last executing test programs: 4.675901201s ago: executing program 4 (id=1389): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20008000) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.302405513s ago: executing program 4 (id=1391): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, 0x0, 0x0, r2}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0xa0}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r6, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @empty}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r9, 0x8000000000000003}, 0x18) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40200c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18) close(r10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4b, 0x4}]}, 0x10) 3.858013725s ago: executing program 4 (id=1397): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000080)="47a73eac805054bd5df7a50a1f850e927765d77a3bedc900fec7f9562268ac8cb8e77989e974d86b99cb630a386f70ddd1105f66f67a674d7e0306464e65388487f7d0bd07293386d81bfa103c15b01e62a2356aacdf20da26bc39578e4f92ac4a93d32fe5bd7a00ff326ef19bab26e7aa2393b4cae5505a3a4a19de542885", 0x7f}, {&(0x7f0000000140)="ce26b2ad4a539ca80e1312cb44ed4d89d1d08a9d2f349fcb892069a27146ebf988e85ee4101828556a3c7f47f63838b32fe98d81eee79f127da3a453758672797dd8cdc8fe18589f3708c8c0fa7af4c1d5d87741ab7af808950bc1498ffcd4ee6e39384d4de18d23151b6edc004d5dc1", 0x70}, {&(0x7f00000001c0)="ba0825d9ec6a7dd3ab410db89d874cb569b470967fd694a6ade2d78b8eda1a60b5be0c2480587c2517fc965359c34e93e3a1d6fdddb65880ed3f1fff36e8e97a994dfd9b3e23945787a74a099da1bbc695fb85cbaf0d747cabc0989557e9984a49065d1b44f22546a78e0b01af3e70c69066a847e675a2eac6e0c76d24b7adc0521cc593a0816047443a5baf52b8d6bed128dd", 0x93}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="180000000000000029000000370000002b000000430000000600006391134900000000001400000001000000290000000800000000000000000000001400000000000000290000003e000000fd060000"], 0x60}, 0x804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="a0002883781ecc0e"}], 0x1}}], 0x1, 0x0) socket$inet(0x2, 0x5, 0x2) 3.369718259s ago: executing program 4 (id=1404): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdff", @ANYRES32=r1, @ANYBLOB="140003"], 0x34}}, 0x0) 3.224068947s ago: executing program 4 (id=1406): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x5) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}}) 2.311540429s ago: executing program 3 (id=1418): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20008000) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.165923987s ago: executing program 3 (id=1421): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.154808588s ago: executing program 3 (id=1423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a0000010000000000000000000000181b0000", @ANYRES32, @ANYBLOB="020001008edae7d000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000200000001869000005000000000000000300000018110000", @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000380)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe00}, 0x94) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e22, 0x400, @local, 0x7f}}, 0x7, 0x4}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) readv(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 2.020139984s ago: executing program 3 (id=1425): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="9c1a68c1e036832c8cfe39236d3817597193b6c76d5a9cbee1d410d95590fb00cf2941ccc5afa81d3fe9b5ccf8f6c82c4c10d4a7686eeeacbd5e7e7539a50a5ca4c4373c6401a7e38b4f46ebe03533d8916fe01ea7702205de0fcdaa4b2bfdcfc4730bbbfdd545adf54ae44f483e930c2fe809f51e0d450a832ac92caa55424a61964e7fff82e8b70e188fffc890de123fcc3a27beb46393392907b725d4d38aee5d42ac4a8d0cf3032f0ffb14562f46e3e53f74c68d894cc60d96f3524de15c97ee9578a3ec968b05a5ac3c481a1c4483a38e17466bbb2618794f56e847f827a103bc81297daf5773e77d30c831a635e59ecb2ddd49b30971dfce51de16731c907f08aa31fdcb9798a8b988315e0bf35920026e03b6edcae75045dce828e4c425c2555a0659960e3b7bbdb8426e6e8f1ec78134f7b445398eb2f993dedca707e829565470ef5a9a9d334b0a250207852731479b1426830f9edd7d08586cc7fd6b111c8a0bb6e151bcd08bd0d5a8b920da71faf4a70919cc96ac461bf5c3279d74591172112cd5fcbf5f6f11821287ec9c57452fab99e60bfe10cb97e252525018d91188515ce94a8e97280f5a71042f50e728b1019aeda1eeb4da369db9830712a5ec8133a399e3e64efe28464d0f1f035ed6a05be2a4271acef0fad041e7548d3e80115f0b7e708132c563bb25e6572a519dbd8085f5bab25136db0b45188fec0e302ee025f5d032baf266bf3095bd7549c7a0dc6d52cd4266b9a100b23985ccccb613959614eb02327ffdfd09b4998a7c8db3d5c26b9c663cd52ab066979750e21a5fa45cb27dd85a2011be424a2db10017a8dde885bfbdb4ae95f2c461a49f8ff228d29752100dd801eb4170c6399022d989e5a775c226cdaae160d0a8884a1c3ec0a4502659b64c783f12bef074ae49007ae000d8935a3dd4a8b78c6f2bb0d493a931527d715a44fbabcd162ae4c0f8f7b9f87461c7595c42733b5741c9a35ca225864648e3ebd204227430c6b3ef1b9b0b8e78ad1c0eb07ba97e889771b552ded5234499b340a9ceb98aaf542721c7663fc6c39fb89988e9eb388fb0d4b46cfde84b8d79f8e9c24c4b313b8cfc752c83f7bc6971bcddc9ad44b4a18d2dab0ac26a8c73f95872efa202bc1cf7bc295ae3fd7e51bc2c6451896844f631569c47fdb7308519df83e46d9e5b569b7d351c10f7a85765245da6acff27315edbadbaaa48a5a97f1d67763de0f3feb7bbc4a1fef6dfc062396152b4e9132535ebfbe67de0e37bb6b13ee385ec4fce5fc74fcb503574e98ab40bafdf571bb9c5d99d049d716a3a9b76c6a648f9abbf12975cf870a8d0b5611c4fd84c5318951396f5dc83036fdac61e98e52c171cf4781c3a9e504a2e9f13de8f32eefae59bce3b0c018dad3764746d7c7dc2fdbc057534c8fb81896f094f97c30c41b10bdd006c003350b89baf0d2e4fc298445d3cbe01bcdd1efe83392e67adc3f8ea04b5429ea261adb69a554c580adcf1f392c4c0908b82ab1d4d319a132663e97343a37185fba96c4308fcc13d5f2ab5458e2b4d5ba83a047d3d263fcc30babf79e373e5888b664bf01c9e2897de4f0d6c2fbdefd425755a86b6f876c28421183d932d8483877bb5938df3ab646ce050b2f3c8bebf68899a52a24e171dee140d3552e666b0aa692bf4912667620f2cc09d9a66e776d9b4ad7a59effa582a753c3bbe0d64b1264f21434022c56ff450c38ec4decea4b9ce6668abe49deceb42c68ce8c57cc238785ef49a55f8ca2a087100b8d50f7c840d7c6dad10f7cfaa50267a8a2b3026085ca5b3dbed7baadcbeb70ec736c1c065f8ec482cfd77678b9235d39b9e05625d5f02a545cb1c193ab2e56c1acb6931b93d6d3c2e48725a0885866f7c293576e36957ce61e7e4dbbdf51c742397ca924c61e93206a8b45bc64815edd43eff02c8a5224f0ab61f288f7d05f0b46f705ab40f5e07598e5a06618c93c20dbcea9bdee7dfe6f9af50e9b22624d55a8ae9adde6a7833e4492010b6f64894a8251f5a066541cbd7bc2e9b015bb2698cee649ccdba61d44cf74bc409bc2be8cff942953083fd5224d90d62cf67552f3976c8295325460003a25c27c2a93ad7b3f9cac98b36af49e46195dbd0712e155b488dcb8e88aed2de250a0479095f8dba7daeac80217ee6a84886be75f34ad1399cc28d1e780475683d09ca822912d0a3dbccb79de8fc5b22f31b104cb7aa52c714ba3f00ada9314459a9ac4c29accb08e806763346eba4a0a3b5eed7ca834274f25efe7265f2c7d8b17fa7e7fea728522304cbc59d1984e214d7041d5e8d7229933fbcdfe7a4a688391ecdeb88670aa6f60d12bc62c5f95da5e665e352802587ce4d761d8a052d1794c2774c9c9a6878cb0fe5574bae8130a5877f3a6c3bd6bff681c7940be37ef117885e56c0d596dc7177f00218aa7e72748f2a1417285aa6bfcd670a8a0ab34b9a9b9184e8a4e85cbdfa4fa509b8d3f3af07c907125b2d9f72b8325325895197fc7f84f0dea781fcc1f83735b97d40f9458819303aa7f9f3a2f488612e9cd7d6a2a1b033b12e09de9e4ee9dc3fbb44982dadfe1b46b7d6af718085860351a740bfdf07521244921744d6f3b85ea244863d23d4b4bd2964a117658b83afb499b59872603ffd440d6ea518665b1718ceb5545b5b659f0c6e5e13e469c4b2e546825a7b6297533228112ff59d1be28cea71a553597fd1f582d60f28c64f299ef441d000efeb6ac2fd4fbc4530df75586614fc707f6d6910bd00435e5c46407eb52ae5014dc8505a1015bff8496db75aee35113f18db5cb18a054dcc2bff6120030ccc7bf0b6a8d93617905aab4eea7104629b844eb8a8bdff73466bd8ba1d3c9d1d14bfbebf50a70353beccbf9794f0600dc59780dfa2473370615dc6f1968dc937440a91d65b2377f23537240b5e80c0b1e405711888e1687fa7c8a20e2240bfe7f4546fa7551d6ad0793b0bbb354c3509d69baf7881289fdaa410657c6730806a90429ddd144ae4e150c4e5ad01965ce23c56e8538acf7eaa313237df5f8c800cbf1ede847870af4a2acb8252c10d08399d6ac71941a5fa3dcb6ff54bc513d1441b519f822b9cfd6bdd855b0d3ace3e97f7bfd8b96ead37efadbbb795d23d311893a3587d149263e1040f24f960c560c901ea1eac55c384a3557cd831115de32754de2aa042675780135f898dc55a7da9f3325f4337ce600464077836531789992513d1ea531036ca832bc224689f6d43a494fa2bfb2767f9d48661ca7b13e2789624ee40b53824a5e75160de9c14003ec76f1ea8feb6c936c09d42af1612cb5b4d758959bc713e2679f76dabc7f6336eefbd5c820283bddc89ab8e314486e431885a8b8e20032560d3dc451ff9a72ac6f2aa72d8850e3d86d6d8251449d96cff83ec89998293ae1cf81b0e769ba425aebabd39253b4f1f21cbaf5185a3684ec818a5bdda5ed3bd3e13bf2854ed0a990f68ef065cac903e15d068090bc1d384d60a57fed6fe7c1bdd081416ceada1f28573ee09f78a83f077c66dd4d6dfa647ba44638172df7ed4b399f297babdfccf897aad5dfc95c53d67a9d9afb22bb99c4eaae21dc906341d1d4994e7ed8eba2b8509a5803afb10107a29df7202a21ec95244f25d4a850b3d27f21df319256948f3b7ae004af13f3e71721351c1fea021ccbab825c68234cd5a906beb2d211a7567df9b2e3117bbe4859152b18be86513482dad7dad2a06d67ca948432221a594aac9083a2ed5547386bd99cedbadc3df6fd08480cefcfc0173befae484940a8a5004f504127bea1355e59a2a31b65a8c19022a658f42a61f985cd76b86d2d9712464c81e3e03fdae624e793b8f856e742a5105cd1ba690728ed9b6150aa11eb6c02df2ab89a67c264d0f3ff3765b2daeb1a3527381683acd1b4248c095e4e8dfe4250c7dc218d9bba0228f3e5dce8e40eadb192f899992301aed05e7ea816a51930d839c8b763d24cbd80129b92ac0d2bf29612394cc5ef215894dd9d2c803e7ca3d639fb20e09af92a3cb4e057709909cd1e24f43b149bf51d0fba0171c7c4915fe19fb5d94e239316108a23f44abb39a7bb08581424e8667b153761a2b56a8b7dc28d878d59100aa020b13be35031d2acfb749ef66f9f95bd81d786af0ad01a6deef2c7f84c532c11000aafa966065d7c68d4ec184b9108d4c5246f127eac87bd75fac67120083a844eb08b00db70bfa7ef0563e42285e823e93983536af3467d5c4de5229e4174867feca5fe30e1d39acb78b2e1d54991f681eb68f1a80db686edd77aed0875b98ca93cd63fd32b0f88ae2e7db96d517cf5f4ae32b68689da8dae275db19d7a80083f610a8be05415beb0c599b08921a2cdfefd0d75b1d4546ae3259ad18bdd5b8825e24b9790fbe2c2ebed57e31e2bc48853b860c0146920b4a2fdee408eeb1692b7fadccd0b8caf4f81ce20291b20083c548f631f97031bc40fbeb809253c8b04723561938f4a8edaa39735d8312b9f3c8f52438277ef7d5d9cf013b2ea56b6b6e29df760a127abb5e04b6afb45120c32dfc2dcc140bc84472f4bf667d693ea1dffedd2f573a33f628540dd76ee87c2cf1870d2956a161d403b81e2b92b5af1c1b0c6f45f8161e05eb5692da4f2b57d5424b835e696d5e222eb1ca061830aa7eba924f6ce9a69ade92d46cba55f020b86f3619a03d6f5615c1a820ebd9443865489bda699adc93efaea8fd1c6c8b6681b69800b2c774c56e4d9795ff172edf2a6bd3652b0509cee99821b4c1e8e5d8170142f308a159f4e339ab80ed57ed83dfd7c398549b41316d2479b8777738099e6e12692f37224cd77794a7583fb57ed884ef0221f1cb305a1e6390b8de846852fe20f61e1c20bfe65049ec816632a55cbe17fa9b42b81bc9b72812b384eef63b670f41fbf3542779d45a614b91ed8382cccf3b7277c8a643f4f77502b504d1eff556190885fff2101e01cce2686e927e370546432d74cc318c4ca885258c11883a947660f2f9bdfdf518d616a082ec68d6ed4619bfcf4525af7d734ec029bef7d100847757b222713e3f3c7ebad89964a378e72757486ad50517e6621437c776f9e0d01118cf4369b38cfa270083d3cd8080f8e4c0e4ad7226d9c5b354b14d4748216280ace0713dc710d08549447ea3abcfa6f13a52517ec5218617c36ebde32abbef00bc38ea0c4f9a55d14e1f388c947fbb2834787e38e3d12fb0ea5ae15dc854c65d3e3612de8c7811a875b43debb022d96f2dda4ceda426c71e64237b2b984523fce2d4c365f8960d1ba2355721bb14db11b4bd481f95b75cf2fd927049cac30034e3a884e73fe07707557db418134c6f51fd2eed9c4a915f4ff522625b745c3e6ec22549a5008e88d62a90f87fb2190a81726cb51b01abc78a68c046196404b95b258813b7196fe4f1b7ffcb9df5af2fdbb18ba84bc54b16aa6736058becb1a23dc8b91d6d8e23437918c353e3836926c82737d52fbf45674a525858161903df61521e06dc23f0e0dee4fe3008d9988e4c2746bf041133ca257569fceedac56fe36191671326e60c5f5cfbd4067e04258add502898b44db7c15cb5a1ef259531829cf9e7cccf79d147dec9854c312d80cb670c20abff4139f98e4dcc3f2ea42b7bc822be869925141e0ce70253ee319abe3e1342e8dfb00d8453abd4c633254412340094c0b43c0f9ca87b6bf538cde4f1001302a34bd098568cbdd0b339096a8c72bd143de63713c6829a7e21726ff78026ddee01ce13410dc420cc5f8ff315", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000080)="47a73eac805054bd5df7a50a1f850e927765d77a3bedc900fec7f9562268ac8cb8e77989e974d86b99cb630a386f70ddd1105f66f67a674d7e0306464e65388487f7d0bd07293386d81bfa103c15b01e62a2356aacdf20da26bc39578e4f92ac4a93d32fe5bd7a00ff326ef19bab26e7aa2393b4cae5505a3a4a19de542885", 0x7f}, {&(0x7f0000000140)="ce26b2ad4a539ca80e1312cb44ed4d89d1d08a9d2f349fcb892069a27146ebf988e85ee4101828556a3c7f47f63838b32fe98d81eee79f127da3a453758672797dd8cdc8fe18589f3708c8c0fa7af4c1d5d87741ab7af808950bc1498ffcd4ee6e39384d4de18d23151b6edc004d5dc1", 0x70}, {&(0x7f00000001c0)="ba0825d9ec6a7dd3ab410db89d874cb569b470967fd694a6ade2d78b8eda1a60b5be0c2480587c2517fc965359c34e93e3a1d6fdddb65880ed3f1fff36e8e97a994dfd9b3e23945787a74a099da1bbc695fb85cbaf0d747cabc0989557e9984a49065d1b44f22546a78e0b01af3e70c69066a847e675a2eac6e0c76d24b7adc0521cc593a0816047443a5baf52b8d6bed128dd", 0x93}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="180000000000000029000000370000002b000000430000000600006391134900000000001400000001000000290000000800000000000000000000001400000000000000290000003e000000fd060000"], 0x60}, 0x804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="a0002883781ecc0e"}], 0x1}}], 0x1, 0x0) socket$inet(0x2, 0x5, 0x2) 2.005219723s ago: executing program 2 (id=1427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1802}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x160, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfa}]}}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x201}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x881}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1802}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x160, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfa}]}}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x201}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x881}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) (async) 1.703204164s ago: executing program 0 (id=1429): syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x4, 0x70bd29, 0x25dfdbfd, {0x2, 0x3a, 0x14, 0x2, 0xfd, 0x3, 0x0, 0xa, 0x1200}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) 1.646772492s ago: executing program 3 (id=1430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="92200000002012800b00010067e56e6576ad000020000280140007002001000000000000dc5a000000000002080002007f00000100000000"], 0x50}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) getsockopt$PNPIPE_INITSTATE(r9, 0x113, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000340), 0x4) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r7, @ANYBLOB="0800a0009e090000080027000200000008002600a809"], 0x3c}}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fba6ed1e09dbb2d4010000000500140008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='io_uring_defer\x00', r0, 0x0, 0x1}, 0x18) 1.572341688s ago: executing program 0 (id=1431): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="33324ebb0a7f", 'pimreg\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.571137588s ago: executing program 1 (id=1432): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.555855706s ago: executing program 2 (id=1433): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) (async, rerun: 64) close(r1) (rerun: 64) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket(0x2, 0x2, 0x0) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r9, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r8}, 0x20) (async, rerun: 32) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000140)=0x9) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000180)={0x1, @null, @bpq0, 0x7fff, 'syz0\x00', @default, 0x8, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x62}, 0x94) 1.472011863s ago: executing program 0 (id=1434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x26000400) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2f8}}, 0x0) 1.356084905s ago: executing program 3 (id=1435): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002a00000095", @ANYBLOB="027a083cfed268d3c3ca62c56fad8734a8a45996501728246c2dba17e953bae97ecafefc17363916497f0b10cbdb0d2d996a135015126ab254ced8d0ee20c14851765d6c618bc49ef818ab5afa1d58c9c65afff7313455ff02f32dc929ec9ced7e27fdef541b33bf16ac53f0d4825c723b2ea662cd8ae9196a0771677f4d55a1c05ff81577b811e77fcc9969379601d9ece201e9f8fec66ef08c3a06a2c41476fa9c3dd4bb686a6a579a04206e7b3fb359d2968d9f8a7f0c1dfa07956ba58a76c88e9b60a73157584a19dd7049345d374557d0a70a9e1627de0435544a9505635d41f9bd74a934c0a8e9d4e170f591e0c08a09bb6e1b58", @ANYRESOCT=r0, @ANYRES8=r4, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) (async) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) 1.303883315s ago: executing program 1 (id=1436): socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x22, 0x80008, 0x4) (async) socket(0x22, 0x80008, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, 0x0, 0xfe9d) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x1, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xee4c}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x94}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0xa70544c2eb05d73b}, 0x80) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) pipe(&(0x7f00000045c0)) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f00000015c0)='5', 0x1}, {&(0x7f00000000c0)="57a015", 0x3}], 0x2, 0x7) (async) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f00000015c0)='5', 0x1}, {&(0x7f00000000c0)="57a015", 0x3}], 0x2, 0x7) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x9) (async) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x15, 0x80000, 0x8) (async) socket(0x15, 0x80000, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) 1.278143965s ago: executing program 2 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@setlink={0x40, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x40}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.173088695s ago: executing program 0 (id=1438): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300), &(0x7f0000000180)=0x8) 1.104180747s ago: executing program 1 (id=1439): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdfffffffedbdf", @ANYRES32=r1, @ANYBLOB="140003"], 0x34}}, 0x0) 702.825318ms ago: executing program 1 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="e58a7662f65977eb4213e9a0763123cccb08af8f7199f589efc1f40fb8b5dba49bc74c922e7f19fab43d9033f5d0b294eaa9ba36a969052a4c8d77fac918c2e434ca47965c08cc3ec12e035f1d9f319744b65a973ea007a2f601085d0fe5fe49b8fe434db284fe0fcda066c1ecc62ccb666c2b0d4920972372cde74e153d5921b9db25af74b7443082216f1e7af167496b0da5952c25f82c11cd6d94ad2dacd94ae7bbcfc6833d0df1770ed49565cd1aa084a71f3cd88dc9ca2d0fde3257f72820928235825ca48c386946ee4d788bb2397891e3edfaf789d9334aff2b232813f18f1b5c790d0bcaa881d513799867beabb864ad5577eafdc51666966bda54ea43e797db2ee3431b4287746a05c9bb1eb87a41d355f4ebe8350dd6e9d45ad9a8b40be82797c617aaa1020d6361b6e3c841e559ace223a17b552899cea1b7f5fc3aea37420cd3fafea9fea7827b3b85770036760e20c5c813582632bdba4327444f5d263e88f69fd33febb03839c171a7947e4a59f81aba039aba5209ffb57f4938f5906e8762e4eb06f5360d173d752e5178208cf9c6109d469c254f7fcd106e268ffe867410242934eb66fce0d4746cdd5c1b85f53cec3afccb3d7db8f6f6352dc76ab37f99d461cf493234690fa71fc0d4df39f6df11457b5eff7771e971737f09f2622bcbc47cd60b61cbcb923049bef1d05556075bd709d625008f42ba254544de78cc625eec50b4480054a9ee96d22297a55f828f17e275adb87d39ca50df6cb7516ffe7056de6ddbbbdbd56edc4bffdb807d2384e75ddb0c78f0d373f705271c6c7264be1f9cc898914ec794e4fe08fe7850d0f4c65d38f1bc8051d56b0277986c6798b00b2641c6a9eedd10f24dfeed98d87e7f8f9433fb69ed14650c6ee11078d811146f412aed47d9b1496af2f32b3ad88d8c30787eef0026d921aaf9980e7d94c605d1cc49fc43eeb064542481273c267cb31a2a3d4975e2de1e2c6a20a9ce0af34cbadb638d2944e4c25da158d5b3d416bc462eb6984772c23160fae58453f13b0f9467ea7c7969d833dd81249e1e8824f8d64a449f0ef8786c7a3079c197d894154c4f17abbb665c5c5ba9ec641a50592b291a5f937a574cd20e2954581a01040ec7802864fa3009ec03c97150a44c66874a89286d07de04e85f6c665b548e88ee2c6933ef851058921eaf6ad572e35c628336035e036ba3b1d8cb95e32d5c93ec364ed2a3f6853b708de6434aee615380e619fd2b9a04c885c4fd3626845eef282191a1975c1fd0dca7f2c88df29c798d6a98daf88effceae83542a36380dd28b362e20006b3bab5122e06fa62f425dda5ef7fe07b68615f5b4b24bc0af33c64ff306db7682365386b2abb579a2e8c5f7e6742d6c8cdec42dfb5232c75c16b801c33c65c4af85e7f182d91b727e1a02d955308d3afc467a465a6d7faa122fac4d2dc1b04080e36de549d64cfeb6d4c5ce11188c9564b25d918a22149fe3b324bafb724c94fc8afe6c92e3088e4ff9134a892580a0d6e4a27c6b0cbbd37c7010e35e55eaf339990e4da6513dbcb25be960f7038e337ec7cb7ed7638de2a1d44249b3387e04b3ad593a84fa623a43afebaacfacfb8a212f4f8c4ffa9d95b9ecd2a95e53f4b8067072a4d1c3d9b7a3a8e3d785fd9d19882f92c8e2ce0f3400575a992a33306c475694b2ac8b53a386090298e96f1fdc80bc1117539979dc0ec7f36900a0bea8f594970843b39fe3982db255e327014464969c60f493bb2d52b4fd3438106274453e282e20ee7e6ca0e9a2e97a412c65ea89a691ea1be898074520d4a59f2cd028adabcf6bdb94bcd18ee2c6786b0a26225f029a4f69801a09aa207fa974a5b6da4874ba33e3f7c873fa706be9b20b9406bfbc5f6678675c808a09a7b173a2f90aae1780fd90abd95ca069e62ea3f5f9ecb106897d2012d494467136af0eaf4a9adb242627c3c7a833fa006b6413ccf95b007f6863d9537d3c47bdb32bf711f6bb2a1c5355c04b42e120741c3387c1fb970b58d210381f2d452c960f40b9ed232ae0c2b1784ca482175cbaddd02e9134d8ea086c7d426f80ff19f539e7bb121662bc2d9ffd97e3673d6148d982fecb59adbe1a5b0679d924428856d4e785bf5d6435734452bd20aec9cc4168cd1309f07414ecac834a25b67a7274d8189b4197a196dac9725ac117da651f7ecca4a6e3573ea26082b69b43ef98ded5cc54e18c5d76e5b44505e32203cea206f4d7e032959e766f0d66ab53de2cfc33a74f76ba19edb03e3882ebe57683645ed73eae9e4084f472ed7d3bbd0908ee96a8dfe476dd59964f60ca1ec9a95a15824f3ba413fdf76daf493c63aa5c57b4fcdeb0a7c8835a6c124b6b67a2774f9146d9ab97e7da5ea7875f1094c7b3f104d3721e7afa95a658ff234df4d2892f8c8d13cfed6bebf55e9914062f45575aa66d164f3245e232248c67e07db230ebc4c4e6e2463445b2497c999a2c9d54100ba72d77b7d2c91f62ec1fe0317dcd255fdcd1859e478df7fd551261f1200623656c9bfe80504708c69938d7edabbf7d0b5e473777c254b3ad2e62eb36d0dfcece1f1e8a4d9c78ee47e61322993371a2eec1fdcd984623f9d6da48013335d60103db17564c2570bdcd965e8bd34b3d80157675d3b56043c07f9b59201bf32a965709fe040ed64bec54604d81390d4ceccf6601b20507d5e0f3e6b8e0e52774c9d9bff6f4f27e5b71b2a1934104d6a5ccc39eaee944ad873fb9d38bb3c7e82d80f643ba7ba5a296f2dea5170beaf0681cd83276681866ac9b30d61f36228918fa663c9cc21a8747101c865ddcae623f57c50a81e2488d45619a8765ba5eb9faed9fefbcf8d9025f61059e3de5dd0dbdc82c3e2eee734edd22f173243f0d76aa6335a095bea8c9284fa875a2b6e4097dc001369a2d33583b507444dba757edc5b5b7f21a5a4dd97f8252aac54653743228a7511deae3fa5b92494e60ed46dbbbc776d647bc2bfd7b973d289768b0fc011869d0ee2147c0395d6951e183424dbeb2592d11b66b57f71e89f1f51b38f658491523ada5e76615ee4cd616e8c528a52ac29bbae33f627dba9438eb9b03e8f616d0ce96d727871dd2e1c0073f95e303a1006aed24a35d9b387ef25576983e6b91dfce826819e6268b64cb2252c8f4f956b280115adef6c042ea90a03effcbe32e7db57841d5177fb5bf65c3c0870bbaf453a3bb28abcce8b174e5f2cd5cd5098c34789a54e0b36006e965afd2ac90ffc29c9f5da9e909f5352215c1191197a637f1486f822a94bf86e8bd7bd1fc3b63242e1886cc72158a5fdddb25585988d8897a9dd4608e938cc8feeb45f1e3a7843dcfd4c9d4bdac19be7e692e916a13001ba3475be603b8f478ed508a8889b620678404cf6e728ec800f7a228cf2f02cbc910a0658979c00aa44cecdc2cec17c4276934adfa425f545dd460f8b01c37cb94ecbf695329625c5394dc391ed1d9e9f9f1e824e2fc9845eb69404bda8ad2641818753ea285e71e1bd3d8127069c3d5c29addd2913f65d27bebb24c5b5f15e1c8bcb4331762b3d6b329a37185667395bded73aa6ac03189315653a6c8962cd87d92028d00d6320ba284ff98bab6895600cfeff340f676a63eab01709ac315add8f41207751095a5260c414be4a22a910c738e0b890972a4db0d45992a343b92292fafface5ab87724e642958312547577783796ad63eef591663cd022ffa170b17cfec33c239acf0b31a3a83c08157736bb390504af2b089dee8f076e920776229e1f3202c6addf3c45d34980bcf4b782bb2afbb363f8425c4e11322fa01e406b79871e90f49df29eab344e3f8cd8ff416a337b9550a4fa9a7c2b45ea1bd3f253c9e0096ba236f6af3c4ac48e284884bd46292caaf97c05a70cc9f44b66c20deae64882baf754531f51019b1284053fa36477977279df6d6aeb153f746e5c8a668b834ad1f1de036bf15e923bab9acdd8e87f27315d726b8994da7631f8221a35ce51570d261d010b09ce54398ebc6b5f58066de56bd0d88fb6ac804baf86580ec1ebcfe1a189276441d0062035ee2fe6cdebd8a59b426aeb0ad910f1591ce0aaf0138b7661c3f4dff6160e7db3fe630c50d9a8ac4619d0f120f3bcb9d3ae4c697e2bbb30986eb2f05a6a6103a9f52ca53b24eba417510cbc176b2ba308957d3220908b8a47efc14147930215d7255c0f40425cdc3d0e5b7107dac6b9538df4a288c5197f4d451de7eb07b4cfa03c3b7758994f7bfa6a37ed51641af390f311955eacb3a66b03205193e9f5e0632be9771f9342c51a4bb128804ab2b749509a2c63cdcac0d5d63302472534104e57557c4eaf66476937c96dab3d381d0e0fb2e54e2721ac187c8d3f62a74ae0f5cee5b513a1e29772f998ecbd562ab44e6f8528138b1dcf99428301332731e6bf454446826b5690122aba7db7e7989c4c0e6cc1e85aebafd8a6e5efeba394c77baf1caf99e45481ec0802a0e067b0d19260d6581f574fb941eb3fdd326bd75fe364babff78ab5c5a23c49bf36f494953f3c1e5c5435f3455d8f75f3ffadee3ef77d0df669b63eee783d80287d18b602b647d6d80e037f80770c198d14af16cececbc3afdb8ecac9ab55e20b77f37646d7175fd9968a9b1629d9a67dc09ae4d6e74776cdc0595f169ead5f6f63c51995ffa39662fe3d2437620ce95d5cce893e904891045fdf621b64cf70b02d8d0f50e340ab1f5c581b087e5fe606b86fcc616592cdf90f7ad11b291e23990856f2b1a202b8cbfd955bdaebc519e9ee5969afb98e13e99faafe97af07ad6f17729ca04349abcfcacd3d476e1695acdb492343371ae654410f8b4921433079c962d48ce996e4ea01f0f17a9fed130b6e34a03e8efec02f5f8c3dbb8a197af689b3b787e63c737cabc76b564ec9a08b903c14ca846f23ec472ddb8e88c77b80cd0f9f485ad827fd09f42c9fb26c1c773e8c9669001a5326b2b7afc59947fd3980d169ea7d1a3442db97be62375d463c75d8f7203c03bc9afe822fb3673696bee8ec3eec6c657a965d4ce4a60660efa70266dbf0bb5bb3d6a45a196145bd7df0372387ddcb84eb19ca795eb06081b65bb7e25cb08d1fb703b8abd41673b64d376ad2625c5577282ca5c2203d1f4970b683fd3755dc8c79d75f405b76259ded9a34a011b3ff54ba76b76a6ad36de209f4954b82eaf798c6fa7f3015a77f378341ea14663153eaff347b63bca4c5ae8292211442c95bce4bf78ce487647437dad16299e9efae1326d3bb7d5cd7fd0d1bae1dbb9976cc2a82f5e801577e810947577328d961d8f0310b4632dcb4356db7662361d71af77687c0e15d7619a8b40dfddfef5e29cad673737e0170f0b0d82530a557304d4f38da2ccc905c609e811d7d300a6e365c5b6011d0f1c78c42dd29956bd72b366a795be34d9b3b5ce487886dc0b96892389134c1da24da906d5f4a92a04ef256a88e34c7a794420906428d2e4f2e2834c7ecf84e8e53c1fdf01a330dd24fa84aa4cb45e98605d9bfea7eb9d37c9d9336f973ee78158377bd820ffa4a69bedfa1fc90581a551985cfa3de933782a49b662ba3b822529b399306653e3cb0b676ccc421e30eaf4d7ee5c3e8488be913c6e5cc139a488de8be732a8e21c92bcc48a27dc1fcc57eb9140bdeaa7d3220ba5bdcc077f94dc32549c69417b522a1966c107bbf45721bd27bfdf765e781c9f7eec0b0dc6189b1d3d81507bcc07c327f2eed278a06d2ffbcbdfa0a2bceaee35ddf168ac2b485f437e7ab293e0cadba45d5", 0x1000}, {&(0x7f0000000080)="47a73eac805054bd5df7a50a1f850e927765d77a3bedc900fec7f9562268ac8cb8e77989e974d86b99cb630a386f70ddd1105f66f67a674d7e0306464e65388487f7d0bd07293386d81bfa103c15b01e62a2356aacdf20da26bc39578e4f92ac4a93d32fe5bd7a00ff326ef19bab26e7aa2393b4cae5505a3a4a19de542885", 0x7f}, {&(0x7f0000000140)="ce26b2ad4a539ca80e1312cb44ed4d89d1d08a9d2f349fcb892069a27146ebf988e85ee4101828556a3c7f47f63838b32fe98d81eee79f127da3a453758672797dd8cdc8fe18589f3708c8c0fa7af4c1d5d87741ab7af808950bc1498ffcd4ee6e39384d4de18d23151b6edc004d5dc1", 0x70}, {&(0x7f00000001c0)="ba0825d9ec6a7dd3ab410db89d874cb569b470967fd694a6ade2d78b8eda1a60b5be0c2480587c2517fc965359c34e93e3a1d6fdddb65880ed3f1fff36e8e97a994dfd9b3e23945787a74a099da1bbc695fb85cbaf0d747cabc0989557e9984a49065d1b44f22546a78e0b01af3e70c69066a847e675a2eac6e0c76d24b7adc0521cc593a0816047443a5baf52b8d6bed128dd", 0x93}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="180000000000000029000000370000002b000000430000000600006391134900000000001400000001000000290000000800000000000000000000001400000000000000290000003e000000fd060000"], 0x60}, 0x804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="a0002883781ecc0e"}], 0x1}}], 0x1, 0x0) socket$inet(0x2, 0x5, 0x2) 667.577056ms ago: executing program 2 (id=1441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) (async) poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400) (async) shutdown(r0, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) (async) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket(0x18, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 64) r10 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40840) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 556.321099ms ago: executing program 2 (id=1442): unshare(0x2c060000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 403.652358ms ago: executing program 1 (id=1443): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf250900000038000380", @ANYRESOCT=r1], 0x4c}}, 0x48040) (async) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x8084, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0xffffffff, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 391.541616ms ago: executing program 2 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x94, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_DFS_REGION={0x0, 0x92, 0x7f}, @NL80211_ATTR_REG_RULES={0x0, 0x22, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0xaab}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x8}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x6}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x88db}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x8783}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x6c9}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0xfffffffd}]}]}, @NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_REG_ALPHA2={0x0, 0x21, 'b\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 188.181263ms ago: executing program 1 (id=1445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a2b0300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 186.780479ms ago: executing program 0 (id=1446): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 71.053661ms ago: executing program 4 (id=1447): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000bc7d135ad81c0000000000000000000000000000000000000000000000feff"]}, 0x108) 0s ago: executing program 0 (id=1448): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000340)=""/103, 0x67}], 0x7}, 0x80000002}], 0x4, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000220000095000000000000003e2f332cb8f20647e9440f00e671658546904f3683b8172d66958e37bc5d904633fb553fab5fc5ce090be51c85ba481bd6fc620f49e50af63f4a0ef0b22d1becb623a22f1b6e2389f1"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x40f00, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40804) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) socket(0x1, 0x803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet6(0xa, 0x800, 0x8000000003c) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x2, 0xd, 0x100, 0x0, 0xc4a90191}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085007b7fd4e600001801000020646c2500000020002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008009c8c850000006d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000000000e670ae543f700000000851000000200000085000000b0a17a47855223706ddbf9c2ac3458760000009552fbff0de28595f4d7aa371dbbb1198a4498744853d90c1d9785a5a94ca90801ca7f8badf0ddf4b14281d63d5c634314eb7a12a86d07366fa7a13d8eb11488ffea15cf16d4432d47f8d7e3926b4611176d6f9a5fd2af84960ea1d1"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYRES64=r4], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): m netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.262198][ T6502] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.303322][ T6502] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.328659][ T6502] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.351850][ T6502] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.365762][ T6502] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.377008][ T6787] tipc: Started in network mode [ 118.381909][ T6787] tipc: Node identity , cluster identity 4711 [ 118.388730][ T6787] tipc: Failed to obtain node identity [ 118.388903][ T6788] __nla_validate_parse: 2 callbacks suppressed [ 118.388920][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 118.395040][ T6787] tipc: Enabling of bearer rejected, failed to enable media [ 118.632042][ T6787] syzkaller0: entered promiscuous mode [ 118.658063][ T6787] syzkaller0: entered allmulticast mode [ 118.666838][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 119.192957][ T6808] netlink: 'syz.0.214': attribute type 32 has an invalid length. [ 119.217065][ T6808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.214'. [ 119.348896][ T5846] Bluetooth: hci4: command tx timeout [ 121.374306][ T6845] pim6reg1: entered allmulticast mode [ 121.462828][ T6849] tipc: Enabled bearer , priority 0 [ 121.922138][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 121.986018][ T6871] tipc: Enabled bearer , priority 0 [ 122.024149][ T6871] syzkaller0: entered promiscuous mode [ 122.046789][ T6871] syzkaller0: entered allmulticast mode [ 122.140386][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'. [ 122.178871][ T6882] netlink: ct family unspecified [ 122.184078][ T6882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.241228][ T6877] tipc: Resetting bearer [ 122.325206][ T6877] tipc: Disabling bearer [ 122.477637][ T6892] netlink: 92 bytes leftover after parsing attributes in process `syz.0.235'. [ 122.566329][ T6897] pim6reg1: entered promiscuous mode [ 122.571774][ T6897] pim6reg1: entered allmulticast mode [ 122.994469][ T5999] tipc: Node number set to 996988137 [ 123.313878][ T6934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.247'. [ 123.496853][ T6940] trusted_key: syz.4.249 sent an empty control message without MSG_MORE. [ 123.547875][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 124.892396][ T6978] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 125.202792][ T6987] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 125.229515][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.229832][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 125.247197][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.282213][ T6992] netlink: 'syz.4.264': attribute type 16 has an invalid length. [ 125.291848][ T6992] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.264'. [ 125.332614][ T6987] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 125.648671][ T6999] netlink: 'syz.2.267': attribute type 32 has an invalid length. [ 125.688436][ T6999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.267'. [ 125.906298][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'. [ 126.712304][ T7058] Bluetooth: MGMT ver 1.23 [ 126.926434][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 127.315436][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.283'. [ 127.685750][ T7095] lo: entered promiscuous mode [ 127.705096][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 127.707419][ T7093] warning: `syz.3.292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.091916][ T7111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.339212][ T7117] syzkaller0: entered promiscuous mode [ 128.345211][ T7117] syzkaller0: entered allmulticast mode [ 128.358867][ T7088] lo: left promiscuous mode [ 128.386048][ T7122] pim6reg1: entered promiscuous mode [ 128.404340][ T7122] pim6reg1: entered allmulticast mode [ 128.465612][ T7125] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 128.620265][ T7139] __nla_validate_parse: 1 callbacks suppressed [ 128.620282][ T7139] netlink: 56 bytes leftover after parsing attributes in process `syz.2.303'. [ 128.636065][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 128.669089][ T7141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.299'. [ 129.779447][ T7125] dummy0: entered promiscuous mode [ 129.786409][ T7125] bond0: (slave dummy0): Releasing backup interface [ 129.799787][ T7125] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 129.902074][ T7144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.914840][ T7144] team0: Port device bond2 added [ 129.957564][ T7162] Cannot find set identified by id 0 to match [ 130.150019][ T7169] netlink: 104 bytes leftover after parsing attributes in process `syz.0.308'. [ 130.383568][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'. [ 130.449577][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 130.578673][ T7197] tipc: Started in network mode [ 130.594254][ T7197] tipc: Node identity d248cdc56d92, cluster identity 4711 [ 130.610331][ T7197] tipc: Enabled bearer , priority 0 [ 130.618937][ T7197] syzkaller0: entered promiscuous mode [ 130.629035][ T7197] syzkaller0: entered allmulticast mode [ 130.631518][ T7202] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.653636][ T7197] tipc: Resetting bearer [ 130.661959][ T7196] tipc: Resetting bearer [ 130.679224][ T7196] tipc: Disabling bearer [ 130.720195][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 131.140429][ T7220] Bluetooth: MGMT ver 1.23 [ 131.314359][ T7226] netlink: 84 bytes leftover after parsing attributes in process `syz.1.326'. [ 131.367607][ T7226] ip6gre1: entered promiscuous mode [ 131.401979][ T7237] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 131.428372][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 131.492522][ T7240] netlink: 92 bytes leftover after parsing attributes in process `syz.1.331'. [ 131.658722][ T7253] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 131.721588][ T7253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.758920][ T7259] tipc: Enabling of bearer rejected, failed to enable media [ 132.712510][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719108][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720149][ T7295] netlink: 'syz.1.342': attribute type 83 has an invalid length. [ 133.672068][ T7303] dummy0: left promiscuous mode [ 133.729729][ T7336] __nla_validate_parse: 4 callbacks suppressed [ 133.729749][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 133.782948][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.060156][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.092169][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.502244][ T7303] tipc: Resetting bearer [ 134.602640][ T7303] ip6gre1: left promiscuous mode [ 134.774977][ T759] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.784014][ T49] wlan0: Trigger new scan to find an IBSS to join [ 134.804102][ T759] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.838149][ T759] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.856823][ T759] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.375976][ T7388] netlink: 100 bytes leftover after parsing attributes in process `syz.1.364'. [ 135.425261][ T7388] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 135.677930][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 135.691325][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 135.737084][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.761200][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.769645][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.865572][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.074272][ T7422] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 136.076224][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.088843][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 136.135817][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'. [ 136.197002][ T7427] netlink: 'syz.1.377': attribute type 72 has an invalid length. [ 136.213233][ T7427] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.377'. [ 136.646479][ T7446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.383'. [ 136.707738][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 136.713897][ T7445] syzkaller1: entered promiscuous mode [ 136.728588][ T7445] syzkaller1: entered allmulticast mode [ 136.814811][ T7452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.835222][ T7452] bond0: (slave bond1): Enslaving as an active interface with an up link [ 136.846944][ T7454] netlink: 'syz.1.385': attribute type 8 has an invalid length. [ 136.951407][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 137.090734][ T7477] ip6gre1: entered promiscuous mode [ 137.356010][ T7501] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 137.503697][ T5846] Bluetooth: hci0: command tx timeout [ 137.591390][ T7509] batadv_slave_1: entered promiscuous mode [ 137.599021][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.617212][ T7509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.628106][ T7509] lo: entered allmulticast mode [ 137.635798][ T7508] lo: left allmulticast mode [ 137.716879][ T7514] netlink: 'syz.2.402': attribute type 83 has an invalid length. [ 137.744255][ T6515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.152203][ T7536] netlink: 'syz.1.408': attribute type 9 has an invalid length. [ 138.206990][ T7536] macvlan2: entered promiscuous mode [ 138.236606][ T7536] hsr0: entered promiscuous mode [ 138.255897][ T7536] macvlan2: entered allmulticast mode [ 138.272146][ T7536] hsr0: entered allmulticast mode [ 138.283590][ T7536] hsr_slave_0: entered allmulticast mode [ 138.289407][ T7536] hsr_slave_1: entered allmulticast mode [ 138.474361][ T7555] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 138.512359][ T7553] pim6reg1: entered promiscuous mode [ 138.518126][ T7553] pim6reg1: entered allmulticast mode [ 138.850206][ T7576] __nla_validate_parse: 8 callbacks suppressed [ 138.850224][ T7576] netlink: 96 bytes leftover after parsing attributes in process `syz.0.418'. [ 138.889988][ T7576] netlink: 96 bytes leftover after parsing attributes in process `syz.0.418'. [ 138.932400][ T7571] syzkaller1: entered promiscuous mode [ 138.946503][ T7571] syzkaller1: entered allmulticast mode [ 139.030428][ T6515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.041782][ T6515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.058665][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.419528][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 139.438338][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 139.452641][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.512051][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.628832][ T7609] netlink: 'syz.2.429': attribute type 3 has an invalid length. [ 139.665535][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 139.823505][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.944820][ T7621] netlink: 'syz.1.432': attribute type 3 has an invalid length. [ 139.991608][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 140.011879][ T7626] tipc: Started in network mode [ 140.019227][ T7626] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 140.029653][ T7626] tipc: Enabled bearer , priority 0 [ 140.101429][ T7630] netdevsim netdevsim2: Direct firmware load for . [ 140.101429][ T7630] failed with error -2 [ 140.123183][ T7630] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 140.123183][ T7630] [ 140.184835][ T7635] x_tables: duplicate underflow at hook 1 [ 140.259633][ T7636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.279198][ T7635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.680905][ T7649] gretap2: entered promiscuous mode [ 140.889416][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 140.982715][ T7626] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 141.035950][ T5887] tipc: Node number set to 15444650 [ 141.054604][ T7642] netlink: 'syz.4.437': attribute type 2 has an invalid length. [ 141.150307][ T7671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 141.267786][ T7681] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 141.272738][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 141.318646][ T7684] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 141.360072][ T7681] batman_adv: batadv0: Adding interface: team0 [ 141.361208][ T7684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.448'. [ 141.383405][ T7681] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.446624][ T7681] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 141.477293][ T7684] team0: entered promiscuous mode [ 141.491635][ T7684] team_slave_0: entered promiscuous mode [ 141.498389][ T7688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.509667][ T7684] team_slave_1: entered promiscuous mode [ 141.522430][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.530266][ T7684] batman_adv: batadv0: Interface activated: team0 [ 141.537184][ T7684] batman_adv: batadv0: Interface deactivated: team0 [ 141.544010][ T7684] batman_adv: batadv0: Removing interface: team0 [ 141.552549][ T7684] bridge0: port 3(team0) entered blocking state [ 141.569000][ T7684] bridge0: port 3(team0) entered disabled state [ 141.584274][ T7684] team0: entered allmulticast mode [ 141.595258][ T7684] team_slave_0: entered allmulticast mode [ 141.601673][ T7684] team_slave_1: entered allmulticast mode [ 141.687876][ T7708] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 141.696492][ T7708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.898686][ T7713] x_tables: duplicate underflow at hook 3 [ 142.149313][ T7724] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 142.159116][ T7724] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 142.990520][ T7754] team0: Port device netdevsim0 removed [ 143.628124][ T7819] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 143.757605][ T7341] IPVS: starting estimator thread 0... [ 143.853720][ T7826] IPVS: using max 29 ests per chain, 69600 per kthread [ 143.876471][ T7834] __nla_validate_parse: 16 callbacks suppressed [ 143.876487][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 143.947951][ T7841] netlink: 76 bytes leftover after parsing attributes in process `syz.3.496'. [ 143.955554][ T7842] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 143.969599][ T7841] netlink: 'syz.3.496': attribute type 25 has an invalid length. [ 143.973625][ T7842] netlink: 'syz.1.495': attribute type 4 has an invalid length. [ 143.993375][ T7842] netlink: 192 bytes leftover after parsing attributes in process `syz.1.495'. [ 144.027353][ T7845] Bluetooth: MGMT ver 1.23 [ 144.339653][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 144.623366][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 144.690290][ T7866] bridge0: entered promiscuous mode [ 144.701800][ T7866] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 144.780099][ T7870] tipc: Enabled bearer , priority 0 [ 144.862538][ T7870] syzkaller0: entered promiscuous mode [ 144.884752][ T7870] syzkaller0: entered allmulticast mode [ 144.911120][ T7872] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 144.921262][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.952387][ T7872] bond0: (slave team0): Enslaving as an active interface with an up link [ 145.000030][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 145.012165][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 145.040139][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 145.048102][ T7870] tipc: Resetting bearer [ 145.058260][ T7881] pim6reg1: entered promiscuous mode [ 145.066775][ T7881] pim6reg1: entered allmulticast mode [ 145.129687][ T7869] tipc: Resetting bearer [ 145.163293][ T7869] tipc: Disabling bearer [ 145.177250][ T7889] xt_connbytes: Forcing CT accounting to be enabled [ 145.187837][ T7889] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.201967][ T7889] xt_bpf: check failed: parse error [ 145.270569][ T7887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'. [ 145.337419][ T7895] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 145.353494][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 145.381692][ T7897] tipc: Enabled bearer , priority 0 [ 145.396876][ T7895] bridge0: entered promiscuous mode [ 145.406787][ T7895] bridge0: left promiscuous mode [ 145.537098][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 146.134215][ T7934] syz.2.525 uses old SIOCAX25GETINFO [ 146.194634][ T7940] tipc: Started in network mode [ 146.212425][ T7940] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 146.242989][ T7940] tipc: Enabled bearer , priority 0 [ 146.383075][ T5914] tipc: Node number set to 3218787781 [ 146.449426][ T7952] IPVS: set_ctl: invalid protocol: 960 0.32.0.0:31744 [ 146.477898][ T7952] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 147.296281][ T8008] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 147.326512][ T8014] Cannot find del_set index 0 as target [ 147.334841][ T8013] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 147.343950][ T8014] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 147.352009][ T8008] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 147.362054][ T7341] tipc: Node number set to 15444650 [ 147.427377][ T8014] team0: Port device geneve0 added [ 147.495245][ T8022] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 147.618012][ T8023] bond2: (slave geneve2): making interface the new active one [ 147.627530][ T8023] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 147.642425][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.643171][ T5946] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.656842][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.701981][ T5946] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.730102][ T5946] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.761819][ T5946] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.914687][ T8035] netlink: 'syz.4.555': attribute type 11 has an invalid length. [ 147.936829][ T8035] netlink: 'syz.4.555': attribute type 11 has an invalid length. [ 148.049530][ T7496] nci: nci_rx_work: unknown MT 0x1 [ 148.703273][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.752881][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.205832][ T8092] tipc: Enabled bearer , priority 0 [ 149.218433][ T8092] syzkaller0: entered promiscuous mode [ 149.226402][ T8092] syzkaller0: entered allmulticast mode [ 149.237910][ T8092] netlink: 'syz.3.570': attribute type 2 has an invalid length. [ 149.270311][ T8092] tipc: Resetting bearer [ 149.318147][ T8092] tipc: Resetting bearer [ 149.359763][ T8092] tipc: Disabling bearer [ 149.441544][ T8103] __nla_validate_parse: 7 callbacks suppressed [ 149.441561][ T8103] netlink: 176 bytes leftover after parsing attributes in process `syz.2.571'. [ 149.644195][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.576'. [ 149.658520][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 149.683739][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.576'. [ 149.714427][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.576'. [ 149.941625][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.039288][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.090036][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.097854][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.140140][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 150.144729][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.175101][ T7339] IPVS: starting estimator thread 0... [ 150.241406][ T8153] netlink: 'syz.3.585': attribute type 39 has an invalid length. [ 150.263267][ T8143] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.339618][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.425921][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 150.445448][ T8128] tipc: Resetting bearer [ 150.540550][ T8159] ip6tnl1: entered promiscuous mode [ 150.546224][ T8159] ip6tnl1: entered allmulticast mode [ 150.563512][ T7495] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.583423][ T7495] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.606611][ T7495] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.618118][ T7495] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.647752][ T7495] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.668498][ T7495] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.680716][ T7495] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.720105][ T7495] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.826568][ T8168] sctp: [Deprecated]: syz.3.591 (pid 8168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.826568][ T8168] Use struct sctp_sack_info instead [ 151.012409][ T8181] bridge0: port 3(macsec0) entered blocking state [ 151.032691][ T8181] bridge0: port 3(macsec0) entered disabled state [ 151.057678][ T8181] macsec0: entered allmulticast mode [ 151.067616][ T8181] veth1_macvtap: entered allmulticast mode [ 151.082478][ T8181] macsec0: entered promiscuous mode [ 151.092341][ T8181] bridge0: port 3(macsec0) entered blocking state [ 151.099318][ T8181] bridge0: port 3(macsec0) entered forwarding state [ 151.262153][ T8191] tipc: New replicast peer: 255.255.255.255 [ 151.285609][ T8191] tipc: Enabled bearer , priority 10 [ 151.641655][ T8197] syzkaller0: entered promiscuous mode [ 151.647781][ T8197] syzkaller0: entered allmulticast mode [ 151.765369][ T8216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 151.970707][ T8226] tipc: Enabling of bearer rejected, already enabled [ 152.638088][ T8258] netlink: 'syz.0.620': attribute type 3 has an invalid length. [ 154.922434][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.073338][ T8342] __nla_validate_parse: 7 callbacks suppressed [ 155.073357][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 155.172285][ T8331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.189001][ T8331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.211310][ T8331] bond0 (unregistering): (slave bond1): Releasing backup interface [ 155.229782][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 155.232505][ T8331] bond0 (unregistering): Released all slaves [ 155.407139][ T8354] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 155.680878][ T8370] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 155.708651][ T8370] netlink: 'syz.3.648': attribute type 49 has an invalid length. [ 155.732626][ T8372] netlink: 'syz.0.647': attribute type 21 has an invalid length. [ 155.811220][ T8372] netlink: 'syz.0.647': attribute type 6 has an invalid length. [ 155.832656][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.842600][ T8372] netlink: 64 bytes leftover after parsing attributes in process `syz.0.647'. [ 155.851999][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 155.871106][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 155.927760][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 156.180996][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 156.594003][ T8412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.598676][ T8411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.640546][ T8414] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.952387][ T8432] tipc: Enabling of bearer rejected, already enabled [ 157.164929][ T8452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 157.185662][ T8456] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 157.322633][ T8472] Bluetooth: MGMT ver 1.23 [ 158.196009][ T8504] sctp: [Deprecated]: syz.0.681 (pid 8504) Use of int in max_burst socket option. [ 158.196009][ T8504] Use struct sctp_assoc_value instead [ 158.260076][ T8505] syzkaller0: entered promiscuous mode [ 158.274293][ T8505] syzkaller0: entered allmulticast mode [ 158.325595][ T8510] macsec1: entered promiscuous mode [ 158.530143][ T8520] sctp: [Deprecated]: syz.2.692 (pid 8520) Use of int in max_burst socket option deprecated. [ 158.530143][ T8520] Use struct sctp_assoc_value instead [ 158.548229][ T8523] tipc: Enabling of bearer rejected, already enabled [ 158.625494][ T8528] netlink: 'syz.4.690': attribute type 21 has an invalid length. [ 158.918037][ T8545] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 158.932935][ T8549] netlink: 'syz.1.698': attribute type 11 has an invalid length. [ 159.240604][ T8561] tipc: Enabling of bearer rejected, already enabled [ 159.423742][ T8570] FAULT_INJECTION: forcing a failure. [ 159.423742][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.445236][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.3.706 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 159.445266][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.445277][ T8570] Call Trace: [ 159.445285][ T8570] [ 159.445294][ T8570] dump_stack_lvl+0x189/0x250 [ 159.445324][ T8570] ? __pfx____ratelimit+0x10/0x10 [ 159.445355][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.445379][ T8570] ? __pfx__printk+0x10/0x10 [ 159.445420][ T8570] should_fail_ex+0x414/0x560 [ 159.445446][ T8570] _copy_from_user+0x2d/0xb0 [ 159.445474][ T8570] bpf_test_init+0xf8/0x170 [ 159.445510][ T8570] bpf_prog_test_run_skb+0x1e9/0x1560 [ 159.445539][ T8570] ? __fget_files+0x2a/0x420 [ 159.445559][ T8570] ? __fget_files+0x2a/0x420 [ 159.445585][ T8570] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 159.445617][ T8570] bpf_prog_test_run+0x2c4/0x340 [ 159.445640][ T8570] __sys_bpf+0x4a4/0x860 [ 159.445673][ T8570] ? __pfx___sys_bpf+0x10/0x10 [ 159.445724][ T8570] ? rcu_is_watching+0x15/0xb0 [ 159.445755][ T8570] __x64_sys_bpf+0x7c/0x90 [ 159.445783][ T8570] do_syscall_64+0xfa/0x3b0 [ 159.445811][ T8570] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.445838][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.445856][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 159.445885][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.445903][ T8570] RIP: 0033:0x7fb78398e9a9 [ 159.445925][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.445940][ T8570] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.445967][ T8570] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 159.445981][ T8570] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 159.445992][ T8570] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 159.446002][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.446012][ T8570] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 159.446040][ T8570] [ 161.060688][ T8598] __nla_validate_parse: 4 callbacks suppressed [ 161.060705][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 161.162566][ T8609] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 161.370299][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 161.739062][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.792916][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 161.816447][ T8640] lo speed is unknown, defaulting to 1000 [ 161.836597][ T8640] lo speed is unknown, defaulting to 1000 [ 161.852601][ T8640] lo speed is unknown, defaulting to 1000 [ 162.524915][ T7341] lo speed is unknown, defaulting to 1000 [ 162.531736][ T8640] infiniband syz0: set down [ 162.536828][ T8640] infiniband syz0: added lo [ 162.600665][ T8640] RDS/IB: syz0: added [ 162.605933][ T8640] smc: adding ib device syz0 with port count 1 [ 162.612323][ T8640] smc: ib device syz0 port 1 has pnetid [ 162.620274][ T7341] lo speed is unknown, defaulting to 1000 [ 162.632536][ T8640] lo speed is unknown, defaulting to 1000 [ 162.706041][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 163.009323][ T8659] lo speed is unknown, defaulting to 1000 [ 163.265781][ T8640] lo speed is unknown, defaulting to 1000 [ 163.906717][ T8640] lo speed is unknown, defaulting to 1000 [ 164.311223][ T8640] lo speed is unknown, defaulting to 1000 [ 164.383744][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 164.438155][ T8693] tipc: Enabling of bearer rejected, already enabled [ 164.477538][ T8690] pim6reg1: entered promiscuous mode [ 164.503774][ T8690] pim6reg1: entered allmulticast mode [ 164.577886][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.747'. [ 164.671090][ T8690] veth3: entered promiscuous mode [ 164.698351][ T8690] bond1: (slave veth3): Enslaving as an active interface with an up link [ 164.746030][ T8640] lo speed is unknown, defaulting to 1000 [ 164.750421][ T8694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.762893][ T8710] netlink: 124 bytes leftover after parsing attributes in process `syz.4.753'. [ 164.998157][ T8715] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.755'. [ 165.094443][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.116063][ T8724] netlink: 'syz.3.758': attribute type 32 has an invalid length. [ 165.151170][ T8724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.758'. [ 165.185276][ T8726] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.756'. [ 165.428511][ T8736] IPv6: NLM_F_REPLACE set, but no existing node found! [ 165.983283][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.113651][ T8767] FAULT_INJECTION: forcing a failure. [ 166.113651][ T8767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.147146][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.3.768 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 166.147175][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.147187][ T8767] Call Trace: [ 166.147195][ T8767] [ 166.147204][ T8767] dump_stack_lvl+0x189/0x250 [ 166.147235][ T8767] ? __pfx____ratelimit+0x10/0x10 [ 166.147267][ T8767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.147291][ T8767] ? __pfx__printk+0x10/0x10 [ 166.147333][ T8767] should_fail_ex+0x414/0x560 [ 166.147359][ T8767] _copy_to_user+0x31/0xb0 [ 166.147396][ T8767] bpf_test_finish+0x24e/0x700 [ 166.147439][ T8767] ? __pfx_bpf_test_finish+0x10/0x10 [ 166.147475][ T8767] ? slab_build_skb+0x273/0x3e0 [ 166.147499][ T8767] bpf_prog_test_run_skb+0xed5/0x1560 [ 166.147545][ T8767] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 166.147577][ T8767] bpf_prog_test_run+0x2c4/0x340 [ 166.147602][ T8767] __sys_bpf+0x4a4/0x860 [ 166.147635][ T8767] ? __pfx___sys_bpf+0x10/0x10 [ 166.147679][ T8767] ? ksys_write+0x22a/0x250 [ 166.147708][ T8767] ? __pfx_ksys_write+0x10/0x10 [ 166.147732][ T8767] ? rcu_is_watching+0x15/0xb0 [ 166.147764][ T8767] __x64_sys_bpf+0x7c/0x90 [ 166.147793][ T8767] do_syscall_64+0xfa/0x3b0 [ 166.147811][ T8767] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.147841][ T8767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.147861][ T8767] ? clear_bhb_loop+0x60/0xb0 [ 166.147886][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.147905][ T8767] RIP: 0033:0x7fb78398e9a9 [ 166.147923][ T8767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.147939][ T8767] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.147961][ T8767] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 166.147976][ T8767] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 166.147988][ T8767] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 166.148000][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.148012][ T8767] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 166.148043][ T8767] [ 166.371698][ T8769] __nla_validate_parse: 3 callbacks suppressed [ 166.371717][ T8769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.769'. [ 166.387383][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 166.604005][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 166.613434][ T8784] tipc: Enabling of bearer rejected, already enabled [ 166.782892][ T8795] Cannot find set identified by id 1 to match [ 166.945846][ T8799] netlink: 124 bytes leftover after parsing attributes in process `syz.3.779'. [ 166.963887][ T8803] FAULT_INJECTION: forcing a failure. [ 166.963887][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.996920][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.2.780 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 166.996950][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.996962][ T8803] Call Trace: [ 166.996970][ T8803] [ 166.996978][ T8803] dump_stack_lvl+0x189/0x250 [ 166.997010][ T8803] ? __pfx____ratelimit+0x10/0x10 [ 166.997042][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.997066][ T8803] ? __pfx__printk+0x10/0x10 [ 166.997101][ T8803] ? __might_fault+0xb0/0x130 [ 166.997142][ T8803] should_fail_ex+0x414/0x560 [ 166.997170][ T8803] _copy_from_user+0x2d/0xb0 [ 166.997199][ T8803] __sys_bpf+0x1ed/0x860 [ 166.997233][ T8803] ? __pfx___sys_bpf+0x10/0x10 [ 166.997278][ T8803] ? ksys_write+0x22a/0x250 [ 166.997307][ T8803] ? __pfx_ksys_write+0x10/0x10 [ 166.997331][ T8803] ? rcu_is_watching+0x15/0xb0 [ 166.997363][ T8803] __x64_sys_bpf+0x7c/0x90 [ 166.997391][ T8803] do_syscall_64+0xfa/0x3b0 [ 166.997410][ T8803] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.997440][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.997460][ T8803] ? clear_bhb_loop+0x60/0xb0 [ 166.997484][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.997503][ T8803] RIP: 0033:0x7f9c17f8e9a9 [ 166.997521][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.997537][ T8803] RSP: 002b:00007f9c18d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.997558][ T8803] RAX: ffffffffffffffda RBX: 00007f9c181b5fa0 RCX: 00007f9c17f8e9a9 [ 166.997573][ T8803] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 166.997585][ T8803] RBP: 00007f9c18d40090 R08: 0000000000000000 R09: 0000000000000000 [ 166.997597][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.997609][ T8803] R13: 0000000000000000 R14: 00007f9c181b5fa0 R15: 00007fff35ccb318 [ 166.997640][ T8803] [ 167.206457][ T8810] FAULT_INJECTION: forcing a failure. [ 167.206457][ T8810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.219634][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.1.783 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 167.219662][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.219674][ T8810] Call Trace: [ 167.219682][ T8810] [ 167.219690][ T8810] dump_stack_lvl+0x189/0x250 [ 167.219719][ T8810] ? __pfx____ratelimit+0x10/0x10 [ 167.219749][ T8810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.219773][ T8810] ? __pfx__printk+0x10/0x10 [ 167.219813][ T8810] should_fail_ex+0x414/0x560 [ 167.219838][ T8810] _copy_to_user+0x31/0xb0 [ 167.219868][ T8810] bpf_test_finish+0x56f/0x700 [ 167.219909][ T8810] ? __pfx_bpf_test_finish+0x10/0x10 [ 167.219944][ T8810] ? slab_build_skb+0x273/0x3e0 [ 167.219968][ T8810] bpf_prog_test_run_skb+0xed5/0x1560 [ 167.220024][ T8810] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 167.220055][ T8810] bpf_prog_test_run+0x2c4/0x340 [ 167.220080][ T8810] __sys_bpf+0x4a4/0x860 [ 167.220122][ T8810] ? __pfx___sys_bpf+0x10/0x10 [ 167.220163][ T8810] ? ksys_write+0x22a/0x250 [ 167.220190][ T8810] ? __pfx_ksys_write+0x10/0x10 [ 167.220211][ T8810] ? rcu_is_watching+0x15/0xb0 [ 167.220240][ T8810] __x64_sys_bpf+0x7c/0x90 [ 167.220266][ T8810] do_syscall_64+0xfa/0x3b0 [ 167.220282][ T8810] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.220309][ T8810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.220327][ T8810] ? clear_bhb_loop+0x60/0xb0 [ 167.220349][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.220366][ T8810] RIP: 0033:0x7f005438e9a9 [ 167.220383][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.220398][ T8810] RSP: 002b:00007f0055140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.220417][ T8810] RAX: ffffffffffffffda RBX: 00007f00545b5fa0 RCX: 00007f005438e9a9 [ 167.220429][ T8810] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 167.220440][ T8810] RBP: 00007f0055140090 R08: 0000000000000000 R09: 0000000000000000 [ 167.220450][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.220460][ T8810] R13: 0000000000000000 R14: 00007f00545b5fa0 R15: 00007ffd770af048 [ 167.220488][ T8810] [ 167.683459][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'. [ 168.008586][ T8845] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.082276][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 168.348692][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 168.597767][ T8871] tipc: Enabled bearer , priority 0 [ 168.658912][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 168.678957][ T8871] syzkaller0: entered promiscuous mode [ 168.698279][ T8871] syzkaller0: entered allmulticast mode [ 168.706572][ T8875] tipc: Enabling of bearer rejected, already enabled [ 168.758778][ T8871] veth0_to_bridge: entered promiscuous mode [ 168.841359][ T8884] tipc: Resetting bearer [ 168.872360][ T8870] veth0_to_bridge: left promiscuous mode [ 168.918499][ T8870] tipc: Resetting bearer [ 168.977452][ T8870] tipc: Disabling bearer [ 169.127885][ T8907] netlink: 168 bytes leftover after parsing attributes in process `syz.2.816'. [ 169.490544][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.819'. [ 169.824162][ T7495] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.989805][ T8929] tipc: Enabling of bearer rejected, already enabled [ 170.089150][ T8934] tipc: Enabled bearer , priority 0 [ 170.159033][ T8935] tipc: Disabling bearer [ 170.191335][ T8941] lo speed is unknown, defaulting to 1000 [ 170.318746][ T8952] FAULT_INJECTION: forcing a failure. [ 170.318746][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.332084][ T8952] CPU: 1 UID: 0 PID: 8952 Comm: syz.3.827 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 170.332112][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.332124][ T8952] Call Trace: [ 170.332132][ T8952] [ 170.332141][ T8952] dump_stack_lvl+0x189/0x250 [ 170.332171][ T8952] ? __pfx____ratelimit+0x10/0x10 [ 170.332203][ T8952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.332227][ T8952] ? __pfx__printk+0x10/0x10 [ 170.332270][ T8952] should_fail_ex+0x414/0x560 [ 170.332297][ T8952] _copy_from_user+0x2d/0xb0 [ 170.332326][ T8952] bpf_test_init+0xf8/0x170 [ 170.332362][ T8952] bpf_prog_test_run_skb+0x1e9/0x1560 [ 170.332393][ T8952] ? __fget_files+0x2a/0x420 [ 170.332415][ T8952] ? __fget_files+0x2a/0x420 [ 170.332442][ T8952] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 170.332474][ T8952] bpf_prog_test_run+0x2c4/0x340 [ 170.332499][ T8952] __sys_bpf+0x4a4/0x860 [ 170.332532][ T8952] ? __pfx___sys_bpf+0x10/0x10 [ 170.332577][ T8952] ? ksys_write+0x22a/0x250 [ 170.332606][ T8952] ? __pfx_ksys_write+0x10/0x10 [ 170.332630][ T8952] ? rcu_is_watching+0x15/0xb0 [ 170.332662][ T8952] __x64_sys_bpf+0x7c/0x90 [ 170.332692][ T8952] do_syscall_64+0xfa/0x3b0 [ 170.332711][ T8952] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.332741][ T8952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.332761][ T8952] ? clear_bhb_loop+0x60/0xb0 [ 170.332787][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.332806][ T8952] RIP: 0033:0x7fb78398e9a9 [ 170.332824][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.332840][ T8952] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.332860][ T8952] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 170.332875][ T8952] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 170.332887][ T8952] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 170.332899][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.332910][ T8952] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 170.332942][ T8952] [ 170.553711][ T8944] lo speed is unknown, defaulting to 1000 [ 170.819778][ T8954] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 170.890142][ T8955] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 171.000617][ T5887] lo speed is unknown, defaulting to 1000 [ 171.035336][ T5887] syz0: Port: 1 Link ACTIVE [ 171.041504][ T5914] lo speed is unknown, defaulting to 1000 [ 171.065834][ T8968] veth1_to_team: entered allmulticast mode [ 171.071873][ T8968] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 171.237096][ T8979] netlink: 'syz.1.835': attribute type 32 has an invalid length. [ 171.430999][ T8993] Can't find ip_set type hash:ip$mec [ 171.656254][ T9000] __nla_validate_parse: 2 callbacks suppressed [ 171.656272][ T9000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.838'. [ 172.165864][ T9019] syzkaller0: entered promiscuous mode [ 172.179599][ T9019] syzkaller0: entered allmulticast mode [ 172.361496][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.844'. [ 172.411124][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.844'. [ 172.615411][ T9049] netlink: 'syz.0.851': attribute type 32 has an invalid length. [ 172.631544][ T9049] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 172.657997][ T9051] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 172.912314][ T9064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.945978][ T7341] lo speed is unknown, defaulting to 1000 [ 172.960153][ T7341] syz0: Port: 1 Link DOWN [ 172.967861][ T5947] lo speed is unknown, defaulting to 1000 [ 172.997545][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 173.009901][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 173.285491][ T9089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.860'. [ 173.295921][ T6515] nci: nci_rx_work: unknown MT 0x1 [ 173.652709][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 173.890812][ T9115] lo speed is unknown, defaulting to 1000 [ 174.330762][ T9127] netlink: 'syz.2.871': attribute type 32 has an invalid length. [ 174.353203][ T9127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.871'. [ 174.379096][ T9125] veth0: entered promiscuous mode [ 175.031831][ T9118] veth0: left promiscuous mode [ 175.055466][ T9152] netlink: 96 bytes leftover after parsing attributes in process `syz.0.877'. [ 175.233863][ T9156] tipc: Enabling of bearer rejected, already enabled [ 175.829978][ T9193] netlink: 'syz.2.891': attribute type 32 has an invalid length. [ 176.128447][ T9210] tipc: Enabling of bearer rejected, already enabled [ 176.209871][ T9212] x_tables: duplicate underflow at hook 3 [ 176.330462][ T9217] lo speed is unknown, defaulting to 1000 [ 176.892330][ T9234] lo speed is unknown, defaulting to 1000 [ 177.388133][ T9247] __nla_validate_parse: 9 callbacks suppressed [ 177.388150][ T9247] netlink: 84 bytes leftover after parsing attributes in process `syz.3.905'. [ 177.787472][ T9261] netlink: 96 bytes leftover after parsing attributes in process `syz.2.910'. [ 177.835588][ T9261] netlink: 96 bytes leftover after parsing attributes in process `syz.2.910'. [ 178.015301][ T9271] FAULT_INJECTION: forcing a failure. [ 178.015301][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.065891][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.3.914 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 178.065919][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.065931][ T9271] Call Trace: [ 178.065939][ T9271] [ 178.065948][ T9271] dump_stack_lvl+0x189/0x250 [ 178.065978][ T9271] ? __pfx____ratelimit+0x10/0x10 [ 178.066009][ T9271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.066033][ T9271] ? __pfx__printk+0x10/0x10 [ 178.066073][ T9271] should_fail_ex+0x414/0x560 [ 178.066099][ T9271] _copy_to_user+0x31/0xb0 [ 178.066128][ T9271] bpf_test_finish+0x24e/0x700 [ 178.066169][ T9271] ? __pfx_bpf_test_finish+0x10/0x10 [ 178.066206][ T9271] ? slab_build_skb+0x273/0x3e0 [ 178.066230][ T9271] bpf_prog_test_run_skb+0xed5/0x1560 [ 178.066273][ T9271] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 178.066302][ T9271] bpf_prog_test_run+0x2c4/0x340 [ 178.066327][ T9271] __sys_bpf+0x4a4/0x860 [ 178.066360][ T9271] ? __pfx___sys_bpf+0x10/0x10 [ 178.066411][ T9271] ? ksys_write+0x22a/0x250 [ 178.066440][ T9271] ? __pfx_ksys_write+0x10/0x10 [ 178.066462][ T9271] ? rcu_is_watching+0x15/0xb0 [ 178.066493][ T9271] __x64_sys_bpf+0x7c/0x90 [ 178.066521][ T9271] do_syscall_64+0xfa/0x3b0 [ 178.066539][ T9271] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.066567][ T9271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.066587][ T9271] ? clear_bhb_loop+0x60/0xb0 [ 178.066611][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.066629][ T9271] RIP: 0033:0x7fb78398e9a9 [ 178.066646][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.066661][ T9271] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.066682][ T9271] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 178.066695][ T9271] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 178.066707][ T9271] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 178.066718][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.066729][ T9271] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 178.066760][ T9271] [ 178.465334][ T9275] netlink: 'syz.2.915': attribute type 39 has an invalid length. [ 178.788230][ T9277] openvswitch: netlink: Missing key (keys=40, expected=80) [ 178.800477][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.918'. [ 178.867498][ T9290] netlink: 256 bytes leftover after parsing attributes in process `syz.3.918'. [ 178.891924][ T9290] unsupported nlmsg_type 40 [ 179.111942][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.919'. [ 179.578011][ T9305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 181.087510][ T9287] syz.3.918 (9287) used greatest stack depth: 17864 bytes left [ 181.252195][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'. [ 181.335050][ T7496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.366415][ T7496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.458299][ T7496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.492217][ T7496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.518569][ T9322] syzkaller0: entered promiscuous mode [ 181.540209][ T9322] syzkaller0: entered allmulticast mode [ 181.774612][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.929'. [ 181.819474][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 182.516000][ T9357] FAULT_INJECTION: forcing a failure. [ 182.516000][ T9357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.570338][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.4.934 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 182.570369][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.570381][ T9357] Call Trace: [ 182.570390][ T9357] [ 182.570398][ T9357] dump_stack_lvl+0x189/0x250 [ 182.570427][ T9357] ? __pfx____ratelimit+0x10/0x10 [ 182.570458][ T9357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.570482][ T9357] ? __pfx__printk+0x10/0x10 [ 182.570508][ T9357] ? __might_fault+0xb0/0x130 [ 182.570546][ T9357] should_fail_ex+0x414/0x560 [ 182.570573][ T9357] _copy_from_user+0x2d/0xb0 [ 182.570601][ T9357] ___sys_sendmsg+0x158/0x2a0 [ 182.570628][ T9357] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.570689][ T9357] ? __fget_files+0x2a/0x420 [ 182.570705][ T9357] ? __fget_files+0x3a0/0x420 [ 182.570733][ T9357] __x64_sys_sendmsg+0x19b/0x260 [ 182.570758][ T9357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.570792][ T9357] ? __pfx_ksys_write+0x10/0x10 [ 182.570824][ T9357] ? rcu_is_watching+0x15/0xb0 [ 182.570852][ T9357] ? do_syscall_64+0xbe/0x3b0 [ 182.570875][ T9357] do_syscall_64+0xfa/0x3b0 [ 182.570892][ T9357] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.570921][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.570940][ T9357] ? clear_bhb_loop+0x60/0xb0 [ 182.570964][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.570983][ T9357] RIP: 0033:0x7fc27fb8e9a9 [ 182.571000][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.571016][ T9357] RSP: 002b:00007fc28096d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.571036][ T9357] RAX: ffffffffffffffda RBX: 00007fc27fdb5fa0 RCX: 00007fc27fb8e9a9 [ 182.571050][ T9357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.571062][ T9357] RBP: 00007fc28096d090 R08: 0000000000000000 R09: 0000000000000000 [ 182.571074][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.571084][ T9357] R13: 0000000000000000 R14: 00007fc27fdb5fa0 R15: 00007ffe034d3018 [ 182.571114][ T9357] [ 182.871292][ T9368] netlink: 'syz.4.937': attribute type 8 has an invalid length. [ 183.162141][ T9375] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 183.171483][ T9375] macsec1: entered allmulticast mode [ 183.177517][ T9375] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 183.211195][ T9375] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 183.283185][ T9375] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 183.582265][ T9393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.944'. [ 183.658191][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.945'. [ 183.673473][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 183.809611][ T9399] Cannot find set identified by id 1 to match [ 184.068693][ T9408] lo speed is unknown, defaulting to 1000 [ 184.792440][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 185.228542][ T9414] lo speed is unknown, defaulting to 1000 [ 185.641567][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 185.825198][ T9462] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 185.971615][ T9462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.442336][ T9481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.968'. [ 186.769740][ T9483] xt_CT: No such helper "snmp" [ 187.259633][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 187.260667][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 187.491559][ T9517] netlink: 'syz.4.975': attribute type 39 has an invalid length. [ 187.512408][ T9519] FAULT_INJECTION: forcing a failure. [ 187.512408][ T9519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.566955][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.0.976 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 187.566984][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.566996][ T9519] Call Trace: [ 187.567004][ T9519] [ 187.567013][ T9519] dump_stack_lvl+0x189/0x250 [ 187.567042][ T9519] ? __pfx____ratelimit+0x10/0x10 [ 187.567069][ T9519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.567088][ T9519] ? __pfx__printk+0x10/0x10 [ 187.567111][ T9519] ? __might_fault+0xb0/0x130 [ 187.567143][ T9519] should_fail_ex+0x414/0x560 [ 187.567164][ T9519] _copy_from_iter+0x1db/0x16f0 [ 187.567188][ T9519] ? rcu_is_watching+0x15/0xb0 [ 187.567208][ T9519] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 187.567233][ T9519] ? __pfx__copy_from_iter+0x10/0x10 [ 187.567254][ T9519] ? __build_skb_around+0x257/0x3e0 [ 187.567273][ T9519] ? netlink_sendmsg+0x642/0xb30 [ 187.567287][ T9519] ? skb_put+0x11b/0x210 [ 187.567307][ T9519] netlink_sendmsg+0x6b2/0xb30 [ 187.567330][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.567348][ T9519] ? aa_sock_msg_perm+0x94/0x160 [ 187.567367][ T9519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.567384][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.567400][ T9519] __sock_sendmsg+0x219/0x270 [ 187.567426][ T9519] ____sys_sendmsg+0x505/0x830 [ 187.567450][ T9519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.567486][ T9519] ? import_iovec+0x74/0xa0 [ 187.567511][ T9519] ___sys_sendmsg+0x21f/0x2a0 [ 187.567537][ T9519] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.567590][ T9519] ? __fget_files+0x2a/0x420 [ 187.567603][ T9519] ? __fget_files+0x3a0/0x420 [ 187.567626][ T9519] __x64_sys_sendmsg+0x19b/0x260 [ 187.567647][ T9519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.567674][ T9519] ? __pfx_ksys_write+0x10/0x10 [ 187.567695][ T9519] ? rcu_is_watching+0x15/0xb0 [ 187.567719][ T9519] ? do_syscall_64+0xbe/0x3b0 [ 187.567737][ T9519] do_syscall_64+0xfa/0x3b0 [ 187.567751][ T9519] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.567776][ T9519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.567793][ T9519] ? clear_bhb_loop+0x60/0xb0 [ 187.567813][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.567828][ T9519] RIP: 0033:0x7fe1c118e9a9 [ 187.567846][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.567860][ T9519] RSP: 002b:00007fe1c1fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.567877][ T9519] RAX: ffffffffffffffda RBX: 00007fe1c13b5fa0 RCX: 00007fe1c118e9a9 [ 187.567888][ T9519] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 187.567898][ T9519] RBP: 00007fe1c1fab090 R08: 0000000000000000 R09: 0000000000000000 [ 187.567908][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.567917][ T9519] R13: 0000000000000000 R14: 00007fe1c13b5fa0 R15: 00007fff7d6850e8 [ 187.567942][ T9519] [ 187.983674][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 188.048975][ T9524] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 188.059066][ T9529] netlink: 'syz.4.982': attribute type 4 has an invalid length. [ 188.067350][ T9529] netlink: 152 bytes leftover after parsing attributes in process `syz.4.982'. [ 188.085177][ T9524] tipc: Enabled bearer , priority 10 [ 188.116237][ T9529] netlink: 'syz.4.982': attribute type 15 has an invalid length. [ 188.609590][ T9547] Can't find ip_set type hash:ip$mec [ 188.619566][ T9551] sctp: [Deprecated]: syz.1.988 (pid 9551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.619566][ T9551] Use struct sctp_sack_info instead [ 188.662037][ T9551] __nla_validate_parse: 7 callbacks suppressed [ 188.662056][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.988'. [ 188.763645][ T9558] FAULT_INJECTION: forcing a failure. [ 188.763645][ T9558] name failslab, interval 1, probability 0, space 0, times 0 [ 188.780733][ T9558] CPU: 0 UID: 0 PID: 9558 Comm: syz.3.990 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 188.780763][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.780775][ T9558] Call Trace: [ 188.780784][ T9558] [ 188.780792][ T9558] dump_stack_lvl+0x189/0x250 [ 188.780824][ T9558] ? __pfx____ratelimit+0x10/0x10 [ 188.780855][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.780880][ T9558] ? __pfx__printk+0x10/0x10 [ 188.780910][ T9558] ? __lock_acquire+0xab9/0xd20 [ 188.780942][ T9558] should_fail_ex+0x414/0x560 [ 188.780969][ T9558] should_failslab+0xa8/0x100 [ 188.781001][ T9558] kmem_cache_alloc_noprof+0x73/0x3c0 [ 188.781029][ T9558] ? skb_clone+0x212/0x3a0 [ 188.781058][ T9558] skb_clone+0x212/0x3a0 [ 188.781086][ T9558] __netlink_deliver_tap+0x404/0x850 [ 188.781120][ T9558] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.781141][ T9558] netlink_deliver_tap+0x19c/0x1b0 [ 188.781162][ T9558] netlink_unicast+0x7fa/0x9e0 [ 188.781202][ T9558] ? __pfx_netlink_unicast+0x10/0x10 [ 188.781233][ T9558] ? netlink_sendmsg+0x642/0xb30 [ 188.781250][ T9558] ? skb_put+0x11b/0x210 [ 188.781275][ T9558] netlink_sendmsg+0x805/0xb30 [ 188.781306][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.781330][ T9558] ? aa_sock_msg_perm+0x94/0x160 [ 188.781353][ T9558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.781375][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.781395][ T9558] __sock_sendmsg+0x219/0x270 [ 188.781428][ T9558] ____sys_sendmsg+0x505/0x830 [ 188.781458][ T9558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.781492][ T9558] ? import_iovec+0x74/0xa0 [ 188.781524][ T9558] ___sys_sendmsg+0x21f/0x2a0 [ 188.781559][ T9558] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.781625][ T9558] ? __fget_files+0x2a/0x420 [ 188.781642][ T9558] ? __fget_files+0x3a0/0x420 [ 188.781672][ T9558] __x64_sys_sendmsg+0x19b/0x260 [ 188.781703][ T9558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.781738][ T9558] ? __pfx_ksys_write+0x10/0x10 [ 188.781763][ T9558] ? rcu_is_watching+0x15/0xb0 [ 188.781793][ T9558] ? do_syscall_64+0xbe/0x3b0 [ 188.781818][ T9558] do_syscall_64+0xfa/0x3b0 [ 188.781835][ T9558] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.781866][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.781886][ T9558] ? clear_bhb_loop+0x60/0xb0 [ 188.781911][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.781931][ T9558] RIP: 0033:0x7fb78398e9a9 [ 188.781949][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.781965][ T9558] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.781985][ T9558] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 188.781999][ T9558] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 188.782011][ T9558] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 188.782023][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.782034][ T9558] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 188.782066][ T9558] [ 188.782451][ T9558] netlink: 96 bytes leftover after parsing attributes in process `syz.3.990'. [ 189.123080][ T9558] netlink: 96 bytes leftover after parsing attributes in process `syz.3.990'. [ 189.212643][ T9540] bond0: (slave team0): Releasing backup interface [ 189.288166][ T9540] team0 (unregistering): Port device team_slave_0 removed [ 189.299970][ T9540] team0 (unregistering): Port device team_slave_1 removed [ 189.324655][ T9540] team0 (unregistering): Port device bond2 removed [ 189.532332][ T9563] syzkaller0: entered promiscuous mode [ 189.561759][ T9563] syzkaller0: entered allmulticast mode [ 189.564049][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.992'. [ 189.672084][ T9590] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 191.692878][ T9616] FAULT_INJECTION: forcing a failure. [ 191.692878][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 191.712326][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.0.1001 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 191.712357][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.712369][ T9616] Call Trace: [ 191.712377][ T9616] [ 191.712386][ T9616] dump_stack_lvl+0x189/0x250 [ 191.712415][ T9616] ? __pfx____ratelimit+0x10/0x10 [ 191.712446][ T9616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.712470][ T9616] ? __pfx__printk+0x10/0x10 [ 191.712505][ T9616] ? __pfx___might_resched+0x10/0x10 [ 191.712527][ T9616] ? fs_reclaim_acquire+0x7d/0x100 [ 191.712552][ T9616] should_fail_ex+0x414/0x560 [ 191.712578][ T9616] should_failslab+0xa8/0x100 [ 191.712610][ T9616] __kmalloc_cache_noprof+0x70/0x3d0 [ 191.712638][ T9616] ? nfnetlink_rcv+0x8ec/0x2520 [ 191.712670][ T9616] nfnetlink_rcv+0x8ec/0x2520 [ 191.712708][ T9616] ? unwind_get_return_address+0x4d/0x90 [ 191.712754][ T9616] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.712823][ T9616] ? __lock_acquire+0xab9/0xd20 [ 191.712856][ T9616] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.712896][ T9616] netlink_unicast+0x82c/0x9e0 [ 191.712936][ T9616] ? __pfx_netlink_unicast+0x10/0x10 [ 191.712967][ T9616] ? netlink_sendmsg+0x642/0xb30 [ 191.712990][ T9616] ? skb_put+0x11b/0x210 [ 191.713015][ T9616] netlink_sendmsg+0x805/0xb30 [ 191.713044][ T9616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.713067][ T9616] ? aa_sock_msg_perm+0x94/0x160 [ 191.713089][ T9616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.713109][ T9616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.713129][ T9616] __sock_sendmsg+0x219/0x270 [ 191.713162][ T9616] ____sys_sendmsg+0x505/0x830 [ 191.713192][ T9616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.713226][ T9616] ? import_iovec+0x74/0xa0 [ 191.713259][ T9616] ___sys_sendmsg+0x21f/0x2a0 [ 191.713285][ T9616] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.713358][ T9616] ? __fget_files+0x2a/0x420 [ 191.713375][ T9616] ? __fget_files+0x3a0/0x420 [ 191.713405][ T9616] __x64_sys_sendmsg+0x19b/0x260 [ 191.713432][ T9616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.713468][ T9616] ? __pfx_ksys_write+0x10/0x10 [ 191.713491][ T9616] ? rcu_is_watching+0x15/0xb0 [ 191.713521][ T9616] ? do_syscall_64+0xbe/0x3b0 [ 191.713545][ T9616] do_syscall_64+0xfa/0x3b0 [ 191.713562][ T9616] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.713591][ T9616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.713611][ T9616] ? clear_bhb_loop+0x60/0xb0 [ 191.713636][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.713655][ T9616] RIP: 0033:0x7fe1c118e9a9 [ 191.713673][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.713689][ T9616] RSP: 002b:00007fe1c1fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.713710][ T9616] RAX: ffffffffffffffda RBX: 00007fe1c13b5fa0 RCX: 00007fe1c118e9a9 [ 191.713724][ T9616] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.713736][ T9616] RBP: 00007fe1c1fab090 R08: 0000000000000000 R09: 0000000000000000 [ 191.713748][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.713759][ T9616] R13: 0000000000000000 R14: 00007fe1c13b5fa0 R15: 00007fff7d6850e8 [ 191.713791][ T9616] [ 192.040221][ T9616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1001'. [ 192.049481][ T9616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1001'. [ 192.185205][ T9603] lo speed is unknown, defaulting to 1000 [ 192.191564][ T9603] lo speed is unknown, defaulting to 1000 [ 192.211256][ T9603] lo speed is unknown, defaulting to 1000 [ 192.259315][ T9603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.311745][ T9603] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.432505][ T9603] lo speed is unknown, defaulting to 1000 [ 192.446115][ T9603] lo speed is unknown, defaulting to 1000 [ 192.467857][ T9603] lo speed is unknown, defaulting to 1000 [ 192.495158][ T9603] lo speed is unknown, defaulting to 1000 [ 192.508255][ T9603] lo speed is unknown, defaulting to 1000 [ 192.612101][ T9631] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1007'. [ 192.637344][ T9631] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1007'. [ 192.675499][ T9631] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 192.746507][ T9633] lo speed is unknown, defaulting to 1000 [ 193.237941][ T9633] lo speed is unknown, defaulting to 1000 [ 193.275275][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 193.302312][ T9655] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1013'. [ 193.579918][ T9674] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 193.589430][ T9674] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 193.679145][ T9665] smc: net device veth1_virt_wifi applied user defined pnetid SYZ1 [ 193.698675][ T9672] tipc: Enabled bearer , priority 0 [ 193.707321][ T9672] syzkaller0: entered promiscuous mode [ 193.739428][ T9672] syzkaller0: entered allmulticast mode [ 193.893487][ T9670] tipc: Resetting bearer [ 193.973415][ T9670] tipc: Disabling bearer [ 194.036980][ T9689] __nla_validate_parse: 2 callbacks suppressed [ 194.036998][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 194.167661][ T9700] netlink: 'syz.0.1026': attribute type 32 has an invalid length. [ 194.176444][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.203204][ T9700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1026'. [ 194.708708][ T9724] bond2: entered promiscuous mode [ 194.713935][ T9724] bond2: entered allmulticast mode [ 194.720748][ T9724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.768870][ T9727] FAULT_INJECTION: forcing a failure. [ 194.768870][ T9727] name failslab, interval 1, probability 0, space 0, times 0 [ 194.783692][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.0.1033 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 194.783721][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.783733][ T9727] Call Trace: [ 194.783741][ T9727] [ 194.783750][ T9727] dump_stack_lvl+0x189/0x250 [ 194.783778][ T9727] ? __pfx____ratelimit+0x10/0x10 [ 194.783814][ T9727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.783837][ T9727] ? __pfx__printk+0x10/0x10 [ 194.783869][ T9727] ? __pfx___might_resched+0x10/0x10 [ 194.783898][ T9727] should_fail_ex+0x414/0x560 [ 194.783935][ T9727] should_failslab+0xa8/0x100 [ 194.783966][ T9727] __kmalloc_noprof+0xcb/0x4f0 [ 194.783992][ T9727] ? __kasan_kmalloc+0x93/0xb0 [ 194.784026][ T9727] ? nla_strdup+0x9d/0x140 [ 194.784069][ T9727] nla_strdup+0x9d/0x140 [ 194.784094][ T9727] nf_tables_newtable+0x491/0x1890 [ 194.784114][ T9727] ? __pfx_nfnetlink_has_listeners+0x1/0x10 [ 194.784168][ T9727] nfnetlink_rcv+0x112f/0x2520 [ 194.784226][ T9727] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.784306][ T9727] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.784345][ T9727] netlink_unicast+0x82c/0x9e0 [ 194.784382][ T9727] ? __pfx_netlink_unicast+0x10/0x10 [ 194.784411][ T9727] ? netlink_sendmsg+0x642/0xb30 [ 194.784428][ T9727] ? skb_put+0x11b/0x210 [ 194.784453][ T9727] netlink_sendmsg+0x805/0xb30 [ 194.784482][ T9727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.784505][ T9727] ? aa_sock_msg_perm+0x94/0x160 [ 194.784528][ T9727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.784548][ T9727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.784568][ T9727] __sock_sendmsg+0x219/0x270 [ 194.784599][ T9727] ____sys_sendmsg+0x505/0x830 [ 194.784628][ T9727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.784661][ T9727] ? import_iovec+0x74/0xa0 [ 194.784692][ T9727] ___sys_sendmsg+0x21f/0x2a0 [ 194.784716][ T9727] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.784778][ T9727] ? __fget_files+0x2a/0x420 [ 194.784795][ T9727] ? __fget_files+0x3a0/0x420 [ 194.784824][ T9727] __x64_sys_sendmsg+0x19b/0x260 [ 194.784850][ T9727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.784883][ T9727] ? __pfx_ksys_write+0x10/0x10 [ 194.784907][ T9727] ? rcu_is_watching+0x15/0xb0 [ 194.784936][ T9727] ? do_syscall_64+0xbe/0x3b0 [ 194.784960][ T9727] do_syscall_64+0xfa/0x3b0 [ 194.784977][ T9727] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.785005][ T9727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.785025][ T9727] ? clear_bhb_loop+0x60/0xb0 [ 194.785049][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.785068][ T9727] RIP: 0033:0x7fe1c118e9a9 [ 194.785085][ T9727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.785119][ T9727] RSP: 002b:00007fe1c1fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.785148][ T9727] RAX: ffffffffffffffda RBX: 00007fe1c13b5fa0 RCX: 00007fe1c118e9a9 [ 194.785163][ T9727] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 194.785175][ T9727] RBP: 00007fe1c1fab090 R08: 0000000000000000 R09: 0000000000000000 [ 194.785187][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.785198][ T9727] R13: 0000000000000000 R14: 00007fe1c13b5fa0 R15: 00007fff7d6850e8 [ 194.785231][ T9727] [ 195.169952][ T9729] IPv6: sit2: Disabled Multicast RS [ 195.191861][ T9729] sit2: entered allmulticast mode [ 195.216160][ T9732] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1037'. [ 195.255117][ T9733] tipc: Enabling of bearer rejected, already enabled [ 195.304330][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 195.313510][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 195.352624][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 195.402802][ T9739] netlink: 'syz.4.1038': attribute type 2 has an invalid length. [ 195.444555][ T9739] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 195.466564][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 195.509964][ T9747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1041'. [ 195.577080][ T9751] netlink: 'syz.3.1042': attribute type 21 has an invalid length. [ 195.595419][ T9751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1042'. [ 195.692720][ T9757] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 195.735965][ T9757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1043'. [ 195.789626][ T9764] netlink: 'syz.0.1046': attribute type 32 has an invalid length. [ 195.801299][ T9766] netlink: 'syz.3.1048': attribute type 18 has an invalid length. [ 196.332616][ T9788] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 196.502411][ T9800] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.956133][ T9835] tipc: Enabling of bearer rejected, already enabled [ 197.056134][ T9837] netlink: 'syz.3.1064': attribute type 32 has an invalid length. [ 197.084597][ T9840] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 197.101709][ T9840] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 197.764373][ T9871] FAULT_INJECTION: forcing a failure. [ 197.764373][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 197.789080][ T9871] CPU: 1 UID: 0 PID: 9871 Comm: syz.3.1076 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 197.789108][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.789120][ T9871] Call Trace: [ 197.789128][ T9871] [ 197.789137][ T9871] dump_stack_lvl+0x189/0x250 [ 197.789166][ T9871] ? __pfx____ratelimit+0x10/0x10 [ 197.789197][ T9871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.789221][ T9871] ? __pfx__printk+0x10/0x10 [ 197.789254][ T9871] ? __pfx___might_resched+0x10/0x10 [ 197.789276][ T9871] ? fs_reclaim_acquire+0x7d/0x100 [ 197.789300][ T9871] should_fail_ex+0x414/0x560 [ 197.789325][ T9871] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 197.789349][ T9871] should_failslab+0xa8/0x100 [ 197.789379][ T9871] __kvmalloc_node_noprof+0x161/0x5f0 [ 197.789408][ T9871] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 197.789438][ T9871] rhashtable_init_noprof+0x4ee/0xbb0 [ 197.789470][ T9871] rhltable_init_noprof+0x1e/0x60 [ 197.789496][ T9871] nf_tables_newtable+0x68f/0x1890 [ 197.789548][ T9871] nfnetlink_rcv+0x112f/0x2520 [ 197.789611][ T9871] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 197.789656][ T9871] ? ref_tracker_free+0x63a/0x7d0 [ 197.789709][ T9871] ? __netlink_deliver_tap+0x807/0x850 [ 197.789728][ T9871] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.789766][ T9871] netlink_unicast+0x82c/0x9e0 [ 197.789805][ T9871] ? __pfx_netlink_unicast+0x10/0x10 [ 197.789835][ T9871] ? netlink_sendmsg+0x642/0xb30 [ 197.789852][ T9871] ? skb_put+0x11b/0x210 [ 197.789877][ T9871] netlink_sendmsg+0x805/0xb30 [ 197.789907][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.789930][ T9871] ? aa_sock_msg_perm+0x94/0x160 [ 197.789953][ T9871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.789973][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.789993][ T9871] __sock_sendmsg+0x219/0x270 [ 197.790025][ T9871] ____sys_sendmsg+0x505/0x830 [ 197.790054][ T9871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.790087][ T9871] ? import_iovec+0x74/0xa0 [ 197.790118][ T9871] ___sys_sendmsg+0x21f/0x2a0 [ 197.790144][ T9871] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.790207][ T9871] ? __fget_files+0x2a/0x420 [ 197.790223][ T9871] ? __fget_files+0x3a0/0x420 [ 197.790253][ T9871] __x64_sys_sendmsg+0x19b/0x260 [ 197.790279][ T9871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.790313][ T9871] ? __pfx_ksys_write+0x10/0x10 [ 197.790337][ T9871] ? rcu_is_watching+0x15/0xb0 [ 197.790370][ T9871] ? do_syscall_64+0xbe/0x3b0 [ 197.790394][ T9871] do_syscall_64+0xfa/0x3b0 [ 197.790411][ T9871] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.790439][ T9871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.790458][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 197.790482][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.790501][ T9871] RIP: 0033:0x7fb78398e9a9 [ 197.790519][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.790540][ T9871] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.790562][ T9871] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 197.790577][ T9871] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 197.790589][ T9871] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 197.790602][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.790612][ T9871] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 197.790644][ T9871] [ 197.900410][ T9869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.138090][ T9868] tipc: Enabling of bearer rejected, already enabled [ 198.199365][ T9874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.219393][ T9874] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.242261][ T9874] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 198.336593][ T9886] gre0: entered allmulticast mode [ 198.644926][ T9908] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 198.670737][ T9911] FAULT_INJECTION: forcing a failure. [ 198.670737][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 198.688540][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.3.1087 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 198.688569][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.688581][ T9911] Call Trace: [ 198.688589][ T9911] [ 198.688598][ T9911] dump_stack_lvl+0x189/0x250 [ 198.688627][ T9911] ? __pfx____ratelimit+0x10/0x10 [ 198.688658][ T9911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.688683][ T9911] ? __pfx__printk+0x10/0x10 [ 198.688713][ T9911] ? __pfx___might_resched+0x10/0x10 [ 198.688737][ T9911] ? fs_reclaim_acquire+0x7d/0x100 [ 198.688761][ T9911] should_fail_ex+0x414/0x560 [ 198.688788][ T9911] should_failslab+0xa8/0x100 [ 198.688819][ T9911] __kmalloc_cache_noprof+0x70/0x3d0 [ 198.688846][ T9911] ? nft_trans_table_add+0x56/0x430 [ 198.688876][ T9911] nft_trans_table_add+0x56/0x430 [ 198.688906][ T9911] nf_tables_newtable+0xce3/0x1890 [ 198.688967][ T9911] nfnetlink_rcv+0x112f/0x2520 [ 198.689032][ T9911] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 198.689079][ T9911] ? ref_tracker_free+0x63a/0x7d0 [ 198.689136][ T9911] ? __netlink_deliver_tap+0x807/0x850 [ 198.689155][ T9911] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.689196][ T9911] netlink_unicast+0x82c/0x9e0 [ 198.689234][ T9911] ? __pfx_netlink_unicast+0x10/0x10 [ 198.689266][ T9911] ? netlink_sendmsg+0x642/0xb30 [ 198.689283][ T9911] ? skb_put+0x11b/0x210 [ 198.689308][ T9911] netlink_sendmsg+0x805/0xb30 [ 198.689339][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.689363][ T9911] ? aa_sock_msg_perm+0x94/0x160 [ 198.689387][ T9911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.689408][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.689428][ T9911] __sock_sendmsg+0x219/0x270 [ 198.689460][ T9911] ____sys_sendmsg+0x505/0x830 [ 198.689499][ T9911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.689538][ T9911] ? import_iovec+0x74/0xa0 [ 198.689570][ T9911] ___sys_sendmsg+0x21f/0x2a0 [ 198.689597][ T9911] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.689664][ T9911] ? __fget_files+0x2a/0x420 [ 198.689681][ T9911] ? __fget_files+0x3a0/0x420 [ 198.689712][ T9911] __x64_sys_sendmsg+0x19b/0x260 [ 198.689739][ T9911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.689775][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 198.689799][ T9911] ? rcu_is_watching+0x15/0xb0 [ 198.689830][ T9911] ? do_syscall_64+0xbe/0x3b0 [ 198.689855][ T9911] do_syscall_64+0xfa/0x3b0 [ 198.689872][ T9911] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.689903][ T9911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.689923][ T9911] ? clear_bhb_loop+0x60/0xb0 [ 198.689960][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.689979][ T9911] RIP: 0033:0x7fb78398e9a9 [ 198.689996][ T9911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.690013][ T9911] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.690034][ T9911] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 198.690048][ T9911] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 198.690060][ T9911] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 198.690072][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.690083][ T9911] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 198.690115][ T9911] [ 199.312187][ T9931] __nla_validate_parse: 13 callbacks suppressed [ 199.312208][ T9931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1093'. [ 199.459769][ T9936] openvswitch: netlink: Tunnel attr 12290 out of range max 16 [ 199.720357][ T9951] FAULT_INJECTION: forcing a failure. [ 199.720357][ T9951] name failslab, interval 1, probability 0, space 0, times 0 [ 199.734829][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 199.744915][ T9951] CPU: 1 UID: 0 PID: 9951 Comm: syz.3.1099 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 199.744940][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.744952][ T9951] Call Trace: [ 199.744960][ T9951] [ 199.744968][ T9951] dump_stack_lvl+0x189/0x250 [ 199.744994][ T9951] ? __pfx____ratelimit+0x10/0x10 [ 199.745023][ T9951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.745045][ T9951] ? __pfx__printk+0x10/0x10 [ 199.745074][ T9951] ? __pfx___might_resched+0x10/0x10 [ 199.745100][ T9951] should_fail_ex+0x414/0x560 [ 199.745124][ T9951] ? nf_tables_newset+0x132b/0x2530 [ 199.745143][ T9951] should_failslab+0xa8/0x100 [ 199.745173][ T9951] __kvmalloc_node_noprof+0x161/0x5f0 [ 199.745201][ T9951] ? nf_tables_newset+0x132b/0x2530 [ 199.745218][ T9951] ? nft_table_lookup+0x211/0x230 [ 199.745238][ T9951] ? nft_set_lookup+0x128/0x150 [ 199.745259][ T9951] ? nft_rhash_estimate+0x9f/0xa0 [ 199.745289][ T9951] nf_tables_newset+0x132b/0x2530 [ 199.745322][ T9951] ? __pfx_nf_tables_newset+0x10/0x10 [ 199.745361][ T9951] ? __nla_parse+0x40/0x60 [ 199.745385][ T9951] nfnetlink_rcv+0x112f/0x2520 [ 199.745452][ T9951] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 199.745493][ T9951] ? ref_tracker_free+0x63a/0x7d0 [ 199.745541][ T9951] ? __netlink_deliver_tap+0x807/0x850 [ 199.745558][ T9951] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.745592][ T9951] netlink_unicast+0x82c/0x9e0 [ 199.745626][ T9951] ? __pfx_netlink_unicast+0x10/0x10 [ 199.745655][ T9951] ? netlink_sendmsg+0x642/0xb30 [ 199.745671][ T9951] ? skb_put+0x11b/0x210 [ 199.745695][ T9951] netlink_sendmsg+0x805/0xb30 [ 199.745722][ T9951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.745744][ T9951] ? aa_sock_msg_perm+0x94/0x160 [ 199.745766][ T9951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.745786][ T9951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.745804][ T9951] __sock_sendmsg+0x219/0x270 [ 199.745831][ T9951] ____sys_sendmsg+0x505/0x830 [ 199.745858][ T9951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.745889][ T9951] ? import_iovec+0x74/0xa0 [ 199.745917][ T9951] ___sys_sendmsg+0x21f/0x2a0 [ 199.745940][ T9951] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.746000][ T9951] ? __fget_files+0x2a/0x420 [ 199.746016][ T9951] ? __fget_files+0x3a0/0x420 [ 199.746044][ T9951] __x64_sys_sendmsg+0x19b/0x260 [ 199.746069][ T9951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.746099][ T9951] ? __pfx_ksys_write+0x10/0x10 [ 199.746120][ T9951] ? rcu_is_watching+0x15/0xb0 [ 199.746148][ T9951] ? do_syscall_64+0xbe/0x3b0 [ 199.746170][ T9951] do_syscall_64+0xfa/0x3b0 [ 199.746185][ T9951] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.746210][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.746228][ T9951] ? clear_bhb_loop+0x60/0xb0 [ 199.746250][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.746267][ T9951] RIP: 0033:0x7fb78398e9a9 [ 199.746283][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.746299][ T9951] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.746319][ T9951] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 199.746332][ T9951] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 199.746344][ T9951] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 199.746355][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.746365][ T9951] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 199.746404][ T9951] [ 199.749351][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 199.949389][ T9938] lo speed is unknown, defaulting to 1000 [ 200.231608][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 200.402343][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 200.838427][ T9989] SET target dimension over the limit! [ 201.183216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.234978][ T9971] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 201.311996][ T9979] validate_nla: 2 callbacks suppressed [ 201.312016][ T9979] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 201.343599][ T9985] ip6tnl2: entered promiscuous mode [ 201.350144][ T9985] ip6tnl2: entered allmulticast mode [ 201.359085][ T9938] lo speed is unknown, defaulting to 1000 [ 201.515936][T10005] tipc: New replicast peer: 255.255.255.255 [ 201.523122][T10005] tipc: Enabled bearer , priority 10 [ 201.533649][T10006] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1108'. [ 201.581012][T10009] FAULT_INJECTION: forcing a failure. [ 201.581012][T10009] name failslab, interval 1, probability 0, space 0, times 0 [ 201.599387][T10009] CPU: 1 UID: 0 PID: 10009 Comm: syz.2.1110 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 201.599413][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.599425][T10009] Call Trace: [ 201.599433][T10009] [ 201.599441][T10009] dump_stack_lvl+0x189/0x250 [ 201.599469][T10009] ? __pfx____ratelimit+0x10/0x10 [ 201.599507][T10009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.599548][T10009] ? __pfx__printk+0x10/0x10 [ 201.599582][T10009] ? __pfx___might_resched+0x10/0x10 [ 201.599610][T10009] should_fail_ex+0x414/0x560 [ 201.599636][T10009] ? nf_tables_newset+0x132b/0x2530 [ 201.599657][T10009] should_failslab+0xa8/0x100 [ 201.599688][T10009] __kvmalloc_node_noprof+0x161/0x5f0 [ 201.599717][T10009] ? nf_tables_newset+0x132b/0x2530 [ 201.599737][T10009] ? nft_table_lookup+0x211/0x230 [ 201.599757][T10009] ? nft_set_lookup+0x128/0x150 [ 201.599780][T10009] ? nft_rhash_estimate+0x9f/0xa0 [ 201.599811][T10009] nf_tables_newset+0x132b/0x2530 [ 201.599849][T10009] ? __pfx_nf_tables_newset+0x10/0x10 [ 201.599895][T10009] ? __nla_parse+0x40/0x60 [ 201.599925][T10009] nfnetlink_rcv+0x112f/0x2520 [ 201.599986][T10009] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 201.600067][T10009] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.600099][T10009] netlink_unicast+0x82c/0x9e0 [ 201.600129][T10009] ? __pfx_netlink_unicast+0x10/0x10 [ 201.600153][T10009] ? netlink_sendmsg+0x642/0xb30 [ 201.600166][T10009] ? skb_put+0x11b/0x210 [ 201.600186][T10009] netlink_sendmsg+0x805/0xb30 [ 201.600209][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.600227][T10009] ? aa_sock_msg_perm+0x94/0x160 [ 201.600252][T10009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.600270][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.600285][T10009] __sock_sendmsg+0x219/0x270 [ 201.600311][T10009] ____sys_sendmsg+0x505/0x830 [ 201.600335][T10009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.600361][T10009] ? import_iovec+0x74/0xa0 [ 201.600385][T10009] ___sys_sendmsg+0x21f/0x2a0 [ 201.600405][T10009] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.600454][T10009] ? __fget_files+0x2a/0x420 [ 201.600467][T10009] ? __fget_files+0x3a0/0x420 [ 201.600490][T10009] __x64_sys_sendmsg+0x19b/0x260 [ 201.600514][T10009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.600542][T10009] ? __pfx_ksys_write+0x10/0x10 [ 201.600563][T10009] ? rcu_is_watching+0x15/0xb0 [ 201.600588][T10009] ? do_syscall_64+0xbe/0x3b0 [ 201.600607][T10009] do_syscall_64+0xfa/0x3b0 [ 201.600621][T10009] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.600645][T10009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.600661][T10009] ? clear_bhb_loop+0x60/0xb0 [ 201.600680][T10009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.600697][T10009] RIP: 0033:0x7f9c17f8e9a9 [ 201.600712][T10009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.600727][T10009] RSP: 002b:00007f9c18d40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.600746][T10009] RAX: ffffffffffffffda RBX: 00007f9c181b5fa0 RCX: 00007f9c17f8e9a9 [ 201.600760][T10009] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 201.600771][T10009] RBP: 00007f9c18d40090 R08: 0000000000000000 R09: 0000000000000000 [ 201.600783][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.600794][T10009] R13: 0000000000000000 R14: 00007f9c181b5fa0 R15: 00007fff35ccb318 [ 201.600826][T10009] [ 201.941116][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1108'. [ 201.941810][ T6508] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.058522][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 202.069894][T10012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1111'. [ 202.391738][T10022] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 202.801026][T10041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1121'. [ 202.869937][T10049] FAULT_INJECTION: forcing a failure. [ 202.869937][T10049] name failslab, interval 1, probability 0, space 0, times 0 [ 202.887080][T10049] CPU: 1 UID: 0 PID: 10049 Comm: syz.0.1123 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 202.887110][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.887122][T10049] Call Trace: [ 202.887130][T10049] [ 202.887139][T10049] dump_stack_lvl+0x189/0x250 [ 202.887170][T10049] ? __pfx____ratelimit+0x10/0x10 [ 202.887211][T10049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.887234][T10049] ? __pfx__printk+0x10/0x10 [ 202.887265][T10049] ? __pfx___might_resched+0x10/0x10 [ 202.887286][T10049] ? fs_reclaim_acquire+0x7d/0x100 [ 202.887309][T10049] should_fail_ex+0x414/0x560 [ 202.887333][T10049] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 202.887355][T10049] should_failslab+0xa8/0x100 [ 202.887385][T10049] __kvmalloc_node_noprof+0x161/0x5f0 [ 202.887412][T10049] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 202.887440][T10049] rhashtable_init_noprof+0x4ee/0xbb0 [ 202.887480][T10049] nft_rhash_init+0x10b/0x3a0 [ 202.887511][T10049] ? __pfx_nft_rhash_init+0x10/0x10 [ 202.887539][T10049] ? __pfx_nft_rhash_key+0x10/0x10 [ 202.887555][T10049] ? __pfx_nft_rhash_obj+0x10/0x10 [ 202.887570][T10049] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 202.887591][T10049] ? nf_tables_newset+0x1396/0x2530 [ 202.887610][T10049] ? kfree+0x18e/0x440 [ 202.887639][T10049] nf_tables_newset+0x1c07/0x2530 [ 202.887674][T10049] ? __pfx_nf_tables_newset+0x10/0x10 [ 202.887717][T10049] ? __nla_parse+0x40/0x60 [ 202.887745][T10049] nfnetlink_rcv+0x112f/0x2520 [ 202.887802][T10049] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 202.887879][T10049] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.887916][T10049] netlink_unicast+0x82c/0x9e0 [ 202.887952][T10049] ? __pfx_netlink_unicast+0x10/0x10 [ 202.887980][T10049] ? netlink_sendmsg+0x642/0xb30 [ 202.887996][T10049] ? skb_put+0x11b/0x210 [ 202.888019][T10049] netlink_sendmsg+0x805/0xb30 [ 202.888047][T10049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.888069][T10049] ? aa_sock_msg_perm+0x94/0x160 [ 202.888091][T10049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.888110][T10049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.888129][T10049] __sock_sendmsg+0x219/0x270 [ 202.888159][T10049] ____sys_sendmsg+0x505/0x830 [ 202.888186][T10049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.888218][T10049] ? import_iovec+0x74/0xa0 [ 202.888247][T10049] ___sys_sendmsg+0x21f/0x2a0 [ 202.888271][T10049] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.888324][T10049] ? __fget_files+0x2a/0x420 [ 202.888339][T10049] ? __fget_files+0x3a0/0x420 [ 202.888364][T10049] __x64_sys_sendmsg+0x19b/0x260 [ 202.888386][T10049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.888416][T10049] ? __pfx_ksys_write+0x10/0x10 [ 202.888435][T10049] ? rcu_is_watching+0x15/0xb0 [ 202.888468][T10049] ? do_syscall_64+0xbe/0x3b0 [ 202.888489][T10049] do_syscall_64+0xfa/0x3b0 [ 202.888504][T10049] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.888546][T10049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.888565][T10049] ? clear_bhb_loop+0x60/0xb0 [ 202.888590][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.888609][T10049] RIP: 0033:0x7fe1c118e9a9 [ 202.888628][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.888645][T10049] RSP: 002b:00007fe1c1fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.888665][T10049] RAX: ffffffffffffffda RBX: 00007fe1c13b5fa0 RCX: 00007fe1c118e9a9 [ 202.888679][T10049] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 202.888692][T10049] RBP: 00007fe1c1fab090 R08: 0000000000000000 R09: 0000000000000000 [ 202.888704][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.888715][T10049] R13: 0000000000000000 R14: 00007fe1c13b5fa0 R15: 00007fff7d6850e8 [ 202.888748][T10049] [ 203.918641][T10081] ip6tnl1: entered promiscuous mode [ 203.936860][T10081] ip6tnl1: entered allmulticast mode [ 203.980941][T10081] tipc: Enabled bearer , priority 0 [ 204.008947][T10087] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 204.143814][T10081] syzkaller0: entered promiscuous mode [ 204.160448][T10081] syzkaller0: entered allmulticast mode [ 204.174241][T10081] tipc: Resetting bearer [ 204.213791][T10100] FAULT_INJECTION: forcing a failure. [ 204.213791][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 204.230678][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.3.1137 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 204.230704][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.230715][T10100] Call Trace: [ 204.230723][T10100] [ 204.230731][T10100] dump_stack_lvl+0x189/0x250 [ 204.230758][T10100] ? __pfx____ratelimit+0x10/0x10 [ 204.230788][T10100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.230809][T10100] ? __pfx__printk+0x10/0x10 [ 204.230840][T10100] ? __pfx___might_resched+0x10/0x10 [ 204.230860][T10100] ? fs_reclaim_acquire+0x7d/0x100 [ 204.230882][T10100] should_fail_ex+0x414/0x560 [ 204.230903][T10100] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 204.230924][T10100] should_failslab+0xa8/0x100 [ 204.230947][T10100] __kvmalloc_node_noprof+0x161/0x5f0 [ 204.230986][T10100] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 204.231010][T10100] rhashtable_init_noprof+0x4ee/0xbb0 [ 204.231034][T10100] nft_rhash_init+0x10b/0x3a0 [ 204.231063][T10100] ? __pfx_nft_rhash_init+0x10/0x10 [ 204.231086][T10100] ? __pfx_nft_rhash_key+0x10/0x10 [ 204.231099][T10100] ? __pfx_nft_rhash_obj+0x10/0x10 [ 204.231112][T10100] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 204.231131][T10100] ? nf_tables_newset+0x1396/0x2530 [ 204.231149][T10100] ? kfree+0x18e/0x440 [ 204.231174][T10100] nf_tables_newset+0x1c07/0x2530 [ 204.231202][T10100] ? __pfx_nf_tables_newset+0x10/0x10 [ 204.231239][T10100] ? __nla_parse+0x40/0x60 [ 204.231262][T10100] nfnetlink_rcv+0x112f/0x2520 [ 204.231320][T10100] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 204.231356][T10100] ? ref_tracker_free+0x63a/0x7d0 [ 204.231399][T10100] ? __netlink_deliver_tap+0x807/0x850 [ 204.231415][T10100] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.231447][T10100] netlink_unicast+0x82c/0x9e0 [ 204.231487][T10100] ? __pfx_netlink_unicast+0x10/0x10 [ 204.231530][T10100] ? netlink_sendmsg+0x642/0xb30 [ 204.231544][T10100] ? skb_put+0x11b/0x210 [ 204.231564][T10100] netlink_sendmsg+0x805/0xb30 [ 204.231593][T10100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.231616][T10100] ? aa_sock_msg_perm+0x94/0x160 [ 204.231639][T10100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.231660][T10100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.231689][T10100] __sock_sendmsg+0x219/0x270 [ 204.231718][T10100] ____sys_sendmsg+0x505/0x830 [ 204.231763][T10100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.231793][T10100] ? import_iovec+0x74/0xa0 [ 204.231821][T10100] ___sys_sendmsg+0x21f/0x2a0 [ 204.231844][T10100] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.231906][T10100] ? __fget_files+0x2a/0x420 [ 204.231923][T10100] ? __fget_files+0x3a0/0x420 [ 204.231952][T10100] __x64_sys_sendmsg+0x19b/0x260 [ 204.231978][T10100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.232013][T10100] ? __pfx_ksys_write+0x10/0x10 [ 204.232036][T10100] ? rcu_is_watching+0x15/0xb0 [ 204.232065][T10100] ? do_syscall_64+0xbe/0x3b0 [ 204.232088][T10100] do_syscall_64+0xfa/0x3b0 [ 204.232105][T10100] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.232134][T10100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.232154][T10100] ? clear_bhb_loop+0x60/0xb0 [ 204.232178][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.232197][T10100] RIP: 0033:0x7fb78398e9a9 [ 204.232214][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.232231][T10100] RSP: 002b:00007fb784776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.232253][T10100] RAX: ffffffffffffffda RBX: 00007fb783bb5fa0 RCX: 00007fb78398e9a9 [ 204.232268][T10100] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 204.232280][T10100] RBP: 00007fb784776090 R08: 0000000000000000 R09: 0000000000000000 [ 204.232300][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.232312][T10100] R13: 0000000000000000 R14: 00007fb783bb5fa0 R15: 00007ffed4f45d68 [ 204.232344][T10100] [ 204.281320][T10104] netlink: 'syz.0.1138': attribute type 32 has an invalid length. [ 204.634462][T10104] __nla_validate_parse: 9 callbacks suppressed [ 204.634479][T10104] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 204.729324][ T6496] tipc: Resetting bearer [ 204.742743][T10079] tipc: Resetting bearer [ 206.157258][T10079] tipc: Disabling bearer [ 206.176235][T10085] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 206.184339][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1134'. [ 206.235710][T10136] tipc: Enabled bearer , priority 0 [ 206.262049][T10136] syzkaller0: entered promiscuous mode [ 206.270446][T10136] syzkaller0: entered allmulticast mode [ 206.320340][T10141] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1149'. [ 206.329920][T10141] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1149'. [ 206.351730][T10135] tipc: Resetting bearer [ 206.376772][T10135] tipc: Disabling bearer [ 206.394974][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 206.511903][T10142] lo speed is unknown, defaulting to 1000 [ 206.576148][T10153] netlink: 'syz.4.1152': attribute type 32 has an invalid length. [ 206.604602][T10153] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1152'. [ 207.041493][T10175] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 207.084985][T10175] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1158'. [ 207.099861][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 207.254736][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 207.426805][T10142] lo speed is unknown, defaulting to 1000 [ 207.491380][T10188] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1161'. [ 208.160784][T10213] tipc: Enabling of bearer rejected, already enabled [ 208.298440][T10218] netlink: 'syz.0.1170': attribute type 32 has an invalid length. [ 208.755024][T10239] can: request_module (can-proto-3) failed. [ 208.832005][T10246] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 209.209898][T10257] tipc: Enabling of bearer rejected, already enabled [ 209.314287][T10261] sctp: [Deprecated]: syz.0.1183 (pid 10261) Use of int in maxseg socket option. [ 209.314287][T10261] Use struct sctp_assoc_value instead [ 209.435703][T10264] netlink: 'syz.0.1184': attribute type 4 has an invalid length. [ 209.460242][T10263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.486943][T10266] netlink: 'syz.1.1185': attribute type 32 has an invalid length. [ 209.592686][T10271] netlink: 'syz.3.1187': attribute type 11 has an invalid length. [ 209.642479][ T6515] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.666514][ T6515] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.689306][ T6515] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.728535][ T6515] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.312901][T10295] lo speed is unknown, defaulting to 1000 [ 210.337032][T10301] __nla_validate_parse: 5 callbacks suppressed [ 210.337051][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 210.429786][T10306] netlink: 'syz.3.1196': attribute type 39 has an invalid length. [ 210.736008][T10295] lo speed is unknown, defaulting to 1000 [ 210.851128][T10327] sctp: [Deprecated]: syz.0.1200 (pid 10327) Use of int in maxseg socket option. [ 210.851128][T10327] Use struct sctp_assoc_value instead [ 211.109101][T10338] netlink: 'syz.3.1205': attribute type 32 has an invalid length. [ 211.143246][T10338] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1205'. [ 211.587186][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 211.599193][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.599209][ T5166] Bluetooth: hci1: command 0x0406 tx timeout [ 211.747690][T10361] syz.4.1209: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 211.794826][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.4.1209 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 211.794856][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.794868][T10361] Call Trace: [ 211.794877][T10361] [ 211.794886][T10361] dump_stack_lvl+0x189/0x250 [ 211.794921][T10361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.794946][T10361] ? __pfx__printk+0x10/0x10 [ 211.794974][T10361] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.795002][T10361] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.795032][T10361] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 211.795062][T10361] warn_alloc+0x214/0x310 [ 211.795088][T10361] ? __pfx_warn_alloc+0x10/0x10 [ 211.795119][T10361] ? __get_vm_area_node+0x28f/0x300 [ 211.795150][T10361] ? xskq_create+0xbf/0x170 [ 211.795186][T10361] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 211.795251][T10361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 211.795290][T10361] ? __kasan_kmalloc+0x93/0xb0 [ 211.795322][T10361] vmalloc_user_noprof+0xad/0xf0 [ 211.795354][T10361] ? xskq_create+0xbf/0x170 [ 211.795384][T10361] xskq_create+0xbf/0x170 [ 211.795429][T10361] xsk_init_queue+0xb0/0x110 [ 211.795468][T10361] xsk_setsockopt+0x57b/0x8d0 [ 211.795498][T10361] ? __pfx_xsk_setsockopt+0x10/0x10 [ 211.795543][T10361] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.795579][T10361] ? __fget_files+0x2a/0x420 [ 211.795597][T10361] ? aa_sock_opt_perm+0x74/0x110 [ 211.795620][T10361] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 211.795654][T10361] ? __pfx_xsk_setsockopt+0x10/0x10 [ 211.795681][T10361] do_sock_setsockopt+0x179/0x1b0 [ 211.795709][T10361] __x64_sys_setsockopt+0x13f/0x1b0 [ 211.795754][T10361] do_syscall_64+0xfa/0x3b0 [ 211.795773][T10361] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.795802][T10361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.795823][T10361] ? clear_bhb_loop+0x60/0xb0 [ 211.795848][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.795867][T10361] RIP: 0033:0x7fc27fb8e9a9 [ 211.795886][T10361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.795904][T10361] RSP: 002b:00007fc28092b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.795925][T10361] RAX: ffffffffffffffda RBX: 00007fc27fdb6160 RCX: 00007fc27fb8e9a9 [ 211.795940][T10361] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 211.795952][T10361] RBP: 00007fc27fc10d69 R08: 0000000000000004 R09: 0000000000000000 [ 211.795964][T10361] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 211.795976][T10361] R13: 0000000000000001 R14: 00007fc27fdb6160 R15: 00007ffe034d3018 [ 211.796010][T10361] [ 211.796018][T10361] Mem-Info: [ 212.103255][T10361] active_anon:4463 inactive_anon:0 isolated_anon:0 [ 212.103255][T10361] active_file:1622 inactive_file:39883 isolated_file:0 [ 212.103255][T10361] unevictable:768 dirty:110 writeback:0 [ 212.103255][T10361] slab_reclaimable:11307 slab_unreclaimable:100727 [ 212.103255][T10361] mapped:29209 shmem:1362 pagetables:1358 [ 212.103255][T10361] sec_pagetables:0 bounce:0 [ 212.103255][T10361] kernel_misc_reclaimable:0 [ 212.103255][T10361] free:1316845 free_pcp:25914 free_cma:0 [ 212.183766][T10361] Node 0 active_anon:18152kB inactive_anon:0kB active_file:6488kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116936kB dirty:436kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12840kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.218633][T10361] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.303253][T10361] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.348885][T10361] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 212.369700][T10361] Node 0 DMA32 free:1351548kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18008kB inactive_anon:0kB active_file:6488kB inactive_file:157756kB unevictable:1536kB writepending:436kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:86948kB local_pcp:26944kB free_cma:0kB [ 212.486950][T10361] lowmem_reserve[]: 0 0 1 1 1 [ 212.503232][T10361] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 212.550873][T10394] netlink: 'syz.3.1218': attribute type 6 has an invalid length. [ 212.564889][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 212.574478][T10361] lowmem_reserve[]: 0 0 0 0 0 [ 212.581452][T10361] Node 1 Normal free:3899568kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16896kB local_pcp:8416kB free_cma:0kB [ 212.665703][T10361] lowmem_reserve[]: 0 0 0 0 0 [ 212.671859][T10361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.733716][T10361] Node 0 DMA32: 293*4kB (UM) 1322*8kB (UME) 981*16kB (UM) 412*32kB (UME) 577*64kB (UM) 678*128kB (UM) 480*256kB (UME) 231*512kB (UME) 126*1024kB (UME) 8*2048kB (UM) 196*4096kB (UM) = 1353716kB [ 212.795859][T10361] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 212.823249][T10361] Node 1 Normal: 184*4kB (UE) 54*8kB (UME) 48*16kB (UME) 101*32kB (UME) 36*64kB (UME) 9*128kB (UME) 7*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3899568kB [ 212.863258][T10361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.886846][T10361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.903278][T10361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.937443][T10361] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.972327][T10361] 42863 total pagecache pages [ 212.988547][T10361] 0 pages in swap cache [ 213.000765][T10361] Free swap = 124996kB [ 213.002933][T10415] netlink: 'syz.1.1224': attribute type 33 has an invalid length. [ 213.013608][T10361] Total swap = 124996kB [ 213.013659][T10361] 2097051 pages RAM [ 213.013669][T10361] 0 pages HighMem/MovableOnly [ 213.013678][T10361] 425422 pages reserved [ 213.013687][T10361] 0 pages cma reserved [ 213.063138][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1224'. [ 213.092647][T10415] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 213.464994][T10433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1230'. [ 213.599818][T10441] C: renamed from lo [ 213.635412][T10441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 214.467267][T10493] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1246'. [ 214.780382][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'. [ 214.794910][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'. [ 215.347026][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1260'. [ 215.400697][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'. [ 215.519765][T10555] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 215.568556][T10555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1261'. [ 215.625027][T10555] batman_adv: batadv0: Adding interface: virt_wifi0 [ 215.631739][T10555] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.668885][T10555] batman_adv: batadv0: Interface activated: virt_wifi0 [ 215.825249][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 215.831358][ T5846] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 216.099028][T10585] tipc: Enabling of bearer rejected, already enabled [ 216.120332][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 216.427854][T10601] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 216.580125][T10621] xt_l2tp: invalid flags combination: 4 [ 216.608987][T10622] xt_l2tp: invalid flags combination: 4 [ 216.715930][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 216.725237][T10628] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 216.736794][T10628] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 216.744849][T10628] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1282'. [ 217.755394][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.807701][T10644] tun0: tun_chr_ioctl cmd 1074812117 [ 217.905163][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'. [ 217.969937][T10655] bridge4: entered promiscuous mode [ 218.142167][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 218.186994][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 218.315349][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 218.343219][T10677] netlink: 'syz.1.1298': attribute type 32 has an invalid length. [ 218.353908][T10677] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 218.655931][T10706] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 218.673242][T10706] netlink: 'syz.3.1307': attribute type 3 has an invalid length. [ 218.686846][T10706] NCSI netlink: No device for ifindex 246 [ 219.186764][T10737] netlink: 'syz.0.1316': attribute type 10 has an invalid length. [ 219.340297][T10743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 219.432231][T10750] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 219.490223][T10756] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.545432][T10750] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 219.575829][T10750] veth5: entered promiscuous mode [ 219.585923][T10750] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 220.052895][T10782] lo speed is unknown, defaulting to 1000 [ 220.117112][T10790] syzkaller0: entered promiscuous mode [ 220.136946][T10793] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 220.140344][T10790] syzkaller0: entered allmulticast mode [ 220.467242][T10782] lo speed is unknown, defaulting to 1000 [ 221.550326][T10859] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.575839][T10859] team0: Port device batadv1 added [ 222.370927][T10901] lo speed is unknown, defaulting to 1000 [ 222.421976][T10917] x_tables: duplicate underflow at hook 2 [ 222.444777][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.500020][T10917] __nla_validate_parse: 14 callbacks suppressed [ 222.500038][T10917] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1372'. [ 222.577082][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.705045][T10928] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 222.809556][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.818171][T10933] tipc: Enabled bearer , priority 0 [ 222.830293][T10933] syzkaller0: entered promiscuous mode [ 222.836226][T10933] syzkaller0: entered allmulticast mode [ 222.990313][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 223.016244][T10941] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 223.070348][T10933] tipc: Resetting bearer [ 223.106814][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 223.123108][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1377'. [ 223.150313][T10929] tipc: Resetting bearer [ 223.257824][T10929] tipc: Disabling bearer [ 223.285773][T10901] lo speed is unknown, defaulting to 1000 [ 223.552345][T10956] lo speed is unknown, defaulting to 1000 [ 223.582730][T10960] netlink: 'syz.2.1383': attribute type 32 has an invalid length. [ 223.590866][T10960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1383'. [ 224.219973][T10984] tap0: tun_chr_ioctl cmd 1074025677 [ 224.229581][T10984] tap0: linktype set to 774 [ 224.241624][T10984] tap0: tun_chr_ioctl cmd 35139 [ 224.308782][T10986] veth0: entered promiscuous mode [ 224.343368][T10956] lo speed is unknown, defaulting to 1000 [ 224.398670][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 224.495025][T10988] veth0 (unregistering): left promiscuous mode [ 224.558910][ T5846] Bluetooth: hci4: link tx timeout [ 224.565676][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.575253][ T5846] Bluetooth: hci4: link tx timeout [ 224.580865][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.048971][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 225.106632][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 225.166516][T11019] netlink: 'syz.2.1394': attribute type 15 has an invalid length. [ 225.318122][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1396'. [ 225.359448][T11032] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 225.380755][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.403956][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1399'. [ 225.421843][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.741494][T11053] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 225.773245][T11053] bridge2: entered allmulticast mode [ 225.938501][T11058] tipc: Enabled bearer , priority 0 [ 225.972955][T11058] syzkaller0: entered promiscuous mode [ 226.003275][T11058] syzkaller0: entered allmulticast mode [ 226.070135][T11057] tipc: Resetting bearer [ 226.086866][T11057] tipc: Disabling bearer [ 226.117212][ T7495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.126162][ T7495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.521360][T11091] bridge0: entered promiscuous mode [ 226.540952][T11091] vlan0: entered promiscuous mode [ 226.621554][T11102] netlink: 'syz.1.1415': attribute type 27 has an invalid length. [ 226.629595][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 226.950539][T11119] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 227.119396][T11130] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 227.212114][T11130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.268370][T11136] vlan2: entered promiscuous mode [ 227.285769][T11136] bond4: entered promiscuous mode [ 227.307888][T11136] vlan2: entered allmulticast mode [ 227.326527][T11136] bond4: entered allmulticast mode [ 227.368490][T11130] bond4: (slave gretap2): making interface the new active one [ 227.381895][T11130] gretap2: entered promiscuous mode [ 227.400330][T11130] gretap2: entered allmulticast mode [ 227.420034][T11130] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 227.514073][T11149] __nla_validate_parse: 4 callbacks suppressed [ 227.514092][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 227.641178][T11154] tipc: Enabled bearer , priority 0 [ 227.685638][T11164] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1434'. [ 227.728708][T11154] tipc: Disabling bearer [ 227.817507][T11168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.841249][T11168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.863274][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 227.864061][T11174] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 227.901873][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 228.306523][T11168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.332187][T11168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.441777][T11168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.462682][T11168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.550271][T11168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.561622][T11168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.707097][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 228.730959][ T6496] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.744060][ T6496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.764116][ T6393] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.772476][ T6393] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.814983][ T6496] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.824139][ T6496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.894244][ T6496] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.902647][ T6496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.931660][T11167] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.949405][T11206] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1445'. [ 228.959230][T11167] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.009512][ T6496] ================================================================== [ 229.017634][ T6496] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 229.025114][ T6496] Read of size 8 at addr ffff8880329a14b0 by task kworker/u8:11/6496 [ 229.033190][ T6496] [ 229.035537][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: kworker/u8:11 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 229.035562][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.035575][ T6496] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 229.035608][ T6496] Call Trace: [ 229.035615][ T6496] [ 229.035623][ T6496] dump_stack_lvl+0x189/0x250 [ 229.035646][ T6496] ? __kasan_check_byte+0x12/0x40 [ 229.035674][ T6496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.035696][ T6496] ? lock_release+0x4b/0x3e0 [ 229.035718][ T6496] ? __virt_addr_valid+0x4a5/0x5c0 [ 229.035743][ T6496] print_report+0xca/0x230 [ 229.035759][ T6496] ? __mutex_lock+0x144/0xe80 [ 229.035775][ T6496] kasan_report+0x118/0x150 [ 229.035799][ T6496] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 229.035826][ T6496] ? __mutex_lock+0x144/0xe80 [ 229.035846][ T6496] __mutex_lock+0x144/0xe80 [ 229.035862][ T6496] ? __lock_acquire+0xab9/0xd20 [ 229.035879][ T6496] ? __mutex_lock+0x51b/0xe80 [ 229.035898][ T6496] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 229.035927][ T6496] ? __pfx___mutex_lock+0x10/0x10 [ 229.035947][ T6496] ? __lock_acquire+0xab9/0xd20 [ 229.035970][ T6496] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 229.036002][ T6496] ? process_scheduled_works+0x9ef/0x17b0 [ 229.036021][ T6496] ? process_scheduled_works+0x9ef/0x17b0 [ 229.036049][ T6496] process_scheduled_works+0xae1/0x17b0 [ 229.036084][ T6496] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.036114][ T6496] worker_thread+0x8a0/0xda0 [ 229.036148][ T6496] kthread+0x70e/0x8a0 [ 229.036174][ T6496] ? __pfx_worker_thread+0x10/0x10 [ 229.036195][ T6496] ? __pfx_kthread+0x10/0x10 [ 229.036220][ T6496] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.036245][ T6496] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.036270][ T6496] ? __pfx_kthread+0x10/0x10 [ 229.036295][ T6496] ret_from_fork+0x3fc/0x770 [ 229.036315][ T6496] ? __pfx_ret_from_fork+0x10/0x10 [ 229.036337][ T6496] ? __switch_to_asm+0x39/0x70 [ 229.036360][ T6496] ? __switch_to_asm+0x33/0x70 [ 229.036382][ T6496] ? __pfx_kthread+0x10/0x10 [ 229.036406][ T6496] ret_from_fork_asm+0x1a/0x30 [ 229.036456][ T6496] [ 229.036463][ T6496] [ 229.246997][ T6496] Allocated by task 11168: [ 229.251438][ T6496] kasan_save_track+0x3e/0x80 [ 229.256124][ T6496] __kasan_kmalloc+0x93/0xb0 [ 229.260726][ T6496] __kmalloc_noprof+0x27a/0x4f0 [ 229.265588][ T6496] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 229.271757][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.276869][ T6496] register_netdevice+0x1608/0x1ae0 [ 229.282076][ T6496] nsim_create+0xae8/0xf10 [ 229.286497][ T6496] __nsim_dev_port_add+0x6b6/0xb10 [ 229.291606][ T6496] nsim_dev_port_add_all+0x37/0xf0 [ 229.296712][ T6496] nsim_dev_reload_up+0x451/0x780 [ 229.301740][ T6496] devlink_reload+0x4ec/0x8d0 [ 229.306430][ T6496] devlink_nl_reload_doit+0xb35/0xd50 [ 229.311825][ T6496] genl_family_rcv_msg_doit+0x215/0x300 [ 229.317385][ T6496] genl_rcv_msg+0x60e/0x790 [ 229.321889][ T6496] netlink_rcv_skb+0x208/0x470 [ 229.326670][ T6496] genl_rcv+0x28/0x40 [ 229.330651][ T6496] netlink_unicast+0x82c/0x9e0 [ 229.335448][ T6496] netlink_sendmsg+0x805/0xb30 [ 229.340206][ T6496] __sock_sendmsg+0x219/0x270 [ 229.344902][ T6496] ____sys_sendmsg+0x505/0x830 [ 229.349663][ T6496] ___sys_sendmsg+0x21f/0x2a0 [ 229.354344][ T6496] __x64_sys_sendmsg+0x19b/0x260 [ 229.359286][ T6496] do_syscall_64+0xfa/0x3b0 [ 229.363792][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.369694][ T6496] [ 229.372018][ T6496] Freed by task 11167: [ 229.376087][ T6496] kasan_save_track+0x3e/0x80 [ 229.380775][ T6496] kasan_save_free_info+0x46/0x50 [ 229.385801][ T6496] __kasan_slab_free+0x62/0x70 [ 229.390571][ T6496] kfree+0x18e/0x440 [ 229.394481][ T6496] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 229.400738][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.405865][ T6496] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 229.412297][ T6496] unregister_netdevice_queue+0x33c/0x380 [ 229.418032][ T6496] nsim_destroy+0x217/0x6a0 [ 229.422556][ T6496] __nsim_dev_port_del+0x14d/0x1b0 [ 229.427676][ T6496] nsim_dev_reload_destroy+0x288/0x490 [ 229.433147][ T6496] nsim_dev_reload_down+0x8a/0xc0 [ 229.438184][ T6496] devlink_reload+0x1b3/0x8d0 [ 229.442868][ T6496] devlink_nl_reload_doit+0xb35/0xd50 [ 229.448247][ T6496] genl_family_rcv_msg_doit+0x215/0x300 [ 229.453815][ T6496] genl_rcv_msg+0x60e/0x790 [ 229.458412][ T6496] netlink_rcv_skb+0x208/0x470 [ 229.463200][ T6496] genl_rcv+0x28/0x40 [ 229.467189][ T6496] netlink_unicast+0x82c/0x9e0 [ 229.471953][ T6496] netlink_sendmsg+0x805/0xb30 [ 229.476723][ T6496] __sock_sendmsg+0x219/0x270 [ 229.481407][ T6496] ____sys_sendmsg+0x505/0x830 [ 229.486188][ T6496] ___sys_sendmsg+0x21f/0x2a0 [ 229.490869][ T6496] __x64_sys_sendmsg+0x19b/0x260 [ 229.495808][ T6496] do_syscall_64+0xfa/0x3b0 [ 229.500312][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.506205][ T6496] [ 229.508526][ T6496] Last potentially related work creation: [ 229.514267][ T6496] kasan_save_stack+0x3e/0x60 [ 229.518945][ T6496] kasan_record_aux_stack+0xbd/0xd0 [ 229.524150][ T6496] insert_work+0x3d/0x330 [ 229.528483][ T6496] __queue_work+0xbd9/0xfe0 [ 229.533090][ T6496] queue_work_on+0x181/0x270 [ 229.537688][ T6496] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 229.543324][ T6496] udp_tunnel_push_rx_port+0x180/0x200 [ 229.548802][ T6496] geneve_offload_rx_ports+0xd7/0x160 [ 229.554173][ T6496] geneve_netdevice_event+0x6a/0x80 [ 229.559368][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.564480][ T6496] call_netdevice_notifiers+0x88/0xc0 [ 229.569871][ T6496] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 229.576117][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.581227][ T6496] register_netdevice+0x1608/0x1ae0 [ 229.586430][ T6496] nsim_create+0xae8/0xf10 [ 229.590866][ T6496] __nsim_dev_port_add+0x6b6/0xb10 [ 229.595978][ T6496] nsim_dev_port_add_all+0x37/0xf0 [ 229.601110][ T6496] nsim_dev_reload_up+0x451/0x780 [ 229.606133][ T6496] devlink_reload+0x4ec/0x8d0 [ 229.610810][ T6496] devlink_nl_reload_doit+0xb35/0xd50 [ 229.616197][ T6496] genl_family_rcv_msg_doit+0x215/0x300 [ 229.621748][ T6496] genl_rcv_msg+0x60e/0x790 [ 229.626252][ T6496] netlink_rcv_skb+0x208/0x470 [ 229.631019][ T6496] genl_rcv+0x28/0x40 [ 229.635100][ T6496] netlink_unicast+0x82c/0x9e0 [ 229.639887][ T6496] netlink_sendmsg+0x805/0xb30 [ 229.644646][ T6496] __sock_sendmsg+0x219/0x270 [ 229.649325][ T6496] ____sys_sendmsg+0x505/0x830 [ 229.654095][ T6496] ___sys_sendmsg+0x21f/0x2a0 [ 229.658767][ T6496] __x64_sys_sendmsg+0x19b/0x260 [ 229.663702][ T6496] do_syscall_64+0xfa/0x3b0 [ 229.668209][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.674121][ T6496] [ 229.676488][ T6496] Second to last potentially related work creation: [ 229.683075][ T6496] kasan_save_stack+0x3e/0x60 [ 229.687771][ T6496] kasan_record_aux_stack+0xbd/0xd0 [ 229.692969][ T6496] insert_work+0x3d/0x330 [ 229.697341][ T6496] __queue_work+0xcfc/0xfe0 [ 229.701875][ T6496] queue_work_on+0x181/0x270 [ 229.706485][ T6496] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 229.712135][ T6496] udp_tunnel_push_rx_port+0x180/0x200 [ 229.717618][ T6496] vxlan_offload_rx_ports+0x139/0x200 [ 229.723017][ T6496] vxlan_netdevice_event+0x111/0x470 [ 229.728319][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.733440][ T6496] call_netdevice_notifiers+0x88/0xc0 [ 229.738828][ T6496] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 229.745080][ T6496] notifier_call_chain+0x1b3/0x3e0 [ 229.750203][ T6496] register_netdevice+0x1608/0x1ae0 [ 229.755413][ T6496] nsim_create+0xae8/0xf10 [ 229.759842][ T6496] __nsim_dev_port_add+0x6b6/0xb10 [ 229.764969][ T6496] nsim_dev_port_add_all+0x37/0xf0 [ 229.770078][ T6496] nsim_dev_reload_up+0x451/0x780 [ 229.775103][ T6496] devlink_reload+0x4ec/0x8d0 [ 229.779790][ T6496] devlink_nl_reload_doit+0xb35/0xd50 [ 229.785175][ T6496] genl_family_rcv_msg_doit+0x215/0x300 [ 229.790730][ T6496] genl_rcv_msg+0x60e/0x790 [ 229.795241][ T6496] netlink_rcv_skb+0x208/0x470 [ 229.800015][ T6496] genl_rcv+0x28/0x40 [ 229.804004][ T6496] netlink_unicast+0x82c/0x9e0 [ 229.808787][ T6496] netlink_sendmsg+0x805/0xb30 [ 229.813547][ T6496] __sock_sendmsg+0x219/0x270 [ 229.818236][ T6496] ____sys_sendmsg+0x505/0x830 [ 229.823030][ T6496] ___sys_sendmsg+0x21f/0x2a0 [ 229.827720][ T6496] __x64_sys_sendmsg+0x19b/0x260 [ 229.832656][ T6496] do_syscall_64+0xfa/0x3b0 [ 229.837158][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.843063][ T6496] [ 229.845386][ T6496] The buggy address belongs to the object at ffff8880329a1400 [ 229.845386][ T6496] which belongs to the cache kmalloc-256 of size 256 [ 229.859433][ T6496] The buggy address is located 176 bytes inside of [ 229.859433][ T6496] freed 256-byte region [ffff8880329a1400, ffff8880329a1500) [ 229.873232][ T6496] [ 229.875556][ T6496] The buggy address belongs to the physical page: [ 229.881989][ T6496] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x329a0 [ 229.890752][ T6496] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.899251][ T6496] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.906793][ T6496] page_type: f5(slab) [ 229.910781][ T6496] raw: 00fff00000000040 ffff88801a441b40 ffffea0001298680 0000000000000002 [ 229.919370][ T6496] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 229.927956][ T6496] head: 00fff00000000040 ffff88801a441b40 ffffea0001298680 0000000000000002 [ 229.936627][ T6496] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 229.945295][ T6496] head: 00fff00000000001 ffffea0000ca6801 00000000ffffffff 00000000ffffffff [ 229.953967][ T6496] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 229.962662][ T6496] page dumped because: kasan: bad access detected [ 229.969080][ T6496] page_owner tracks the page as allocated [ 229.974792][ T6496] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10142, tgid 10140 (syz.1.1148), ts 206455318621, free_ts 206227382539 [ 229.996334][ T6496] post_alloc_hook+0x240/0x2a0 [ 230.001116][ T6496] get_page_from_freelist+0x21e4/0x22c0 [ 230.006668][ T6496] __alloc_frozen_pages_noprof+0x181/0x370 [ 230.012467][ T6496] alloc_pages_mpol+0x232/0x4a0 [ 230.017323][ T6496] allocate_slab+0x8a/0x3b0 [ 230.021822][ T6496] ___slab_alloc+0xbfc/0x1480 [ 230.026610][ T6496] __kmalloc_cache_noprof+0x296/0x3d0 [ 230.031990][ T6496] simp_init_net+0x65/0x190 [ 230.036508][ T6496] ops_init+0x35c/0x5c0 [ 230.040663][ T6496] setup_net+0x10c/0x320 [ 230.044907][ T6496] copy_net_ns+0x31b/0x4d0 [ 230.049322][ T6496] create_new_namespaces+0x3f3/0x720 [ 230.054603][ T6496] unshare_nsproxy_namespaces+0x11c/0x170 [ 230.060322][ T6496] ksys_unshare+0x4c8/0x8c0 [ 230.064823][ T6496] __x64_sys_unshare+0x38/0x50 [ 230.069590][ T6496] do_syscall_64+0xfa/0x3b0 [ 230.074095][ T6496] page last free pid 10122 tgid 10121 stack trace: [ 230.080609][ T6496] __free_frozen_pages+0xc71/0xe70 [ 230.085727][ T6496] pagetable_dtor_free+0x2d2/0x3b0 [ 230.090846][ T6496] __mmdrop+0xb5/0x460 [ 230.094914][ T6496] exit_mm+0x1da/0x2c0 [ 230.098993][ T6496] do_exit+0x648/0x22e0 [ 230.103155][ T6496] do_group_exit+0x21c/0x2d0 [ 230.107768][ T6496] get_signal+0x1286/0x1340 [ 230.112268][ T6496] arch_do_signal_or_restart+0x9a/0x750 [ 230.117822][ T6496] exit_to_user_mode_loop+0x75/0x110 [ 230.123104][ T6496] do_syscall_64+0x2bd/0x3b0 [ 230.127694][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.133587][ T6496] [ 230.135913][ T6496] Memory state around the buggy address: [ 230.141535][ T6496] ffff8880329a1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.149592][ T6496] ffff8880329a1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.157648][ T6496] >ffff8880329a1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.165704][ T6496] ^ [ 230.171328][ T6496] ffff8880329a1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.179385][ T6496] ffff8880329a1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.187439][ T6496] ================================================================== [ 230.225632][ T6496] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.232896][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: kworker/u8:11 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 230.245159][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.255225][ T6496] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 230.262538][ T6496] Call Trace: [ 230.265839][ T6496] [ 230.268783][ T6496] dump_stack_lvl+0x99/0x250 [ 230.273386][ T6496] ? __asan_memcpy+0x40/0x70 [ 230.277989][ T6496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.283188][ T6496] ? __pfx__printk+0x10/0x10 [ 230.287797][ T6496] panic+0x2db/0x790 [ 230.291707][ T6496] ? __pfx_panic+0x10/0x10 [ 230.296132][ T6496] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 230.302038][ T6496] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.308375][ T6496] ? print_memory_metadata+0x314/0x400 [ 230.313843][ T6496] ? __mutex_lock+0x144/0xe80 [ 230.318524][ T6496] check_panic_on_warn+0x89/0xb0 [ 230.323474][ T6496] ? __mutex_lock+0x144/0xe80 [ 230.328161][ T6496] end_report+0x78/0x160 [ 230.332420][ T6496] kasan_report+0x129/0x150 [ 230.336940][ T6496] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.342877][ T6496] ? __mutex_lock+0x144/0xe80 [ 230.347570][ T6496] __mutex_lock+0x144/0xe80 [ 230.352078][ T6496] ? __lock_acquire+0xab9/0xd20 [ 230.356941][ T6496] ? __mutex_lock+0x51b/0xe80 [ 230.361632][ T6496] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 230.367881][ T6496] ? __pfx___mutex_lock+0x10/0x10 [ 230.372912][ T6496] ? __lock_acquire+0xab9/0xd20 [ 230.377774][ T6496] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 230.383867][ T6496] ? process_scheduled_works+0x9ef/0x17b0 [ 230.389608][ T6496] ? process_scheduled_works+0x9ef/0x17b0 [ 230.395339][ T6496] process_scheduled_works+0xae1/0x17b0 [ 230.400910][ T6496] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.406906][ T6496] worker_thread+0x8a0/0xda0 [ 230.411517][ T6496] kthread+0x70e/0x8a0 [ 230.415598][ T6496] ? __pfx_worker_thread+0x10/0x10 [ 230.420715][ T6496] ? __pfx_kthread+0x10/0x10 [ 230.425312][ T6496] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.430612][ T6496] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.435823][ T6496] ? __pfx_kthread+0x10/0x10 [ 230.440416][ T6496] ret_from_fork+0x3fc/0x770 [ 230.445011][ T6496] ? __pfx_ret_from_fork+0x10/0x10 [ 230.450217][ T6496] ? __switch_to_asm+0x39/0x70 [ 230.454989][ T6496] ? __switch_to_asm+0x33/0x70 [ 230.459763][ T6496] ? __pfx_kthread+0x10/0x10 [ 230.464360][ T6496] ret_from_fork_asm+0x1a/0x30 [ 230.469138][ T6496] [ 230.472509][ T6496] Kernel Offset: disabled [ 230.476845][ T6496] Rebooting in 86400 seconds..