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 264.151296][T13350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.151334][T13350] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.151354][T13350] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.151376][T13350] xfrm_netlink_rcv+0x79/0x90 [ 264.151397][T13350] netlink_unicast+0x758/0x8d0 [ 264.151429][T13350] netlink_sendmsg+0x805/0xb30 [ 264.151459][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.151480][T13350] ? aa_sock_msg_perm+0x94/0x160 [ 264.151501][T13350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.151521][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.151543][T13350] __sock_sendmsg+0x219/0x270 [ 264.151565][T13350] ____sys_sendmsg+0x505/0x830 [ 264.151594][T13350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.151626][T13350] ? import_iovec+0x74/0xa0 [ 264.151647][T13350] ___sys_sendmsg+0x21f/0x2a0 [ 264.151672][T13350] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.151734][T13350] ? __fget_files+0x2a/0x420 [ 264.151752][T13350] ? __fget_files+0x3a0/0x420 [ 264.151781][T13350] __x64_sys_sendmsg+0x19b/0x260 [ 264.151814][T13350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.151846][T13350] ? __pfx_ksys_write+0x10/0x10 [ 264.151860][T13350] ? rcu_is_watching+0x15/0xb0 [ 264.151886][T13350] ? do_syscall_64+0xbe/0x3b0 [ 264.151909][T13350] do_syscall_64+0xfa/0x3b0 [ 264.151926][T13350] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.151944][T13350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.151961][T13350] ? clear_bhb_loop+0x60/0xb0 [ 264.151980][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.151995][T13350] RIP: 0033:0x7f72d0f8e929 [ 264.152010][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.152024][T13350] RSP: 002b:00007f72d1e58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.152042][T13350] RAX: ffffffffffffffda RBX: 00007f72d11b5fa0 RCX: 00007f72d0f8e929 [ 264.152052][T13350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 264.152062][T13350] RBP: 00007f72d1e58090 R08: 0000000000000000 R09: 0000000000000000 [ 264.152071][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.152080][T13350] R13: 0000000000000000 R14: 00007f72d11b5fa0 R15: 00007fff958ad318 [ 264.152107][T13350] [ 265.023532][T13373] lo speed is unknown, defaulting to 1000 [ 265.043889][T13388] sctp: [Deprecated]: syz.3.2208 (pid 13388) Use of int in max_burst socket option deprecated. [ 265.043889][T13388] Use struct sctp_assoc_value instead [ 265.061803][T13379] netlink: 'syz.1.2204': attribute type 13 has an invalid length. [ 265.088964][T13379] netlink: 'syz.1.2204': attribute type 17 has an invalid length. [ 265.099664][T13385] dummy0: entered promiscuous mode [ 265.105212][T13385] vlan2: entered promiscuous mode [ 265.283464][T13379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.572925][T13411] FAULT_INJECTION: forcing a failure. [ 265.572925][T13411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.637909][T13411] CPU: 1 UID: 0 PID: 13411 Comm: syz.2.2216 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 265.637936][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.637945][T13411] Call Trace: [ 265.637952][T13411] [ 265.637960][T13411] dump_stack_lvl+0x189/0x250 [ 265.637988][T13411] ? __pfx____ratelimit+0x10/0x10 [ 265.638016][T13411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.638039][T13411] ? __pfx__printk+0x10/0x10 [ 265.638070][T13411] should_fail_ex+0x414/0x560 [ 265.638096][T13411] _copy_to_user+0x31/0xb0 [ 265.638116][T13411] simple_read_from_buffer+0xe1/0x170 [ 265.638139][T13411] proc_fail_nth_read+0x1df/0x250 [ 265.638163][T13411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.638185][T13411] ? rw_verify_area+0x258/0x650 [ 265.638207][T13411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.638227][T13411] vfs_read+0x1fd/0x980 [ 265.638255][T13411] ? __pfx___mutex_lock+0x10/0x10 [ 265.638275][T13411] ? __pfx_vfs_read+0x10/0x10 [ 265.638300][T13411] ? __fget_files+0x2a/0x420 [ 265.638323][T13411] ? __fget_files+0x3a0/0x420 [ 265.638339][T13411] ? __fget_files+0x2a/0x420 [ 265.638366][T13411] ksys_read+0x145/0x250 [ 265.638388][T13411] ? __pfx_ksys_read+0x10/0x10 [ 265.638408][T13411] ? rcu_is_watching+0x15/0xb0 [ 265.638435][T13411] ? do_syscall_64+0xbe/0x3b0 [ 265.638459][T13411] do_syscall_64+0xfa/0x3b0 [ 265.638476][T13411] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.638494][T13411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.638510][T13411] ? clear_bhb_loop+0x60/0xb0 [ 265.638531][T13411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.638547][T13411] RIP: 0033:0x7fbee6d8d33c [ 265.638562][T13411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.638576][T13411] RSP: 002b:00007fbee7c1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.638593][T13411] RAX: ffffffffffffffda RBX: 00007fbee6fb5fa0 RCX: 00007fbee6d8d33c [ 265.638606][T13411] RDX: 000000000000000f RSI: 00007fbee7c1e0a0 RDI: 0000000000000005 [ 265.638615][T13411] RBP: 00007fbee7c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 265.638625][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.638638][T13411] R13: 0000000000000000 R14: 00007fbee6fb5fa0 R15: 00007ffe520c33f8 [ 265.638666][T13411] [ 265.908112][T13373] lo speed is unknown, defaulting to 1000 [ 265.912058][T13413] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 265.940567][T13392] lo speed is unknown, defaulting to 1000 [ 266.466248][T13428] netlink: 'syz.3.2223': attribute type 1 has an invalid length. [ 266.545526][T13428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.576262][T13392] lo speed is unknown, defaulting to 1000 [ 266.642688][T13434] vlan1: entered promiscuous mode [ 266.661290][T13434] bond2: entered promiscuous mode [ 266.663394][T13441] sctp: [Deprecated]: syz.0.2225 (pid 13441) Use of int in maxseg socket option. [ 266.663394][T13441] Use struct sctp_assoc_value instead [ 266.666511][T13434] vlan1: entered allmulticast mode [ 266.695331][T13434] bond2: entered allmulticast mode [ 267.179897][T13457] macsec1: entered promiscuous mode [ 267.207679][T13457] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 267.222685][T13457] macsec1: entered allmulticast mode [ 267.237496][T13457] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 267.380300][T13468] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 267.631835][T13480] __nla_validate_parse: 35 callbacks suppressed [ 267.631862][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 267.653462][T13480] xt_TCPMSS: Only works on TCP SYN packets [ 267.787643][T13500] macsec1: entered promiscuous mode [ 267.793165][T13500] macsec1: entered allmulticast mode [ 267.799715][T13500] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 267.815635][T13500] openvswitch: netlink: Message has 4 unknown bytes. [ 267.822763][T13500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.165196][T13529] veth0_to_bond: entered allmulticast mode [ 268.187248][T13529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2252'. [ 268.312052][T13535] lo speed is unknown, defaulting to 1000 [ 268.592029][T13535] lo speed is unknown, defaulting to 1000 [ 268.663757][T13545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 268.852278][T13558] netlink: 'syz.1.2262': attribute type 12 has an invalid length. [ 268.910097][T13563] netlink: 'syz.2.2263': attribute type 12 has an invalid length. [ 269.007001][T13563] netlink: 'syz.2.2263': attribute type 5 has an invalid length. [ 269.246431][T13576] veth0_to_bond: left allmulticast mode [ 269.309868][T13576] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 269.316678][T13576] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 269.340074][T13571] sctp: [Deprecated]: syz.0.2266 (pid 13571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.340074][T13571] Use struct sctp_sack_info instead [ 269.389790][T13576] macsec1: left promiscuous mode [ 269.404645][T13576] macsec1: left allmulticast mode [ 269.495126][T13571] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2266'. [ 269.761950][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2274'. [ 269.788377][T13598] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2276'. [ 269.908196][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 270.109126][T13612] [ 270.111489][T13612] ====================================================== [ 270.118516][T13612] WARNING: possible circular locking dependency detected [ 270.125544][T13612] 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 Not tainted [ 270.132635][T13612] ------------------------------------------------------ [ 270.139656][T13612] syz.2.2282/13612 is trying to acquire lock: [ 270.145733][T13612] ffff888034b90e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 270.155297][T13612] [ 270.155297][T13612] but task is already holding lock: [ 270.162645][T13612] ffff888028e90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 270.172465][T13612] [ 270.172465][T13612] which lock already depends on the new lock. [ 270.172465][T13612] [ 270.182866][T13612] [ 270.182866][T13612] the existing dependency chain (in reverse order) is: [ 270.191874][T13612] [ 270.191874][T13612] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 270.199599][T13612] lock_acquire+0x120/0x360 [ 270.204617][T13612] __mutex_lock+0x182/0xe80 [ 270.209631][T13612] ieee80211_open+0xed/0x1f0 [ 270.214730][T13612] __dev_open+0x470/0x880 [ 270.219563][T13612] netif_open+0xaa/0x170 [ 270.224314][T13612] dev_open+0x125/0x260 [ 270.228977][T13612] team_add_slave+0xb36/0x2840 [ 270.234243][T13612] do_set_master+0x530/0x6d0 [ 270.239342][T13612] do_setlink+0xcf0/0x41c0 [ 270.244261][T13612] rtnl_newlink+0x160b/0x1c70 [ 270.249448][T13612] rtnetlink_rcv_msg+0x7cc/0xb70 [ 270.254897][T13612] netlink_rcv_skb+0x205/0x470 [ 270.260172][T13612] netlink_unicast+0x758/0x8d0 [ 270.265440][T13612] netlink_sendmsg+0x805/0xb30 [ 270.270797][T13612] __sock_sendmsg+0x219/0x270 [ 270.275984][T13612] ____sys_sendmsg+0x505/0x830 [ 270.281256][T13612] ___sys_sendmsg+0x21f/0x2a0 [ 270.286440][T13612] __x64_sys_sendmsg+0x19b/0x260 [ 270.291881][T13612] do_syscall_64+0xfa/0x3b0 [ 270.296892][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.303287][T13612] [ 270.303287][T13612] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 270.311449][T13612] validate_chain+0xb9b/0x2140 [ 270.316714][T13612] __lock_acquire+0xab9/0xd20 [ 270.321897][T13612] lock_acquire+0x120/0x360 [ 270.326907][T13612] __mutex_lock+0x182/0xe80 [ 270.331913][T13612] team_del_slave+0x32/0x1c0 [ 270.337003][T13612] team_device_event+0x285/0xa20 [ 270.342442][T13612] notifier_call_chain+0x1b3/0x3e0 [ 270.348061][T13612] unregister_netdevice_many_notify+0x15d8/0x2320 [ 270.354978][T13612] unregister_netdevice_queue+0x33c/0x380 [ 270.361196][T13612] _cfg80211_unregister_wdev+0x165/0x590 [ 270.367354][T13612] ieee80211_if_remove+0x256/0x310 [ 270.372974][T13612] ieee80211_del_iface+0x19/0x30 [ 270.378413][T13612] cfg80211_remove_virtual_intf+0x22e/0x3f0 [ 270.384811][T13612] genl_family_rcv_msg_doit+0x215/0x300 [ 270.390861][T13612] genl_rcv_msg+0x60e/0x790 [ 270.395870][T13612] netlink_rcv_skb+0x205/0x470 [ 270.401136][T13612] genl_rcv+0x28/0x40 [ 270.405644][T13612] netlink_unicast+0x758/0x8d0 [ 270.410913][T13612] netlink_sendmsg+0x805/0xb30 [ 270.416187][T13612] __sock_sendmsg+0x219/0x270 [ 270.421364][T13612] ____sys_sendmsg+0x505/0x830 [ 270.426635][T13612] ___sys_sendmsg+0x21f/0x2a0 [ 270.431816][T13612] __x64_sys_sendmsg+0x19b/0x260 [ 270.437258][T13612] do_syscall_64+0xfa/0x3b0 [ 270.442270][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.448677][T13612] [ 270.448677][T13612] other info that might help us debug this: [ 270.448677][T13612] [ 270.458881][T13612] Possible unsafe locking scenario: [ 270.458881][T13612] [ 270.466311][T13612] CPU0 CPU1 [ 270.471659][T13612] ---- ---- [ 270.477000][T13612] lock(&rdev->wiphy.mtx); [ 270.481490][T13612] lock(team->team_lock_key#3); [ 270.488938][T13612] lock(&rdev->wiphy.mtx); [ 270.495940][T13612] lock(team->team_lock_key#3); [ 270.500866][T13612] [ 270.500866][T13612] *** DEADLOCK *** [ 270.500866][T13612] [ 270.508986][T13612] 3 locks held by syz.2.2282/13612: [ 270.514158][T13612] #0: ffffffff8f577c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 270.522331][T13612] #1: ffffffff8f512ec8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 270.531543][T13612] #2: ffff888028e90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 270.541789][T13612] [ 270.541789][T13612] stack backtrace: [ 270.547659][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.2.2282 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 270.547676][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.547685][T13612] Call Trace: [ 270.547692][T13612] [ 270.547698][T13612] dump_stack_lvl+0x189/0x250 [ 270.547721][T13612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.547739][T13612] ? __pfx__printk+0x10/0x10 [ 270.547753][T13612] ? print_lock_name+0xde/0x100 [ 270.547767][T13612] print_circular_bug+0x2ee/0x310 [ 270.547782][T13612] check_noncircular+0x134/0x160 [ 270.547798][T13612] validate_chain+0xb9b/0x2140 [ 270.547813][T13612] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.547832][T13612] __lock_acquire+0xab9/0xd20 [ 270.547851][T13612] ? team_del_slave+0x32/0x1c0 [ 270.547864][T13612] lock_acquire+0x120/0x360 [ 270.547879][T13612] ? team_del_slave+0x32/0x1c0 [ 270.547894][T13612] ? __mutex_trylock_common+0x153/0x260 [ 270.547909][T13612] __mutex_lock+0x182/0xe80 [ 270.547924][T13612] ? team_del_slave+0x32/0x1c0 [ 270.547936][T13612] ? rcu_is_watching+0x15/0xb0 [ 270.547957][T13612] ? team_del_slave+0x32/0x1c0 [ 270.547970][T13612] ? __pfx___mutex_lock+0x10/0x10 [ 270.547985][T13612] ? bond_netdev_event+0xd9/0xe80 [ 270.548000][T13612] ? __pfx___mutex_lock+0x10/0x10 [ 270.548015][T13612] ? __pfx_bond_netdev_event+0x10/0x10 [ 270.548031][T13612] team_del_slave+0x32/0x1c0 [ 270.548045][T13612] team_device_event+0x285/0xa20 [ 270.548062][T13612] notifier_call_chain+0x1b3/0x3e0 [ 270.548085][T13612] unregister_netdevice_many_notify+0x15d8/0x2320 [ 270.548105][T13612] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.548120][T13612] ? call_rcu+0x6dd/0x990 [ 270.548131][T13612] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.548149][T13612] ? __pfx_call_rcu+0x10/0x10 [ 270.548163][T13612] unregister_netdevice_queue+0x33c/0x380 [ 270.548175][T13612] ? kernfs_remove_by_name_ns+0xee/0x130 [ 270.548194][T13612] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 270.548210][T13612] _cfg80211_unregister_wdev+0x165/0x590 [ 270.548229][T13612] ieee80211_if_remove+0x256/0x310 [ 270.548245][T13612] ieee80211_del_iface+0x19/0x30 [ 270.548258][T13612] cfg80211_remove_virtual_intf+0x22e/0x3f0 [ 270.548274][T13612] genl_family_rcv_msg_doit+0x215/0x300 [ 270.548290][T13612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.548307][T13612] ? bpf_lsm_capable+0x9/0x20 [ 270.548323][T13612] ? security_capable+0x7e/0x2e0 [ 270.548342][T13612] genl_rcv_msg+0x60e/0x790 [ 270.548355][T13612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.548366][T13612] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 270.548384][T13612] ? __pfx_nl80211_del_interface+0x10/0x10 [ 270.548395][T13612] ? __pfx_nl80211_post_doit+0x10/0x10 [ 270.548418][T13612] netlink_rcv_skb+0x205/0x470 [ 270.548434][T13612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.548446][T13612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.548466][T13612] ? down_read+0x1ad/0x2e0 [ 270.548482][T13612] genl_rcv+0x28/0x40 [ 270.548499][T13612] netlink_unicast+0x758/0x8d0 [ 270.548516][T13612] netlink_sendmsg+0x805/0xb30 [ 270.548535][T13612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.548551][T13612] ? aa_sock_msg_perm+0x94/0x160 [ 270.548568][T13612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.548584][T13612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.548599][T13612] __sock_sendmsg+0x219/0x270 [ 270.548614][T13612] ____sys_sendmsg+0x505/0x830 [ 270.548634][T13612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.548654][T13612] ? import_iovec+0x74/0xa0 [ 270.548668][T13612] ___sys_sendmsg+0x21f/0x2a0 [ 270.548686][T13612] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.548715][T13612] ? __fget_files+0x2a/0x420 [ 270.548728][T13612] ? __fget_files+0x3a0/0x420 [ 270.548745][T13612] __x64_sys_sendmsg+0x19b/0x260 [ 270.548763][T13612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.548785][T13612] ? rcu_is_watching+0x15/0xb0 [ 270.548803][T13612] ? trace_sys_enter+0x25/0x120 [ 270.548821][T13612] do_syscall_64+0xfa/0x3b0 [ 270.548836][T13612] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.548850][T13612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.548862][T13612] ? clear_bhb_loop+0x60/0xb0 [ 270.548876][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.548889][T13612] RIP: 0033:0x7fbee6d8e929 [ 270.548903][T13612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.548914][T13612] RSP: 002b:00007fbee7c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.548928][T13612] RAX: ffffffffffffffda RBX: 00007fbee6fb5fa0 RCX: 00007fbee6d8e929 [ 270.548938][T13612] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 270.548946][T13612] RBP: 00007fbee6e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.548955][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.548963][T13612] R13: 0000000000000000 R14: 00007fbee6fb5fa0 R15: 00007ffe520c33f8 [ 270.548978][T13612] [ 271.090039][T13612] team0: Port device wlan1 removed